Possibly infected, blue screen pop up

[xrayvision]

PC seems slower, and a couple times a day at least I see a blue screen pop-up for a micro-second.

After doing threat scan with Malwarebytes, I quarantined the threats. All three logs are attached. Thank you.

Malwarebytes.txt FRST.txt Addition.txt

[MKDB]

Hello @xrayvision and

 

My name is MKDB and I will assist you.

 

• Please follow the steps in the given order and post back the logs as an attachment when ready. Thank you very much for your cooperation.
• Temporarily disable your antivirus or other security software first. Make sure to turn it back on once the scans are completed.
• Temporarily disable Microsoft SmartScreen to download software below if needed. Make sure to turn it back on once the scans are completed.
• As English is not my native language, please do not use slang or idoms. It may be hard for me to understand.

 

I review your logfiles now and report back as soon as possible.

[MKDB]

There are still some malware elements on your system that we should remove (Step 1).

After that, I would like you to run another scan with FRST (Step 2).

 

 

Step 1

• Please download the attached fixlist.txt file and save it to the location where you ran FRST from ( C:\Users\xray\Desktop\ ).

Note: It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

• Close all open programs and save your work.
• Run FRST again.
• Press the Fix button only once and wait. Please be patient.
• If the tool needs a restart, please make sure you let the system restart normally and let the tool complete its run after restart.
• FRST will create one log now (Fixlog.txt) in the same directory the tool is run.
• Please attach this logfile to your next reply.

 

 

 

Step 2

• Run FRST again.
• Do not change any settings.
• Press the Scan button.
• FRST will create two logs now (FRST.txt + Addition.txt) in the same directory the tool is run.
• Please attach these logfiles to your next reply.

 

 

 

fixlist.txt

[xrayvision]

Thanks, MKDB.

FRST.txt Addition.txt

[AdvancedSetup]

Hello @xrayvision

Please attach the FIXLOG.TXT file for @MKDB

Cheers

 

[xrayvision]

Oops. Thanks.

Fixlog.txt

[AdvancedSetup]

I think it's about 1 or 2 AM for MKDB so they should be back with you again tomorrow.

Cheers

 

[MKDB]

Thanks to both of you! 😉

Analyzing logfiles now...

[MKDB]

Good job @xrayvision ! 😉

Your logfiles look much better.

 

I want to check your windows system files now (Step1) and run another scan to double check your system (Step2).

Please note: Step 1 can take some time (> 20 min), please be very patient.

 

 

 

Step 1

• Please download the attached fixlist.txt file and save it to the location where you ran FRST from ( xxx ).

Note: It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

• Close all open programs and save your work.
• Run FRST again.
• Press the Fix button only once and wait. Please be patient.
• If the tool needs a restart, please make sure you let the system restart normally and let the tool complete its run after restart.
• FRST will create one log now (Fixlog.txt) in the same directory the tool is run.
• Please attach this logfile to your next reply.

 

 

 

Step 2

The Microsoft Safety Scanner (MSS) is a free Microsoft stand-alone virus scanner that can be used to scan for & remove malware or potentially unwanted software from a system.

• The download links & the how-to-run-the tool are at this link at Microsoft.
• Please let me know the results of this scan.
• Run a Quick Scan.
• The log is named MSERT.log.
• The log will be at%SYSTEMROOT%\debug\msert.log which in most cases is

C:\Windows\debug\msert.log

• Please attach that log with your next reply.

 

 

 

 

 

 

fixlist.txt

[xrayvision]

Thanks again.

Fixlog.txt msert.log

[MKDB]

From the log: Windows Resource Protection found corrupt files and successfully repaired them. 👍

 

 

Thank you for your cooperation, we're done @xrayvision 🙂

 

Step 1

• Right-Click on FRST64 and choose Rename.
• Rename FRST64 into Uninstall.
• Run Uninstall.
• FRST and it’s files/folders will be deleted.
• If the tool needs a restart, please make sure you let the system restarts normally.

 

 

 

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Please review the following for Tips to help protect from infection.

Thank you.

[xrayvision]

A final thank you. Seems much better now. :)

[MKDB]

As this topic seems to be solved, I do not follow it any longer.

Take care!

[AdvancedSetup]

1. Recommend using a Password Manager for all websites, etc. that require a password. Never use the same password on more than one site.
   https://www.howtogeek.com/240255/password-managers-compared-lastpass-vs-keepass-vs-dashlane-vs-1password/
2. Keep all software up to date - PatchMyPC - https://patchmypc.com/home-updater#download
3. Keep your Operating System up to date and current at all times - https://support.microsoft.com/en-us/windows/windows-update-faq-8a903416-6f45-0718-f5c7-375e92dddeb2
4. Install a content blocker for your browser. Malwarebytes Browser Guard (Free)
   Firefox: https://addons.mozilla.org/en-GB/firefox/addon/malwarebytes/  
   Chrome: https://chrome.google.com/webstore/detail/malwarebytes-browser-guar/ihcjicgdanjaechkgeegckofjjedodee 
5. Further tips to help protect your computer data and improve your privacy: https://forums.malwarebytes.com/topic/258363-tips-to-help-protect-from-infection/ 

 

Further reading if you like to keep up on the malware threat scene: Malwarebytes Blog  https://blog.malwarebytes.com/

Hopefully, we've been able to assist you with correcting your system issues.

Thank you for using Malwarebytes

 

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Please review the following to help you better protect your computer and privacy Tips to help protect from infection

Thank you