tdsaint Posted January 2, 2019 ID:1290162 Share Posted January 2, 2019 I've already done Zemana and Hitman Pro - but can't go past the "select language" screen on Malwarebytes setup. I get a Runtime Error (at 423:150): Could not call proc. - which is blocked and cleared by AVG. I did not know what to uninstall from control panel but nothing had "unknown" as the publisher. I also ran Spyhunter, but it says 48 hours of waiting until the trial is activated. Link to post Share on other sites More sharing options...
kevinf80 Posted January 2, 2019 ID:1290167 Share Posted January 2, 2019 Hello tdsaint and welcome to Malwarebytes, Run the following: Download Farbar Recovery Scan Tool and save it to your desktop. Alternative download option: http://www.techspot.com/downloads/6731-farbar-recovery-scan-tool.htmlNote: You need to run the version compatible with your system (32 bit or 64 bit). If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version. If your security alerts to FRST either, accept the alert or turn your security off to allow FRST to run. It is not malicious or infected in any way... Be aware FRST must be run from an account with Administrator status... Double-click to run it. When the tool opens click Yes to disclaimer.(Windows 8/10 users will be prompted about Windows SmartScreen protection - click More information and Run.) Make sure Addition.txt is checkmarked under "Optional scans" Press Scan button to run the tool.... It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply. The tool will also make a log named (Addition.txt) Please attach that log to your reply. Thank you, Kevin.. Link to post Share on other sites More sharing options...
tdsaint Posted January 2, 2019 Author ID:1290171 Share Posted January 2, 2019 Kevin, I got a message that there's no disk in the drive but the blue circle indicates something is trying to do something. The Farbar Recovery Scan Tool (x64) says Not Responding however. This was a computer I recently tried to bring online again after a year of being idle. AVG says I need to update, but the virus stops that too. I am not using the infected computer to communicate with you, but I can open the forum there if I need to get a more direct link. Thanks Dawn Link to post Share on other sites More sharing options...
kevinf80 Posted January 2, 2019 ID:1290172 Share Posted January 2, 2019 What version of windows is on the sick PC, do you have access to a USB flashdrive 4gb or above.. Link to post Share on other sites More sharing options...
tdsaint Posted January 2, 2019 Author ID:1290174 Share Posted January 2, 2019 Well, now it looks like it is scanning.... Link to post Share on other sites More sharing options...
tdsaint Posted January 2, 2019 Author ID:1290175 Share Posted January 2, 2019 OK - do you need the huge long thing that popped up in FRST Notepad? Link to post Share on other sites More sharing options...
kevinf80 Posted January 2, 2019 ID:1290176 Share Posted January 2, 2019 Is it FRST scanning..? Link to post Share on other sites More sharing options...
kevinf80 Posted January 2, 2019 ID:1290177 Share Posted January 2, 2019 You can attach the logs if you want Link to post Share on other sites More sharing options...
tdsaint Posted January 2, 2019 Author ID:1290178 Share Posted January 2, 2019 OK - this is the infected computer. By "attach" do you mean copy/paste from NOTEPAD? It opened 2 Notepads with data - FRST and Addition Link to post Share on other sites More sharing options...
kevinf80 Posted January 2, 2019 ID:1290180 Share Posted January 2, 2019 When you open a reply look to the bottom left corner, you can either drag and drop each file or use the "choose files" option. Those methods are used to attach each file. If you prefer you can copy paste each log to your reply... Link to post Share on other sites More sharing options...
tdsaint Posted January 2, 2019 Author ID:1290182 Share Posted January 2, 2019 OK - Saved the Notepad file - attached both below Addition.txt FRST.txt Link to post Share on other sites More sharing options...
kevinf80 Posted January 2, 2019 ID:1290184 Share Posted January 2, 2019 Thanks for those logs, I have to go out now; will catch up later... Link to post Share on other sites More sharing options...
tdsaint Posted January 2, 2019 Author ID:1290185 Share Posted January 2, 2019 Any idea what time I should check back? I'm Central time. Thanks Link to post Share on other sites More sharing options...
kevinf80 Posted January 2, 2019 ID:1290214 Share Posted January 2, 2019 Am back now, will check your logs very shortly. Regarding time, i`m in the UK so will be approx 6 hours ahead of you... Link to post Share on other sites More sharing options...
tdsaint Posted January 2, 2019 Author ID:1290220 Share Posted January 2, 2019 OK! Thanks! Link to post Share on other sites More sharing options...
