Jump to content

Running Malwarebytes on computer with no internet

davidb6107

By davidb6107
in Resolved Malware Removal Logs

 Share

Recommended Posts

davidb6107

davidb6107

Posted
Posted

Yes,

I have a computer with 9 monitors and while I was sitting at my computer this morning they all clicked off.

At first I though it was because after a certain amount of time my screensavers come on and so I moved my mouse and got nothing.

My computer seemed to be working and I can move my mouse but I can' see anything (all black screens).

I noticed if I do control alt delete for task manager, even though I can't see it, I move my mouse around and it changes to a hand, so it's like its there but I can't see it because of the black screen.

I then hit the windows key and p and hit the arrow key and I could see my mouse arrow on every monitor moving around.  So it's like I just can't see on my monitors while the computer is running.

I rebooted the computer and it loads up and I can see the windows logo and it boots to a black screen.

If I boot twice in a row I can get to the windows help screen (I can also get to BIOS but there doesn't seem to be anything there to help me) and then I can get the different boot options.  I try 5 booting into safe mode with networking.  I get to safe mode but I have no internet.

I can't get my McAfee software to scan it says try again later.  I think I may have some kind of virus, my computer literally went black while I wasn't even using it, but it was on and running.

I paid for the full license of Malwarebytes on my laptop (it has internet).  I saved the file and moved it to my desktop (running in safe mode with no internet) with a usb stick.  I ran it and it installed but it won't run, when I try to run it I get the error "Unable to start, x Unable to connect the Service" and I click OK.

So any help would be greatly appreciated,

Thank you,

David

Link to post
Share on other sites
TwinHeadedEagle

TwinHeadedEagle

Posted
Posted

FRST.gif Fix with Farbar Recovery Scan Tool

icon_exclaim.gif This fix was created for this user for use on that particular machine. icon_exclaim.gif


icon_exclaim.gif Running it on another one may cause damage and render the system unstable. icon_exclaim.gif

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

  • Right-click on FRST.gif icon and select RunAsAdmin.jpg Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finishes FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

fixlist.txt

Link to post
Share on other sites
davidb6107

davidb6107

Posted
  • Author
Posted

Okay so at the windows menu prompt to boot into safe mode, there is an option to do a system restore point.

I tried that once using the windows 10 media creation tool and it said there was no restore point available.

Well, I decided to try at the windows menu prompt as a last ditch effort.  Well lo and behold it said there was an option before the windows critical update at 6:30 am this morning.  That was the exact time I was sitting at my desk when my computer just went completely dark.

I didn't know what was going on so I restarted my computer in the middle of the update.  So it was the critical windows update that messed up my computer when I rebooted and interrupted it.  I really dislike the lack of control in Windows 10.

So the windows restore point before this morning worked.

So computer is fixed and it wasn't a virus.

Thanks for your help TwinHeadedEagle, I appreciate you taking the time to help me!  Still donating, not a good feeling, to be helpless like that and I appreciate you being willing to assist.

David

Link to post
Share on other sites
TwinHeadedEagle

TwinHeadedEagle

Posted
Posted (edited)

Yes, it sounds like some corruption happened in order for something like that to happen. And you were infected by a Kovter trojan and after restoring your computer it returned. We will remove it now. And thank you for your donation, much appreciated :)

 

FRST.gif Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

  • Right-click on FRST.gif icon and select RunAsAdmin.jpg Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Make sure that Addition.txt option is checked. option is checked.

    2873ryc.png

  • Press Scan button and wait.

  • The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.


Please attach report into your next reply.

Edited by TwinHeadedEagle
Link to post
Share on other sites
TwinHeadedEagle

TwinHeadedEagle

Posted
Posted

This should clean your PC from malware.

 

 

FRST.gif Fix with Farbar Recovery Scan Tool

icon_exclaim.gif This fix was created for this user for use on that particular machine. icon_exclaim.gif


icon_exclaim.gif Running it on another one may cause damage and render the system unstable. icon_exclaim.gif

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

  • Right-click on FRST.gif icon and select RunAsAdmin.jpg Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finishes FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

fixlist.txt

Link to post
Share on other sites
TwinHeadedEagle

TwinHeadedEagle

Posted
Posted

Then I have no precise idea, I can think of some possible scenarios, but that's not important now.

I can only tell you that this is a very sophisticated and persistent piece of malware and it is using some unconventional methods to stay on your PC.

You can read all about it here:

https://blog.malwarebytes.com/threat-analysis/2016/07/untangling-kovter/

http://www.symantec.com/connect/blogs/kovter-malware-learns-poweliks-persistent-fileless-registry-update

 

Anything else I can help with?

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.