Jump to content
Ichibangassen

Need Help, My Gaming Rig got infected by EpicNet/CloudNet, Glupteba, Csrrs

Recommended Posts

Need solution, My PC got infected with EpicNet.inc/CloudNet/glupteba/or whatever, they keep coming after rebooting, I need your help to get rid of these pesky malware, step by step guide will be appreciated.

 

Share this post


Link to post
Share on other sites

Download 51a5f31352b88-icon_MBAR.pngMalwarebytes Anti-Rootkit to your desktop.

  • Double-click the icon to start the tool.
  • It will ask you where to extract it, then it will start.
  • Warning!Malwarebytes Anti-Rootkit needs to be run from an account with administrator rights.
  • Click in the introduction screen "next" to continue.
  • Click in the following screen "Update" to obtain the latest malware definitions.
  • Once the update is complete select "Next" and click "Scan".
  • When the scan is finished and no malware has been found select "Exit".
  • If malware was detected, make sure to check all the items and click "Cleanup". Reboot your computer.
  • Open the MBAR folder and attach the content of the following files in your next reply:
    • "mbar-log-{date} (xx-xx-xx).txt"
    • "system-log.txt"
Edited by TwinHeadedEagle

Share this post


Link to post
Share on other sites

FRST.gif Fix with Farbar Recovery Scan Tool

icon_exclaim.gif This fix was created for this user for use on that particular machine. icon_exclaim.gif


icon_exclaim.gif Running it on another one may cause damage and render the system unstable. icon_exclaim.gif

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

  • Right-click on FRST.gif icon and select RunAsAdmin.jpg Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please upload it to your reply.

fixlist.txt

Share this post


Link to post
Share on other sites

Let's try to see what's going on this way:

 

Please download Farbar Recovery Scan Tool x64 and save it to a flash drive.

  • Plug the flashdrive into the infected PC.
  • Restart your computer and tap F8 to bring up the Advanced Menu, then click Repair your computer
  • Follow the prompt to enter keyboard input method, and then the prompt to enter a password. If the machine does not have a password, simply click Enter.
  • In the Choose Recovery Tool menu select Command Prompt.
  • You will see a big black window with a blinking cursor (command prompt).
  • You will see a big black window with a blinking cursor (command prompt).

    notepad.png Access the notepad and identify your USB drive

    In the Command Prompt please type in:

    notepad

    and press Enter.
  • When the notepad opens, go to File menu.

  • Select Open.

  • Go to Computer and search there for your USB drive letter.

  • Note down the letter and close the notepad.

    FRST.gif Scan with Farbar Recovery Scan Tool

    Once back in the command prompt window, please do the following:

  • Type in e:\frst64.exe and press Enter.
    You need to replace ewith the letter of your USB drive taken from notepad!

  • FRST will start to run. Give him a minute or so to load itself.

  • Click Yes to Disclaimer.

  • In the main console, please click Scan and wait.

  • When finished it will produce a logfile named FRST.txt in the root of your pendrive and display it. Close that logfile.

    Transfer it to your clean machine and include it in your next reply.

Share this post


Link to post
Share on other sites

Download attached fixlist.txt and save it to your USB flashdrive as fixlist.txt

>>  Boot into Recovery Environment


Start FRST in a similar manner to when you ran a scan earlier, but this time when it opens ....

  •    Press the Fix button once and wait.
  •    FRST will process fixlist.txt
  •    When finished, it will produce a log fixlog.txt on your USB flashdrive.


 >>  Exit out of Recovery Environment and post me the log please.

Try to boot Windows normally...

fixlist.txt

Share this post


Link to post
Share on other sites

It was smadav all along, I uninstalled smadav and cleaned the malicious folders before doing the fix, now these malicious folders are gone after rebooting (for now), at least the problem is resolved for now, I will notify you when somewhat I run into trouble again.

 

Thanks A Lot For Your Help

Thank You

Err, what should I do next? have a beer maybe?

Fixlog2(ichibangassen).txt

Share this post


Link to post
Share on other sites

Glad to hear it.

You should think of upgrading your system to Windows 10 as Windows 7 has reached the end of support. Clean install would be the best thing.

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.