Cant Remove Malware

[Remix_Aqua]

I keep getting warnings saying mbam blocked a malicious website (nopage.pw) It must have now bypassed mbam because now when I shutdown I get a blue screen. Im scared to bootup again. I need advice ASAP since I have my exam revision for a BIG TEST. This could cost me my job chance. Help would be AMAZING. Im happy to follow all of you steps.

Thanks, Sam (Remix Aqua)

[Psychotic]

Hi there,
my name is Marius and I will assist you with your malware related problems.

Before we move on, please read the following points carefully.

• First, read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.
• Perform everything in the correct order. Sometimes one step requires the previous one.
• If you have any problems while following my instructions, Stop there and tell me the exact nature of your problem.
• Do not run any other scans without instruction or add/remove software unless I tell you to do so. This would change the output of our tools and could be confusing for me.
• Post all logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.
• If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed.
• Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.
• My first language is not english. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.
  

• Important: To help me reviewing your logs, please post them in code boxes. You can create them by clicking on the <>-symbol on top of the reply window.
  

 
 
 
 
HijackThis is not the preferred initial scanning tool in this forum. With today's malware, a more comprehensive set of logs is required to determine the presence of malware.
 
 
 
 
Scan with FRST in normal mode

Please download Farbar's Recovery Scan Tool to your desktop: FRST 32bit or FRST 64bit (If not sure: Start --> Computer (right click) --> properties)
 

• Run FRST.
• Don´t change one of the checkboxes and hit Scan.
• Logfiles are created on your desktop.
• Poste the FRST.txt and (after the first scan only!) the Addition.txt.
  

 
 
 
 
 Scan with aswMBR

Please download aswMBR ( 4.5MB ) to your desktop.

• Double click the aswMBR.exe icon, and click Run.
• There will be a short delay before the next dialog box comes up. Please just wait a minute or two.
• When asked if you'd like to "download the latest Avast! virus definitions", click Yes.
• Typically this is about a 100MB download so depending on your connection speed it can take a short while to download and become ready.
• Click the Scan button to start the scan once the update has finished downloading
• On completion of the scan, click the save log button, save it to your desktop, then copy and paste it in your next reply.
  

Note: There will also be a file on your desktop named MBR.dat do not delete this for now. It is an actual backup of the MBR (master boot record).

[Remix_Aqua]

Question... I have avg free 2014 + malware bytes on my computer. Will these corrutpt with avast?

[Remix_Aqua]

Wait Wait Wait. I have had a loom through the log. Maybe my shutdown problem is a driver error (im not sure) Im still worried about www.nopage.pw though. *NOT SAYING IM RIGHT. Will upload log. On my iPad right now.

[Remix_Aqua]

All Done. Plz Answer Questions Above ^^^^

FRST.txt

Addition.txt

[Remix_Aqua]

Are You Still With Me?

[Psychotic]

Yes, I`m still with you.

But I´m a volunteer here and on sundays I have to spend time with my family.

 

aswMBR will not interfere with your installed programs. Please proceed.

[Psychotic]

Scan file(s) via VirusTotal

Please check the file in the code box via Virustotal

• Click browse
• copy the following into the search box

  C:\Users\Sam\AppData\Roaming\Windowsconfig\bin\win.jar

• and click open.
• click Send File.

please be patinet until the file is uploade completely. If you get the message

File already submitted: The file sent has already been analysed by VirusTotal in the past. This is same basic info regarding the sample itself and its last analysis:

click on Reanalyse. Wait until Current status: Finished appears. Now, copy the link from within your browser´s adress bar and poste it here.

[AdvancedSetup]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!