xander123 Posted November 20, 2019 ID:1346260 Share Posted November 20, 2019 Recently, I scanned my lap with malwarebytes and found 8 infected folders, named riskware bitcoinminer. I quarantined them and deleted them, but everytime my computer boots and scan my lap the same 8 folders are detected again. please help me solve the issue. There file location is shown as cloudnet.exe epic net inc. Link to post Share on other sites More sharing options...
nasdaq Posted November 21, 2019 ID:1346447 Share Posted November 21, 2019 Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Download the Farbar Recovery Scan Tool (FRST).Choose the 32 or 64 bit version for your system. and save it to a folder on your computer's Desktop. Double-click to run it. When the tool opens click Yes to disclaimer. Press Scan button. It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply. The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply. How to attach a file: In the Reply section in the bottom of the topic Select Click the Choose a File. Navigate to the location of the File. Click the file. It will appear in section. Click the Saving button. Please post the logs for my review. Let me know what problems persists. Wait for further instructions. ==== Please let me know if the Browse you normally use is Sync to other devices. Link to post Share on other sites More sharing options...
xander123 Posted November 24, 2019 Author ID:1346986 Share Posted November 24, 2019 Sorry for the late reply. I have done all the steps you've mentioned and completed a scan using farbar and here are the files: FRST.txt Addition.txt Link to post Share on other sites More sharing options...
nasdaq Posted November 24, 2019 ID:1347049 Share Posted November 24, 2019 Hi, Remove this program in bold via the Control Panel > Programs > Programs and Features.SMADAV version 13.2.1 (HKLM-x32\...\{8B9FA5FF-3E61-4658-B0DA-E6DDB46D6BAD}_is1) (Version: 13.2.1 - Smadsoft) === Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from. The location is listed in the 3rd line of the FRST.txt log you have submitted. Run FRST and click Fix only once and wait. The Computer will restart when the fix is completed. It will create a log (Fixlog.txt) please post it to your reply. === Please post the Fixlog.txt and let me know what problem persists. fixlist.txt Link to post Share on other sites More sharing options...
xander123 Posted November 24, 2019 Author ID:1347070 Share Posted November 24, 2019 The risks were still detected after restarting.However, should i have posted the FRST.txt and Addition.txt after running a scan and quarantining and deleting the threats or before doing a scan using malwarebytes? just a genuine question? Link to post Share on other sites More sharing options...
xander123 Posted November 24, 2019 Author ID:1347071 Share Posted November 24, 2019 sorry forgot to attach the fixlog Fixlog.txt Link to post Share on other sites More sharing options...
xander123 Posted November 25, 2019 Author ID:1347187 Share Posted November 25, 2019 sorry it was a mistake from my side.Now malwarebytes is not detecting any threats after many reboots, thanks so much for resolving the issue.A big thx from me! Link to post Share on other sites More sharing options...
nasdaq Posted November 25, 2019 ID:1347219 Share Posted November 25, 2019 Glad we could help. Link to post Share on other sites More sharing options...
Recommended Posts