6000yuval Posted June 21, 2021 ID:1464613 Share Posted June 21, 2021 Hi so im new over here tried using malwarebytes didnt work. took a look at the other posts over here saw that they were requested to upload those.. tried to scan them by myself but idk anything about it Addition.txt FRST.txt Link to post Share on other sites More sharing options...
kevinf80 Posted June 21, 2021 ID:1464636 Share Posted June 21, 2021 Hello 6000yuval and welcome to Malwarebytes, What makes you believe you have Clipboard Hijacking Virus..? Continue with the following: Open Malwarebytes, select > small cog wheel top right hand corner, that will open "settings" from there select "Security" tab. Scroll down to "Scan Options" ensure Scan for Rootkits and Scan within Archives are both on.... Close out the settings window, this will take you back to "DashBoard" select the Blue "Scan Now" tab...... When the scan completes quarantine any found entries... To get the log from Malwarebytes do the following: Open Malwarebytes Click on the Detection History tab > from main interface. Then click on "History" that will open to a historical list Double click on the Scan log which shows the Date and time of the scan just performed. Click Export > From export you have two options:Copy to Clipboard - if seleted right click to your reply and select "Paste" log will be pasted to your replyText file (*.txt) - if selected you will have to name the file and save to a place of choice, recommend "Desktop" then attach to reply Please use "Text file (*.txt), then name the file and save to a place of choice, recommend "Desktop" then attach to reply Next, Download AdwCleaner by Malwarebytes onto your Desktop. Or from this Mirror Right-click on AdwCleaner.exe and select http://i.imgur.com/Spcusrh.pngRun as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users) Accept the EULA (I accept), then click on Scan Let the scan complete. Once it's done, make sure that every item listed in the different tabs is checked and click on the Quarantine button. This will kill all the active processes Once the cleaning process is complete, AdwCleaner will ask to restart your computer, do it After the restart, a log will open when logging in. Please copy/paste the content of that log in your next reply Next, Download "Microsoft's Safety Scanner" and save direct to the desktop Ensure to get the correct version for your system....https://docs.microsoft.com/en-us/windows/security/threat-protection/intelligence/safety-scanner-download Right click on the Tool, select Run as Administrator the tool will expand to the options Window In the "Scan Type" window, select Quick Scan Perform a scan and Click Finish when the scan is done. Retrieve the MSRT log as follows, and post it in your next reply: 1) Select the Windows key and R key together to open the "Run" function 2) Type or Copy/Paste the following command to the "Run Line" and Press Enter: notepad c:\windows\debug\msert.log The log will include log details for each time MSRT has run, we only need the most recent log by date and time.... Let me see those logs in your reply... Thank you, Kevin.. Link to post Share on other sites More sharing options...
6000yuval Posted June 21, 2021 Author ID:1464640 Share Posted June 21, 2021 20 minutes ago, kevinf80 said: Hello 6000yuval and welcome to Malwarebytes, What makes you believe you have Clipboard Hijacking Virus..? Continue with the following: Open Malwarebytes, select > small cog wheel top right hand corner, that will open "settings" from there select "Security" tab. Scroll down to "Scan Options" ensure Scan for Rootkits and Scan within Archives are both on.... Close out the settings window, this will take you back to "DashBoard" select the Blue "Scan Now" tab...... When the scan completes quarantine any found entries... To get the log from Malwarebytes do the following: Open Malwarebytes Click on the Detection History tab > from main interface. Then click on "History" that will open to a historical list Double click on the Scan log which shows the Date and time of the scan just performed. Click Export > From export you have two options:Copy to Clipboard - if seleted right click to your reply and select "Paste" log will be pasted to your replyText file (*.txt) - if selected you will have to name the file and save to a place of choice, recommend "Desktop" then attach to reply Please use "Text file (*.txt), then name the file and save to a place of choice, recommend "Desktop" then attach to reply Next, Download AdwCleaner by Malwarebytes onto your Desktop. Or from this Mirror Right-click on AdwCleaner.exe and select http://i.imgur.com/Spcusrh.pngRun as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users) Accept the EULA (I accept), then click on Scan Let the scan complete. Once it's done, make sure that every item listed in the different tabs is checked and click on the Quarantine button. This will kill all the active processes Once the cleaning process is complete, AdwCleaner will ask to restart your computer, do it After the restart, a log will open when logging in. Please copy/paste the content of that log in your next reply Next, Download "Microsoft's Safety Scanner" and save direct to the desktop Ensure to get the correct version for your system....https://docs.microsoft.com/en-us/windows/security/threat-protection/intelligence/safety-scanner-download Right click on the Tool, select Run as Administrator the tool will expand to the options Window In the "Scan Type" window, select Quick Scan Perform a scan and Click Finish when the scan is done. Retrieve the MSRT log as follows, and post it in your next reply: 1) Select the Windows key and R key together to open the "Run" function 2) Type or Copy/Paste the following command to the "Run Line" and Press Enter: notepad c:\windows\debug\msert.log The log will include log details for each time MSRT has run, we only need the most recent log by date and time.... Let me see those logs in your reply... Thank you, Kevin.. Hi kevin tnx so much ! No detection on Malwarebytes and i have done a full custom scan including rootkits ... earlier.... adw after scam complete suddenly closing all the apps on the pc.... and those are the logs of safety microsoft : Microsoft Safety Scanner v1.341, (build 1.341.1174.0) Started On Tue Jun 22 00:18:52 2021 Engine: 1.1.18300.4 Signatures: 1.341.1174.0 MpGear: 1.1.16330.1 Run Mode: Interactive Graphical Mode Successfully Submitted Heartbeat Report Microsoft Safety Scanner Finished On Tue Jun 22 00:19:42 2021 Return code: 0 (0x0) --------------------------------------------------------------------------------------- Microsoft Safety Scanner v1.341, (build 1.341.1174.0) Started On Tue Jun 22 00:19:49 2021 Engine: 1.1.18300.4 Signatures: 1.341.1174.0 MpGear: 1.1.16330.1 Run Mode: Interactive Graphical Mode Quick Scan Results: ------------------- Threat Detected: VirTool:Win32/DefenderTamperingRestore and Removed! Action: Remove, Result: 0x00000000 regkeyvalue://hklm\software\microsoft\windows defender\\DisableAntiSpyware SigSeq: 0x0000055555C57273 Results Summary: ---------------- Found VirTool:Win32/DefenderTamperingRestore and Removed! Successfully Submitted MAPS Report Successfully Submitted Heartbeat Report Microsoft Safety Scanner Finished On Tue Jun 22 00:22:14 2021 Return code: 6 (0x6) Link to post Share on other sites More sharing options...
kevinf80 Posted June 21, 2021 ID:1464641 Share Posted June 21, 2021 Has AdwCleaner produced a log..? Logs are saved to this folder C:\AdwCleaner\Logs Link to post Share on other sites More sharing options...
6000yuval Posted June 21, 2021 Author ID:1464642 Share Posted June 21, 2021 AdwCleaner[C00].txt AdwCleaner[C01].txt AdwCleaner[C02].txt AdwCleaner[C03].txt AdwCleaner[S00].txt AdwCleaner[S01].txt AdwCleaner[S02].txt AdwCleaner[S03].txt Link to post Share on other sites More sharing options...
6000yuval Posted June 21, 2021 Author ID:1464643 Share Posted June 21, 2021 2 minutes ago, kevinf80 said: Has AdwCleaner produced a log..? Logs are saved to this folder C:\AdwCleaner\Logs forgot to quote. the issue is still persist lost 30$ yesterday Link to post Share on other sites More sharing options...
kevinf80 Posted June 21, 2021 ID:1464648 Share Posted June 21, 2021 In the Windows 10 search box, type or copy/pasteRemote desktop on the result list, look for Remote Desktop application, select Run as Administrator Click on Yes when prompted, on the following window, look at bottom Left-side, Select "Show Options" In the expanded window Select the tab "Local Resources" Remove the tick from Clipboard.. Select the tab "General" select "Save" under Connection Settings.... Close out remote desktop connection... Next, Totally disable "Remote Desktop" instructions at the following link:https://www.tenforums.com/tutorials/92433-enable-disable-remote-desktop-connections-windows-10-pc.html Does the clipboard issue cease..? Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted June 23, 2021 Root Admin ID:1464983 Share Posted June 23, 2021 Are you still with us @6000yuval? Please post a status update when you have a moment Thank you Link to post Share on other sites More sharing options...
kevinf80 Posted June 27, 2021 ID:1465854 Share Posted June 27, 2021 Due to the lack of feedback, this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread. Tips to help protect from infection Thanks Link to post Share on other sites More sharing options...
Recommended Posts