Artsymom

Here is the fixlog from the last Farbar fix. Fixlog.txt

Yes, sorry, it has been crazy here. I will get to the last instructions this evening or tomorrow morning! Thanks for checking.

I ran another Malwarebytes scan after I turned off syncing. It was only able to quarantine 2 out of the 3 threats it found. I am attaching the log. 3-12-19 (2) malwarebytes.txt

Yes, I did find the folder you listed on the computer. It says that it has 1,961 files, 854 folders in it. I followed the instructions on the page you linked to turn off syncing. Syncing was on even though there weren’t any devices configured to sync with the computer.

Ok, I uninstalled the two items you listed in your previous post, ran FRST fix with the fixlist, then ran Malwarebytes again. I am attaching the fixlog and the Malwarebytes log. There was one item from the Malwarebytes scan that was not able to be quarantined or deleted. 3-12-19 malwarebytes.txt Fixlog.txt

I followed the instructions in post no. 4 carefully after downloading the new copy of Farber onto the flash drive (from an uncompromised computer). I am attaching the FRST.TXT log that was created after I ran the scan in the recovery environment. FRST.txt

Yes, I could still use some help with the continuing problem. Thanks!

I ran Malwarebytes and it was able to quarantine all but 2 of the items (I deleted all in quarantine). I am attaching that log too. I am a little confused because your instructions told me to run a scan in the recovery environment, not a fix. Here are the FRST and addition logs produced from the scan in normal mode. malwarebytes 2-28.txt FRST.txt Addition.txt

I followed the instructions and ran the FRST scan in recovery environment. I am attaching the FRST log. FRST.txt

Also, does this mean that flash drives that have come in contact with the infected computer are no longer safe to use? I used a flash drive to install the original copy of the Farber program rather than connecting that computer to the internet to download it directly. I just want to know if I should throw it away.

Do I remove the flash drive and post the FRST.txt log from the safe computer or leave the flash drive in the computer, reboot to normal environment, and post it from the infected computer? I just want to make sure I follow everything correctly!

Thank you for responding! Yes, I have access to a spare computer and USB flash drive that have not been in contact with the infected computer. Here is the text: Fix result of Farbar Recovery Scan Tool (x64) Version: 25.02.2019 01 Ran by kfant (26-02-2019 13:59:42) Run:1 Running from C:\Users\kfant\OneDrive\Desktop Loaded Profiles: kfant (Available Profiles: kfant & Administrator) Boot Mode: Normal ============================================== fixlist content: ***************** CMD: bcdedit.exe /set {bootmgr} displaybootmenu yes CMD: bcdedit.exe /set {default} recoveryenabled yes ***************** ========= bcdedit.exe /set {bootmgr} displaybootmenu yes ========= The operation completed successfully. ========= End of CMD: ========= ========= bcdedit.exe /set {default} recoveryenabled yes ========= The operation completed successfully. ========= End of CMD: ========= ==== End of Fixlog 13:59:43 ==== Fixlog.txt

I am having trouble removing this issue from my daughter's computer. I am attaching the logs mentioned in the instruction post. Thank you in advance for any help you can give me. FRST.txt Addition.txt malwarebytes report.txt