Threat scan for more than 27 hours

[fantom]

A threat scan was going on for 27 hours, had found 18 objects. I got fed up with it, stopped it, run it on safe mode but it was still going on forever. So I stopped it, cleaned the 18 threats and had it run again. It was fine at first but after 40 minutes it got to a point where it scanned really slowly again. 

I have a log from what it removed. My disk health is OK. Should I check anything else?

mbam.txt

[Malwarebytes]

***This is an automated reply***

Hi,

Thanks for posting in the Malwarebytes 3 Help forum.

 

If you are having technical issues with our Windows product, please do the following: 

Spoiler

If you haven’t already done so, please run the Malwarebytes Support Tool and then attach the logs in your next reply:

NOTE: The tools and the information obtained is safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

1. Download Malwarebytes Support Tool
2. Once the file is downloaded, open your Downloads folder/location of the downloaded file
3. Double-click mb-support-X.X.X.XXXX.exe to run the program
   • You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
4. Place a checkmark next to Accept License Agreement and click Next
5. You will be presented with a page stating, "Get Started!"
6. Click the Advanced tab
   
    
7. Click the Gather Logs button
   
    
8. A progress bar will appear and the program will proceed with getting logs from your computer
   
    
9. Upon completion, click a file named mbst-grab-results.zip will be saved to your Desktop. Click OK
   
    
10. Please attach the file in your next reply. Before submitting your reply, be sure to enable "Notify me of replies" like so:
       

Click "Reveal Hidden Contents" below for details on how to attach a file:
 

Spoiler

To save attachments, please click the link as shown below. You can click and drag the files to this bar or you can click the choose files, then browse to where your files are located, select them and click the Open button.

 

One of our experts will be able to assist you shortly.

 

If you are having licensing issues, please do the following: 

Spoiler

For any of these issues:

• Renewals
• Refunds (including double billing)
• Cancellations
• Update Billing Info
• Multiple Transactions
• Consumer Purchases
• Transaction Receipt

Please contact our support team at https://support.malwarebytes.com/community/consumer/pages/contact-us to get help

If you need help looking up your license details, please head here: https://support.malwarebytes.com/docs/DOC-1264 

 

Thanks in advance for your patience.

-The Malwarebytes Forum Team

[exile360]

Greetings,

Please try running ADWCleaner to see if it is able to detect and remove any additional threats.  Reboot if prompted to do so once it finishes if needed to complete the removal process.

If the issue with slow scans still persists then please read and follow the instructions in this topic and create a new thread in the malware removal area including the requested logs and information by clicking here and one of our malware removal specialists will assist you as soon as one becomes available.  Once the system is cleaned up and they've given you the all clear that the system is secure and no longer infected with any threats, if the issue with scans still persists, then you may return here and we can troubleshoot the issue further, but the main thing is getting the system cleaned, and of course it's also possible that cleaning out the remaining threats may also correct the issue with slow scanning.

[fantom]

I paused the scan, removed 18 found items, run adwcleaner, removed 90 items (mostly useless things, they don't seem harmful). Avast is fine. My disk is OK. 

I know I have an infection because I did something stupid and entered credit card details on a scam website. I canceled the card right away and have been trying to clean up the PC since. I could be having more issues because this PC is used for torrents by someone else. 

I can't do a full threat scan though, it starts normally and gets slower and slower. This morning it was 16 hours through on 150.000 items and making almost no progress. 

This PC is being used and passwords are being entered. Is this a risk? Should passwords be changed after cleanup? 

I appreciate your help in getting rid of anything harmful.

mbam.txt

AdwCleaner[C00].txt

[fantom]

I also had thousands of SBS_STDRL_XXXXXXXXXX files in my Windows\Temp folder. That's where the scan took forever. 

[nasdaq]

Hello, Welcome to Malwarebytes.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

I also had thousands of SBS_STDRL_XXXXXXXXXX files in my Windows\Temp folder

This wll answer your question.
https://kwsupport.com/2015/01/vipre-creating-thousands-of-sbs_stdrl-temp-files/

===

Download the version of this tool for your operating system.
Farbar Recovery Scan Tool (64 bit)
Farbar Recovery Scan Tool (32 bit)
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

How to attach a file to your reply:
In the Reply section in the bottom of the topic Click the "more reply Options" button.

Attach the file.
Select the "Choose a File" navigate to the location of the File.
Click the file you wish to Attach.
Click Attach this file.
Click the Add reply button.
===

Please post the logs  for my review.

Wait for further instructions

===

p.s.
I will suggest a fix to remove any unwanted programs and the temporary files.

 

[fantom]

I managed to delete the temp files on safe mode, took many hours as the recycle bin froze up. I probably got them from Ad-Aware. The weird thing is that MBAM was "scanning" $recycle.bin files after I had deleted everything and rebooted. 

MBAM managed to do a threat scan in about 35 minutes for roughly 350.000 items (clean). I am now running a custom scan on everything and it's one hour in on 200.000 items. 

This is definitely an improvement but I don't know if it's "normal".

Will do the farbar thing next.

Should I be careful with passwords in any case?