Iroca Posted August 13, 2016 ID:1056333 Share Posted August 13, 2016 Please help me every 10 mins the malware will popup after boot. One time only Object https://oa505txzz.ru Infection URL:Mal Process C:\Windows\System32\WindowsPowershell\v1.0\powershell.exe Addition.txt FRST.txt Malware bytes 8-12-16.txt Malware8-6-16 first popup scan.txt Link to post Share on other sites More sharing options...
kevinf80 Posted August 14, 2016 ID:1056416 Share Posted August 14, 2016 (edited) Hello Iroca and welcome to Malwarebytes, My screen name is kevinf80, i`m here to help clean up your system. Make sure to run all scans from accounts with Administrator status, continue as follows please: Anyone other than the original starter of this thread please DO NOT follow the instructions and advice posted as replies here, my help and advice is NOT related to your system and will probably cause more harm than good... Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into. NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work. Run FRST and press the Fix button just once and wait. The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply. Next, Please open Malwarebytes Anti-Malware. On the Settings tab > Detection and Protection sub tab, Detection Options, tick the box "Scan for rootkits". Under Non-Malware Protection sub tab Change PUP and PUM entries to Treat detections as Malware Click on the Scan tab, then click on Scan Now >> . If an update is available, click the Update Now button. A Threat Scan will begin. When the Scan is complete Apply Actions to any found entries. Wait for the prompt to restart the computer to appear (if applicable), then click on Yes. After the restart once you are back at your desktop, open MBAM once more. To get the log from Malwarebytes do the following: Click on the History tab > Application Logs. Double click on the Scan log which shows the Date and time of the scan just performed. Click Export > From export you have three options:Copy to Clipboard - if seleted right click to your reply and select "Paste" log will be pasted to your replyText file (*.txt) - if selected you will have to name the file and save to a place of choice, recommend "Desktop" then attach to replyXML file (*.xml) - if selected you will have to name the file and save to a place of choice, recommend "Desktop" then attach to reply Please use "Copy to Clipboard, then Right click to your reply > select "Paste" that will copy the log to your reply… Next, Download AdwCleaner by Xplode onto your Desktop. Double click on Adwcleaner.exe to run the tool. Click on the Scan in the Actions box Please wait fot the scan to finish.. When "Waiting for action.Please uncheck elements you want to keep" shows in top line.. Click on the Cleaning box. Next click OK on the "Closing Programs" pop up box. Click OK on the Information box & again OK to allow the necessary reboot After restart the AdwCleaner(C*)-Notepad log will appear, please copy/paste it in your next reply. Where * is the number relative to list of scans completed... Next, Download Sophos Free Virus Removal Tool and save it to your desktop. Double click the icon and select Run Click Next Select I accept the terms in this license agreement, then click Next twice Click Install Click Finish to launch the program Once the virus database has been updated click Start Scanning If any threats are found click Details, then View log file... (bottom left hand corner) Copy and paste the results in your reply Close the Notepad document, close the Threat Details screen, then click Start cleanup Click Exit to close the program If no threats were found please confirm that result.... Let me see those logs, also give an update on any remaining issues or concerns... Thank you, Kevin.... Fixlist.txt Edited August 14, 2016 by kevinf80 typo Link to post Share on other sites More sharing options...
Iroca Posted August 14, 2016 Author ID:1056425 Share Posted August 14, 2016 Hi thanks for posting here. But the malware already have been fix. But I will try this if the malware popup again. Thanks again for trying to help me. I only download the fixlist in the other forum and click fix and the problem has been solved no popup anymore. BTW can I do this? " Please open Malwarebytes Anti-Malware." Even the fixlist.txt I use is from other forums? Can I do the rest you posted? Link to post Share on other sites More sharing options...
kevinf80 Posted August 14, 2016 ID:1056431 Share Posted August 14, 2016 If you are receiving help at another site you should continue there and close out here... Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted August 18, 2016 Root Admin ID:1057099 Share Posted August 18, 2016 Since this issue is resolved I will close the thread to prevent others from posting here. If you need assistance please start your own topic and someone will be happy to assist you. Link to post Share on other sites More sharing options...
Recommended Posts