Jump to content

Deano253

Members
  • Posts

    10
  • Joined

  • Last visited

Posts posted by Deano253

  1. Am I "de-virused", then? Thanks very much for your help.

    I'm not worried about outdated software, Maurice. I turn this machine off every night, and when I turn it on again, it seems like some program  (if not Windows) always insists it absolutely has to update itself. Usually when I'm in a hurry. I use these programs infrequently, except for Firefox (one of the worst offenders, by the way) and they'll get updated probably the next time I use them.

    Very frankly, I'm surprised you'd mention in a public forum that SecurityCheck thinks my copy of MS Office is unlicensed; be aware it is in fact fully licensed.

    Deano253

     

     

  2. To be honest, Maurice, I'm afraid to try to open the old Word file that started this mess. If it's corrupt, it'll infect me again and I'll be right back where I started. I can open other, newer, files without problems. (So far!)

    SecurityCheck threw up a dialog box reading "This app can't run on your PC." I was able to find and download v1.4.0.53, which ran, apparently successfully. The log is attached. I see there is still something from Kaspersky hanging around.

    Deano253

    SecurityCheck.txt

  3. Hello, Maurice,

    I have downloaded and run the Kaspersky removal tool. It was unable to find any product to remove, so I chose what appeared to be the best match from a list of possibilities.

    I have also run your fixlist script, and the log is attached. I hope it ran successfully, as it did not do a restart, and required no patience at all - the entire operation was completed in just a few seconds.

    The remnants of some old virtual machines are on my hard drive. I need to either reinstall VMWare, or get around to blowing those old files away.

    Thanks again,

    Deano253

     

    Fixlog.txt

  4. Good afternoon, Maurice,

    Thanks for helping me with this problem. The mbst-grab-results.zip file is attached.

    Malwarebytes was somehow set to notify but not download updates; the latest version and updates have been downloaded and installed, and it is now set to keep itself up to date.

    I used to use Kaspersky Total Security, however, as I recall, they issued an update that broke Malwarebytes and other stuff, and pretty much refused to fix it, forcing MWB to do so themselves. When it was pointed out that any future update could break something else, causing the problem all over again, I got rid of Kaspersky, using Windows' Control Panel / Add or Remove Programs. It is not supposed to be on my system. I know Windows Defender is many times better than it used to be, however I remain unconvinced that it's a final solution.

    Cheers,

    Deano253

     

     

    mbst-grab-results.zip

  5. Last December, I got onto a dodgy website and this forum helped me clear up some kind of malware. (See thread "Infected with something".)

    Yesterday I was browsing through some old MS Word files and today, when I try to open Word and Excel files, I get the same dialog box  - which reports the file can't be opened, and offers help, repair, or close. I now know that help and repair are bogus choices, so I just backed out of the dialog. I don't recall visiting any spurious websites; is it possible the previous infection left "dirty" files on my system, for me to find and open later?

    Trying to remember what was required to trouble-shoot; attached is what I think is needed. If I've messed up, please advise.

    As before, I'll appreciate any assistance. Thank you.

    Deano253

    FRST.txt Addition.txt mwarebytes scan.txt

  6. Hi, Kevin,

    I don't know what happened with fixlog from FRST. I ran it Tuesday and again Wednesday; the window stayed open on-screen for less than a minute and then closed. I ran it again later Wednesday and the third time was the charm. Log is attached.  The adwcleaner log is also attached for continuity's sake; that program did find and delete a couple of things as per the second posting above.

    After running the above, I found that Sophos had apparently left some of itself behind while trying to install. I got rid of that using Windows Control Panel install/uninstall and then Sophos installed. It found one thing; as per your original instructions, below I've copied and pasted the results.

    Thanks so much for your assistance!

    Deano253

    2020-12-02 23:25:52.626    Sophos Virus Removal Tool version 2.8.0
    2020-12-02 23:25:52.626    Copyright (c) 2009-2020 Sophos Limited. All rights reserved.

    2020-12-02 23:25:52.626    This tool will scan your computer for viruses and other threats. If it finds any, it will give you the option to remove them.

