found some trojans with avast free, but i must have hidden viruses. advice

[joshuacm]

I keep having my cursor move and open files, close tabs on my browser (even in safe mode with networking).

Other antivirus programs will not run in conjunction with avast. Avast free will not detect anything else, and i have run it in bootscan mode. I tried running bitdefender, and some version of kapersky. I tried something called unhackme, but to find rootkits, it needs some cd. I have tried various programs to detect rats. I have not found what is going on. I have purchased a new laptop to transfer data since the current one seems to have a problematic battery, and constantly needs the adapter reset, and this virus issue that cannot be detected, and this battery issue. I have decided that i should resolve this hack that seems to be a virus, and transfer everything, but I need to find out what it must be. Please advise how I can find it and resolve it. Avast is not detecting it.

I do not even know how the trojans got on my laptop to begin with, besides a possible phishing e-mail that took me to a website that looked like a consumer reports website with a real domain to unsubscribe. Please advise.

I have also purchased the new laptop prior due to hardware issues. Windows 10 updates had caused hardware compatibility issues. But hopefully this issue can be resolved.

malwarebytes.txt Addition.txt FRST.txt

Edited November 10, 2021 by AdvancedSetup
corrected font issue

[AdvancedSetup]

Hello @joshuacm

I see the following

Platform: Microsoft Windows 10 Home Version 21H1 19043.1288 (X64) Language: English (United States)

Are  you located in the United States and speak English? I ask because you have at least one item or more that appears to not be English

You seem to possibly have or had RegRun Security Suite which is probably not a wanted program for most users.

Give me a bit to read your logs more and I'll be back with some stuff to run

Thanks

 

[AdvancedSetup]

Hello @joshuacm

Can I get you to please temporarily uninstall the following. Once done let me know.

 

Adobe Shockwave Player 12.1

Avast Free Antivirus
Avast Secure Browser
Avast Update Helper (this one is hidden in the Registry so it won't show in the Add/Remove unless you uncheck the hidden entry in the registry)

Bitdefender Agent

Bonjour

Check Point SBA (Zone Alarm)

Combo Cleaner

DisableMSDefender (another hidden entry in the Registry)

swMSM (another hidden entry in the Registry from Adobe)

UnHackMe 13.10

ZoneAlarm Anti-Ransomware

ZoneAlarm Firewall

ZoneAlarm Free Firewall

ZoneAlarm Security

 

 

 

[joshuacm]

Those are why i don't like using some products. that product in the first post is a program by a third-party program that checks to see if somebody has hacked me. I do not like the idea of uninstalling my firewall and antivirus program since i have been hacked and avast has two trojans quarantined.  I do not want them to be rampant in my system. Bit defender may be recognized, but I do not think it is running. When I tried to run it, it tried to get me to uninstall those other programs. I also disabled combo cleaner. Why would I need to disable windows defender and every program that protects my computer? I noticed that malware bytes free clearly ran, but did not detect anything. unhack me seems to not find any malicious programs, but it said some search tool might be problematic. I do speak English. All other languages that I have studies are languages that I don't remember very much at all. I do live in the United States. Isn't Bonjour some Windows product? I am wondering why shockwave would need to be uninstalled. I don't know if that does anything. I think that it is outdated. It probably is part of some other adobe product. It used to be used to play some sort of animations probably in the 90s on websites I believe. The other day i was in safe mode with networking trying to check something related to this same problem, and zone alarm and avast were not running, and whatever is causing this problem allowed somebody to access my computer. I do have remote access turned off. Please explain why all of these must be uninstalled or disabled.

[AdvancedSetup]

Most of them are not needed. Some are problematic.

Shockwave, Adobe Flash, etc. are all end of life. Adobe does not support them. Any reputable website has not been using them now for over a couple of years.

Okay, no problem, we'll see if someone else has time to help you. I have no idea what is wrong with your computer and have offered suggestions on how to proceed so that we can try to eliminate old programs or unwanted/unneeded programs. Windows 10 already comes with a decent antivirus as well as a good firewall.

Those are my suggestions as these other programs can also prevent or mask what else might be running on the computer. If you don't wish to follow my advice that's okay. Perhaps someone else will chime in with other helpful information

Thank you again

 

 

[joshuacm]

i do not even think shockwave is active on my computer. it is probably some reference to something that was installed a long time ago. I have a license to flash, as i purchased it a long time ago, so I took some minor lessons to do animation. I may try to do it for fun to make youtube videos. But that is irrelevant. Even windows defender has not ever detected anything in all of the years that I have used it. The same with Malwarebytes as far as I know. But from my knowledge, uninstalling antivirus software while it has viruses in quarantine will likely allow those viruses to be active on my computer. Malwarebytes may scan for rootkits, but it does not seem like it scans for every virus. Avast detected things that Malwarebytes did not. I really have used Malwarebytes for years. Another website tells me to keep avast on, but keep the firewall open. That does not make sense to me, unless they mean to keep it on. Also, Malwarebytes itself does not say that the other programs are interfering, yet it doesn't seem to detect anything. I think that in the past, it may have detected adware.

[joshuacm]

shockwave is the player, which is for some reason on my computer. i do not have anything besides that that might be flash installed on my computer. Also, i want to note, that when I ran malwarebytes, it was in safe mode. The other software that you have mentioned may not have been running since they do not automatically start in safe mode. That means it should  not have interfered. What would you have me do if these things were all uninstalled? Just run it again? One of the recent times that I was in safe mode (specifically with networking), and al of those programs were disabled, I had this issue with programs being opened, etc. Yesterday, i had them disabled, and ran eset one time scan, and it did not find anything.

[joshuacm]

i am trying to find out what exactly people here are suggesting and wanting to do. Another site told me to uninstall avast, and said it was causing other programs to crash, but the log seemed to say that avast temporarily had problems starting (which i never saw it stop (except in safe mode, where it didn't run). Also, the log showed that other programs didn't run, but it didn't seem to say avast stopped them. I noticed that when i have followed up to ask that if i follow the suggested instructions, what i would do, that nobody is answering the question. Please let me know, as if nobody would answer, how would i even get help if i uninstalled all of those things? I am aware that shockwave isn't even running, and it is not even a security software.