BitCoinMiner Malware

[Shiriri]

I have recently noticed that my CPU and GPU temps seemed to be higher than usual. I asked my friend about it (who knew a thing or two about computers) and he told me that it might be a malware and advised me to download Malwarebytes to check. I did not think it would be the case but after the initial scan, I was notified there are malwares found in my temp file in which was quarantined immediately and removed. However, after every restart, I would still get a notification from Malwarebytes that it detected a malware of the same name and location and I would quarantine and remove again. How can I get rid of this malware permanently? i tried using different software as well such as HitmanPro, Zemana AntiMalware, etc. but still no permanent fix so far.

[nasdaq]

Hello, Welcome to Malwarebytes.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Let's see what we can find.

Download the Farbar Recovery Scan Tool (FRST).
Choose the 32 or 64 bit version for your system.
and save it to a folder on your computer's Desktop.
Ensure that you are in an Administrator Account
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

How to attach a file to your reply:
In the Reply section in the bottom of the topic Click the "more reply Options" button.
http://deeprybka.trojaner-board.de/eset/eng/attachlogs.png

Attach the file(s). A 2 Steps process.
Reply to this topic.
Select the "Choose a File" navigate to the location of the File.
Click the file you wish to Attach. <- Step 1.
Click Attach this file. <- Step 2.
Click the Add reply button.

Please post the logs  for my review.

Wait for further instructions

p.s.
The Farbar program is updated often.
If it's identified as suspicious by your Anti-Virus program trust it if Downloaded from the link I provided.
You should restore the program from the Quarantine folder.
====

 

[Shiriri]

Good day, nasdaq. First of all, thank you very much for taking the time to reply to my thread and being willing to assist. Attached herewith are the logs you have asked for.

Addition.txt FRST.txt

[Shiriri]

2 hours ago, Shiriri said:

Good day, nasdaq. First of all, thank you very much for taking the time to reply to my thread and being willing to assist. Attached herewith are the logs you have asked for.

Addition.txt 54.27 kB · 1 download FRST.txt 47.36 kB · 1 download

Addition.txtFRST.txtRe-ran the scan with the quarantined programs restored.

[nasdaq]

Hi,

Please download the attached Fixlist.txt file to  the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The Computer will restart when the fix is completed.

It will create a log (Fixlog.txt).
===

Your AV programs are deleted. Pleasefor your secutiry  enalbe one of them.
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: COMODO Antivirus (Disabled - Up to date) {05BC7AB5-FF0E-71EC-1054-15DA19B62DC7}

===

If the problem persists and Malwarebytes report the bad entries it may be a Sync issue.

Edge Syncing.
If the problem persists and you are Syncing Edge with other devices reset it.

How to:
https://www.tenforums.com/tutorials/36286-turn-off-sync-favorites-reading-list-microsoft-edge.html
===

Please post the Fixlog.txt and let me know what problem persists.

rejlist.txt

[Shiriri]

Hello, nasdaq.

I did what you have told me: enabled windows defender and used the fix you have attached. Here is the fix log.

Fixlog.txt

[nasdaq]

Hi,

Sorry I sent you the wrong File to fix you system.

 

FIXLIST.TXT

 

Please Download the attached Fixlist.txt and run the Farbar Fix again with this file.

Post the Fislist.log for my review.

Let me know if you have issues with this computer.

fixlist.txt

[Shiriri]

Hello again, nasdaq.

 

Attached herewith is the new fixlist.log. I have not encountered any issues so far after the restart.

Fixlog.txt

[nasdaq]

Hi,

Glad we could help.d

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Please review the following for Tips to help protect from infection

Thank you