Jump to content

Malware Invaison


Recommended Posts

Okey so, im in deeeeeepp sh**, im getting malware attack alot recently and mainly it targets my facebook, i almost got beaten up cuz of this, so its serious. I dont know why is it always me, but from all my friends I'm THE ONLY ONE who gets MALWARE and that sends videos via chat or directly on his wall, and it's mostly called "name of person"video. Soo today i got rly bad malware, it corrupted my chat so evrytime i log in it sends chat message to all my friends with this video crap. I've noticed today that all my file's are "Shared" its tagged that evry1 can use it and evry1 has full control of it, avast is scaning my computer for about 1h now still on 0% and i also noticed that it has "swith user" option with only me as user, so is this mix of virus and malware, how deeeep am i in this sh**. Help plzzz

Link to post
Share on other sites

Hello @Deadmenwalking

 

Your using uTorrent and risk infections with that.

1. Open Programs and Features by clicking the Start button (Windows Globe), clicking Control Panel, clicking Programs, and then clicking Programs and Features.
2. Select a program, and then click Uninstall.

Dll-Files.com Fixer

 

I have attached A file I need you to download and save it to the same place that you saved the FRST program

Download attached **fixlist.txt** and save it to same location where the FRST tool is located.

NOTE: Both FRST.exe and the fixlist.txt must be in the same location or the fix will not work.
Close all browsers before running.

!https://sites.google.com/site/cannedfixes/home/deskcompictures/frst-fixlist.jpg!


After that you don't have to do anything else with the fixlist, we will continue using the FRST tool.

Right-click on *FRST* icon ( !https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif! ) and select ( !https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg! ) *Run as Administrator* to start the tool.
_XP users just double-click, and then click run after receipt of Windows Security Warning - Open File._
_8 users will be prompted about Windows SmartScreen protection - click More information and Run._

!https://sites.google.com/site/cannedfixes/home/cleaning-guide/frst-run.png!

The tool may want to update itself - in that case you'll be prompted when the update is completed and ready to use.

This time please press *FIX* and wait patiently.

!https://sites.google.com/site/cannedfixes/home/deskcompictures/frst-fixconsole.jpg!


A reboot may occur.

Upon completion a logfile will be opened (also saved to the desktop) called *fixlog.txt*.

!https://sites.google.com/site/cannedfixes/home/deskcompictures/frst-fixlog.jpg!

They will look like this:
https://sites.google.com/site/cannedfixes/home/deskcompictures/frst-fixlist.jpg


Please *attach that file* for my review.

 

**Also let me know how it's running now**

Larry Tate - *"LDT"*
Consumer Support Specialist & Malware Removal Specialist_
!https://www.malwarebytes.org/images/staff.png(Crushes Malware Restores Confidence)!:https://www.malwarebytes.org/

 

fixlist.txt

Link to post
Share on other sites

Download and run Chrome Cleaner
https://www.google.com/chrome/cleanup-tool/

If that didn't work:

Lets try this:

Start Task Manager
To start Task Manager, take any of the following actions:
Press CTRL+ALT+DELETE, and then click Task Manager.
or
Press CTRL+SHIFT+ESC.

End the process for **all** Google and / or Chrome items.


Reset your browser settings
1.In the top-right corner of the browser window, click the Chrome menu
2.Select Settings.
3.At the bottom, click Show advanced settings.
4.Under the section "Reset settings,” click Reset settings.
5.In the dialog that appears, click Reset.


**If that didn't do the trick**

Start Task Manager
To start Task Manager, take any of the following actions:
Press CTRL+ALT+DELETE, and then click Task Manager.
or
Press CTRL+SHIFT+ESC.

End the process for **all** Google and / or Chrome items.


If you have Bookmarks that you want to save, you want to do that first.

Export / Import Bookmarks.
https://support.google.com/chrome/answer/96816?hl=en


We need to uninstall Chrome completely and remove the user folder, then re-install it if you want to keep Chrome


It's hidden so we have to show hidden files and folders.

Here's how to display hidden files and folders.

    Open Folder Options by clicking the Start button (Windows Globe), clicking Control Panel, clicking Appearance and Personalization, and then clicking Folder Options.

    Click the View tab.

    Under Advanced settings, click Show hidden files, folders, and drives, and then click OK.

    Go to: C:\Users\(your name)\AppData\Local\Google\Chrome\User Data  <----Delete this folder
    Go to: C:\Users\(your name)\AppData\Local\Google  <----Delete this folder

 

Now we need to rehide files, folders:

Open Folder Options by clicking the Start button (Windows Globe) , clicking Control Panel, clicking Appearance and Personalization, and then clicking Folder Options.

    Click the View tab.

    Under Advanced settings, uncheck Show hidden files, folders, and drives, and then click OK.


Also if you have utilized chrome's "sync" ability, that may be bringing the infection back as well we need to uninstall


check the section for "delete your synced data from your Google Account " at the bottom of the page

http://support.google.com/chrome/bin/answer.py?hl=en&answer=185277


Reinstall Chrome
https://www.google.com/intl/en/chrome/browser/

Please install AdBlock for Chrome:
https://adblockplus.org/category/adblock-plus-chrome/

**Let me know if that solves the issue.**

Link to post
Share on other sites

Okey Cleaner did the trick, i found freepass, extansion 2.1 says it gives premium acces to sites i would need to pay for, so i deleted it, rest extansions are Adblocker, Avast extansions, google extansions and tampermonkey. I quess this was bad extansion, thanks for your help. 

Im still waiting for facebook maintance to finish, i quess its taking while now.

 

 

 

Link to post
Share on other sites

It loads, but when i try to log in this show's up:

Facebook Will Be Back Soon
Facebook is down for required maintenance right now, but you should be able to get back on within a few minutes. In the meantime, read more about why you're seeing this message. Thanks for your patience as we improve the site.

I quess ill sit and wait for it to finish.

Link to post
Share on other sites

Make sure you change all passwords and change them every 90 days

 

Glad we could help. :)If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks!

Edited by LDTate
Link to post
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.