Windows 7 Trojan keeps coming back

[Ohadgol]

Malwarebytes deletes it but it always comes back somehow , ive ran couple of scans through multiple clients but it hasnt been removed , it keeps coming back

[Ohadgol]

Addition.txt

FRST.txt

threat scan results.txt

 

this keeps popping up nonstop every like 10 minutes if that helps somehow

[LDTate]

Hello  and

Please take your time.

 NOTE: The tools and the information obtained is safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

Download Malwarebytes Support Tool
https://downloads.malwarebytes.com/file/mbst?src=Forums-Reply

    Once the file is downloaded, open your Downloads folder/location of the downloaded file
    Double-click mb-support-X.X.X.XXXX.exe to run the program
        You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
    Place a checkmark next to Accept License Agreement and click Next
    You will be presented with a page stating, "Get Started!"
    Click the Advanced tab

Click the Gather Logs button

A progress bar will appear and the program will proceed with getting logs from your computer

Upon completion, a file named mbst-grab-results.zip will be saved to your Desktop. Click OK

Please attach the file in your next reply.

[Ohadgol]

I want to tell u i found this and if its possible to overcome this this is part of what game me trojan i believe.

[LDTate]

If all your files like pictures, word docs, etc aren't encrypted, that is a scareware email.

[LDTate]

Please run that tool I suggested and I'll see what I can do

[Ohadgol]

Here you go 

mbst-grab-results.zip

[LDTate]

I have attached A file I need you to download and save it to the same place that you saved the FRST program

Download attached **fixlist.txt** and save it to same location where the FRST tool is located.

NOTE: Both FRST.exe and the fixlist.txt must be in the same location or the fix will not work.
Close all browsers before running.

Double click FRST to run the tool. If the tool warns you the version is outdated, please download and run the updated version.
 •Click the **Fix Button**.
 
•If you receive a message that a reboot is required, please make sure you allow it to restart normally.

•The tool will complete its run after restart.

When finished, the tool will make a log (Fixlog.txt) in the same location from where it was run. Please attach the Fixlog.txt in your reply.

Restart the pc and let me know how it's running now.

fixlist.txt

[Ohadgol]

Computer is still the same , i have no admin permissions and now after the fixlog ive lost the ability to look at picture that are saved on my computer

giving you this information might help somehow in someway

Fixlog.txt

[Ohadgol]

says COM isnt responding and then crashes the picture , wont let me view picture tells me i have no permission.

[Ohadgol]

Seems like i also cant download stuff , no permission to download some stuff , and to view pictures.

[Ohadgol]

even games are crashing now after fixlog cant do anything right now..

hope u can help me

 

[LDTate]

Looks like you did get infected with an **Ransomware**

That's what those **Ransomware** do.

We can try this

 

1. Use the System File Checker tool (SFC.exe) to determine which file is causing the issue, and then replace the file. To do this, follow these steps:
Open an elevated command prompt. To do this, click Start, click All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator. If you are prompted for an administrator password or for a confirmation, type the password, or click Allow.

2. Type the following command, and then press ENTER:
sfc /scannow  <--Note the space, it needs to be there

The sfc /scannow command scans all protected system files and replaces incorrect versions with correct Microsoft versions.

 

 

 

[Ohadgol]

I did that already earlier today it found some files but it wont find anymore , but i still have no admin access to view/download stuff.

[Ohadgol]

if i did it right like u told me so  SFC.exe wont open i can only follow step 2

[LDTate]

Lets create a new user with administrator rights.
Be sure to use a password you won't forget

To create an administrator account for a Windows 8, 7, or Vista computer.

1.In Windows 8, from the desktop, press Win-c to open the Charms Menu. Click Settings, and then select Control Panel.
In Windows 7 or Vista, from the Start menu, select Control Panel.

2.Double-click User Accounts, and then click Manage User Accounts.

3.Click Create new account. Enter a name for the account, and then click Next.

4.Click Computer administrator, and then click Create Account.

Login as the new user and see if you can access everything
 

[Ohadgol]

Tried to login as the new user but when i do that 

Screen goes blue nothing comes up no program no client only thing im able to do is 

ctrl + alt + delete to change user back

what to do in this situation

[Ohadgol]

When i logged in it said , windows stopped working and than a tiny window titled windows crashed and screen kept staying blue so i changed user back with ctrl alt delete which is the only thing im able to do in that user.

[LDTate]

At this point, I would backup / save everything possible and re-install Windows.

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Thanks