icg Posted January 7, 2018 ID:1197519 Share Posted January 7, 2018 I've ran malwarebytes 2 times now, each time the same trojan is found. I quarantine it and restart computer, then run malwarebytes again and its still there.\ In the middle of the third scan and its still there. Attached is the second scan log. Thanks~ FRST.txt Addition.txt Malwarebytes 2nd scan.txt Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted January 9, 2018 Root Admin ID:1198178 Share Posted January 9, 2018 Hello @icg and Please download the attached fixlist.txt file and save it to the Desktop.NOTE. It's important that both files, FRST or FRST64 and fixlist.txt are in the same location or the fix will not work. NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system. Run FRST or FRST64 and press the Fix button just once and wait. If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart. The tool will make a log on the Desktop (Fixlog.txt). Please attach or post it to your next reply. Note: If the tool warned you about an outdated version please download and run the updated version. fixlist.txt Thanks Ron Link to post Share on other sites More sharing options...
icg Posted January 9, 2018 Author ID:1198183 Share Posted January 9, 2018 Thanks for the welcome and thank you for your reply! attached is the file i am also currently running a scan on malwarebytes Fixlog.txt Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted January 9, 2018 Root Admin ID:1198186 Share Posted January 9, 2018 Sounds good. Once done please post back that log too. Cheers Ron Link to post Share on other sites More sharing options...
icg Posted January 9, 2018 Author ID:1198192 Share Posted January 9, 2018 Scan is done, gonna do a couple more because i am paranoid D: scan.txt Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted January 9, 2018 Root Admin ID:1198201 Share Posted January 9, 2018 (edited) Please run the following steps and post back the logs as an attachment when ready. Please download AdwCleaner by Malwarebytes and save the file to your Desktop. Right-click on the program and select Run as Administrator to start the tool. Accept the Terms of use. Wait until the database is updated. Click Scan. When finished, please click Clean. Your PC should reboot now if any items were found. After reboot, a log file will be opened. Copy its content into your next reply. Thanks Ron Edited January 9, 2018 by AdvancedSetup Link to post Share on other sites More sharing options...
icg Posted January 9, 2018 Author ID:1198204 Share Posted January 9, 2018 # AdwCleaner 7.0.6.0 - Logfile created on Tue Jan 09 07:10:15 2018 # Updated on 2017/21/12 by Malwarebytes # Database: 01-08-2018.1 # Running on Windows 10 Pro (X64) # Mode: scan # Support: https://www.malwarebytes.com/support ***** [ Services ] ***** No malicious services found. ***** [ Folders ] ***** PUP.Optional.Legacy, C:\Program Files (x86)\Bench ***** [ Files ] ***** No malicious files found. ***** [ DLL ] ***** No malicious DLLs found. ***** [ WMI ] ***** No malicious WMI found. ***** [ Shortcuts ] ***** No malicious shortcuts found. ***** [ Tasks ] ***** No malicious tasks found. ***** [ Registry ] ***** PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\dotomi.com PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Bench PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\MozillaPlugins\@pandonetworks.com\PandoWebPlugin PUP.Optional.InstantSavingsApp, [Value] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID | {6EB4A4C0-6036-4D2E-B010-20707C4B62E8} ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries. ***** [ Chromium (and derivatives) ] ***** PUP.Optional.Legacy, SearchProvider found: play-asia.com - play-asia.com /!\ Please Reset the Chrome Synchronization before cleaning the Chrome Preferences: https://support.google.com/chrome/answer/3097271 ************************* ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt ########## Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted January 9, 2018 Root Admin ID:1198209 Share Posted January 9, 2018 Please follow the cleanup from the link above in the log. https://support.google.com/chrome/answer/3097271 Then once done. Run AdwCleaner again please. Thanks Ron Link to post Share on other sites More sharing options...
icg Posted January 9, 2018 Author ID:1198210 Share Posted January 9, 2018 Im not exactly sure what im supposed to do there Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted January 9, 2018 Root Admin ID:1198211 Share Posted January 9, 2018 Make sure you disable your Chrome Sync settings. Then run the Chrome Cleanup Tool https://www.google.com/chrome/cleanup-tool/index.html Once that's done. Then run a new Threat Scan with Malwarebytes and AdwCleaner. Thanks Ron Link to post Share on other sites More sharing options...
icg Posted January 9, 2018 Author ID:1198213 Share Posted January 9, 2018 Nothing found by the cleanup tool AdwCleaner: # AdwCleaner 7.0.6.0 - Logfile created on Tue Jan 09 08:46:51 2018 # Updated on 2017/21/12 by Malwarebytes # Running on Windows 10 Pro (X64) # Mode: clean # Support: https://www.malwarebytes.com/support ***** [ Services ] ***** No malicious services deleted. ***** [ Folders ] ***** No malicious folders deleted. ***** [ Files ] ***** No malicious files deleted. ***** [ DLL ] ***** No malicious DLLs cleaned. ***** [ WMI ] ***** No malicious WMI cleaned. ***** [ Shortcuts ] ***** No malicious shortcuts cleaned. ***** [ Tasks ] ***** No malicious tasks deleted. ***** [ Registry ] ***** No malicious registry entries deleted. ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries deleted. ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries deleted. ************************* ::Tracing keys deleted ::Winsock settings cleared ::Additional Actions: 0 ************************* C:/AdwCleaner/AdwCleaner[C0].txt - [1444 B] - [2018/1/9 7:22:31] C:/AdwCleaner/AdwCleaner[S0].txt - [1500 B] - [2018/1/9 7:10:15] C:/AdwCleaner/AdwCleaner[S1].txt - [1076 B] - [2018/1/9 8:44:57] ########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt ########## scan 2.txt Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted January 9, 2018 Root Admin ID:1198214 Share Posted January 9, 2018 Great, both logs are now showing as clean. Are there any signs of an infection still? Link to post Share on other sites More sharing options...
icg Posted January 9, 2018 Author ID:1198215 Share Posted January 9, 2018 Everything looks good, ran another scan all clear i think its all fixed yay thank you so much for your help! Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted January 9, 2018 Root Admin ID:1198222 Share Posted January 9, 2018 You're quite welcome. Take care Ron Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted January 9, 2018 Root Admin ID:1198223 Share Posted January 9, 2018 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks Link to post Share on other sites More sharing options...
Recommended Posts