Search the Community

Hello, I want to remove the KMS-R@1n software from my computer, but I don't want to reinstall Windows since I have a lot of games that I don't want to reinstall due of my internet connection. I've read some old posts here, so I've already completed all three processes. Unfortunately, I ran malware earlier today, so I'm not sure if this file would assist you or not, but Malware is no longer detecting anything. But I've completed the rest, so I'm hoping this helps. 41186da3-851e-11ec-9134-2cf05d5a2d81.txt Addition.txt AdwCleaner[C00].txt FRST.txt

Hello, I keep getting a Malwarebytes notification for the following (see images and text file below). Any help would be greatly appreciated. I downloaded a game save file, which in retrospect was pretty stupid, and now I get this notification every hour or so. I've run Malwarebytes and Kaspersky Total Security scans and found nothing. Any help would be greatly appreciated. I blocked out the IP address because I'm not sure if that is mine or whoever my computer is trying to connect to and didn't want to just give that out to the internet. Thanks, John malwarebytes report export.txt

I just recently tried using Malwarebytes again (after using it several times before on different computers) and it has detected only 3 threats. As of this post, it has been working on removing these three files for over 20 minutes. I'm aware that lots more files means that the program will work harder and longer to remove them but 3 isn't a big number. Is the program stuck? Why is it taking so long to remove the threats?

Does Malwarebytes currently have a removal tool that will wipe any orphaned files and/or registry entries left behind if Malwarebytes 3.0.6.1469 is uninstalled from the Control Panel? Aura posted on 27-Jan-2017 in the thread 3.0.6.1469 will NOT upgrade over 3.0.6.1458 that "mbam-clean.exe is for Malwarebytes 2.x installs and hasn't been updated for Malwarebytes 3.0 yet". If that statement is correct, I hope Malwarebytes will at least ensure that a removal tool for Malwarebytes 3.x is available before upgrades start rolling out to existing MBAM v2.2.1 users who have Settings | Update Settings | Check for program updates when checking for database updates enabled. ------------- 32-bit Vista Home Premium SP2 * Firefox v51.0.1 * NIS v22.8.1.14 * MBAM Premium v2.2.1.1043

Hi all, First time with this type of trouble and I've come across this forum via a Google search which I had started reading through this thread here: I will try to do my best here in understanding and communicating with the everyone and your knowledge. Thank you in advance for any help. I'll try and keep this simple and broken down into what I know. To start I am running Windows 10 on a Cyberpower PC that I purchased about 3 months ago. As briefly as I can be I use this PC strictly for iRacing and use only a limited number of applications that run along with it. I use Chrome as a web browser which is pretty much just familiarity and a preference. This whole adventure started when the command prompt opened on me in the middle of a race. I noticed in the task bar following this race that Internet Explorer and Chromium were there. Not thinking too much of it as this was the first time it happened I unpinned them and continued what I was doing. This happened again several hours later and I got to investigating this Chromium deal. I am now familiar with what it is and how it works and I also learned more about Electron and how it operates some of the apps I use such as Discord and Simracingapps. More familiar with how this all comes together I continued with trying to get these apps removed. Im almost positive I had uninstalled Chromium via the command prompt and a hidden folder in This PC>Windows(C:)>Users. I also took a second look at SAntivirus which is my fault for not noticing sooner and I found out all about that.. I followed instructions to remove SAntivirus by rebooting in "Safe Mode with Networking". The following step is to download and install Malwarebytes. As there seems to be no way to connect via WI-FI in this mode (which is currently all I am able to use) I downloaded on my Surface and tried to install but it still needs to download during this time so I could not do so. I went on to the next steps as they were 2 more removal softwares so I figured leaving one out would be just fine. These were HitmanPro and then Adwdefender. Following the instructions to reboot after the Adwdefender scan all I booted to was a black screen. I restarted using the power button on the tower out of frustration at this point with this already being a 4 hour headache. When I powered back on I navigated back to where I was given the options that included "Safe Mode with Networking" and others. Since I was familiar with that one during this process I chose it. Boot to black screen. Reset again and believe I chose the startup troubleshooting after finding it and chose some type of boot recovery. This is where i was starting to see red so I cant remember exactly and I dont want to really do much else on here using that route unless instructed to do so. But that sounds about right. This went through and finished and the pc booted and I am at my desktop and logged in. Now whatever it did to recover gave me a sigh of relief but now I have the apps that I originally started this process to try and remove(Chromium and SAntivirus)back again along with 2 or 3 others that I have decided not to use and had previously uninstalled. All I want is Chromium off of my computer for good. I'm sick of saying the word. I'm sick of looking at it. SAntivirus Realtime Protection Lite off my computer for good. I'm already planning on being more vigilant for these things as the SA snuck in thetr on me. Also using all three of these softwares in the future to help me do thst... if Malwarebytes doesn't hang up on installing that would be great too. Seems I'm at a point here where I can try this all again with some of your help. Thank you for your time, Ryan

