Possible Malware Present

[Hatsuhime]

Hello,

I've had my laptop for a couple of years, and since the beginning I've managed to keep the operating system running smoothly. However, in the last couple of days it started heading south. Badly! It freezes constantly, even when I'm doing something as simple as working an excel spreadsheet or editing a document in Word. Mind you, we're talking about a 6th generation core I5, with 6 Gigs ram and a GeForce 940M, so no pushover (considering the kind of things I do with it).

Today, the symptoms got even worse. Chrome would shut down immediately after booting. I ran a clean up tool suggested by Google itself. It sorted the problem (kind of). But such behaviour only raised my previous suspicions that I may have been infected (which is actually quite rare, since I do know my ways around the web). And so, I decided to run a full system scan using Kaspersky Internet Security. Since it's something that takes quite a while, I just let it ran while doing other stuff (namely download your Malware Scanner). And this is when I was 99.99% sure I was infected. I was able to download the trial, install it and run it... For 30 seconds (tops!). After that time, I got a message saying "We apologise, but MalwareBytes service has stopped working. The program will now reboot." And this goes on and on and on... Even if I don't do anything, just let it reboot, wait a while and there's the message again. Not only that, but I realised at a point that the virus scan ran by KIS was also interrupted and the program restarted.

As such, I read your sticky post regarding on how to properly setup a new thread in this topic however, due to the aforementioned issue, I'm unable to post the Threat Scan Log (unless there's another way to run the scanner), meaning I shall only be posting the Farbar Recovery Scan Tools reports.

I thank you in advance for any help you can provide on this matter.

Best regards,

FRST.txt

Addition.txt

[AdvancedSetup]

Hello @Hatsuhime and

Please download the attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST or FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system.

Run FRST or FRST64 and press the Fix button just once and wait.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach or post it to your next reply.

Note: If the tool warned you about an outdated version please download and run the updated version.

fixlist.txt

After the computer reboots from the clean up then run the following MB-Clean procedure and restart the computer a 2nd time after you've reinstalled Malwarebytes. Then run the following for me.

 

 

Please run the following steps and post back the logs as an attachment when ready.

STEP 01

• If you're already running Malwarebytes 3 then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button.
• If you don't have Malwarebytes 3 installed yet please download it from here and install it.
• Once installed then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button.
• Once the scan is completed click on the Export Summary button and save the file as a Text file to your desktop or other location you can find, and attach that log on your next reply.
• If Malwarebytes won't run then please skip to the next step and let me know on your next reply.

STEP 02

Please download AdwCleaner by Malwarebytes and save the file to your Desktop.

• Right-click on the program and select Run as Administrator to start the tool.
• Accept the Terms of use.
• Wait until the database is updated.
• Click Scan.
• When finished, please click Clean.
• Your PC should reboot now if any items were found.
• After reboot, a log file will be opened. Copy its content into your next reply.

STEP 03
Please download the Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit

• Double-click to run it. When the tool opens, click Yes to disclaimer.
• Press the Scan button.
• It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
• The first time the tool is run, it also makes another log (Addition.txt). If you've, run the tool before you need to place a check mark here.
• Please attach the Additions.txt log to your reply as well.

 

Thanks

Ron

 

[Hatsuhime]

Hi Ron,

Thank you for your reply. I have done as you asked. Please find attached the log from the requested logs. You may notice that the adaware log is missing... That's because I rebooted before he generated the log but he did find a couple of issues. Why did I do that? Because MalwareBytes kept doing the same the same thing (the restarting) after a fresh install. So I interrupted the AdAware Scan to reboot the pc to try and sort it out. It did. MalwareBytes was able to run properly but AdAware found no traces of the aforementioned issues.

--EDIT--

I was able to find the scan log and attached it.

Thank you

mb-clean-results.txt

MB Report.txt

FRST.txt

Addition.txt

AdwCleaner[S0].txt

Edited November 18, 2017 by Hatsuhime
Log added

[AdvancedSetup]

Please uninstall your old version of Java.   Java 8 Update 101

If you really need Java (most users do not) then please make sure it's kept up to date at all times. https://java.com

So are there any other issues or problems with Chrome still?

Thanks

Ron

 

[Hatsuhime]

Uninstalling it as we speak. It's one of those things that I know I needed at some point but cannot for the life of me remember the why... If need be, I'll just install it again. As for remaining problems, it seems to be sorted out now.

Thank you so much for your help.

[AdvancedSetup]

Great, glad your system is back to normal. I'll go ahead then and close your topic.

Take care and stay safe out there

Ron

 

[AdvancedSetup]

Glad we could help. :)If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks!