Jump to content

Something's fishy around here...

msbhvn-1

By msbhvn-1
in Resolved Malware Removal Logs

 Share

Recommended Posts

msbhvn-1

msbhvn-1

Posted
Posted

Total newbie here and honestly overwhelmed with this new computer and home network...

Brand new Lenovo T480 came with 10 home, wanted to upgrade to 10 pro which I had already purchased on a different machine that is no more

Get in touch with Microsoft and they finally agree to do it for me without charging me the upgrade fee again.  After a second the guy comes back and says that they are not able to upgrade the current 10 home on the laptop that they will have to do another install to get 10 pro ... I said fine because this was going on 5 hours with them online ...after they were done and I rebooted everything was gone, all the Lenovo stuff, apps everything (I should rejoice I know) but I wanted exactly the way I purchased it. So I overlooked it... but here comes all the problems.

I can't simple things done on here and I'm afraid to put it in my network because it looks to me as if there is some kind of clone or spyware or something just doesn't feel right....

I am new to posting on here but please don't treat me like a 5 year old nor some idiot paranoid like my neighbor Twitch... Thanks for your help!

 

FRST.txt

Addition.txt

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Hello @msbhvn-1 and :welcome:

I don't see any obvious infection, but best we use some other scanners to try and make sure. I do see that Malwarebytes as well as some other applications are crashing though. Doing a clean removal and reinstall of Malwarebytes should fix our program.

Please do the following. It's later for me so I'm heading out, but will check back on you again in the morning.

 

Please do the following to get a clean installation of Malwarebytes.

 

Please download the Malwarebytes Support Tool and use it to do a Clean Removal and reinstall of Malwarebytes

  • Download Malwarebytes Support Tool
  • Once the file is downloaded, open your Downloads folder/location of the downloaded file
  • Double-click mb-support-X.X.X.XXXX.exe to run the program
    • You may be prompted by the User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
  • Place a check-mark next to Accept License Agreement and click Next
  • You will be presented with a page stating, "Welcome to the Malwarebytes Support Tool!"
  • Click the Advanced Options link - do not click Get Started

    mbst-welcome.jpg.2300dd6068ae92db1bdc8f0
     
  • Click the CLEAN button

    mbst-clean.jpg.f6ef4b074d793ab7a1028ff08|
     
  • A progress bar will appear and the program will proceed to remove Malwarebytes from your computer
  • Upon completion, click OK
  • Follow the onscreen prompts to reboot and reinstall Malwarebytes

 

Then, let's go ahead and have you run the following scans and post back all new logs.

 

Please run the following steps and post back the logs as an attachment when ready.

STEP 01

  • If you're already running Malwarebytes 3 then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button.
  • If you don't have Malwarebytes 3 installed yet please download it from here and install it.
  • Once installed then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button.
  • Once the scan is completed click on the Export Summary button and save the file as a Text file to your desktop or other location you can find, and attach that log on your next reply.
  • If Malwarebytes won't run then please skip to the next step and let me know on your next reply.

STEP 02

Please download AdwCleaner by Malwarebytes and save the file to your Desktop.

  • Right-click on the program and select RunAsAdmin.jpg Run as Administrator to start the tool.
  • Accept the Terms of use.
  • Wait until the database is updated.
  • Click Scan.
  • When finished, please click Clean.
  • Your PC should reboot now if any items were found.
  • After reboot, a log file will be opened. Copy its content into your next reply.

 

RESTART THE COMPUTER Before running Step 3

STEP 03
Please download the Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit

  • Double-click to run it. When the tool opens, click Yes to disclaimer.
  • Press the Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
  • The first time the tool is run, it also makes another log (Addition.txt). If you've, run the tool before you need to place a check mark here.
  • Please attach the Additions.txt log to your reply as well.

 

Thanks

Ron

 

Link to post
Share on other sites
msbhvn-1

msbhvn-1

Posted
  • Author
Posted

Nothing found there at all :)  Thank you for your help on this computer.  Now I have another one that I can't figure it out at all, I've been thinking about just trashing it cause it's old and everything but if I could use it just to run Blue Iris or something like that it might be worth it.  Would you mind taking a gander at the reports on it?  It's constantly coming back with PUPs and seems to crash an awful lot ... if not let me know if I should start a new thread.  Thanks again Ron!