cannot remove from windows 10

Trying to uninstall with Windows uninstaller just brings up uninstall window but never actually uninstalls. I then tried running Malwarebytes clean removal tool. Which gave me this message: (attached is the mb-check-results.zip) Can someone help get this off my pc? I find it extremely frustrating. mb-check-results.zip

Hello, so I recently noticed that my CPU was running on high usage until I opened task manager. When I open task manager, it drops to 2-7% from 50-80%. I really don't know how to find out the name of the virus of the location, because each time I open task manager, it freezes until the usage is at normal again, so I don't really have a chance to find out anything about it. I tried running SpyHunter5, it found Trojan.ICLoader but I can't really get rid of it with the free version. I ran Kaspersky a few days back too, it didn't really find anything. Is there any help to this?

I am using your web page about: How to remove PUP.Optional.Spigot.A (Virus Removal Guide); https://malwaretips.com/blogs/pup-optional-spigot-a-virus-removal/. But there is a problem: the link to the Junkware Removal Tool tool at Step 2: doesn't work. How can I get it to proceed with the Steps of your page?

My headsets stopped working when i removed a malware from my PC. I clicked on restart via malwarebytes for the removal process to be finished and then my PC frose on the blue screen where it says restarting and then i turned the PC off and turned it on again. But once i did my PC had remove my headsets software drive and also out of nowhere my device driver was not working properly and the troubleshooter didn't detect anything. I need help pls someone help me and also this happend to my gaming headset directly after the restart and also now i have no malware left or any threat or virus but i watched YouTube and try to see solutions and not any solution worked. So pls I need someone in Support & Help to help me because no YouTube videos could help me and also pls contact me as fast as possible or comment if you know a solution. (i have checked for update drivers for my specific headsets if didn't even have any)

Hello there So I have this cr*p on 2 laptop whom I installed andyos on both but I'm not sure this is the origin of g*.tmp.exe. Found threads here regarding this but after installing mbam it doesn't run. Help would greatly appreciated. Guy Addition.txt FRST.txt

Hey everyone! Question about ultra viewer. I'm ashamed to admit that one of those scammers got me to download it. I caught on after a little while. He was prenteding to be from PayPal shortly after I had opened a dispute. Ended up trying to get me to put a Google play card. He was pretty angry with me when I made it clear I caught on, do they usually stop once you say you know it's a scam? He did not receive any passwords or money. Just my email and name. I immediately changed every password and added extra security measures and also logged out of previous sessions. I also obviously uninstalled ultraviewer. How can I be sure it is gone? I scanned the computer using Malwarebytes and it came back clean. Does Malwarebytes get rid of it? Any help is greatly appreciated !

need help removing this cause for some reason it disappears and it dident appear for a good yea then its back on my task mananger and and even my malwarebytes is not picking it up for some reason is there anyway to get this removed without having to lose personal files and programs

I infected with Riskware.Bitcoin_miner they successfull detected and quarantine with Malwarbytes but keep come back after my PC startup, detect and success quarantine but keep appears again. And plus on some Key such F7/F3 aor TAB key keep auto press that I don't know What program or malware is working on. That special keys press when using terminal console or using Microsoft Word 2013. Please help me to resolve this.Regars Here is my addtion.txt and FRST.txt Addition.txt FRST.txt

To whom it may concern, Please do another review on the following site: https://www.cosmictone.com.au/

Malwarebytes Premium keeps detecting "PUP.Optional.365Stream". I let it quarantine and delete each instance, but they come back very quickly (hours). They return before the machine is rebooted. How do I locate the re-installer and remove it?

