Infected #2

[krypto]

Now that I'm done, hopefully, with my uncle's laptop, I'm moving on to one of two of my aunt's laptops. It seems to be in pretty bad shape as well. Ran Malwarebyte's main program, and it cleaned out over a thousand threats, just as bad as my uncle's. They need to stop watching porn or whatever the heck they're doing with these things.

 

Here are Farbar's scans.

FRST.txt

Addition.txt

[Maniac]

Hello krypto! My name is Borislav and I will be glad to help you solve your malware problem.

Please note:

• If you are a paying customer, you have the privilege to contact the help desk at Consumer Support. If you choose this option to get help, please let me know.
• I recommend you to keep the instructions I will be giving you so that they are available to you at any time. You can save them in a text file or print them.
• Make sure you read all of the instructions and fixes thoroughly before continuing with them.
• Follow my instructions strictly and don’t hesitate to stop and ask me if you have any questions.
• Post your log files, don't attach them. Every log file should be copy/pasted in your next reply.
• Do not perform any kind of scanning and fixing without my instructions. If you want to proceed on your own, please let me know.

Step 1

Download attached fixlist.txt file and save it to the Desktop.

NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Run FRST/FRST64 and press the Fix button just once and wait.

If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.

When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

Step 2

• Launch Malwarebytes' Anti-Malware
• Go to Update tab and select Check for Updates. If an update is found, it will download and install the latest version.
• Go to Scanner tab and select Threat Scan, then click Scan.
• The scan may take some time to finish,so please be patient.
• When the scan is complete, click OK, then Show Results to view the results.
• Make sure that everything is checked, and click Remove Selected.
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
• Copy&Paste the entire report in your next reply.

Extra Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer,please do so immediately.

In your next reply, post the following log files:

• fixlog log
• Malwarebytes' Anti-Malware log

[AdvancedSetup]

Please note this computer either is or was at one time using a method to pirate Windows or Office.

 

2015-01-15 20:04 - 2012-10-22 11:21 - 00000000 ____D () C:\Windows\AutoKMS

 

Please ensure that all pirated software or hacks are removed or we'll be forced to close your topic.

 

Thank you

[krypto]

I doubt my aunt pirated Office. It currently uses Office 365, but I'm not sure if she's up to date with it. Either way, I'm fairly certain that it's now clean. I no longer need help with it. Thank you, though.

[AdvancedSetup]

Since this issue is resolved I will close the thread to prevent others from posting here. If you need assistance please start your own topic and someone will be happy to assist you.