    2020-12-02 23:25:52.626    Windows version 6.2 SP 0.0  build 9200 SM=0x100 PT=0x1 WOW64
    2020-12-02 23:25:52.626    Checking for updates...
    2020-12-02 23:25:52.636    Update progress: proxy server not available
    2020-12-02 23:25:58.242    Downloading updates...
    2020-12-02 23:25:58.242    Update progress: [I96736] sdds.svrt_v1.20: adding primary package C1A903B2-E63E-483b-982D-04BB9C457C60 RECOMMENDED baseVersion=1
    2020-12-02 23:25:58.242    Update progress: [I95020] sdds.svrt_v1.20: looking for packages included from product C1A903B2-E63E-483b-982D-04BB9C457C60 RECOMMENDED path=
    2020-12-02 23:25:58.242    Update progress: [I22529] sdds.svrt_v1.20: looking for supplements included from product C1A903B2-E63E-483b-982D-04BB9C457C60 RECOMMENDED path=
    2020-12-02 23:25:58.242    Update progress: [V81533] SU::createCachedPackageSource creating cached package source for http://d2.sophosupd.com/update-B: url=SOPHOS
    2020-12-02 23:25:58.242    Update progress: [V81533] SU::createCachedPackageSource creating http_source_specific_data to download customer file
    2020-12-02 23:25:58.242    Update progress: [V81533] SU::createCachedPackageSource creating package source to download customer file
    2020-12-02 23:25:58.242    Update progress: [V81533] SU::createCachedPackageSource creating cached package source
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: catalogue/sdds.data0910.xml
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: catalogue/sdds.data0910.xml: 47 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: 1b20fcaf8e0d81ecf8076c4b42a5dfa2x000.xml: 2305 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: 1b20fcaf8e0d81ecf8076c4b42a5dfa2x000.xml: 15 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: b3553b48017737bbb3eec8674844b166x000.xml: 8673 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: b3553b48017737bbb3eec8674844b166x000.xml: 16 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: IDE582/0b3fc481278f5d42b8e676b24c69598ax000.xml: 590 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: IDE582/0b3fc481278f5d42b8e676b24c69598ax000.xml: 16 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: SXLSUP/9658bb75e4104455fe802645d41af3dax000.xml: 598 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: SXLSUP/9658bb75e4104455fe802645d41af3dax000.xml: 16 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: IDE579/26a1a097a14b8e0bbd28be53a2aafb1ex000.xml: 601 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: IDE579/26a1a097a14b8e0bbd28be53a2aafb1ex000.xml: 15 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: IDE580/44559335c6f1bc63dde9d811db091136x000.xml: 601 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: IDE580/44559335c6f1bc63dde9d811db091136x000.xml: 16 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: IDE577/55f0b0a4e526c2d0401e01357d48129ax000.xml: 601 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: IDE577/55f0b0a4e526c2d0401e01357d48129ax000.xml: 31 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: IDE576/7ed1ad18698b36122cfd3eb25407d6e6x000.xml: 601 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: IDE576/7ed1ad18698b36122cfd3eb25407d6e6x000.xml: 16 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: IDE575/f655ae2aebfe5da4ab6db868c674ba43x000.xml: 601 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: IDE575/f655ae2aebfe5da4ab6db868c674ba43x000.xml: 15 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: IDE578/fd09277a9cc316c7820beadc29555583x000.xml: 601 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: IDE578/fd09277a9cc316c7820beadc29555583x000.xml: 0 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: IDE581/70389dd54185c89d6b99959a44dd78c6x000.xml: 2559 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: IDE581/70389dd54185c89d6b99959a44dd78c6x000.xml: 16 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: 94ee76f75cc2a222a79a6d5a305ac005x000.xml: 615 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: 94ee76f75cc2a222a79a6d5a305ac005x000.xml: 15 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: c3b05924f8bebb2144ddae058798a9e0x000.xml: 320 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: c3b05924f8bebb2144ddae058798a9e0x000.xml: 16 