Hello, so I got a brand new pc and for some reason my malwarebytes found a 2 files that were under the category of "PUP" and it said Trojan.downloader.BDB. My pc is also super slow and freezes a lot and IT IS NEW! I have no idea what to do... Im so afraid theres still some trojan left in here ...

Hello, Im new to this forum and I would be extremely grateful if anyone here could give me some advice on how to remove encrypted syswow64, (possibly zero access rootkit), from several usbs that I got that have been infected when they where inserted in windows computers that I got that were attacked by hackers. The hackers installed a system administration server on my network and attacked my computers with some kind of synzcronization worm/virus that synced and even infected offline devices, (that contained Bluetooth and smartcard etc), like Television, digital TV box, dvd, printer and phones. Programs that I detected on my computers that they were using were among others, syswow64, bluetoothshare, various installation hooks, svchost, microsoft synchronization feeds, keyloggers, infrared, remote Control programs, malicious code and code changer programs etc. When I scan the usbs with regular virus Scans like Kaspersky or Norton they all comes out Clean and no names shows up during the scan but when I scan the usbs with microsoft forefront scanner it also comes out as Clean but during the scan all the rootkit names show up though. The names that comes up includes for example syswow64, catroot, system root: nearby devices, hkmmodule installation hook, netframework installation hook, microsoft feeds synchronization, subsystem spooler system, mobilesynch.exe, tablet/pcsynch.exe, rundll.32.exe and many more. I have run the scan on all photos separately that is stored on the usbs and the same rootkit names shows up during the scan on every single photo and also, when I did a test and removed all files from one usb, so that it was empty, all the names still showed up when I scanned it and I could also see that the rootkit, (although I cant see it as it is encrypted), took up 0,8 gb of space on the usb since there was only 7,2 gb left for me to use although the size of the usb is 8 gb so if the usb were really empty there should be 8 gb space left for me to use, not 7.2 gb. What I would like to know is if anyone here knows if theese types of encrypted rootkits is possible to remove at all fro usbs so that I can get my photos, and if so how? Is there any antivirus website where I can upload the photos that can Clean the rootkit completely out of the usb and photos or should I go visit some computer specialist store instead, or is it enough if I just burn the photos over to a dvd and then the rootkit will dissapear byitself, or is there nothing that can be done at all? Anyone that knows the answer to theese questions please feel free to send me messages either in this thread or you can send me private messages to my profile here on this forum aswell if you like. All answers are extremely appreciated

Hello. Could really use some help ASAP. Thank you guys for the support. All attachments are included. FRST.txt Addition.txt Threat Scan Log.txt

I had problems that had prevented me from installing or using any anti-virus software. I had to run a special build of Malwarebytes anti-rootkit from here to solve that problem and install Malware Bytes. Here's the forum where I posted my problems and was helped. I was redirected to this post and was able to do the threat scan; however, whenever I click on the link for the Farbar Recovery Scan tool, my browser closes. I am using Microsoft Edge as I had to uninstall both Google Chrome and Mozilla Firefox when they faced numerous problems and refused to open. I was strongly recommended to post here despite having Malware Bytes running on my computer. Here are the logs: quarantine log.txt threat log.txt system-log.txt mbar-log-2018-04-09 (12-49-04).txt mbar-log-2018-04-09 (17-18-19).txt

Please remove hxxps://penascoresorts.com from your block list. Thanks! log.txt

I've had this thing, (malware is my best guess) since june last year and all attempts to remove it from my system have failed. Even people i know working in fields that require moderate knowledge of malware/virus protection etc guided me throught different removal methods. Which sadly wasnt enough either. So after 3 lifetimes worth of removal guides,scans, support agents and programs u name it, It seemd when Malwarebytes was mentioned in all manners, it was always the top choice / unrivaled when it comes to malware removal. so took me this long to figure out asking for professional help her just might do it. Hope someone can help me out! Kind regards Kristian FRST.txt Addition.txt malwarebytes log.txt

