Jump to content

Qwertyuiop123

Honorary Members
  • Posts

    29
  • Joined

  • Last visited

Posts posted by Qwertyuiop123

  1. I had a problem with adaware. It made Firefox constantly pop adaware search website altough I never made it the specific search engine or installed a related extension.

    Then I used a adawareRemover.exe tool and after this my PC got extremely slow.It is attached bellow:

    https://www.virustotal.com/gui/file/e9c7f6ca41536064d9e41de38ff32be926a50f4787545696a4a56546dace779c/detection

  2. 2017223988_Screenshot(1650).thumb.png.b9950a58c25c1adfc6a468f693fed543.png

    this may new a new adware that adwcleaner did not detect and Malware Hunter from Glarysoft cannot remove. It looks like I might have a pup on my laptop. Can i do something to prevent damage or infections?

    https://www.virustotal.com/gui/file/fb4552722931a3570a9a62bde7ef1823040c3b71d3bb92a1982c1135ba5fa12e/detection

    I have identified this as the source.

    So im kinda scared that i also have adaware installed in some browser xd.

    Could I please work on a system analysis? Thank you very much for your time and Happy Holidays!

    Addition.txt FRST.txt

  3. On 11/15/2020 at 5:53 PM, Maurice Naggar said:

    I've reviewed the report from the Microsoft Safety scanner ( which found some trojans as well as hacktools ) and the log from the FRST script run, which also shows trojans still present.

     

    One or more of the identified infections may potentially be related to a  rootkit component which is difficult to remove. Rootkits and backdoor Trojans are very dangerous because they use advanced techniques (back doors) as a means of accessing a computer system that bypasses security mechanisms and steal sensitive information which they send back to the hacker. Many rootkits can hook into the Windows 32-bit kernel, and patch several APIs to hide new registry keys and files they install. Remote attackers use backdoor Trojans and rootkits as part of an exploit to gain unauthorized access to a computer and take control of it without your knowledge.
     
    If your computer was used for online banking, has credit card information or other sensitive data on it, you should immediately disconnect from the Internet until your system is cleaned.
    All passwords should be changed  to include those used for banking, email, eBay, PayPal and online forums from a CLEAN COMPUTER - never use the same password on different sites. Avoid using Facebook, Google, or other auto sign-on methods. If that account gets exploited they'll also have access to all other sties linked to it.
     
     
    You should consider these passwords to be compromised. You should change each password by using a different computer and not from the infected one.
     
    If not, an attacker may get the new passwords and transaction information. If using a router, you may need to reset it with a strong logon/password so the malware cannot gain control before connecting again. Banking and credit card institutions should be notified of the possible security breach. Because your computer was compromised please read the following
     
     
    Although the threat may have been identified and may be removed, your PC has likely been compromised and there is no way to be sure certain the computer can ever be trusted again.
     
    It is dangerous and incorrect to assume that because this malware has been removed the computer is now secure.
     
    In some instances an infection may have caused so much damage to your system that it cannot be completely cleaned or repaired. The malware may leave so many remnants behind that security tools cannot find them. Many experts in the security community believe that once infected with this type of malware, the best course of action is to wipe the drive clean, delete the partition, reformat and reinstall the Operating System.
     
    Please read:

    Should you decide not to follow this advice, we will do our best to help clean the computer of any infections but we cannot guarantee it to be trustworthy or that the removal will be successful. If you wish to proceed, disinfection will require more time and more advanced tools.

    Please let us know how you would like to proceed.

     

    here says that i should format the operating system drive .this is what i am proceding with,as i really want a clean system. I dont think i want a windows 10 upgrade. But i am certainly open to ideas and advice.

    Do you have any advice? I am moving data from C and after that formating C,and after that upgrading to windows 10.

  4. i think it was 3dmgame.com and one button sends me to this site http://baoku.360.cn/ and i have an app that has this icon.

    Attached is screenshot with the app.

    I tried archiving the adware that the crack installed but got this error:

    ! C:\Program Files (x86)\360\360Safe.rar: Cannot open C:\Program Files (x86)\360\360Safe\deepscan\speedmem2.hg
      The process cannot access the file because it is being used by another process.

    also tried this:

    ! Cannot create SoftMgr.rar
      Access is denied.

    I have malwarebytes anti exploit ,malwarebytes, kaspersky anti ransomware tool for home ,malware hunter installed and have reports in the behaviour blocking and i dont know how to report them.

    what should i do to scan the system?i will be using(besides malware hunter and kaspersky anti ransomware for home and malwarebytes) 

    i will be using adwcleaner_8.0.7, EmsisoftEmergencyKit,  KVRT, Windows-KB890830-x64-V5.83 and maybe HitmanPro_x64, hmpalert3.

    should i use ComodoCleaningEssentials_x64 or ccsetup547pro?

    CaptureMalware1.PNG

    CaptureMalware2.PNG

    CaptureMalware3.PNG

    CaptureMalware4.PNG

    firstBlockingReport.txt secondBlockingReport.txt thirdBlockingReport.txt

    CaptureMalware5.PNG

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.