Siddharthk Posted December 16, 2017 ID:1192005 Share Posted December 16, 2017 hi! guys, I recently upgraded my pc from windows 7 to windows 8.1 and I found that some malware also installed along with windows 8.1 Here are the logs Please help me Regards, Siddharth Kumar Addition.txt FRST.txt mwb.txt rkiller.txt Link to post Share on other sites More sharing options...
Siddharthk Posted December 16, 2017 Author ID:1192025 Share Posted December 16, 2017 Sorry. When I try to install win8.1 updates it was stucked and my PC is corrupted and I have to install win8.1 again. I will come after setup. Link to post Share on other sites More sharing options...
Siddharthk Posted December 16, 2017 Author ID:1192027 Share Posted December 16, 2017 Here are the logs after fresh installation of windows 8.1 Addition.txt FRST.txt Link to post Share on other sites More sharing options...
Siddharthk Posted December 17, 2017 Author ID:1192157 Share Posted December 17, 2017 Can somebody help me? Link to post Share on other sites More sharing options...
Aura Posted December 17, 2017 ID:1192162 Share Posted December 17, 2017 Hi Siddharthk My name is Aura and I'll be assisting you with your malware issue. Since we'll be working together, you can call me Aura or Yoan, which is my real name, it's up to you! Now that we've broke the ice, I'll just ask you a few things during the time we'll be working together to clean your system and get it back to an operational state. As you'll notice, the logs we are asking for here are quite lenghty, so it's normal for me to not reply exactly after you post them. This is because I need some time to analyse them and then act accordingly. However, I'll always reply within 24 hours, 48 hours at most if something unexpected happens As long as I'm assisting you on Malwarebytes Forums, in this thread, I'll ask you to not seek assistance anywhere else for any issue related to the system we are working on. If you have an issue, question, etc. about your computer, please ask it in this thread and I'll assist you The same principle applies to any modifications you make to your system, I would like you to ask me before you do any manipulations that aren't in the instructions I posted. This is to ensure that we are operating in sync and I know exactly what's happening on your system If you aren't sure about an instruction I'm giving you, ask me about it. This is to ensure that the clean-up process goes without any issue. I'll answer you and even give you more precise instructions/explanations if you need. There's no shame in asking questions here, better be safe than sorry! If you don't reply to your thread within 3 days, I'll bump this thread to let you know that I'm waiting for you. If you don't reply after 5 days, it'll be closed. If you return after that period, you can send me a PM to get it unlocked and we'll continue where we left off; Since malware can work quickly, we want to get rid of them as fast as we can, before they make unknown changes to the system. This being said, I would appreciate if you could reply to this thread within 24 hours of me posting. This way, we'll have a good clean-up rhythm and the chances of complications will be reduced I'm against any form of pirated, illegal and counterfeit software and material. So if you have any installed on your system, I'll ask you to uninstall them right now. You don't have to tell me if you indeed had some or not, I'll give you the benefit of the doubt. Plus, this would be against Malwarebytes Forums's rules In the end, you are the one asking for assistance here. So if you wish to go a different way during the clean-up, like format and reinstall Windows, you are free to do so. I would appreciate you to let me know about it first, and if you need, I can also assist you in the process I would appreciate if you were to stay with me until the end, which means, until I declare your system clean. Just because your system isn't behaving weirdly anymore, or is running better than before, it doesn't mean that the infection is completely goneThis being said, I have a full time job so sometimes it'll take longer for me to reply to you. Don't worry, you'll be my first priority as soon as I get home and have time to look at your thread This being said, it's time to clean-up some malware, so let's get started, shall we? Please give me a few to review your logs. Link to post Share on other sites More sharing options...
Aura Posted December 17, 2017 ID:1192163 Share Posted December 17, 2017 The latest FRST logs you provided are clean and show indeed that this is a fresh Windows 8.1 installation. The only unusual things I see are an illegal Windows activator (KMSpico) and an IDM crack. Link to post Share on other sites More sharing options...
Siddharthk Posted December 17, 2017 Author ID:1192164 Share Posted December 17, 2017 so the removal of the applications would accept my operating system? Link to post Share on other sites More sharing options...
Aura Posted December 17, 2017 ID:1192167 Share Posted December 17, 2017 What do you mean by accept? Link to post Share on other sites More sharing options...
Siddharthk Posted December 17, 2017 Author ID:1192168 Share Posted December 17, 2017 (edited) sorry i mean affect Edited December 17, 2017 by Siddharthk Link to post Share on other sites More sharing options...
Aura Posted December 17, 2017 ID:1192172 Share Posted December 17, 2017 From what I can see, they don't. Though obviously using such programs is illegal and a good way to get infected (because of the way you obtain them). Link to post Share on other sites More sharing options...
Siddharthk Posted December 17, 2017 Author ID:1192181 Share Posted December 17, 2017 Here are the logs you may/may not need. Adwcleaner is unable to remove the elements. mwb.txtAdwCleaner_Debug.logAdwCleaner[S7].txt Link to post Share on other sites More sharing options...