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Sure, no problem. Same thing,

 

 

Please run the following steps and post back the logs as an attachment when ready.

STEP 01

  • If you're already running Malwarebytes 3 then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button.
  • If you don't have Malwarebytes 3 installed yet please download it from here and install it.
  • Once installed then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button.
  • Once the scan is completed click on the Export Summary button and save the file as a Text file to your desktop or other location you can find, and attach that log on your next reply.
  • If Malwarebytes won't run then please skip to the next step and let me know on your next reply.

STEP 02

Please download AdwCleaner by Malwarebytes and save the file to your Desktop.

  • Right-click on the program and select RunAsAdmin.jpg Run as Administrator to start the tool.
  • Accept the Terms of use.
  • Wait until the database is updated.
  • Click Scan Now.
  • When finished, please click Clean & Repair.
  • Your PC should reboot now if any items were found.
  • After reboot, a log file will be opened. Copy its content into your next reply.

 

RESTART THE COMPUTER Before running Step 3

STEP 03
Please download the Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit

  • Double-click to run it. When the tool opens, click Yes to disclaimer.
  • Press the Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
  • The first time the tool is run, it also makes another log (Addition.txt). If you've, run the tool before you need to place a check mark here.
  • Please attach the Additions.txt log to your reply as well.

 

Thanks

Ron

 

Link to post
Share on other sites
msbhvn-1

msbhvn-1

Posted
  • Author
Posted

Sorry it took me forever, went out of town briefly and didn't have access to this machine ... here ya go.  I think someone has had remote access to it and not by conventional means, see what you think.  And Dropbox, it needs to be punted into outer space, I have dropped them after 5 years of continuing service after I found a link inside Dropbox to a website in Mexico that was totally bogus, they couldn't explain how or why it got there nor could the reassure me that it wouldn't happen again.  Thanks again!

FRST.txt

Addition.txt

reinstalledscan.txt

AdwCleaner[C01].txt

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Please run the following fix. Once that's done, go into Control Panel, Programs, Add/Remove and uninstall Dropbox

There are missing operating system files so I've told the system to run a check and repair. It will take a while to run please don't stop it from running.

 

Please download the attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST or FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system.

Run FRST or FRST64 and press the Fix button just once and wait.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach or post it to your next reply.

Note: If the tool warned you about an outdated version please download and run the updated version.

fixlist.txt

Thanks, Ron

 

Link to post
Share on other sites
msbhvn-1

msbhvn-1

Posted
  • Author
Posted

I ran the fixlist twice because I had to leave in the middle of the first run and didn't know if everything was completed.  I only have the fixlog from running it the second time because I guess it overwrote the first one.  Tell me how bad I messed it up and what to do to fix it this time lol Thanks again for all your help!

Fixlog.txt

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

All good. Let's go ahead though and have you re-run the 3 steps again please. Don't forget the reboot in the middle.

 

Please run the following steps and post back the logs as an attachment when ready.

STEP 01

  • If you're already running Malwarebytes 3 then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button.
  • If you don't have Malwarebytes 3 installed yet please download it from here and install it.
  • Once installed then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button.
  • Once the scan is completed click on the Export Summary button and save the file as a Text file to your desktop or other location you can find, and attach that log on your next reply.
  • If Malwarebytes won't run then please skip to the next step and let me know on your next reply.

STEP 02

Please download AdwCleaner by Malwarebytes and save the file to your Desktop.

  • Right-click on the program and select RunAsAdmin.jpg Run as Administrator to start the tool.
  • Accept the Terms of use.
  • Wait until the database is updated.
  • Click Scan Now.
  • When finished, please click Clean & Repair.
  • Your PC should reboot now if any items were found.
  • After reboot, a log file will be opened. Copy its content into your next reply.

 

RESTART THE COMPUTER Before running Step 3

STEP 03
Please download the Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit

  • Double-click to run it. When the tool opens, click Yes to disclaimer.
  • Press the Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
  • The first time the tool is run, it also makes another log (Addition.txt). If you've, run the tool before you need to place a check mark here.
  • Please attach the Additions.txt log to your reply as well.

 

Thanks

Ron

 

Link to post
Share on other sites
  • 4 weeks later...
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.

Thanks

 

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.