about i virus i have/had

[killagore]

i logged in on my favorite game today and i saw all my stuff was stolen so my first thought i was keylogged so i went in safe mode and did a malwarebytes full system scan and it found these 3 things so i let the thing delte them but is this the trojan? or keylogger
C:\Program Files\Adobe\Adobe After Effects CS6\Support Files\amtlib.dll (PUP.RiskwareTool.CK)
C:\Program Files (x86)\GoforFiles\uninstall.exe (PUP.Optional.GoForFiles.A)
C:\Program Files (x86)\The Walking Dead Survival Instinct\steam_api.dll (Trojan.VirTool) i

 

[kevinf80]

Hello and

 

P2P/Piracy Warning:

 

   

If you're using Peer 2 Peer software such as uTorrent, BitTorrent or similar you must either fully uninstall them or completely disable them from running while being assisted here.

Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.

If you have illegal/cracked software, cracks, keygens etc. on the system, please remove or uninstall them now and read the policy on Piracy.

 

Next,

 

Download Farbar Recovery Scan Tool and save it to your desktop.

 

Note: You need to run the version compatible with your system (32 bit or 64 bit). If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• Double-click to run it. When the tool opens click Yes to disclaimer.
  
• Press Scan button.
  
• It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
  
• The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.
  

 

Next,

 

Please download aswMBR from here: http://files.avast.com/files/rootkit-scanner/aswmbr.exe ( 4.5MB ) save to your desktop.

 

• Double click the aswMBR.exe icon, and click Run.
  
• There will be a short delay before the next dialog box comes up.  Please just wait a minute or two.
  
• When asked if you'd like to “download the latest Avast! virus definitions", click Yes.
  
• Typically this is about a 100MB download so depending on your connection speed it can take a short while to download and become ready.
  
• Click the Scan button to start the scan once the update has finished downloading
  
• On completion of the scan, click the save log button, save it to your desktop, then copy and paste it in your next reply.
  

 

Note: There will also be a file on your desktop named MBR.dat zip up that file and attach to your reply...

 

Let me see those logs..

 

Kevin

[killagore]

okay doing the stuff when its done i will post it 

[killagore]

i cant find a upload button here btw so should i post the text of the notepad here somewhere?

[kevinf80]

Copy and paste the logs into the reply box, if an attachment is needed select "More Reply Options" under the reply box, that gives the option to "Browse" to file of choice, then when found c/w "Attach This File" option

[killagore]

okay i found out how here they are

Addition.txt

aswMBR.txt

FRST.txt

MBR.rar

[kevinf80]

Download attached fixlist.txt file and save it to the Desktop, or the folder you saved FRST into.

NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work.

 

Run FRST and press the Fix button just once and wait.

The tool will make a log on the Desktop (Fixlog.txt). Please post it to your reply

 

Next,

 

Download AdwCleaner by Xplode from here: http://www.bleepingcomputer.com/download/adwcleaner/ and save to your Desktop.

 

• Double click on AdwCleaner.exe to run the tool.
  
• Vista/Windows 7/8 users right-click and select Run As Administrator
  
• Click on the Scan button.
  
• AdwCleaner will begin...be patient as the scan may take some time to complete.
  
• When it's done you'll see: Pending: Uncheck any elements you don't want removed.
  
• Now click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review.
  
• Look over the log especially under Files/Folders for any program you want to save.
  
• If there's a program you want to save, just uncheck it from AdwCleaner.
  
• If you're not sure, post the log for review.
  
• If you're ready to clean it all up.....click the Clean button.
  
• After rebooting, a logfile report (AdwCleaner[s0].txt) will open automatically.
  
• Copy and paste the contents of that logfile in your next reply.
  
• A copy of that logfile will also be saved in the C:\AdwCleaner folder.
  
• Items that are deleted are moved to the Quarantine Folder: C:\AdwCleaner\Quarantine
  
• To restore an item that has been deleted (if necessary):
  
• Go to Tools > Quarantine Manager > check what you want restored > now click on Restore.
  

 

Next,

 

Run Malwarebytes,  Open > Settings Tab > Scanner Settings > Under action for PUP > Select: Show in Results List and Check for removal.

Please Update and run a Quick Scan with Malwarebytes Anti-Malware,

Make sure that everything is checked, and click Remove Selected on any found items.

 

Post the produced log...

 

Next,

 

Download CKScanner from here: http://downloads.malwareremoval.com/CKScanner.exe

 

Important - Save it to your desktop.

 

Doubleclick CKScanner.exe (Right click and "Run as administrator" in Vista/Win7).

Give permission if necessary, and click Search For Files.

After a very short time, when the cursor hourglass disappears, click Save List To File.

A message box will verify the file saved. Please run the program once only.

Double-click the CKFiles.txt icon on your desktop and copy/paste the contents in your next reply.

 

Let me see those logs....

 

 

 

fixlist.txt

[killagore]

okay doing the stuff but what is the atached files you uploaded ? fixlist.txt

or is this not for me but for you.

[killagore]

ehm that might sounded ofensive sorry im sometimes not that good in english because its not my native language i that file not for me but for you i ment

[kevinf80]

The fixlist.txt file is exactly what it states, a fix list to be used by FRST. you can open the file and have a look at it if you want,

[killagore]

CKscanner takes a while it says it is not responding every time so i think i just have to wait till it does

[killagore]

oh it started responding 

[killagore]

okay i got it 

AdwCleanerS0.txt

ckfiles.txt

mbam-log-2013-11-13 (20-44-53).txt

[kevinf80]

Unfortunately all help stops, you are running illegal software cracks/patches. There is also reference to AutoKMS, That was originally used to crack Microsoft Office but can also be used for Windows OS.

 

c:\windows\autokms\autokms.exe

 

Task: {6B50A54B-74CA-4CDB-8A1F-3A6B2A44945A} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe

[killagore]

so your gonna stop helping me?

[killagore]

if so please explain what you have done and if this file that the program in first detected was a keylogger and it got removed?

[AdvancedSetup]

This topic will now be closed due to evidence of cracked or pirated software on this system.

Piracy Policy