SuperFly Posted May 26, 2019 ID:1314414 Share Posted May 26, 2019 I've downloaded Farbar Recovery tool and here are the files, is this enough info for a fix? Thanks FRST.txt Addition.txt Link to post Share on other sites More sharing options...
nasdaq Posted May 26, 2019 ID:1314427 Share Posted May 26, 2019 Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from. The location is listed in the 3rd line of the FRST.txt log you have submitted. Run FRST and click Fix only once and wait. The Computer will restart when the fix is completed. It will create a log (Fixlog.txt) please post it to your reply. === Please download Malwarebytes Anti-Malware from here Right-click on the MBAM icon and select Run as administrator to run the tool. Click Yes to accept any security warnings that may appear. Once the MBAM dashboard opens, on the right detail pane click on the word "Current" under the Scan Status to update the tool database. On the left menu pane click the Settings tab, and then select the Protection tab on the top. Under the Scan Options, turn on the button Scan for rootkits and Scan within archives. Click the Scan tab on the right detail pane, select Threat Scan and click the Start Scan button Note: The scan may take some time to finish, so please be patient. If potential threats are detected, ensure to check mark all the listed items, and click the Quarantine Selected button. While still on the Scan tab, click the View Report button, and in the window that opens click the Export button, select Text file (*.txt), and save the log to your Desktop. The log can also be viewed by clicking the log to select it, then clicking the View Report button. Please post the log for my review. Note: If asked to restart the computer, please do so immediately. === Please download AdwCleaner by Malwarebytes your Desktop. Close all open programs and internet browsers. Double click on AdwCleaner.exe to run the tool. Click the Scan button and wait for the process to complete. Click the LogFile button and the report will open in Notepad. IMPORTANT If you click the Clean button all items listed in the report will be removed. If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows. Close all open programs and internet browsers. Double click on AdwCleaner.exe to run the tool. Click the Scan button and wait for the process to complete. Check off the element(s) you wish to keep. Click on the Clean button follow the prompts. A log file will automatically open after the scan has finished. Please post the content of that log file with your next answer. You can find the log file at C:\AdwCleanerCx.txt (x is a number). === Please post the logs and let me know what problem persists. fixlist.txt Link to post Share on other sites More sharing options...
SuperFly Posted May 26, 2019 Author ID:1314429 Share Posted May 26, 2019 44 minutes ago, nasdaq said: Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from. The location is listed in the 3rd line of the FRST.txt log you have submitted. Run FRST and click Fix only once and wait. The Computer will restart when the fix is completed. It will create a log (Fixlog.txt) please post it to your reply. === Please download Malwarebytes Anti-Malware from here Right-click on the MBAM icon and select Run as administrator to run the tool. Click Yes to accept any security warnings that may appear. Once the MBAM dashboard opens, on the right detail pane click on the word "Current" under the Scan Status to update the tool database. On the left menu pane click the Settings tab, and then select the Protection tab on the top. Under the Scan Options, turn on the button Scan for rootkits and Scan within archives. Click the Scan tab on the right detail pane, select Threat Scan and click the Start Scan button Note: The scan may take some time to finish, so please be patient. If potential threats are detected, ensure to check mark all the listed items, and click the Quarantine Selected button. While still on the Scan tab, click the View Report button, and in the window that opens click the Export button, select Text file (*.txt), and save the log to your Desktop. The log can also be viewed by clicking the log to select it, then clicking the View Report button. Please post the log for my review. Note: If asked to restart the computer, please do so immediately. === Please download AdwCleaner by Malwarebytes your Desktop. Close all open programs and internet browsers. Double click on AdwCleaner.exe to run the tool. Click the Scan button and wait for the process to complete. Click the LogFile button and the report will open in Notepad. IMPORTANT If you click the Clean button all items listed in the report will be removed. If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows. Close all open programs and internet browsers. Double click on AdwCleaner.exe to run the tool. Click the Scan button and wait for the process to complete. Check off the element(s) you wish to keep. Click on the Clean button follow the prompts. A log file will automatically open after the scan has finished. Please post the content of that log file with your next answer. You can find the log file at C:\AdwCleanerCx.txt (x is a number). === Please post the logs and let me know what problem persists. fixlist.txt 2.77 kB · 1 download Thanks for the quick reply. I ran that and have attached file. As soon as I rebooted my computer froze and took 2 goes to reboot. Only difference I see is all Chrome extensions gone. Going to try Malwarebytes Anti-Malware now. Fixlog.txt Link to post Share on other sites More sharing options...
SuperFly Posted May 26, 2019 Author ID:1314441 Share Posted May 26, 2019 And malwarebytes scan report: scanreport.txt Link to post Share on other sites More sharing options...
SuperFly Posted May 26, 2019 Author ID:1314443 Share Posted May 26, 2019 And adwclean scan reports: AdwCleaner[C00].txt AdwCleaner[S00].txt Link to post Share on other sites More sharing options...
nasdaq Posted May 26, 2019 ID:1314447 Share Posted May 26, 2019 Is your problem solved or Not. Link to post Share on other sites More sharing options...
