Jump to content

Recommended Posts

Hello,

I recently downloaded a program that installed tons of malware on my computer. I used MalwareBytes to get all of them out, except for one, called "dataup.exe".

After reading up on "dataup.exe", I found that it was a Trojan virus. MalwareBytes did not detect dataup.exe.

I found it on my C: drive, in Program Files (x86)/dataup.

There are the files located in the folder "dataup":

cm.bat

dataup.exe

NTSVC.ocx

runbat.vbs

There was also another folder I believe is linked to "dataup.exe", called "data_up", located in the same area as the "dataup" folder.

The contents of this folder are:

data_up.exe

What I did first was I ended the process "dataup.exe" in the Task Manager, and simply deleted the folders "dataup" and "data_up". I hoped that would solve the problem, but it did not. The folders simply came back with the same contents.

Any help on removing this piece of malware?

Thanks in advance.

Share this post


Link to post
Share on other sites

I have msrtn32 folder, dataup and data_up folders.

Same route as you, downloaded a program from softonic.

It was initially Obrona, then Ads by Sasa, etcetc.

I thought I got rid of everything, I didn't see anything in the browsers but the msrtn32 keeps reappearing when I reboot. :(

Someone please help!

Share this post


Link to post
Share on other sites

I just got this as well and am running into all the problems you have had with dataup.  I get ads by Sasa, and msrtn32.exe, cdhtr.exe, and rthdcpd.exe.  They come back after deleting them and malware is not picking them up.  Please help!

Share this post


Link to post
Share on other sites

Hi Guys,

 

Please update your MBAM to the current database and run a  threat scan.

 

Allow MBAM to remove what it finds and then restart your computer when it asks you too.

 

If your issues persist please follow the instructions here and start a new topic per user >>

 

https://forums.malwarebytes.org/index.php?/topic/9573-im-infected-what-do-i-do-now/

Share this post


Link to post
Share on other sites

Glad we could help. :)

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.