kevinf80 Posted January 2, 2019 ID:1290230 Share Posted January 2, 2019 (edited) Thanks for those logs, continue: Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into. "Do not open that file when running FRST fix" NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work. Open FRST and press the Fix button just once and wait. The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply. Next, To begin, please do the following to perform a clean removal/reinstall of the application to make certain there aren't any corrupt remnants being left behind which may be causing this issue: Download and run the Malwarebytes Support Tool Accept the EULA and click Advanced tab on the left (not Start Repair) Click the Clean button, and allow it to restart your system and then reinstall Malwarebytes, either by allowing the tool to do so when it offers to on restart, or by downloading and installing the latest version from here If the installation is successful run as follows: Open Malwarebytes Anti-Malware. On the Settings tab > Protection Scroll to and make sure the following are selected:Scan for RootkitsScan within Archives Scroll further to Potential Threat Protection make sure the following are set as follows:Potentially Unwanted Programs (PUP`s) set as :- Always detect PUP`s (recommended)Potentially Unwanted Modifications (PUM`s) set as :- Alwaysdetect PUM`s (recommended) Click on the Scan make sure Threat Scan is selected, A Threat Scan will begin. When the scan is complete if anything is found make sure that the first checkbox at the top is checked (that will automatically check all detected items), then click on the Quarantine Selected Tab If asked to restart your computer to complete the removal, please do so When complete click on Export Summary after deletion (bottom-left corner) and select Copy to Clipboard. Wait for the prompt to restart the computer to appear, then click on Yes. After the restart once you are back at your desktop, open Malwarebytes once more to retrieve the log. To get the log from Malwarebytes do the following: Click on the Reports tab > from main interface. Double click on the Scan log which shows the Date and time of the scan just performed. Click Export > From export you have two options:Copy to Clipboard - if seleted right click to your reply and select "Paste" log will be pasted to your replyText file (*.txt) - if selected you will have to name the file and save to a place of choice, recommend "Desktop" then attach to reply Use "Copy to Clipboard, then Right click to your reply > select "Paste" that will copy the log to your reply… Thanks, Kevin fixlist.txt Edited January 2, 2019 by kevinf80 Link to post Share on other sites More sharing options...
tdsaint Posted January 2, 2019 Author ID:1290237 Share Posted January 2, 2019 Fixlist is saved in the same folder (as instructed), but where is the "Fix button" - Do I go to the Farbar Recovery Tool - search files for this one you specified and "fix" only it? Link to post Share on other sites More sharing options...
kevinf80 Posted January 2, 2019 ID:1290240 Share Posted January 2, 2019 Link to post Share on other sites More sharing options...
tdsaint Posted January 2, 2019 Author ID:1290243 Share Posted January 2, 2019 I put FRST in the search box because it wouldn't let me select the file. It's still searching..... Link to post Share on other sites More sharing options...
kevinf80 Posted January 2, 2019 ID:1290246 Share Posted January 2, 2019 (edited) The attached file fixlist.txt must be saved to the same folder as the tool FRST C:\Users\Family\Downloads. Do not open the file, leave it alone in the Downloads folder. Double click on FRST to open the tool, from the main interface select "Fix" FRST will run and save the log "fixlog.txt" Edited January 2, 2019 by kevinf80 typing error Link to post Share on other sites More sharing options...
tdsaint Posted January 2, 2019 Author ID:1290247 Share Posted January 2, 2019 I got a notepad doc after it searched - I saved it to send to you and left FRST in the search box and clicked "Fix" - it closed Firefox so I'm back on a clean laptop. Link to post Share on other sites More sharing options...
tdsaint Posted January 2, 2019 Author ID:1290248 Share Posted January 2, 2019 OH - you mean the FRST program, not the FRST notepad document I sent to you earlier. I had put the notepad documents in a sub folder in the download folder called "Win32" but I'll move them now into the regular download folder. Link to post Share on other sites More sharing options...
tdsaint Posted January 2, 2019 Author ID:1290250 Share Posted January 2, 2019 It looks like they were in both locations anyway??? Link to post Share on other sites More sharing options...
kevinf80 Posted January 2, 2019 ID:1290251 Share Posted January 2, 2019 Do not put anything in the search box, save the unopened file fixlist.txt to the same folder as FRST. Open the tool FRST, select the FIX tab just once, FRST will run and create a new log fixlog.txt Link to post Share on other sites More sharing options...
tdsaint Posted January 2, 2019 Author ID:1290254 Share Posted January 2, 2019 Here's the new fixlog. FRST wants a restart, so I will before continuing with your Malwarebytes Support Tool step. Fixlog.txt Link to post Share on other sites More sharing options...
Recommended Posts