Jump to content

Reappearing malware

Recommended Posts

So I have this problem with some malware, I got it several months ago, back then it gave me around 200 malware but I got rid of it, except for some survivors. I did a scan like 1 month ago and I had the malware there too, now I did the scan again and I have three more malware popping up at me.  One is called Trojan.FakeTool.E(it is a registry key located in a HKU folder), the second one Adware SonicSearch (it is a registry value in a HKLM folder) and Generic.Malware/Suspicious(it is a file located in AppData/Roaming in a file I don't remember download so yeah) or whatever it is called. I tried several times to get these off my computer but they really don't want to and like it here, but I don't like them. So is there any way to get rid of this or do I have to buy a new disk?

Link to post
Share on other sites

  • Root Admin

Hello @vezun and :welcome:



Please run the following steps and post back the logs as an attachment when ready.


  • If you're already running Malwarebytes 3 then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button.
  • If you don't have Malwarebytes 3 installed yet please download it from here and install it.
  • Once installed then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button.
  • Once the scan is completed click on the Export Summary button and save the file as a Text file to your desktop or other location you can find, and attach that log on your next reply.
  • If Malwarebytes won't run then please skip to the next step and let me know on your next reply.


Please download AdwCleaner by Malwarebytes and save the file to your Desktop.

  • Right-click on the program and select RunAsAdmin.jpg Run as Administrator to start the tool.
  • Accept the Terms of use.
  • Wait until the database is updated.
  • Click Scan Now.
  • When finished, please click Clean & Repair.
  • Your PC should reboot now if any items were found.
  • After reboot, a log file will be opened. Copy its content into your next reply.


RESTART THE COMPUTER Before running Step 3

Please download the Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit

  • Double-click to run it. When the tool opens, click Yes to disclaimer.
  • Press the Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
  • The first time the tool is run, it also makes another log (Addition.txt). If you've, run the tool before you need to place a check mark here.
  • Please attach the Additions.txt log to your reply as well.





Link to post
Share on other sites

MalwareBytes didn't find anything because I already deleted the malware yesterday but it might pop up again, oh and the log in MalwareBytes is in Czech language. AdwCleaner found a lot of stuff I didn't know about and I don't know about FRST. Thanks for replying though @AdvancedSetup (sorry for mentioning you, but some people on forums just don't respond if I don't mention them in my reply and I don't know how it works here, I won't mention next time if you want)


MalwareBytes log: mb.txt

AdwCleaner log: ac.txt

FRST log: FRST.txt 

           Additional: Addition.txt




Link to post
Share on other sites

  • Root Admin

Hello @vezun

No problem linking my name. In general, the forum should alert me but every once in a while it has a hiccup and does not.

The logs show you're running old compromised versions of Java. Unless you're doing Java programming the specifically requires those older versions to maintain old code then I would highly suggest you uninstall All versions of Java and only install the latest versions you need. If possible it would be better to do without Java if you can, but if not then keep it up to date at all times.  https://java.com

After that, then follow the directions from the topic below to clean up Google Chrome.


Then restart the computer and let me know if you're still having any signs of an infection or not.

It's quite late for me so I'm heading out but will check back on you again sometime tomorrow.

Thank you



Link to post
Share on other sites

  • Root Admin

Great, glad to hear.


Let's get real. If you're not backing up your data and you're still using Google Chrome then you're just not serious about Privacy, Safety, and protecting your data. Malwarebytes is a fantastic program but you still need to back up your data and you still need to block scripts and Ads in your browser. 
If you're still using Google Chrome I would highly suggest you consider using Firefox instead. For more advanced users you might consider installing NoScript as well (it does have a higher learning curve though)

Help Secure your browsers
Please install uBlock Origin for your browsers to better protect your system

FireFox, ChromeOpera , SafariMicrosoft Edge
AdBlock for Internet Explorer
How to use uBlock Origin to protect your online privacy and security | uBlock Origin tutorial 2018

This video tutorial above explains how to use uBlock Origin in advanced user mode and all the advanced settings to protect your online privacy and help prevent unwanted sites from changing your browser settings

Browser push notifications: a feature asking to be abused
HTTPS Everywhere
NOTHING TO HIDE documentary

Review your email and Office choices

Quit Gmail for free encrypted email - Tutanota
Why ProtonMail Is More Secure Than Gmail
LibreOffice - Free and open source office suite

Use Password Management software

KeePass Password Safe

Encrypted Instant Messenger and Voice Calls

Wickr Me

Follow-up Reading

Everything you need to know about cybercrime
10 easy ways to prevent malware infection 
Keep your data backed up

Thank you for choosing Malwarebytes  as your preferred security protection software and tell your friends and family too. We're here to help.



Link to post
Share on other sites

  • Root Admin

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.



Link to post
Share on other sites

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.