Firefox hijacked unresponsive

[larlap]

Got infected accessing torrent site.

Addition.txt FRST.txt threatscan.txt

[larlap]

I also performed a system restore which had no affect.

[Maurice Naggar]

Hi,    

My name is Maurice. I will be helping and guiding you, going forward on this case.

Please follow my directions as we go along.  Please do not do any changes on your own without first checking with me.

If you will be away for more than 3 consecutive days,  do try to let me know ahead of time, as much as possible.

 

Please only just attach   all report files, etc  that I ask for as we go along.

 

A few questions for you.  What do you see that leads you to assert that an infection is present ?   What, when where, how ?

What sort of torrent download did you do ?  what , where ?   what sort of download ?

 

The Malwarebytes for Windows indicates no active malware.  Let;s first do a scan for adwares.   Later, we can different scans.

 

I  would suggest to download, Save, and then run Malwarebytes ADWCLEANER.

Please close Chrome and all other open web browsers after you have saved the Adwcleaner and before you start Adwcleaner scan.

Version 7.4 of Adwcleaner  detects factory Preinstalled applications too!

I  encourage you to take a look at the announcement blogpost to learn more this new detection category: https://blog.malwarebytes.com/malwarebytes-news/2019/07/your-device,-your-choice:-adwcleaner-now-detects-preinstalled-software/.

 

Please download  Malwarebytes AdwCleaner  https://downloads.malwarebytes.com/file/adwcleaner
 

Be sure to Save the file first, to your system.  Saving to the Downloads folder should be the default on your system.

 

Go to the folder where you saved Adwcleaner. Double click Adwcleaner  to start it.

At the prompt for license agreement, review and then click on I agree.

 

You will then see a main screen for Adwcleaner. ( if you do not see it right away, minimized the other open windows, so you can see Adwcleaner).

Then click on Dashboard button.

Click the blue button "Scan Now".

 

allow it a few minutes to finish the Scan.   Let it remove what it finds.

NOTE:  When it comes to the section "

Pre-installed applications

 

You can skip that.

Please find and send the Adwcleaner "C" clean report.

In Adwcleaner, click the "Reports" button.  Look at the list of reports for the latest date & type "Clean".

Double Click that line & it will open in Notepad.   Save the file to your system and then Attach that with your reply.

 

That C clean report will be the one with the most recent Date and time at folder  C:\AdwCleaner\Logs

Thanks.  Keep me advised.

 

 

[Maurice Naggar]

Notes:   I would assume that you Restarted this Windows 10 system today.  If not, please do so.

The only event ( that I see at present) that is from the Windows application event log is this.

Error: (10/27/2019 07:21:13 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program firefox.exe version 70.0.0.7228 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Process ID: 11c0

Start Time: 01d58cc92faa530b

Termination Time: 4294967295

Application Path: C:\Program Files\Mozilla Firefox\firefox.exe

Report Id: 5e03233c-e04a-49dc-8ec7-3a03f4379960

Faulting package full name:

Faulting package-relative application ID:

Hang type: Top level window is idle

[Maurice Naggar]

Hello. 

How is it going ?  Are you still with us ?

Have you done the scan with Adwcleaner ?

[Maurice Naggar]

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.

Thanks