Bambuuka Posted October 30, 2020 ID:1417427 Share Posted October 30, 2020 Hello. MalwareBytes scanned my Windows PC and detects 8 virus files with the name Trojan.Glupteba.BITSRST. After quarantined those virus files, right after I rebooted my computer, those viruses came back. It never truly deleted from my computer. I saw a thread with same problem with mine in this forum but the fix only works with the original poster machine, and i hope someone can help with mine Link to post Share on other sites More sharing options...
nasdaq Posted October 30, 2020 ID:1417428 Share Posted October 30, 2020 Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Download the Farbar Recovery Scan Tool (FRST).Choose the 32 or 64 bit version for your system. and save it to a folder on your computer's Desktop. Double-click to run it. When the tool opens click Yes to disclaimer. Press Scan button. It will make a log (FRST.txt) in the same directory the tool is run. Please Attach it to your reply. The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply. How to attach a file: In the Reply section in the bottom of the topic Select Click the Choose a File. Navigate to the location of the File. Click the file. It will appear in section. Click the Saving button. Please attach the log for my review. Let me know what problems persists. Wait for further instructions p.s. This program is updated often. If it's identified as suspicious by your Anti-Virus program trust it if Downloaded from the link I provided. You should restore the program from the Quarantine folder. ==== Let me know also if your default browser is Synced with other devices. Link to post Share on other sites More sharing options...
Bambuuka Posted October 30, 2020 Author ID:1417432 Share Posted October 30, 2020 my computer is a shared computer, the browser is gooogle chrome and signed in but not synced with other devices 47 minutes ago, nasdaq said: Let me know what problems persists. everytime I ran malwarebyte and adw cleaner to remove the virus, it just keep coming back. Addition.txt FRST.txt Link to post Share on other sites More sharing options...
nasdaq Posted October 30, 2020 ID:1417455 Share Posted October 30, 2020 Hi, Did you install this program. C:\Program Files (x86)\Smadav\SM?RTP.exe [1932368 2020-10-21] (Smadsoft) [File not signed] It's not signed and may be compromised. === C:\Program Files (x86)\SMADAV\SM?RTP.exe C:\Program Files (x86)\Smadav\SM?RTP.exe [1932368 2020-10-21] (Smadsoft) [File not signed] Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from. The location is listed in the 3rd line of the FRST.txt log you have submitted. Run FRST and click Fix only once and wait. The Computer will restart when the fix is completed. It will create a log (Fixlog.txt) please post it to your reply. === Is the problem solved? If not please post the logs from Malwarebytes and AdwCleaner for my review. fixlist.txt Link to post Share on other sites More sharing options...
Bambuuka Posted October 30, 2020 Author ID:1417502 Share Posted October 30, 2020 4 hours ago, nasdaq said: Did you install this program. C:\Program Files (x86)\Smadav\SM?RTP.exe [1932368 2020-10-21] (Smadsoft) [File not signed] It's not signed and may be compromised. Yes i did install it, after my problem first occurred i think. it is an antivirus and i tried it to remove the cloudnet virus. and yes, the virus still come back after the fixlist. Fixlog.txt scan after fixlist.txt AdwCleaner[S03].txt Link to post Share on other sites More sharing options...
Bambuuka Posted October 31, 2020 Author ID:1417586 Share Posted October 31, 2020 Wait, I scanned again, and now no more virus/trojan detected. But the computer still slows and lagging on and off as if the virus is still there. Any way to fix this? Link to post Share on other sites More sharing options...
nasdaq Posted October 31, 2020 ID:1417634 Share Posted October 31, 2020 Hi, Cloudnet was installed without your knowledge by Smadsoft. Remove this program in bold using the Control Panel > Programs > Programs and Features...SMADAV version 14.3.3 (HKLM-x32\...\{8B9FA5FF-3E61-4658-B0DA-E6DDB46D6BAD}_is1) (Version: 14.3.3 - Smadsoft) <<<>>> Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from. The location is listed in the 3rd line of the FRST.txt log you have submitted. Run FRST and click Fix only once and wait. The Computer will restart when the fix is completed. It will create a log (Fixlog.txt) please post it to your reply. === Is the problem fixed? p.s. If you want to install a free Virus protection program choose from this site. https://www.antivirussoftwareguide.com/best-free-virus-protection fixlist.txt Link to post Share on other sites More sharing options...
Bambuuka Posted November 2, 2020 Author ID:1417921 Share Posted November 2, 2020 Since there is no more virus/trojan after i scan a few times but my pc still slow and lagging, i suspected my hard drive was the problem, because copynpaste speed was very slow. I decided to buy ssd for my pc and install windows on it, and keep the old hdd. Turns out even with new windows, the old hdd write/ read speed was 2-3mbps max. I backup important files on the new ssd and reformat the old hdd. Now it is back at normal speed 100-150mbps write/read on the old hdd. Thanks for helping. Would not be able to remove the trojan without you. Link to post Share on other sites More sharing options...
nasdaq Posted November 2, 2020 ID:1417940 Share Posted November 2, 2020 Good Work. Stay safe. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted November 3, 2020 Root Admin ID:1418098 Share Posted November 3, 2020 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Please review the following for Tips to help protect from infection Thank you Link to post Share on other sites More sharing options...
Recommended Posts