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: 0c458d84352f35f2b272f8b87e9f9576x000.xml: 753 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: 0c458d84352f35f2b272f8b87e9f9576x000.xml: 16 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: 5c7f0eec8cb5f488397216dcfb7e98e8x000.xml: 331 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: 5c7f0eec8cb5f488397216dcfb7e98e8x000.xml: 15 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: f68284d0c844770e160f65625b572b5ex000.xml: 1027 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: f68284d0c844770e160f65625b572b5ex000.xml: 16 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: b6237eb64a0908d40c9415a7c7ba3843x000.xml: 338 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: b6237eb64a0908d40c9415a7c7ba3843x000.xml: 15 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: 664cf44531a491f6d94d8e883ebd8013x000.xml: 1027 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: 664cf44531a491f6d94d8e883ebd8013x000.xml: 16 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: e633c35f2a494780bd5b5266ac06f13ax000.xml: 338 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: e633c35f2a494780bd5b5266ac06f13ax000.xml: 16 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: d48b68b7041bde7c1484c5cb94897672x000.xml: 1027 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: d48b68b7041bde7c1484c5cb94897672x000.xml: 15 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: 28bb8eb241a254452f85129686b027e5x000.xml: 338 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: 28bb8eb241a254452f85129686b027e5x000.xml: 16 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: 2a074ff18c7f3222667dc2edfa46e75fx000.xml: 1027 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: 2a074ff18c7f3222667dc2edfa46e75fx000.xml: 16 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: 9bb8aeca1b234665832ec72c609610cex000.xml: 338 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: 9bb8aeca1b234665832ec72c609610cex000.xml: 15 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: 7009c81b29e1d232da816176e143ae49x000.xml: 1027 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: 7009c81b29e1d232da816176e143ae49x000.xml: 16 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: 51d6e7beb10ae1cf1b534f59c6e58e86x000.xml: 338 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: 51d6e7beb10ae1cf1b534f59c6e58e86x000.xml: 15 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: ff82765819ae95b2d888a3384d7f2c2cx000.xml: 1027 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: ff82765819ae95b2d888a3384d7f2c2cx000.xml: 16 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: d9a77a07892e11509435eeb503ebcbafx000.xml: 338 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: d9a77a07892e11509435eeb503ebcbafx000.xml: 16 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: bc2c5e7314423265da7857c71bf782e5x000.xml: 877 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: bc2c5e7314423265da7857c71bf782e5x000.xml: 15 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: 5e7460873006b214fd68e9307c8b01cfx000.xml: 336 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: 5e7460873006b214fd68e9307c8b01cfx000.xml: 16 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: f222f289153e3ed05abafd3fa3e91c64x000.xml: 877 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: f222f289153e3ed05abafd3fa3e91c64x000.xml: 16 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: 5460d93c864bcac80628c717f3c5cad4x000.xml: 336 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: 5460d93c864bcac80628c717f3c5cad4x000.xml: 15 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: df3a4de52142d5fc6506775e1114924cx000.xml: 877 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: df3a4de52142d5fc6506775e1114924cx000.xml: 16 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: 4c9d868240075771bc631fd70ffeb16ex000.xml: 336 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: 4c9d868240075771bc631fd70ffeb16ex000.xml: 15 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: 4eac5d58eaa7027016f336e941c20e03x000.xml: 877 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: 4eac5d58eaa7027016f336e941c20e03x000.xml: 16 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: b4b5ea57a2c3ebf1d2d8b13470bee761x000.xml: 336 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: b4b5ea57a2c3ebf1d2d8b13470bee761x000.xml: 16 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: 4ba8c60481a8187a78cfe377e27311aax000.xml: 1027 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: 4ba8c60481a8187a78cfe377e27311aax000.xml: 0 ms
