Searching for Malwares

[Mantoshelis]

Hello, I attach logs from RogueKiller and FRST. Could someone check these logs?

 

 

Addition.txt

FRST.txt

RogueKiller.txt

Shortcut.txt

[kevinf80]

Hello and welcome to Malwarebytes,

Please be aware the following P2P/Piracy Warning is a standard opening reply made here at Malwarebytes, we make no accusations but do make you aware of Forum Protocol....

If you're using Peer 2 Peer software such as uTorrent, BitTorrent or similar you must either fully uninstall them or completely disable them from running while being assisted here.Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.If you have illegal/cracked software, cracks, keygens etc. on the system, please remove or uninstall them now and read the policy on Piracy.

Anyone other than the original starter of this thread please DO NOT follow the instructions and advice posted as replies here, my help and advice is NOT related to your system and will probably cause more harm than good...

 

Download TFC to your desktop, from either of the following links

http://oldtimer.geekstogo.com/TFC.exe

http://itxassociates.com/OT-Tools/TFC.exe

Save any open work. TFC will close all open application windows.

Double-click TFC.exe to run the program. Vista or Windows 7 users accept the UAC alert.

If prompted, click "Yes" to reboot.

TFC will automatically close any open programs, including your Desktop. Let it run uninterrupted. It shouldn't take longer than a couple of minutes, and may only take a few seconds. TFC may re-boot your system, if not Re-boot it yourself to complete cleaning process <---- Very Important

 

Next,

 

Please open Malwarebytes Anti-Malware.

• On the Settings tab > Detection and Protection sub tab, Detection Options, tick the box "Scan for rootkits".
• Under Non-Malware Protection sub tab Change PUP and PUM entries to Treat detections as Malware
• Click on the Scan tab, then click on Scan Now >> . If an update is available, click the Update Now button.
• A Threat Scan will begin.
• When the scan is complete Apply Actions on any found entries.
• Wait for the prompt to restart the computer to appear (if applicable), then click on Yes.
• After the restart once you are back at your desktop, open MBAM once more.
  

To get the log from Malwarebytes do the following:

• Click on the History tab > Application Logs.
• Double click on the scan log which shows the Date and time of the scan just performed.
• Click Export > From export you have three options:
  
    Copy to Clipboard - if seleted right click to your reply and select "Paste" log will be pasted to your reply
    Text file (*.txt)        - if selected you will have to name the file and save to a place of choice, recommend "Desktop" then attach to reply
    XML file (*.xml)      - if selected you will have to name the file and save to a place of choice, recommend "Desktop" then attach to reply
• Please use "Copy to Clipboard, then Right click to your reply > select "Paste" that will copy the log to your reply…
  

 

Next,

 

Download AdwCleaner by Xplode onto your Desktop.

• Double click on Adwcleaner.exe to run the tool.
• Click on the Scan in the Actions box
• Please wait fot the scan to finish..
• When "Waiting for action.Please uncheck elements you want to keep" shows in top line..
• Click on the Cleaning box.
• Next click OK on the "Closing Programs" pop up box.
• Click OK on the Information box & again OK to allow the necessary reboot
• After restart the AdwCleaner(C*)-Notepad log will appear, please copy/paste it in your next reply. Where * is the number relative to list of scans completed...
  

Next,
 
Please download Junkware Removal Tool to your desktop.

• Shut down your protection software now to avoid potential conflicts. (re-enable when done)
• Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
• The tool will open and start scanning your system.
• Please be patient as this can take a while to complete depending on your system's specifications.
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
• Post the contents of JRT.txt into your next message.
  

Next,

 

Run FRST one more time, ensure all boxes are checkmarked under "Whitelist" but only Addition.txt under "Optional scan" Select scan, when done post the new logs....

Let me see those logs in your reply...

 

Kevin
 

[Mantoshelis]

Hello again, I attach my logs.Addition.txtAdwCleanerC1.txtJRT.txtMalwareBytes.txt

[Mantoshelis]

Sorry, I forgot to attach FRST.txt log in previous post so I attach it here. 

