Infected by a Trojan

[Akemi]

Hi, I am soliciting some help. A few months back I am fairly certain, I downloaded and installed an infected program. 

This Trojan would BSOD me as soon as I logged in to Windows and landed on my Desktop. 

I tried running my AV, MSE (I am running Win 7 Ultimate Edition on this PC) which I could run in safe mode with networking.

It removed BrowserModifier: Win32/Maibeeser

SoftwareBundler: Win32/Prepscram

and Trojan:Win32/Detrahere

I am unable to update MSE. When I try to install Malwarebytes it says the requested resource is in use. It gives me a similar message when I try to update MSE. From my brief look at the forums it seems that I might have a "can't install Trojan" ?

Could I possibly get a hand with this? It is much appreciated.

 

Akemi

[kevinf80]

Hello Akemi and welcome to Malwarebytes, Follow the instructions at this link and post the requested logs: https://forums.malwarebytes.com/topic/9573-im-infected-what-do-i-do-now/ Thank you, Kevin

[Akemi]

Hi Kevin,

Thank you for your response. I have recently discovered that I do have Malwarebytes installed (an older version) but I am unable to run it. It gives me the same error as when trying to install it: "Resource is in use" or something along those lines. As requested I have attached those logs.

Many Thanks,

Akemi

FRST.txt

Addition.txt

[kevinf80]

Do you have access to another PC, also a USB Flash drive 4GB or above.. For now do the following:

Open FRST, copy/paste the following inside the text area of FRST. Once done, click on the Fix button. A file called fixlog.txt should appear on your desktop. Attach it in your next reply. Start:: CMD: bcdedit.exe /set {bootmgr} displaybootmenu yes CMD: bcdedit.exe /set {default} recoveryenabled yes CMD: fltmc instances CMD: dir /a:-d /o:d C:\windows\system32\drivers End::

Thaks,

Kevin

[Akemi]

Hi Kevin,

Sorry for the delay in response. A windstorm hit our area. I have access to another PC and a roomy USB drive. I have attached the Fixlog as requested.

Regards,

 

Akemi

Fixlog.txt

[kevinf80]

Thanks for the log Akemi, continue with the following:

Plug USB Flash Drive into spare PC, navigate to that drive and Right click on it directly, select > Format. The quick option is adequate. When the format completes download Farbar Recovery Scan Tool from here: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/ save it to a USB flash drive. Ensure to get the correct version for your system, 32 bit or 64 bit. Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version. Do NOT plug the Flash drive into the sick PC untill booted to the Recovery Environment If you are using Vista or Windows 7 enter System Recovery Options as follows. Enter System Recovery Options I give two methods, use whichever is convenient for you. To enter System Recovery Options from the Advanced Boot Options: Restart the computer. As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears. Use the arrow keys to select the Repair your computer menu item. Select Your Country as the keyboard language settings, and then click Next. Select the operating system you want to repair, and then click Next. Select your user account an click Next. To enter System Recovery Options by using Windows installation disc: Insert the installation disc. Restart your computer. If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings. Click Repair your computer. Select Your Country as the keyboard language settings, and then click Next. Select the operating system you want to repair, and then click Next. Select your user account and click Next. On the System Recovery Options menu you may get the following options: Startup Repair System Restore Windows Complete PC Restore Windows Memory Diagnostic Tool Command Prompt   Select Command Prompt In the command window type in notepad and press Enter. The notepad opens. Under File menu select Open. Select "Computer" and find your flash drive letter and close the notepad. In the command window type E:\frst64 or E:\frst depending on your version. Press Enter Note: Replace letter E with the drive letter of your flash drive. The tool will start to run. When the tool opens click Yes to disclaimer. Press Scan button. It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply. Next, Boot back to Normal Windows, now run Malwarebytes as follows: Open Malwarebytes Anti-Malware.   On the Settings tab > Protection Scroll to and make sure the following are selected: Scan for Rootkits Scan within Archives   Scroll further to Potential Threat Protection make sure the following are set as follows: Potentially Unwanted Programs (PUP`s) set as :- Always detect PUP`s (recommended) Potentially Unwanted Modifications (PUM`s) set as :- Alwaysdetect PUM`s (recommended)   Click on the Scan make sure Threat Scan is selected, A Threat Scan will begin. When the scan is complete if anything is found make sure that the first checkbox at the top is checked (that will automatically check all detected items), then click on the Quarantine Selected Tab If asked to restart your computer to complete the removal, please do so When complete click on Export Summary after deletion (bottom-left corner) and select Copy to Clipboard. Wait for the prompt to restart the computer to appear, then click on Yes. After the restart once you are back at your desktop, open MBAM once more to retrieve the log. To get the log from Malwarebytes do the following:   Click on the Reports tab > from main interface. Double click on the Scan log which shows the Date and time of the scan just performed. Click Export > From export you have two options: Copy to Clipboard - if seleted right click to your reply and select "Paste" log will be pasted to your reply Text file (*.txt) - if selected you will have to name the file and save to a place of choice, recommend "Desktop" then attach to reply   Use "Copy to Clipboard, then Right click to your reply > select "Paste" that will copy the log to your reply… Let me see those two logs in your reply.. Thank you, Kevin.

[kevinf80]

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.

Thanks