    2020-12-02 23:25:58.242    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: 00221b86018a1a9f486e7f8d3afc1607x000.xml: 336 bytes
    2020-12-02 23:25:58.242    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: 00221b86018a1a9f486e7f8d3afc1607x000.xml: 16 ms
    2020-12-02 23:25:58.242    Update progress: [I49502] sdds.data0910.xml: found supplement IDE579 LATEST path= baseVersion= [included from product C1A903B2-E63E-483b-982D-04BB9C457C60 RECOMMENDED path=]
    2020-12-02 23:25:58.242    Update progress: [I95020] sdds.data0910.xml: looking for packages included from product IDE579 LATEST path=
    2020-12-02 23:25:58.242    Update progress: [I22529] sdds.data0910.xml: looking for supplements included from product IDE579 LATEST path=
    2020-12-02 23:25:58.242    Update progress: [I49502] sdds.data0910.xml: found supplement IDE580 LATEST path= baseVersion= [included from product IDE579 LATEST path=]
    2020-12-02 23:25:58.246    Update progress: [I95020] sdds.data0910.xml: looking for packages included from product IDE580 LATEST path=
    2020-12-02 23:25:58.246    Update progress: [I22529] sdds.data0910.xml: looking for supplements included from product IDE580 LATEST path=
    2020-12-02 23:25:58.246    Update progress: [I49502] sdds.data0910.xml: found supplement IDE581 LATEST path= baseVersion= [included from product IDE580 LATEST path=]
    2020-12-02 23:25:58.246    Update progress: [I95020] sdds.data0910.xml: looking for packages included from product IDE581 LATEST path=
    2020-12-02 23:25:58.246    Update progress: [I22529] sdds.data0910.xml: looking for supplements included from product IDE581 LATEST path=
    2020-12-02 23:25:58.246    Update progress: [I49502] sdds.data0910.xml: found supplement IDE582 LATEST path= baseVersion= [included from product IDE581 LATEST path=]
    2020-12-02 23:25:58.246    Update progress: [I95020] sdds.data0910.xml: looking for packages included from product IDE582 LATEST path=
    2020-12-02 23:25:58.246    Update progress: [I22529] sdds.data0910.xml: looking for supplements included from product IDE582 LATEST path=
    2020-12-02 23:25:58.246    Update progress: [I19463] Syncing product C1A903B2-E63E-483b-982D-04BB9C457C60 RECOMMENDED path=
    2020-12-02 23:25:58.246    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: c90fc61d20c95b97fb8f24a79b020a22x000.xml: 58196 bytes
    2020-12-02 23:25:58.246    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: c90fc61d20c95b97fb8f24a79b020a22x000.xml: 63 ms
    2020-12-02 23:25:58.246    Update progress: [I19463] Product download size 175118518 bytes
    2020-12-02 23:25:59.816    Update progress: [I19463] Syncing product IDE579 LATEST path=
    2020-12-02 23:25:59.816    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: e4c2bcd4c718673e16f63e09efff1a8ex000.xml: 38198 bytes
    2020-12-02 23:25:59.816    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: e4c2bcd4c718673e16f63e09efff1a8ex000.xml: 31 ms
    2020-12-02 23:25:59.816    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: d88614f5e04b39cdbbff43d399efbccex000.xml: 397 bytes
    2020-12-02 23:25:59.816    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: d88614f5e04b39cdbbff43d399efbccex000.xml: 32 ms
    2020-12-02 23:25:59.816    Update progress: [I19463] Product download size 3365148 bytes
    2020-12-02 23:25:59.998    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: a090dc05ce65e143ba06fc14e001e076x000.xml: 3183 bytes
    2020-12-02 23:25:59.998    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: a090dc05ce65e143ba06fc14e001e076x000.xml: 16 ms
    2020-12-02 23:26:00.129    Option all = no
    2020-12-02 23:26:00.129    Option recurse = yes
    2020-12-02 23:26:00.129    Option archive = no
    2020-12-02 23:26:00.129    Option service = yes
    2020-12-02 23:26:00.129    Option confirm = yes
    2020-12-02 23:26:00.129    Option sxl = yes
