Unknown malware threat, help please

[seraphh]

Hi, 

I have a problem with security in my PC. Today I first noticed jumping windows saying "RunDLL - There was a problem starting C:\DSdeGlr6TYDSdeGlr6TY\5gjp.dll - The specified module could not be found" . Now I have been trying to delete this with either ESET Smart Security 10, ESET Online scanner, and some other malware removal program with no luck. I tried to install Malwarebytes client, but i got error saying  "Error - Runtime Error (at 47:120): Could not call proc". To give more info about me using my pc - I kind of had it coming, since I did not really use any antivirus program unless absolutely necessary, downloaded many torrents - simply almost no security.

So here I am, no clue what to do, asking for your help. If you could help me, It would be great and I would appreciate it very much. I´m on my PC almost 24/7 so the response time will be very short from my side. 

Thanks

seraphh

Addition_19-05-2017 15.26.51.txt

FRST_19-05-2017 15.26.51.txt

[AdvancedSetup]

Hello @seraphh and

Sorry for the delay.

 

Please restart the computer first and then run the following steps and post back the logs when ready.

STEP 01
Please download Junkware Removal Tool to your desktop.

• Shutdown your antivirus to avoid any conflicts.
• Right click over JRT.exe and select Run as administrator on Windows Vista or Windows 7, double-click on XP.
• The tool will open and start scanning your system.
• Please be patient as this can take a while to complete.
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
• Post the contents of JRT.txt into your next reply message
• When completed make sure to re-enable your antivirus

STEP 02

 

 

Fix with AdwCleaner

 

Please download AdwCleaner by Xplode and save the file to your Desktop.

• Right-click on icon and select Run as Administrator to start the tool.
• Accept the Terms of use.
• Wait until the database is updated.
• Click Scan.
• When finished, please click Clean.
• Your PC should reboot now.
• After reboot, logfile will be opened. Copy its content into your next reply.

Note: Reports will be saved in your system partition, usually at C:\Adwcleaner

STEP 03
Download Sophos Free Virus Removal Tool and save it to your desktop.
 

• Double click the icon and select Run
• Click Next
• Select I accept the terms in this license agreement, then click Next twice
• Click Install
• Click Finish to launch the program
• Once the virus database has been updated click Start Scanning
• If any threats are found click Details, then View Log file (bottom left-hand corner)
• Copy and paste the results in your reply
• Close the Notepad document, close the Threat Details screen, then click Start cleanup
• Click Exit to close the program
• If no threats were found, please confirm that result.

STEP 04
Please download the Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit

• Double-click to run it. When the tool opens, click Yes to disclaimer.
• Press the Scan button.
• It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
• The first time the tool is run, it also makes another log (Addition.txt). If you've, run the tool before you need to place a check mark here.
• Please attach the Additions.txt log to your reply as well.

 

Thanks

[seraphh]

Hello, thanks for response. I did every step except the third one - Sophos Virus Removal. I downloaded it, tried to install only to see error window saying "error 1606. Could not access network location data." I´m not sure what to do about that one. I´ve also attached logs from each scan as requested. 

JRT.txt

AdwCleaner[C0].txt

AdwCleaner[S0].txt

Addition_01-06-2017 10.39.34.txt

FRST_01-06-2017 10.39.34.txt

[AdvancedSetup]

Thanks, please run Malwarebytes and check for updates, then run a Threat Scan and post back that log.

getting a bit late here so will check back on you again sometime tomorrow.

Thank you

Ron

 

[seraphh]

Unfortunately, I am not able to run Malwarebytes -still getting this one: "Error - Runtime Error (at 47:120): Could not call proc".

[AdvancedSetup]

Please run the following. It will also run a full disk check which may take a few hours to complete, let it run and complete.

After it finishes you should be able to run Malwarebytes now. Update it and do a Threat Scan and post back the log.

I'll be out most of the day tomorrow but will try to check back on you later tomorrow night

 

Please download the attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST or FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system.

Run FRST or FRST64 and press the Fix button just once and wait.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach or post it to your next reply.

Note: If the tool warned you about an outdated version please download and run the updated version.

fixlist.txt

 

Thanks

Ron

 

[AdvancedSetup]

We're sorry. It looks like your topic was somehow overlooked. Due to the length of time we'll go ahead and close this topic now but if you still actually need help please send a private message to one of the Moderators and we'll assist you.Thank you and sorry we missed your topic.