SuperFly Posted May 26, 2019 Author ID:1314452 Share Posted May 26, 2019 It was crashing randomly so won't know for a day or so, however cursor still losing focus (have to keep clicking on page to type, had to do that twice to write this). Link to post Share on other sites More sharing options...
SuperFly Posted May 26, 2019 Author ID:1314457 Share Posted May 26, 2019 Just froze again and needed a reboot Link to post Share on other sites More sharing options...
nasdaq Posted May 27, 2019 ID:1314513 Share Posted May 27, 2019 Hi, --RogueKiller-- Download & SAVE to your Desktop Download RogueKiller Quit all programs that you may have started. Please disconnect any USB or external drives from the computer before you run this scan! For Vista or above, right-click the program file and select "Run as Administrator" Accept the user agreements. Execute the scan and wait until it has finished. If a Windows opens to explain what [PUM's] are, read about it. Click the RoguKiller icon on your taksbar to return to the report. Click open the Report Click Export TXT button Save the file as ReportRogue.txt Click the Remove button to delete the items in RED Click Finish and close the program. Locate the ReportRogue.txt file on your Desktop and copy/paste the contents in your next. ======= Please run the Farbar program and post fresh FRST.txt and Addition.txt logs for my review. Link to post Share on other sites More sharing options...
SuperFly Posted May 28, 2019 Author ID:1314595 Share Posted May 28, 2019 Hi, RogueKiller Anti-Malware V13.2.1.0 (x64) [May 22 2019] (Free) by Adlice Software mail : https://adlice.com/contact/ Website : https://adlice.com/download/roguekiller/ Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits Started in : Normal mode User : HP [Administrator] Started from : C:\Program Files\RogueKiller\RogueKiller64.exe Signatures : 20190527_073557, Driver : Loaded Mode : Standard Scan, Scan -- Date : 2019/05/27 19:12:33 (Duration : 00:35:17) Switches : -refid 3 ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Process Modules ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Services ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Tasks ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ [Bad.Extension (Malicious)] \{87522109-D6E2-4813-A999-A51CB30221C6} -- C:\Users\HP\Downloads\sony-dcr-trv270e-usb-driver.exe -> Found [Bad.Extension (Malicious)] \{DE5D7401-85A9-4F6B-AFF2-544C5C064A1B} -- C:\Users\HP\Downloads\sony-dcr-trv270e-usb-driver.exe -> Found [Bad.Extension (Malicious)] \{EA6124F5-EF39-4377-A2BE-9C09BA0BD2EC} -- C:\Users\HP\Downloads\sony-dcr-trv270e-usb-driver.exe -> Found [Bad.Extension (Malicious)] \{795DFF21-31DE-4D30-AD3C-6EBB32F9AB1D} -- C:\Users\HP\Downloads\sony-dcr-trv270e-usb-driver.exe -> Found [Bad.Extension (Malicious)] \{14E53207-D251-425E-A172-562BBECDDA12} -- C:\Users\HP\Downloads\sony-dcr-trv270e-usb-driver.exe -> Found ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Registry ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ WMI ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Hosts File ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Files ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Web browsers ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ FRST.txt Addition.txt Link to post Share on other sites More sharing options...
nasdaq Posted May 28, 2019 ID:1314628 Share Posted May 28, 2019 Please submit the file in bold to VirusTotal for inspection. C:\Users\HP\Downloads\sony-dcr-trv270e-usb-driver.exe Navigate to this page and follow the instructions.https://www.virustotal.com/gui/home/upload Let me see the link that will be generated. === p.s. If the problem persists please post a fresh FRST.TXt log for my review. I do not need to see the Addition.txt log. fixlist.txt Link to post Share on other sites More sharing options...
nasdaq Posted June 3, 2019 ID:1315475 Share Posted June 3, 2019 Are you still with me? Link to post Share on other sites More sharing options...
SuperFly Posted June 3, 2019 Author ID:1315482 Share Posted June 3, 2019 Hi, Sorry, I couldn't get the virustotal thing to work, nothing was happening and I couldn't work out in the little time I had how to sort it out as I'm not used to these things. My original problem persisted but I was working long hours and didn't have time to address it. A friend updated some drivers a few days ago (connected to wireless internet dongle I think), computer hasn't crashed since so maybe the problem was just that but I suppose only time will tell. Thanks for your efforts nasdaq. Link to post Share on other sites More sharing options...
nasdaq Posted June 4, 2019 ID:1315666 Share Posted June 4, 2019 Stay safe. Will close the topic in a few days. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted June 10, 2019 Root Admin ID:1316428 Share Posted June 10, 2019 Since this issue is resolved the topic will now be closed to prevent others from posting here. If you need assistance please start your own new topic and someone will be happy to assist you. Thanks Link to post Share on other sites More sharing options...
Recommended Posts