Jump to content

Virus stole administrator


Recommended Posts

Please help heres is the log text and some images to illustrate my struggle.

I have scanned with malwarebytes, AVG, avast and microsoft security tools, Also tried Grem antirootkit tool and nothing came up for any except malwarebytes found 4 threats which i quarantined and deleted. But I have still had issues, Such is really laggy browser on chrome which is usually super fast  even after reinstalling it. Also had Lag in general across the board. I have tried looking for more software but its difficult to access any page to download antivirus software as it lags to much. And in one case bleeping computer website was closed and replaced with some virus site accompanied with a high pitch beep sound from the virus page not a great experience. 

In the log file, I found something that had attention next to it about microsoft security I am afraid that it has stolen my admin priviledges and hijacked microsoft security to still exist on my laptop. 

It is vital I remove this virus asap as I use this laptop for my university studies. Any help is much appreciated thanks! :) 

 

other security thingy.PNG

Security thingy.PNG

Addition.txt

FRST.txt

Link to post
Share on other sites

Just thought I would add, in processes task manager when I switch on google chrome it is sooooo laggy, but then I noticed its using 100% of my computers cpu... internet explorer only using 2.6% so im wondering if its a key logger, or cryptocurrency miner attatched to chrome? Even though i have uninstalled and reinstalled which I will do again to make sure. When I click to see what google chrome is running it says google chrome (9) and its running 9 cases of google chrome but only showing one tab and window of google chrome... super strange 

Link to post
Share on other sites

Okay so I ran malwarebytes it found nothing, then ran malwarebytes adware remover tool thing and it found 6 threats removed them and made me restart laptop. Then it found two more and restarted. Then found nothing then reset chrome and reinstalled. Then all the adware returned throttling my cpu to 100% usage. Then downloaded hitman pro sophos free trial it found 6 pups, 2 malware, 3 something else and removed that then reset pc and uninstalled itself no idea if it was an intended uninstall of hitman pro. Then i tried malware bytes again which found nothing, then downloaded zamana thing and it wouldnt allow me to install it. But all of this to no avail, no improvement so far still cant use my browsers. Do I just reboot my laptop? Really need it for important study soon.

Link to post
Share on other sites

  • Root Admin

Hello @TheVirusWon and :welcome:

Please follow the directions from the topic below and let me know if that helps or not.

You also have what appears to be left over or corrupted installation of AVG please download and run the following removal tool.

https://www.avg.com/en-us/avg-remover

 

Thanks, Ron

 

Link to post
Share on other sites

  • Root Admin

Let's get another scan and set of NEW logs please.

 

Please run the following steps and post back the logs as an attachment when ready.

STEP 01

  • If you're already running Malwarebytes 3 then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button.
  • If you don't have Malwarebytes 3 installed yet please download it from here and install it.
  • Once installed then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button.
  • Once the scan is completed click on the Export Summary button and save the file as a Text file to your desktop or other location you can find, and attach that log on your next reply.
  • If Malwarebytes won't run then please skip to the next step and let me know on your next reply.

STEP 02

Please download AdwCleaner by Malwarebytes and save the file to your Desktop.

  • Right-click on the program and select RunAsAdmin.jpg Run as Administrator to start the tool.
  • Accept the Terms of use.
  • Wait until the database is updated.
  • Click Scan Now.
  • When finished, please click Clean & Repair.
  • Your PC should reboot now if any items were found.
  • After reboot, a log file will be opened. Copy its content into your next reply.

 

RESTART THE COMPUTER Before running Step 3

STEP 03
Please download the Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit

  • Double-click to run it. When the tool opens, click Yes to disclaimer.
  • Press the Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
  • The first time the tool is run, it also makes another log (Addition.txt). If you've, run the tool before you need to place a check mark here.
  • Please attach the Additions.txt log to your reply as well.

 

Thanks

Ron

 

Link to post
Share on other sites

  • Root Admin

The logs seem to indicate you may have some leftover files and/or services from old antivirus products no longer installed. Please download and run the following uninstall utilities and reboot.

Let me know if that helps improve the issue.

https://www.avast.com/uninstall-utility

https://www.avg.com/en-us/avg-remover

 

Link to post
Share on other sites

  • Root Admin

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Thanks

 

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.