Jump to content

KM Spico,Strange internet behaving,Avast isn't working


Recommended Posts

Hello!My problem is that i was using my computer and when i was watching movie it stopped i tried refreshing it but it showed that i had no connection.I got my phone but the wifi was working perfectly and i it was showing that i had internet on my PC.After this i restarted my pc and it started working again. But there i saw my avast wasn't working.It was displaying something about UI.I just deleted it and then i started seeing windows threats from KmSpico.Firstly when i tried to scan them and delete them i couldn't.When my scanning was done it was apeering that i haven't done a scan or something like this i hadn't got information about the scan at all and it seems strange for me.After this i deleted it and it shows that my pc is fine i don't have viruses but im scared of that they implanted software for using my pc for hijaking,mining etc.It seems strange to me my pc to have internet and my phone but to appear that i have no connection in google/yt and etc.I downloaded instantly malwarebytes it found 1 threat and it was adware.I found one of your previous topics in the forum and you said that you should download a program called farbar recovery scan tool. I downloaded it and i made a scan i will send you the things i got from there.Hope i got answer soon.

Addition.txt FRST.txt

Link to post
Share on other sites

Hi,      :welcome:
My name is Maurice. I will be helping and guiding you, going forward on this case.
Let me know what first name you prefer to go by.

Please follow my directions as we go along.  Please do not do any changes on your own without first checking with me. 
If you will be away for more than 3 consecutive days,  do try to let me know ahead of time, as much as possible. 
  
Please only just attach   all report files, etc  that I ask for as we go along.
 

You have mentioned a lot of things in your initial post.  What I can do is help you to look for malware & if found, to remove it.   Keep in mind, that other factors that are not malware may be at the source of other things.   Like perhaps the internet connection.

We will take one thing at a time.

 

The Microsoft Safety Scanner  is a free Microsoft stand-alone virus scanner that  can be used to scan for & remove malware or potentially unwanted software from a system. 
The download links & the how-to-run-the tool are at this link at Microsoft 
https://docs.microsoft.com/en-us/windows/security/threat-protection/intelligence/safety-scanner-download 
  
Let me know the result of this.
The log is named MSERT.log  
the log will be at  %SYSTEMROOT%\debug\msert.log   which in most cases is
C:\Windows\debug\msert.log
Please attach that log with your reply.
 

Link to post
Share on other sites

Thank you.   The MS Safety scanner found nothing.     Results Summary:
----------------
No infection found.
Microsoft Safety Scanner Finished On Wed May 06 21:02:36 2020

.

Windows Defender had earlier detected what they classify as a "hack tool"    .....KMSpico

and we need to insure that Windows Defender stays on.   So a first bit of housekeeping.

Start Malwarebytes. Click Settings ( gear ) icon. Next, lets make real sure that Malwarebytes does NOT register with Windows Security Center 
Click the Security Tab. Scroll down to 
"Windows Security Center"
Click the selection to the left  for the line "Always register Malwarebytes in the Windows Security Center".    We need that to stay in the Off position.

 

[     2     ]

This next section is a custom procedure to remove "kmspico".

Please Close and Save any open work you may have open.
Please close as many un-needed app-windows that you yourself may have open at this point.   So you can have a clear field of view.

This custom script is for  Emiltomov23    only / for this machine only.
Close and save any open work files before starting this procedure. 

Please Close and save any open work files before you start this next step.  It will involve a Windows Restart at the end of it.
I am sending a   custom Fix script which is going to be used by the FRST64 tool. They will both work together as a pair.

Please RIGHT-click the (attached file named) FIXLIST and select SAVE  link AS and save it directly ( as is) to the  Downloads  folder

The tool named FRST64.exe   tool    is already on the Downloads folder
Start the Windows Explorer and then, to the Downloads folder.


RIGHT click on  FRST64    and select RUN as Administrator and allow it to proceed.  Reply YES when prompted to allow to run.
  to run the tool. If the tool warns you the version is outdated, please download and run the updated version.
IF Windows prompts you about running this, select YES to allow it to proceed.

IF you get a block message from Windows about this tool......
click line More info information on that screen
and click button Run anyway on next screen.

on the FRSTENGLISH window:
Click the Fix button just once, and wait.

frst-fix.jpg.f6a25291b39a03d418acc9a3b7136900.jpg
 
PLEASE have lots and lots of patience when this starts. You will see a green progress bar start. Lots of patience. This run here should be fairly quick.
If you receive a message that a reboot is required, please make sure you allow it to restart normally.
The tool will complete its run after restart.
When finished, the tool will make a log ( Fixlog.txt) in the same location from where it was run.

Please attach the FIXLOG.txt with your next reply later, at your next opportunity   

Fixlist.txt

Link to post
Share on other sites

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Please review the following for Tips to help protect from infection

Thank you

 

 

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.