philsg Posted May 30, 2021 ID:1460378 Share Posted May 30, 2021 Hi. McAfee antivirus keeps saying "We just stopped a virus" even after deleting the quarantined files. The virus always comes from the temp folder. I tried deleting all the temp files but it still keeps coming back. Any help would be appreciated. Thanks. Link to post Share on other sites More sharing options...
Maurice Naggar Posted May 30, 2021 ID:1460386 Share Posted May 30, 2021 Hello. My name is Maurice. As we go along, please just only attach any reports I request, as we go along. Please do all the all steps on this pinned topic-post https://forums.malwarebytes.com/topic/9573-im-infected-what-do-i-do-now/?tab=comments#comment-46166 1 Link to post Share on other sites More sharing options...
philsg Posted May 30, 2021 Author ID:1460388 Share Posted May 30, 2021 Thank you so much for responding. Here is the log from Farbar. I also downloaded Malwarebytes and it is also detecting the virus. Addition.txt FRST.txt Link to post Share on other sites More sharing options...
Maurice Naggar Posted May 30, 2021 ID:1460417 Share Posted May 30, 2021 Thank you for the FRST set. I do need the report from Malwarebytes. locate the Scan run report; export out a copy; & then attach in with your reply. See https://support.malwarebytes.com/hc/en-us/articles/360038479194-View-Reports-and-History-in-Malwarebytes-for-Windows-v4 We will do more, later. 1 Link to post Share on other sites More sharing options...
Maurice Naggar Posted May 30, 2021 ID:1460428 Share Posted May 30, 2021 Second reply for Sunday. ( See prior above.) This is the following procedure to do next. [ 1 ] Need to insure Windows File Explorer is set to SHOW ALL files & folders. Use Option One or Two of article https://www.tenforums.com/tutorials/7078-turn-off-show-all-folders-windows-10-navigation-pane.html [ 2 ] The script Fixlist.txt needs to be saved to the same folder that contains FRST64.exe / you have yours saved at Downloads. The custom script on this post is ONLY for this machine and NO other. This custom script is to run the Windows System File Checker tool, to empty temporary files & Recycle bin, to hope to help Microsoft Update in future, & see about locating where APP1.exe is. Please be sure to Close any open work files, documents, any apps you started yourself before starting this. If there are any CD / DVD / or USB-flash-thumb or USB-storage drives attached, please disconnect any of those. The system will be rebooted after the script has run. Please save the (attached file named) FIXLIST.txt to the Downloads folder Fixlist.txt Start the Windows Explorer and then, to the Downloads folder. RIGHT click on FRST64.exe and select RUN as Administrator and allow it to proceed. Reply YES when prompted to allow to run the tool. If the tool warns you the version is outdated, please download and run the updated version. IF Windows prompts you about running this, select YES to allow it to proceed. IF you get a block message from Windows about this tool...... click line More info information on that screen and click button Run anyway on next screen. on the FRST window: Click the Fix button just once, and wait. PLEASE have lots and lots of patience when this starts. You will see a green progress bar start. Lots of patience. If you receive a message that a reboot is required, please make sure you allow it to restart normally. The tool will complete its run after restart. When finished, the tool will make a log ( Fixlog.txt) in the same location from where it was run. Please attach the FIXLOG.txt with your next reply later, at your next opportunity Do let me know how things are overall, after all this. This is not a one shot cure all. There is much more to do after. 1 Link to post Share on other sites More sharing options...
Solution philsg Posted May 30, 2021 Author Solution ID:1460498 Share Posted May 30, 2021 Sorry for the late response. Here is the scan report from Malwarebytes. malwarebytes scan report.txt Link to post Share on other sites More sharing options...
philsg Posted May 30, 2021 Author ID:1460501 Share Posted May 30, 2021 Here is the fixlog: Fixlog.txt Link to post Share on other sites More sharing options...
Maurice Naggar Posted May 30, 2021 ID:1460502 Share Posted May 30, 2021 Hello. Thank you for the Scan report. It reports zero / nada malware. . Thanks for the Fixlog. The run is good. The Windows System File Checker found some discrepancies & corrected them. And significantly, no presence is found of app1.exe How is the original situation at this point now ? 1 Link to post Share on other sites More sharing options...
philsg Posted May 31, 2021 Author ID:1460504 Share Posted May 31, 2021 Thank you so much for helping me. I think that fixed it. No more detected viruses and the computer's fan is much quieter now. Again, thank you. You're a lifesaver! Link to post Share on other sites More sharing options...
Maurice Naggar Posted May 31, 2021 ID:1460526 Share Posted May 31, 2021 Hi. I am glad to have worked with you. We can proceed with cleanup of tools we used. To remove the FRST tool & its work files, do this. Go to your Downloads folder. Do a RIGHT-click on FRST64.exe & select RENAME & then change it to UNINSTALL.exe . Then run that ( double click on it) to begin the cleanup process. Any other download file I had you download, you may delete. I wish you all the best. Stay safe. Sincerely. Maurice Link to post Share on other sites More sharing options...
Maurice Naggar Posted May 31, 2021 ID:1460527 Share Posted May 31, 2021 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Please review the following for Tips to help protect from infection Thank you 1 Link to post Share on other sites More sharing options...
Recommended Posts