Hello there, One of my machines using running on Windows Vista SP2 has a semi-serious problems, even i cannot name it. This is the final chance for me to figure out whether i'm safe or not. Here is the issue. I came across a malware a few years ago which is infected my machine through a non-secure JAVA web applet. After this infection, i immediately took some actions and tried neutralizing malware and cleaning as well, i also used Malwarebytes 1.x and 2.x series. After some years have passed, i still noticed that the nasty and non-existent registry entry of this malware is still visible by regedit, and GMER. I had no abnormal activity since then, and tried numerous rootkit removers listed below with following results: - GMER: Shows hidden driver service highlighted red but unable to remove / disable because it's not existed in fact (IMHO). - Sophos Anti-Rootkit: No malware is found, system is clean. - BitDefender Anti-Rootkit: No malware is found, system is clean (scan took very short though, not sure why). - Kaspersky TDSS Remover: No malware is found, system is clean. - Rootkit Hook Analyzer: No malware is found, system is clean. - Symantec TDSS Fix Tool: No malware is found, system is clean. -...and finally Malwarebytes Anti-Rootkit BETA along with Malwarebytes Premium (3.3.1) edition: System is clean, no malware is found. Although almost all of major removers say that the system is clean, i'm so picky that i have no idea why regedit and GMER display the presence of malware (PragmaXXXXX - random numbers), especially regedit shows error immediately when i click on this key as if it does NOT exist, but i can't do anything even i try a lot of methods including running regedit under SYSTEM account, running offline registry editor using recovery disc, and using command prompt. It seems a kind of very strange glitch in registry file, and it cannot be removed there eventhough the entry (PramaXXXXX) is shown. I'm attaching all the screenshots that would help on describing the issue, along with FRST log, addition.txt log and MBAM Anti-Rootkit log file. I'd be so grateful if there is any additional steps to take other than formatting the whole drive, as i have a lot of documents and installations with senstive configurations. Thanks in advance! Addition.txt FRST.txt system-log.txt

Today, Saturday, Jan 27, 2018, when I want to use my computer to look up over the web, my computer froze. I realized later it was MBAM that use up memory, kill the computer and my video card. Reboot helps, but MBAM immediately eats up all the available memory again. I have 32 GB installed running on a i7 chip. Luckily, I have a smartphone allows me to search and Google immediately shows me that people discovered the issue more than 16 hours ago. MBAM pinned a message in the forum I can't wait for them to fix to use my computer again. So I uninstall MBAM. BAM!! Of course it fixed the problem, my computer feels fresh again - running much faster than with MBAM. I am extremely surprised that my i7 chip with 32 GB is not enough to run MBAM. MBAM made EVERYTHING slow on my system, accessing the file system via File Explorer, running Firefox, Edge, Chrome, Opera all slows down extremely over time. The search made me realized that this "has" been an issue with MBAM in the past. I have been using MBAM premium for years but didn't realize that MBAM is the problem. I am glad MBAM kills itself to alert me to uninstall it and brings back my system performance I missed in the past. At least I am relief that the issue is caused by a single software rather than other issues I thought I was experienced but no solution was able to fix it until today.

Good Day, Back in early December ran Windows Defender and discovered that my Desktop three terabyte HD was infected with Tilken.B!cl virus. My Window 7 Ultimate operating system had been severely compromised so I replaced my HD with a new Sold State Drive. I remained committed to cleaning the old hard disk so I purchased a USB 3.1 PCI express and a docking station. This allowed me to do a full scan on the 3TB HD with the Window Malicious Software Removal Tool (MSRT) in about 36 hours. Attached are the images that show that at near the end of the scan 84 files had been identified as infected. This morning I expected to see a report on those infected files. I would also show you an image of the screen capture of the MSRT that stated No Malicious Software Was Detected. I also review the MRT.log file and not infections were identified. Could it be that Tilken.B!cl has a way of preventing its removal using MSRT? I noticed that there is a command line command for automatic removal which I will try next. I thought you might like to know about this issue. I am also running Malwarebytes 3.0 but so far it has not identified Tilken.B!cl as present. Also relative to MSRT, Malwarebytes is scanning slowly. After 43 hours only 2million files have been scanned. Any suggestions would be appreciated.