    2020-12-02 23:26:00.131    Option max-data-age = 35
    2020-12-02 23:26:00.131    Option vdl-logging = yes
    2020-12-02 23:26:00.131    Customer ID:    094260ca9b3af99f9d4a3909fc47a743
    2020-12-02 23:26:00.131    Machine ID:    3b73a83963dc41b5ad3147c68a04a8f6
    2020-12-02 23:26:00.152    Component SVRTcli.exe version 2.8.0
    2020-12-02 23:26:00.152    Component control.dll version 2.8.0
    2020-12-02 23:26:00.152    Component SVRTservice.exe version 2.8.0
    2020-12-02 23:26:00.152    Component engine\osdp.dll version 1.44.1.2490
    2020-12-02 23:26:00.152    Component engine\veex.dll version 3.79.0.2490
    2020-12-02 23:26:00.152    Component engine\savi.dll version 9.0.20.2490
    2020-12-02 23:26:00.172    Component rkdisk.dll version 1.5.33.1
    2020-12-02 23:26:00.172    Version info:    Product version    2.8.0
    2020-12-02 23:26:00.172    Version info:    Detection engine    3.79.0
    2020-12-02 23:26:00.172    Version info:    Detection data    5.78
    2020-12-02 23:26:00.172    Version info:    Build date    9/8/2020
    2020-12-02 23:26:00.172    Version info:    Data files added    384
    2020-12-02 23:26:00.172    Version info:    Last successful update    (not yet updated)
    2020-12-02 23:26:00.255    Update progress: [I19463] Syncing product IDE580 LATEST path=
    2020-12-02 23:26:00.255    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: fa14ac969204291e5569af27e2082366x000.xml: 39399 bytes
    2020-12-02 23:26:00.255    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: fa14ac969204291e5569af27e2082366x000.xml: 250 ms
    2020-12-02 23:26:00.255    Update progress: [I19463] Product download size 2835246 bytes
    2020-12-02 23:26:00.447    Update progress: [I19463] Syncing product IDE581 LATEST path=
    2020-12-02 23:26:00.447    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: 31eee1aee03f5022e368661a28fc484dx000.xml: 19048 bytes
    2020-12-02 23:26:00.447    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: 31eee1aee03f5022e368661a28fc484dx000.xml: 16 ms
    2020-12-02 23:26:00.447    Update progress: [I19463] Product download size 1348758 bytes
    2020-12-02 23:26:00.626    Update progress: [I19463] Syncing product IDE582 LATEST path=
    2020-12-02 23:26:00.626    Update progress: [V52614] SU::LoggingAdvisor::start_file [metadata] Syncing: f430c089bf466bb070b959d79391e4c2x000.xml: 124 bytes
    2020-12-02 23:26:00.626    Update progress: [V52615] SU::LoggingAdvisor::end_file [metadata] Success: f430c089bf466bb070b959d79391e4c2x000.xml: 16 ms
    2020-12-02 23:26:00.656    Installing updates...
    2020-12-02 23:26:01.096    Error level 1
    2020-12-02 23:26:03.636    Update successful
    2020-12-02 23:26:18.187    Option all = no
    2020-12-02 23:26:18.187    Option recurse = yes
    2020-12-02 23:26:18.187    Option archive = no
    2020-12-02 23:26:18.187    Option service = yes
    2020-12-02 23:26:18.187    Option confirm = yes
    2020-12-02 23:26:18.187    Option sxl = yes
    2020-12-02 23:26:18.187    Option max-data-age = 35
    2020-12-02 23:26:18.187    Option vdl-logging = yes
    2020-12-02 23:26:18.311    Customer ID:    094260ca9b3af99f9d4a3909fc47a743
    2020-12-02 23:26:18.311    Machine ID:    3b73a83963dc41b5ad3147c68a04a8f6
    2020-12-02 23:26:18.327    Component SVRTcli.exe version 2.8.0
    2020-12-02 23:26:18.327    Component control.dll version 2.8.0
    2020-12-02 23:26:18.327    Component SVRTservice.exe version 2.8.0
    2020-12-02 23:26:18.327    Component engine\osdp.dll version 1.44.1.2490
    2020-12-02 23:26:18.327    Component engine\veex.dll version 3.79.0.2490
    2020-12-02 23:26:18.327    Component engine\savi.dll version 9.0.20.2490
    2020-12-02 23:26:18.327    Component rkdisk.dll version 1.5.33.1
    2020-12-02 23:26:18.327    Version info:    Product version    2.8.0
    2020-12-02 23:26:18.327    Version info:    Detection engine    3.79.0
    2020-12-02 23:26:18.327    Version info:    Detection data    5.78
    2020-12-02 23:26:18.327    Version info:    Build date    9/8/2020
    2020-12-02 23:26:18.327    Version info:    Data files added    387
    2020-12-02 23:26:18.327    Version info:    Last successful update    12/2/2020 3:26:03 PM

