Swizz006 Posted December 14, 2015 ID:1006889 Share Posted December 14, 2015 Hello all I wonder if somebody can give me answers about the following... This morning I recived a letter from my Broadband provider stating "We have been alerted that one Or more of your home devices has become infected with a malicious software (Malware). Your personal date and financial transactions that you perform online could be compromised. The Citadel malware was detected on a device using your internet connection Or home network on 08 December 2015. This letter gives you details of how you can deal with it, if you have not already done so. When it describes a "Device", does that still include a Desktop computer? And isn't Citadel some type of Ransomware? On my own computer that I am using at this moment I am normally very careful on what sites I am visiting and I do have ESET Smart Security / Malwarebytes/SuperantiSpyware. That are scanned fully twice a week.Apart from that my computer is running silky smooth with no problems what to ever. Thank you. Carl Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted December 14, 2015 ID:1006890 Share Posted December 14, 2015 Hello, Have you tried to contact your Internet provide to ask them if they sent you such warning? Link to post Share on other sites More sharing options...
Swizz006 Posted December 14, 2015 Author ID:1006897 Share Posted December 14, 2015 Hello, TwinHeadEagle and thank you for responding No..I Haven't been in touch as of yet. To me? The letter that I recived does look genuine in concerning of this particular piece of malware that was briefly explained to me, that goes by the name of Citadel. How would I know if a Device/Computer/Laptop has been infected with Citadel? Thank you again. Link to post Share on other sites More sharing options...
Swizz006 Posted December 14, 2015 Author ID:1006902 Share Posted December 14, 2015 I'm going to get in contact with my provider Via the forum..I will provide them with the Reference number and I will see what they say about it. I will keep you updated. Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted December 14, 2015 ID:1006941 Share Posted December 14, 2015 Okay, but meanwhile: Please download Farbar Recovery Scan Tool and save it to your desktop. Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.Only one of them will run on your system, that will be the right version. Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply. Link to post Share on other sites More sharing options...
Swizz006 Posted December 22, 2015 Author ID:1008461 Share Posted December 22, 2015 Hello and sorry for the long delay, and thank you again for responding. The following as instructed has been attached for inspection. Just to add I have informed my family about the possible infection and they are looking into it. Also..My own computer is still running silky smooth with no problems what so ever. Thank you, Sir. Carl. Link to post Share on other sites More sharing options...
Swizz006 Posted December 22, 2015 Author ID:1008462 Share Posted December 22, 2015 Hello and sorry for the long delay, and thank you again for responding. The following as instructed has been attached for inspection. Just to add I have informed my family about the possible infection and they are looking into it. Also..My own computer is still running silky smooth with no problems what so ever. Thank you, Sir. Carl.Addition.txt Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted December 22, 2015 ID:1008472 Share Posted December 22, 2015 You're missing FRST.txt report. Link to post Share on other sites More sharing options...
Swizz006 Posted December 22, 2015 Author ID:1008500 Share Posted December 22, 2015 Sorry about that, the FRST.txt is now attached.. Thank you again.FRST.txt Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted December 23, 2015 ID:1008581 Share Posted December 23, 2015 Fix with Farbar Recovery Scan Tool This fix was created for this user for use on that particular machine. Running it on another one may cause damage and render the system unstable. Download attached fixlist.txt file and save it to the Desktop: Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!Right-click on icon and select Run as Administrator to start the tool. (XP users click run after receipt of Windows Security Warning - Open File).Press the Fix button just once and wait.If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.When finished FRST will generate a log on the Desktop, called Fixlog.txt.Please upload it to your reply.fixlist.txt Link to post Share on other sites More sharing options...
Swizz006 Posted December 23, 2015 Author ID:1008601 Share Posted December 23, 2015 All has been completed as instructed. Cheers.Fixlog.txt Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted December 23, 2015 ID:1008604 Share Posted December 23, 2015 PC isn't infected, how is it behaving now? Link to post Share on other sites More sharing options...
Swizz006 Posted December 23, 2015 Author ID:1008606 Share Posted December 23, 2015 It's running like a dream, with no flaws what so ever. Saying that it was also running great prior as well. But I want to thank you greatly for your time and effort that you have put into this. I'm going to report back to my Internet provider now and explain in a few words that my computer is not infected. Merry Christmas! Link to post Share on other sites More sharing options...
Swizz006 Posted December 23, 2015 Author ID:1008646 Share Posted December 23, 2015 Just one last thing I opened I.E...I open it at least 2/3 times a month to check on the news articles on the front page but nothing else. But as soon as I opened it but only a few minutes ago I received this on screen message. Is that normal? I just wanted to be double sure, from after that scan and all. thank you. Link to post Share on other sites More sharing options...
Swizz006 Posted December 23, 2015 Author ID:1008649 Share Posted December 23, 2015 Just one last thing I opened I.E...I open it at least 2/3 times a month to check on the news articles on the front page but nothing else. But as soon as I opened it but only a few minutes ago I received this on screen message. Is that normal? I just wanted to be double sure, from after that scan and all. thank you. Link to post Share on other sites More sharing options...
Swizz006 Posted December 23, 2015 Author ID:1008652 Share Posted December 23, 2015 I would like to add the message from above^ has only appeared the once. I have rebooted 2/3 times since and not seen the message reappear. Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted December 23, 2015 ID:1008691 Share Posted December 23, 2015 This is very normal, don't worry about it. There were some restrictions and missing values so I changed IE search setting to default ones. Link to post Share on other sites More sharing options...
Swizz006 Posted December 24, 2015 Author ID:1008783 Share Posted December 24, 2015 Cheers dude! *Two thumbs up* Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted December 30, 2015 Root Admin ID:1009830 Share Posted December 30, 2015 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts