Jump to content

GotACrazyBadInfection

Members
  • Content Count

    14
  • Joined

  • Last visited

About GotACrazyBadInfection

  • Rank
    New Member

Recent Profile Visitors

The recent visitors block is disabled and is not being shown to other users.

  1. Kevin, All looks good once again. I had been using adblock plus. It seems I don't need that now that ublock is running. Is that your recommendation? Thanks.
  2. So far, so good. I'll monitor it. Thanks, Kevin! Also, should I reinstall the ublock extension?
  3. Kevin, Here are the logs ... Thanks 2018.12.19-18.09.18-i0-t92-d4.txt Fixlog.txt
  4. Kevin, I'm not sure if I'm out of the woods yet. Malwarebytes found 36 threats. I went thru the original process again. Here are the files. Thanks! FRST 02.txt Addition 02.txt AdwCleaner[C01].txt Scan 2 Report.txt Scan 2 Results.txt
  5. I just now looked at Task Manager->Process and I'm seeing: BrowserCore Chromium Native Process (4 of them). I right clicked and selected End Task. They are gone now. I'll reboot and see what happens....
  6. Kevin, It seems that your instructions took care of it. Thank you again! Mark
  7. Hello, I need help. You guys helped me a year or 2 ago and I appreciated it very much! Now I seem to have an infection on another computer :( and I need some help. When I open chrome, I get the message website blocked due to adware minisrclink.cool I've done the following to assist with this: 1. Ran a malwarebytes scan (log file: Scan 1.txt) 2. Ran AdwCleaner (log file: AdwCleaner[C00].txt) 3. Ran Farbar Recovery Scan Tool (log files: FRST 01.txt, Addition 01.txt) I hope you can help again, Thanks! Mark Addition 01.txt AdwCleaner[C00].txt FRST 01.txt Scan 1.txt
  8. Peace has returned to the galaxy my system. Thank you very much, kevinf80! I will send you a donation for your work and achievement. Mark
  9. Kevin, When I tried to upload the files to virustotal, I got a "Denied Permission." When I checked advanced settings, the folder had set up my account as "Deny." After I changed that, then I was able to upload the files. My guess is that Malwarebytes couldn't delete the files because of those permissions. Fixlog.txt
  10. Ok The info is in the text file i attached to the previous post. I hope I did it right.
  11. Kevin, When I try to post the urls, the message from the forum blocks me submitting ... \ *** We’re sorry but our system has detected wording in your post consistent with spam, It may be by accident, please try changing the wording and try to post again. If you’re still unable to, then please contact our Helpdesk at the following link: https://support.malwarebytes.com/community/consumer/pages/contact-us Thank you *** I'm trying to contact them now virustotal_urls.txt virustotal_urls.txt
  12. Kevin, I've attached the logs. Thanks, Mark AdwCleaner[C04].txt mrt.log Fixlog.txt MBAM log.txt
  13. I was able to run FRST in safe mode as suggested by Pondus. I've attached the files it generated. FRST (Safe Mode).txt Addition (Safe Mode).txt
  14. This is really bad. I've used a conversion program called Super in the past and needed to convert some video files. When I ran it from desktop, it said it would no longer run and stated I needed the free upgrade (with option to buy an ad-free version). I downloaded the free update, installed it, and life has been a pain ever since. CPU usage really high. Task manager shows offending process(es), but no name for it. Anonymizer also appears in the task list. Running Malwarebytes and quarantining, rebooting doesn't help because the problem reappears. Running Microsoft's Malicious Software Removal Tool doesn't get rid of it either. I downloaded FRST64 and that won't complete running! If I run it immediately after the Windows login screen it starts scanning but then disappears as said unknown process apparently loads and kills it. If I try to start it again (right click, run as administrator OR just double click), the FRST window flashes on the screen for a nanosecond and disappears. It seems the malware is killing it. Same happens for adwcleaner 7.1.0.0.: a window flashes on the screen for a moment (presumbably loading) and then nothing. FRST generated a FRST.txt file (no additions.txt file) - I'm attaching it as "FRSTdesktop.txt" I created a recovery drive on another Win 10 Pro computer, and copied frst64 to it. I then rebooted the infected computer into the recovery environment and ran frst64. It doesn't have the option box for Addition.txt. I'm attaching what it did produce as FRSTrecoverydrive.txt. I'm also attaching the Malwarebytes files. It shows, among other things, Adware.Vitruvian.PrxySvrRST, HKU\S-1-5-21-1831771387-2475998928-3974900432-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|PROXYENABLE, Removal Failed, [12819], [-1],0.0.0 This infection is really bad. If you can fix this one, I think you should be entered into the Antivirus Hall of Fame! Thanks! Mark P.S. I also noticed some unwanted files were added to the desktop. Screen shot attached showing these files from 04-27-18 Malwarebytes summary.txt Malwarebytes.txt FRSTdesktop.txt FRSTrecoverydrive.txt AdwCleaner[S00].txt AdwCleaner[C00].txt Malwarebytes log after reboot.txt
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.