sekarwid Posted May 6, 2019 ID:1311348 Share Posted May 6, 2019 FRST.txtAddition.txt i got infected with bitcoin miner and seems like my MWB (premium) doesn't work out to remove it. please help... thank you Link to post Share on other sites More sharing options...
nasdaq Posted May 6, 2019 ID:1311416 Share Posted May 6, 2019 Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from. The location is listed in the 3rd line of the FRST.txt log you have submitted. Run FRST and click Fix only once and wait. The Computer will restart when the fix is completed. It will create a log (Fixlog.txt) please post it to your reply. === Please post the Fixlog.txt and let me know what problem persists. p.s. Try to download Malwarebytes? If successful, Open Malwarebytes Anti-Malware. On the Settings tab > Protection Scroll to and make sure the following are selected: Scroll to and make sure the following are selected:Scan for Rootkits Scan within Archives Scroll further to Potential Threat Protection make sure the following are set as follows: Potentially Unwanted Programs (PUP`s) set as :- Always detect PUP`s (recommended)Potentially Unwanted Modifications (PUM`s) set as :- Always detect PUM`s (recommended) Click on the Scan make sure Threat Scan is selected, A Threat Scan will begin. When the scan is complete if anything is found make sure that the first checkbox at the top is checked (that will automatically check all detected items), then click on the Quarantine Selected Tab If asked to restart your computer to complete the removal, please do so When complete click on Export Summary after deletion (bottom-left corner) and select Copy to Clipboard. Wait for the prompt to restart the computer to appear, then click on Yes. After the restart once you are back at your desktop, open MBAM once more to retrieve the log. To get the log from Malwarebytes do the following: Click on the Reports tab > from main interface. Double click on the Scan log which shows the Date and time of the scan just performed.Click Export > From export you have two options: > From export you have two options: Copy to Clipboard - if selected right click to your reply and select "Paste" log will be pasted to your reply Text file (*.txt) - if selected you will have to name the file and save to a place of choice, recommend "Desktop" then attach to reply Use "Copy to Clipboard, then Right click to your reply > select "Paste" that will copy the log to your reply. fixlist.txt Link to post Share on other sites More sharing options...
nasdaq Posted May 11, 2019 ID:1312326 Share Posted May 11, 2019 Are you still with me? Link to post Share on other sites More sharing options...
sekarwid Posted May 14, 2019 Author ID:1312680 Share Posted May 14, 2019 yes, i'm still strying because english is not my first language. i'll tell you if i have another problems. thank you Link to post Share on other sites More sharing options...
sekarwid Posted May 17, 2019 Author ID:1313160 Share Posted May 17, 2019 hello nasdaq, this is the fixlog. thank you and sorry for taking a long time Fixlog.txt Link to post Share on other sites More sharing options...
nasdaq Posted May 17, 2019 ID:1313209 Share Posted May 17, 2019 Is the problem solved or not? Link to post Share on other sites More sharing options...
sekarwid Posted May 21, 2019 Author ID:1313716 Share Posted May 21, 2019 sadly no. i can quarantine them but not deleting them. they keep coming back. Link to post Share on other sites More sharing options...
nasdaq Posted May 21, 2019 ID:1313722 Share Posted May 21, 2019 Hi, Start a ticket in the Support Forum. https://forums.malwarebytes.com/forum/41-malwarebytes-3-support-forum/ See what they can do to stop these attacks. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted May 29, 2019 Root Admin ID:1314810 Share Posted May 29, 2019 Due to the lack of feedback, this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread. Thanks Link to post Share on other sites More sharing options...
Recommended Posts