    2020-12-03 02:15:18.796    Could not open C:\swapfile.sys
    2020-12-03 02:15:18.984    Could not open C:\System Volume Information\{2f02968d-34f3-11eb-bba3-502b73e40e80}{3808876b-c176-4e48-b7ae-04046e6cc752}
    2020-12-03 02:15:18.984    Could not open C:\System Volume Information\{2f0296b7-34f3-11eb-bba3-502b73e40e80}{3808876b-c176-4e48-b7ae-04046e6cc752}
    2020-12-03 02:15:18.984    Could not open C:\System Volume Information\{3808876b-c176-4e48-b7ae-04046e6cc752}
    2020-12-03 02:15:32.278    Could not open C:\Users\User\AppData\Local\Dropbox\events\store
    2020-12-03 02:15:32.294    Could not open C:\Users\User\AppData\Local\Dropbox\instance1\sync\temp\6838bb783d068b50
    2020-12-03 02:15:32.294    Could not open C:\Users\User\AppData\Local\Dropbox\instance1\sync\temp\95552ff7c4a391c5
    2020-12-03 02:15:32.294    Could not open C:\Users\User\AppData\Local\Dropbox\instance1\sync\temp\c871ec1ed61d2e14
    2020-12-03 02:16:11.894    Could not open C:\Users\User\AppData\Local\Microsoft\WindowsApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
    2020-12-03 02:16:11.894    Could not open C:\Users\User\AppData\Local\Microsoft\WindowsApps\MicrosoftEdge.exe
    2020-12-03 02:24:12.708    Could not open C:\Windows\System32\catroot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb
    2020-12-03 02:24:12.708    Could not open C:\Windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb
    2020-12-03 02:24:14.005    Could not open C:\Windows\System32\config\BBI
    2020-12-03 02:55:29.810    Could not check E:\Program Files (x86)\Roxio Creator NXT Pro 6\Roxio Burn\Lang\ITA\HELP\Roxio Burn.chm\/images/burn_disc_image.jpg (format not supported)
    2020-12-03 03:32:56.163    Could not check G:\DATA\Eudora Pro\attach\TodayOnly.pps (corrupt)
    2020-12-03 03:41:47.394    Could not check G:\DEAL WITH THIS *****\DENUTY INVENTORY\Denuty from Flash Drive 2015 and earlier\DENUTY\DENUTY  AS OF 8-28\Inventories 082813\Backups\MJD postcards returned 081013 - Copy.xls (corrupt)
    2020-12-03 03:41:51.848    Could not check G:\DEAL WITH THIS *****\DENUTY INVENTORY\Denuty from Flash Drive 2015 and earlier\DENUTY\DENUTY AS OF MARCH 2014\Denuty Inventories 030414\Backups\MJD Postcard Inventory 091513 all enterd.xls (corrupt)
    2020-12-03 03:41:52.660    Could not check G:\DEAL WITH THIS *****\DENUTY INVENTORY\Denuty from Flash Drive 2015 and earlier\DENUTY\Denuty Binders 07232013.xls (corrupt)
    2020-12-03 03:41:52.676    Could not check G:\DEAL WITH THIS *****\DENUTY INVENTORY\Denuty from Flash Drive 2015 and earlier\DENUTY\Denuty Binders 08-10-13 (2).xls (corrupt)
    2020-12-03 03:45:10.610    Password protected file G:\DEAL WITH THIS *****\DI2011jm.pdf
    2020-12-03 04:47:46.303    >>> Virus 'Mal/FakeAv-NL' found in file P:\Paint Shop Pro\thanksgiving6.exe
    2020-12-03 04:47:46.303    >>> Virus 'Mal/FakeAv-NL' found in file HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\ConsentPromptBehaviorAdmin
    2020-12-03 04:47:46.303    >>> Virus 'Mal/FakeAv-NL' found in file HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\ConsentPromptBehaviorAdmin
    2020-12-03 04:54:43.013    Could not open LOGICAL:0018:00000000
    2020-12-03 04:54:43.013    Could not open Y:\
    2020-12-03 04:54:43.013    Could not open LOGICAL:0019:00000000
    2020-12-03 04:54:43.028    Could not open Z:\
    2020-12-03 04:54:44.373    The following items will be cleaned up:
    2020-12-03 04:54:44.373    Mal/FakeAv-NL

     

     

     

    Fixlog.txt AdwCleaner[S01].txt

  7. Hello,

    I stumbled onto an infected website on Nov 21 and according to my web history in Firefox, systemsupport.club tried, or did, something.

    My address bar in the Windows taskbar, although set to use Google, now returns search results from Bing.

    Also, over the last couple of days, I'm losing access to Office 365 apps. They report they've "run into an error that is preventing" (app) from working correctly" and will need to be closed as a result. Three dialog boxes are presented: repair now, help, or close.

    Malwarebytes Premium 4.2.1 reports no problems, nor does Windows Defender.

    MWB and Farbar logs attached; grateful for any assistance!

     

    Deano253

     

    mware bytes scan.txt Addition.txt FRST.txt

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.