vezun Posted July 3, 2019 ID:1320120 Share Posted July 3, 2019 So I have this problem with some malware, I got it several months ago, back then it gave me around 200 malware but I got rid of it, except for some survivors. I did a scan like 1 month ago and I had the malware there too, now I did the scan again and I have three more malware popping up at me. One is called Trojan.FakeTool.E(it is a registry key located in a HKU folder), the second one Adware SonicSearch (it is a registry value in a HKLM folder) and Generic.Malware/Suspicious(it is a file located in AppData/Roaming in a file I don't remember download so yeah) or whatever it is called. I tried several times to get these off my computer but they really don't want to and like it here, but I don't like them. So is there any way to get rid of this or do I have to buy a new disk? Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted July 3, 2019 Root Admin ID:1320162 Share Posted July 3, 2019 Hello @vezun and Please run the following steps and post back the logs as an attachment when ready.STEP 01 If you're already running Malwarebytes 3 then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button. If you don't have Malwarebytes 3 installed yet please download it from here and install it. Once installed then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button. Once the scan is completed click on the Export Summary button and save the file as a Text file to your desktop or other location you can find, and attach that log on your next reply. If Malwarebytes won't run then please skip to the next step and let me know on your next reply. STEP 02 Please download AdwCleaner by Malwarebytes and save the file to your Desktop. Right-click on the program and select Run as Administrator to start the tool. Accept the Terms of use. Wait until the database is updated. Click Scan Now. When finished, please click Clean & Repair. Your PC should reboot now if any items were found. After reboot, a log file will be opened. Copy its content into your next reply. RESTART THE COMPUTER Before running Step 3 STEP 03 Please download the Farbar Recovery Scan Tool and save it to your desktop.Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit Double-click to run it. When the tool opens, click Yes to disclaimer. Press the Scan button. It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply. The first time the tool is run, it also makes another log (Addition.txt). If you've, run the tool before you need to place a check mark here. Please attach the Additions.txt log to your reply as well. Thanks Ron Link to post Share on other sites More sharing options...
vezun Posted July 3, 2019 Author ID:1320188 Share Posted July 3, 2019 MalwareBytes didn't find anything because I already deleted the malware yesterday but it might pop up again, oh and the log in MalwareBytes is in Czech language. AdwCleaner found a lot of stuff I didn't know about and I don't know about FRST. Thanks for replying though @AdvancedSetup (sorry for mentioning you, but some people on forums just don't respond if I don't mention them in my reply and I don't know how it works here, I won't mention next time if you want) MalwareBytes log: mb.txt AdwCleaner log: ac.txt FRST log: FRST.txt Additional: Addition.txt Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted July 3, 2019 Root Admin ID:1320189 Share Posted July 3, 2019 Hello @vezun No problem linking my name. In general, the forum should alert me but every once in a while it has a hiccup and does not. The logs show you're running old compromised versions of Java. Unless you're doing Java programming the specifically requires those older versions to maintain old code then I would highly suggest you uninstall All versions of Java and only install the latest versions you need. If possible it would be better to do without Java if you can, but if not then keep it up to date at all times. https://java.com After that, then follow the directions from the topic below to clean up Google Chrome. Then restart the computer and let me know if you're still having any signs of an infection or not. It's quite late for me so I'm heading out but will check back on you again sometime tomorrow. Thank you Ron Link to post Share on other sites More sharing options...
vezun Posted July 3, 2019 Author ID:1320267 Share Posted July 3, 2019 Alright, seems like nothing is appearing so far, I am going to keep checking if any new malware pops up and if some do pop up, I am going to head back here and create a new thread. Thanks a lot for helping. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted July 3, 2019 Root Admin ID:1320332 Share Posted July 3, 2019 Great, glad to hear. Let's get real. If you're not backing up your data and you're still using Google Chrome then you're just not serious about Privacy, Safety, and protecting your data. Malwarebytes is a fantastic program but you still need to back up your data and you still need to block scripts and Ads in your browser. If you're still using Google Chrome I would highly suggest you consider using Firefox instead. For more advanced users you might consider installing NoScript as well (it does have a higher learning curve though) Help Secure your browsers Please install uBlock Origin for your browsers to better protect your system FireFox, Chrome, Opera , Safari, Microsoft EdgeAdBlock for Internet Explorer How to use uBlock Origin to protect your online privacy and security | uBlock Origin tutorial 2018 This video tutorial above explains how to use uBlock Origin in advanced user mode and all the advanced settings to protect your online privacy and help prevent unwanted sites from changing your browser settingsBrowser push notifications: a feature asking to be abusedHTTPS EverywhereNOTHING TO HIDE documentary Review your email and Office choices Quit Gmail for free encrypted email - TutanotaWhy ProtonMail Is More Secure Than GmailLibreOffice - Free and open source office suite Use Password Management software BitwardenKeePass Password Safe Encrypted Instant Messenger and Voice Calls RiotSignalWickr Me Follow-up Reading Everything you need to know about cybercrime 10 easy ways to prevent malware infection Keep your data backed up Thank you for choosing Malwarebytes as your preferred security protection software and tell your friends and family too. We're here to help. Ron Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted July 3, 2019 Root Admin ID:1320333 Share Posted July 3, 2019 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks Link to post Share on other sites More sharing options...
Recommended Posts