Amaryllisean Posted May 7, 2017 ID:1122869 Share Posted May 7, 2017 I was told to post these scan txts here, hoping this will be an easy fix. My computer is not very old and I hope to keep it for a few more years. FRST.txt Addition.txt Link to post Share on other sites More sharing options...
kevinf80 Posted May 7, 2017 ID:1122878 Share Posted May 7, 2017 Hello Amaryllisean and welcome to Mlawarebytes, Continue with the following... Please download Zemana AntiMalware and save it to your Desktop. Install the program and once the installation is complete it will start automatically. Without changing any options, press Scan to begin. After the short scan is finished, if threats are detected press Next to remove them.Note: If restart is required to finish the cleaning process, you should click Reboot. If reboot isn't required, please re-boot your computer manually. Open Zemana AntiMalware again. Click on icon and double click the latest report. Now click File > Save As and choose your Desktop before pressing Save. Attach saved report in your next message. Thank you, Kevin... Link to post Share on other sites More sharing options...
Amaryllisean Posted May 8, 2017 Author ID:1123121 Share Posted May 8, 2017 2017.05.08-13.47.49-i0-t92-d51.txt Link to post Share on other sites More sharing options...
kevinf80 Posted May 9, 2017 ID:1123176 Share Posted May 9, 2017 Thanks for that log, continue with the following: Check for and delete untrusted root CA certificates: Select Windows key and R key together,, In the Run dialog box type MMC, and then click OK. The Microsoft Management Console (MMC) appears. In the MMC, on the Console menu, click File then Add/Remove Snap-in.... In the Add or Remove Snap-in dialog box, click Certificates, and then click Add. In the Certificates snap-in dialog box, click My User Account, and then click Finish. click OK on Add or Remove Snap ins. Expand the Certificates Current User node by double click Expand UnTrusted Certification by double click Double Click Certificates Trust List. The details pane appears, showing all of the root CA certificates that are currently untrusted. If there an untrusted Certificates listed for Malwarebytes or any other Security Programs delete them.... Next, Open Malwarebytes, select > "settings" > "protection tab" Scroll down to "Scan Options" ensure Scan for Rootkits and Scan within Archives are both on.... Go back to "DashBoard" select the Blue "Scan Now" tab...... When the scan completes deal with any found entries... Then select "Export Summary" then "Text File (*.txt)" name that log and save , you can copy or attach that to your reply... Next, Download AdwCleaner by Xplode onto your Desktop. Or from this Mirror Double click on Adwcleaner.exe to run the tool Click on the Scan in the Actions box Please wait fot the scan to finish.. When "Waiting for action.Please uncheck elements you want to keep" shows in top line.. Click on the Cleaning box. Next click OK on the "Closing Programs" pop up box. Click OK on the Information box & again OK to allow the necessary reboot After restart the AdwCleaner(C*)-Notepad log will appear, please copy/paste it in your next reply. Where * is the number relative to list of scans completed... Next, Download Sophos Free Virus Removal Tool and save it to your desktop. If your security alerts to this scan either accept the alert or turn off your security to allow Sophos to run and complete..... Please Do Not use your PC whilst the scan is in progress.... This scan is very thorough so may take several hours... Double click the icon and select Run Click Next Select I accept the terms in this license agreement, then click Next twice Click Install Click Finish to launch the program Once the virus database has been updated click Start Scanning If any threats are found click Details, then View log file... (bottom left hand corner) Copy and paste the results in your reply Close the Notepad document, close the Threat Details screen, then click Start cleanup Click Exit to close the program If no threats were found please confirm that result.... The Virus Removal Tool scans the following areas of your computer: Memory, including system memory on 32-bit (x86) versions of Windows The Windows registry All local hard drives, fixed and removable Mapped network drives are not scanned. Note: If threats are found in the computer memory, the scan stops. This is because further scanning could enable the threat to spread. You will be asked to click Start Cleanup to remove the threats before continuing the scan. Let me see those logs, also tell me if there are any remaining issues or concerns... Thank you, Kevin. Link to post Share on other sites More sharing options...
Amaryllisean Posted May 10, 2017 Author ID:1123652 Share Posted May 10, 2017 I am very sorry to say that after going through the first section of the instructions you sent yesterday, Malwarebytes still won't launch. I am getting a message saying the requested resource is in use. I don't know if its a bad download, or maybe a glitch. I will download the next scanner but I won't start until you have seen this. I do not want to just skip steps unless given the okay to. Under the Certificate Trust list was one unnamed item that was three years old and had no information about it. I hope this isn't a problem since I am unsure why Malwarebytes refuses to open. Link to post Share on other sites More sharing options...
kevinf80 Posted May 10, 2017 ID:1123654 Share Posted May 10, 2017 Follow the instructions at this link: Two logs will be saved to MBAR folder on completion, post them please.. System - logMbar - log Date and time of scan will also be shown Thanks, Kevin... Link to post Share on other sites More sharing options...
Amaryllisean Posted May 14, 2017 Author ID:1124964 Share Posted May 14, 2017 After trying to figure out why the only Anti-malware software I could open was Zemana, the winvmx and connected adware made it almost imposible to use my laptop. I tried many times to open the Anti rootkit but it would say the resource is in use. After learning that the adware had moved location and latched onto my local low app data, I could not remove or stop it from running. After researching where it may have come from I found that removing the cause was long, difficult and would be hard since my computer would freeze every few minutes. I decided I would save my personal files to OneDrive and reset my computer. Even as Windows 10 was trying to download the adware was trying to run my computer into the ground. I could not find the root problem since it had detached itself from where ever it came from. Zemana could not tell it was a threat at that point and the other malwares it found, it was unable to remove. I was able to suspend the adware clients while uploading a few personal file and only took what I knew was safe. I have now downloaded Malwarebytes and Zemana and I plan on using them constantly. I wish I could have figured out what was wrong and maybe give some insight for a future update but what ever had caused Malwarebytes was slowly destroying my laptop. I don't know how I got the somehow deadly malware but maybe now that I know it's out there, I can keep it from downloading back onto my computer. I didn't want to reset my computer, this is the third time now, the first two being not long after buying it, but I was concerned the adware was downloading harmful malware and multiplying itself. Link to post Share on other sites More sharing options...
kevinf80 Posted May 15, 2017 ID:1125016 Share Posted May 15, 2017 Do you still require assistance..? Link to post Share on other sites More sharing options...
Amaryllisean Posted May 15, 2017 Author ID:1125118 Share Posted May 15, 2017 Not anymore. Link to post Share on other sites More sharing options...
kevinf80 Posted May 18, 2017 ID:1126158 Share Posted May 18, 2017 Ok, thanks for the update... Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted August 2, 2017 Root Admin ID:1148585 Share Posted August 2, 2017 We're sorry. It looks like your topic was somehow overlooked. Due to the length of time we'll go ahead and close this topic now but if you still actually need help please send a private message to one of the Moderators and we'll assist you.Thank you and sorry we missed your topic. Link to post Share on other sites More sharing options...
Recommended Posts