Aura Posted December 17, 2017 ID:1192269 Share Posted December 17, 2017 The AdwCleaner log is a scan one. Did you click on the "Clean" button after scanning with it? Link to post Share on other sites More sharing options...
Siddharthk Posted December 17, 2017 Author ID:1192278 Share Posted December 17, 2017 (edited) When I click clean button a popup appears saying that an error occurred. Terminating process. Edited December 17, 2017 by Siddharthk Link to post Share on other sites More sharing options...
Aura Posted December 17, 2017 ID:1192290 Share Posted December 17, 2017 This is a known issue with AdwCleaner 7.0.5 right now. I'll forward your AdwCleaner debug log to the dev and see what he can tell me about it. Link to post Share on other sites More sharing options...
Siddharthk Posted December 18, 2017 Author ID:1192565 Share Posted December 18, 2017 Update: When I install windows updates In win8.1 and restart the computer. It shows a black screen saying that: Error code : 0x00000100 Parameters 0x00000006 0x00000003 0x00000AC 0x00008E0 And after that when I restart my computer I shows a message like this. Any solutions please? I have another laptop having win8.1. Link to post Share on other sites More sharing options...
Aura Posted December 19, 2017 ID:1192724 Share Posted December 19, 2017 How did you upgrade from Windows 7 to Windows 8.1 exactly? Fresh install, or upgrade path? Link to post Share on other sites More sharing options...
Siddharthk Posted December 20, 2017 Author ID:1193141 Share Posted December 20, 2017 I downloaded the iso file from internet. Burnt it into usb. booted from it and installed it over windows 7. http://getintopc.com/softwares/operating-systems/windows-8-1-lite-edition-2017-free-download/ Link to post Share on other sites More sharing options...
Aura Posted December 20, 2017 ID:1193251 Share Posted December 20, 2017 This doesn't looks like a legitimate Windows 8.1 .iso, more like a custom one. So it could explain all your issues. If I were you, I would download the official Windows 8.1 .iso from Microsoft, and reinstall Windows 8.1 from scratch. https://www.microsoft.com/en-ca/software-download/windows8 Link to post Share on other sites More sharing options...
Siddharthk Posted December 22, 2017 Author ID:1193653 Share Posted December 22, 2017 ok. I will download the legitimate version. Link to post Share on other sites More sharing options...
Aura Posted December 22, 2017 ID:1193709 Share Posted December 22, 2017 Awesome Is there anything else malware-related I can assist you with, or that was it? Link to post Share on other sites More sharing options...
Siddharthk Posted December 24, 2017 Author ID:1194124 Share Posted December 24, 2017 not for now. Update : I installed the legitimate version but there is only one problem. when i click the power button on the screen it shows only two options i.e. shut down and restart. although there should be sleep button also. Link to post Share on other sites More sharing options...
Siddharthk Posted December 24, 2017 Author ID:1194185 Share Posted December 24, 2017 (edited) Hi! @Aura, another issue. after installing the legitimate version. I'm unable to use wifi. I tried the below options 1. installing the latest wi-fi drivet from dell 2. using windows repair all in one (by tweaking com) 3. uninstalling the network controller and installing the new driver. But didn't got any success. can you help me? Regards, Siddharth Kumar Addition.txt FRST.txt Edited December 24, 2017 by Siddharthk Link to post Share on other sites More sharing options...
Aura Posted December 24, 2017 ID:1194220 Share Posted December 24, 2017 Follow the instructions below. MiniToolBox Download MiniToolBox and move the file to your Desktop Right-click on MiniToolBox.exe and select Run as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users) Check the following options:List Installed Programs List Last 10 Event Viewer Errors List Devices - Only Problems List Users, Partitions and Memory size Once this is done, click on Go and wait for the scan to complete Once the scan is complete, a log will open. Please copy/paste the content of the output log in your next reply Link to post Share on other sites More sharing options...
Siddharthk Posted December 24, 2017 Author ID:1194235 Share Posted December 24, 2017 MTB.txt Link to post Share on other sites More sharing options...
Aura Posted December 24, 2017 ID:1194237 Share Posted December 24, 2017 You're missing quite a few drivers. Here they are, install them and once done, run MTB again and provide me a new log. https://downloads.dell.com/FOLDER02703641M/1/Network_Driver_FGJ3J_WN_10.0.0.299_A00.EXEhttps://downloads.dell.com/FOLDER02703605M/1/Chipset_Driver_NGRR8_WN_1.1.0.1064_A00.EXEhttps://downloads.dell.com/FOLDER02703654M/1/Chipset_Driver_T8Y0N_WN_9.4.4.1006_A00.EXEhttps://downloads.dell.com/FOLDER01691863M/1/Network_Driver_90M6T_WN_1.4.1_A00.EXEhttps://downloads.dell.com/FOLDER02703614M/1/SD-Card_Driver_N6V65_WN_6.3.9600.39060_A00.EXE Link to post Share on other sites More sharing options...
Recommended Posts