I'm infected

[Sodagrape]

Hi there so i've recently noticed that my pc performance isn't at it's peak recently, I've done a few scans and i've came across that my computer is infected by a few trojans and i've spent the last couple of days trying to remove them, however they keep returning after I restart my computer. here are two of my scan reports.

If it's not too much of ask, i'd appreciate any help that you can give

[kevinf80]

Hello Sodagrape and welcome to Malwarebytes, Follow the instructions at this link and post the requested logs: https://forums.malwarebytes.com/topic/9573-im-infected-what-do-i-do-now/ Thank you, Kevin

[Sodagrape]

Here are my reports after doing as followed in your Malware removal guide.

Softwares I use ~ Malwarebytes, Roguekiller, HitmanPro,

Malwarebytes has been helpful but after removing them, they keep returning after a system restart.

Any help would be highly appreciated.

Addition.txt

FRST.txt

[kevinf80]

Why do you have these running from hosts file, that is crack set up to cheat Malwarebytes licence.....

0.0.0.0 serius.mwbsys.com
0.0.0.0 keystone.mwbsys.com

[Sodagrape]

I'm sorry I feel terrible, I asked my son to install it for me, I'd of never known.

 

[kevinf80]

I do not see any malware in FRST logs, can you post last couple of Malwarebytes logs..

Open Malwarebytes, select > Reports > then checkmark (tick) most recent "Scan Report" entry > then select "View Report" > "Export" > Text File (*.txt) name and save that file to Desktop or somewhere of your choice, attach to your reply... do that for last two reports..

 

[Sodagrape]

Here are the results for the two most recent scan reports. I've just added another report as the third scan has picked more up.

scan 1.txt

scan 2.txt

scan 3.txt

Edited December 29, 2017 by Sodagrape

[kevinf80]

Thanks for those logs, run MBAR from the following link:

On completion two logs will be created in the MBAR folder

mbar-log.txt and system-log.txt

Attach those to your next reply.......

I will be offline for maybe 2 to 3 hours, will catch up later....

Thank you,

Kevin....

 

 

[Sodagrape]

Here are the logs you requested. And thanks for your help so far Kevin, I appreciate all you've done so far

mbar-log-2017-12-29 (17-38-16).txt

system-log.txt

[kevinf80]

Thanks for those logs, continue as follows:

Open Malwarebytes Anti-Malware.

• On the Settings tab > Protection Scroll to and make sure the following are selected: Scroll to and make sure the following are selected:

  Scan for Rootkits
  Scan within Archives

• Scroll further to Potential Threat Protection make sure the following are set as follows:

  Potentially Unwanted Programs (PUP`s)         set as :- Always detect PUP`s (recommended)
  Potentially Unwanted Modifications (PUM`s)  set as :- Alwaysdetect PUM`s (recommended)

• Click on the Scan make sure Threat Scan is selected,
  

• A Threat Scan will begin.
  

• When the scan is complete if anything is found make sure that the first checkbox at the top is checked (that will automatically check all detected items), then click on the Quarantine Selected Tab
  

• If asked to restart your computer to complete the removal, please do so
  

• When complete click on Export Summary after deletion (bottom-left corner) and select Copy to Clipboard.
  

• Wait for the prompt to restart the computer to appear, then click on Yes.
  

• After the restart once you are back at your desktop, open MBAM once more to retrieve the log.
  

To get the log from Malwarebytes do the following:

• Click on the Reports tab > from main interface.
• Double click on the Scan log which shows the Date and time of the scan just performed.
• Click Export > From export you have two options: > From export you have two options:

    Copy to Clipboard - if seleted right click to your reply and select "Paste" log will be pasted to your reply
    Text file (*.txt)        - if selected you will have to name the file and save to a place of choice, recommend "Desktop" then attach to reply
   

• Use "Copy to Clipboard, then Right click to your reply > select "Paste" that will copy the log to your reply…
  

Next,

Download RogueKiller and save it on your desktop, ensure to download correct version from either of the following links:..

http://download.adlice.com/api?action=download&app=roguekiller&type=x86

http://download.adlice.com/api?action=download&app=roguekiller&type=x64

• Exit all running applications.
• Double-click on RogueKiller.exe to launch the tool. On its first execution, RogueKiller will disply the software license (EULA), click on "Accept" to continue.
• If RogueKiller is unable to load,  do not hesitate to try launching it several times or rename it winlogon.
• Click "Start Scan" to begin the analysis. This may take some time.
• Once the scan is complete, click the "Open TXT" button to display the scan report.
• Copy/Paste it's content in your next reply.
  

Do not use the Remove Selected option until i`ve had a look at the log..

Post those logs to your reply...

 

[kevinf80]

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.

Thanks