Unable to Remove Trojan.Multi.Goppel.Gen

[Elephant909]

Hi,

My computer has been infected with the Trojan.Multi.Goppel.Gen virus for a few months. My Kaspersky Anti-Virus has been unable to delete or "disinfect" it and everytime that I think that it has successfully disinfected it ends up reappearing after a restart. One of the issues it has been causing is that it prevents Windows Monthly Security Updates from being able to update. It is also creating bad drivers in the System32/drivers folder. However, recently I have upgraded to Windows 10 from Windows 8 and I have to wait and see if that is still a problem. It is also causing the internet to always disconnect after around 10 minutes of using it, and everytime I am having to restart the computer to make the internet work again. Still the issue manages to return within 10 minutes. Something that is interesting however is that the tabs that are already open at a specific website are able to continue to be used (for a while) and the internet works properly for those tabs, but new tabs don't work.

I have tried to troubleshoot the internet issues and I keep getting certain messages:

Windows cannot automatically detect proxy (I have checked all settings but it still doesn't fix)

Invalid IP Address

Need to Reset Wifi Adapter

In order to fix these I have tried winsock reset, resetting internet settings, checking my antivirus, but nothing has helped. I do remember editing either a DNS or IP address once accidentally so maybe that is an underlying issue, but now it all been changed to automatic so I am not sure. I have read the other threads on this forum about this virus and I have ran various programs according to the forum instructions. I have done the USB boot and the FRST64.exe program as I saw in a different post and I have tried to clean the computer with various programs.

Please help and Thank You in Advance

My logs are attached below

 

Addition.txt

AdwCleaner.txt

FRST.txt

Malwarebytes Scan.txt

mrt.log

RoguekillerScan.txt

RoguekillerDeletion Log.txt

[AdvancedSetup]

 Hello @Elephant909 and

Please uninstall the following software from Control Panel\Programs\Programs and Features

Driver  Easy
Java SE Development Kit 8 Update 131 (unless you're actively programming in Java with this version)
TunnelBear
 

Then run the following fix. Make sure that Kaspersky Antivirus is temporarily disabled while running this fix.

 

Please download the attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST or FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system.

Run FRST or FRST64 and press the Fix button just once and wait.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach or post it to your next reply.

Note: If the tool warned you about an outdated version please download and run the updated version.

fixlist.txt

 

Thanks

Ron

 

 

 

[Elephant909]

Hello Ron,

I accidentally ran the fix without disabling Kaspersky. Would you like me to run it again after disabling it? Sorry!

 

Fixlog.txt

[AdvancedSetup]

No, it looks like it ran okay.

What program is reporting this? Trojan.Multi.Goppel.Gen

Is it still reporting it?

 

 

[Elephant909]

Hi Ron,

Kaspersky is not reporting that trojan.multi.goppel.gen anymore, so Thank You so much!

My internet is not disconnecting anymore, but still the internet troubleshooter says that it cannot automatically detect the proxy settings (I don't use proxies). To fix this went to the proxy settings and there was a setting called "automatically detect proxy settings" and it was on. Interestingly when I turned it off, the message in the troubleshooter stopped appearing. Do you think that it is properly fixed or should I go to the registry editor and delete "ProxySettingsPerUser" from HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings because I read that it fixed the problem for many.

Still I'm sure for now I think that the problems are fixed! Thank you so much for helping me get rid of this virus and fixing my internet problems!

[AdvancedSetup]

Yes, disabling the auto proxy check should be just fine.

Unless there is something else you should be okay now.

 

[Elephant909]

Ok the issues are all gone! Thank you so much and have a great weekend!!

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread.

Thanks