FRST.txt

[kevinf80]

Thanks for those logs, continue please:

 

Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into.
NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work.

Run FRST and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply.

 

Next,

 

Download Security Check by screen317 from either of the following:

http://screen317.spywareinfoforum.org/SecurityCheck.exe or http://screen317.changelog.fr/SecurityCheck.exe

Save it to your Desktop. (If your security alerts either accept the alert, or turn the security off while Secuirity Check runs)
Double click SecurityCheck.exe (Vista or Windows 7/8 users right click and select "Run as Administrator") and follow the onscreen instructions inside of the black box. Press any key when asked.
A Notepad document should open automatically called checkup.txt; please post the contents of that document.

If Security Check will not run or you get an alert saying it is not supported, Re-boot your PC then try again...

 

Let me see those logs, also tell me if there are any remaining issues or concerns...

 

Thank you,

 

Kevin

Fixlist.txt

[Mantoshelis]

I attached logs.

Fixlog.txt

checkup.txt

[kevinf80]

What is the current status of your system, do you have any remaining issues or concerns?

 

Do you have an Anti-virus program installed, do not see one in your logs?

 

next,

 

Download Dr Web Cureit from here http://www.freedrweb.com/cureit save to your desktop. (Scroll to bottom of page)

• The file will be randomly named
• Reboot to safe mode <<<<<------------ http://www.computerhope.com/issues/chsafe.htm
• Run Dr Web
• Tick the I agree box and select continue
• Click select objects for scanning
  
  
  
  
  
• Tick all boxes as shown
• Click the wrench and select automatically apply actions to threats
  
  
  
  
  
• Press start scan
• The scan will now commence
  
  
  
  
  
• Once the scan has finished click open report <<<--- Do not miss this step
  
  
  
  
  
• A notepad will open
• Select File > Save as..
• Save it to your desktop
  

This log will be excessive,  Please attach it to your next reply…
 

Thanks,

 

Kevin

[Mantoshelis]

My system seems to be very slow after I installed Avira Free Antivirus. Do you have any alternatives to Avira Free Antivirus?

[kevinf80]

Do you have the log from DrWeb?

 

For your security look here: Answers to Common Security Questions and best Practices
 

Probably the best of the bunch regarding problems with lethargy is Microsoft Security Essentials......

 

Post the DrWeb log, also let me know if you have any remaining issues or concerns..

 

Thank you,

 

Kevin

[Mantoshelis]

I attach Dr. Web CureIt! log.

cureit.log

[Mantoshelis]

Also, the computer seems to work very slowly.

[kevinf80]

Run FRST one more time, ensure all boxes are checkmarked under "Whitelist" but only Addition.txt under "Optional scan" Select scan, when done post the new logs....
 

Thank you,

 

Kevin

[Mantoshelis]

Hello, I attach logs.

FRST.txt

Addition.txt

[kevinf80]

Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into.
NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work.

Run FRST and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply.

 

Post that log, let me know if there are any remaining issues or concerns...

 

Thank you,

 

Kevin
 

Fixlist.txt

[Mantoshelis]

I attach logs.

Fixlog.txt

[kevinf80]

Has that fix with FRST made any difference o your system?

[Mantoshelis]

Has that fix with FRST made any difference o your system?

 

I don't feel any difference.

[kevinf80]

Go here: https://support.microsoft.com/en-gb/kb/929135  Follow the instuctions for windows 7 and run your system in "Clean Boot"  mode. Clean boot has all none Microsoft services disabled, please ensure any services for 3rd party security or Internet connection is left active....

 

How does your system respond in that mode, any improvement?

[Mantoshelis]

Go here: https://support.microsoft.com/en-gb/kb/929135  Follow the instuctions for windows 7 and run your system in "Clean Boot"  mode. Clean boot has all none Microsoft services disabled, please ensure any services for 3rd party security or Internet connection is left active....

 

How does your system respond in that mode, any improvement?

 

That computer uses Windows XP.

[kevinf80]

Yes I misread your OS version. Instructions for XP here: https://support.microsoft.com/en-us/kb/310353

[AdvancedSetup]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!