Rescpt Posted February 24, 2022 ID:1504242 Share Posted February 24, 2022 Hello my brother's Malwarebytes is constantly displaying RTP detection notifications from the time my he downloaded an optimization file which he said ended up downloading tons of other files as well. His windows defender got disabled when this was happening (after deleting one of the files he was able to reenable it). I did a threat scan and 16 threats were found which I quarantined but I am still getting the notifications. I have attached the Malwarebytes report as well as the FRST.txt and ADDITION.txt files from the FarBar recovery tool. I would appreciate some help in understanding and a possible fix, thank you. MalwareBytesReport.txt FRST.txt Addition.txt Link to post Share on other sites More sharing options...
MKDB Posted February 24, 2022 ID:1504258 Share Posted February 24, 2022 Hello @Rescpt and My name is MKDB and I will assist you. Please follow the steps in the given order and post back the logs as an attachment when ready. Thank you very much for your cooperation. Temporarily disable your antivirus or other security software first. Make sure to turn it back on once the scans are completed. Temporarily disable Microsoft SmartScreen to download software below if needed. Make sure to turn it back on once the scans are completed. As English is not my native language, please do not use slang or idoms. It may be hard for me to understand. You are infected with lots of malware, but we should be able to delete it. Let's start with a FRST-Fix (Step 1) and a fresh scan (Step2). Step 1 Please download the attached fixlist.txt file and save it to the location where you ran FRST from ( C:\Users\undre\Desktop\FRST64.exe ). Note: It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work. Close all open programs and save your work. Run FRST again. Press the Fix button only once and wait. Please be patient. If the tool needs a restart, please make sure you let the system restart normally and let the tool complete its run after restart. FRST will create one log now (Fixlog.txt) in the same directory the tool is run. Please attach this logfile to your next reply. Step 2 Run FRST again. Do not change any settings. Press the Scan button. FRST will create two logs now (FRST.txt + Addition.txt) in the same directory the tool is run. Please attach these logfiles to your next reply. fixlist.txt Link to post Share on other sites More sharing options...
Rescpt Posted February 24, 2022 Author ID:1504260 Share Posted February 24, 2022 Thank you for your reply. I completed the 2 steps you outlined and will attach the files. Fixlog.txt Addition.txt FRST.txt 1 Link to post Share on other sites More sharing options...
MKDB Posted February 25, 2022 ID:1504371 Share Posted February 25, 2022 (edited) Thank you very much for your logfiles @Rescpt. I will review your logfiles and report back later this day... probably in the evening. Edited February 25, 2022 by MKDB Link to post Share on other sites More sharing options...
MKDB Posted February 25, 2022 ID:1504401 Share Posted February 25, 2022 (edited) Hi again @Rescpt, please run MBAR according to the following guide to check for hidden malware: https://forums.malwarebytes.com/topic/198907-requested-resource-is-in-use-error-unable-to-start-malwarebytes When done, I need the MBAR logs. Upon completion of the scan or after the reboot, two files named mbar-log.txt and system-log.txt will be created. Both files can be found in the extracted MBAR folder on your Desktop. Please attach both files in your next reply. Thank you again! Edited February 25, 2022 by MKDB 1 Link to post Share on other sites More sharing options...
MKDB Posted February 27, 2022 ID:1504645 Share Posted February 27, 2022 Hi @Rescpt, do you still need help? 🙂 If so, please follow my instructions and post the logfiles. Thank you. Link to post Share on other sites More sharing options...
Rescpt Posted February 28, 2022 Author ID:1504753 Share Posted February 28, 2022 HI, I sent you a private message four days ago on the situation. Thank You Link to post Share on other sites More sharing options...
Solution MKDB Posted February 28, 2022 Solution ID:1504789 Share Posted February 28, 2022 Hi @Rescpt, Excuse me, but I did NOT get any privat messages from you. I check my inbox every day and usually reply within 24 hours. Let me know how we proceed. Thanks! 1 Link to post Share on other sites More sharing options...
Rescpt Posted March 1, 2022 Author ID:1504929 Share Posted March 1, 2022 I have reinstalled windows thank you for helping me Link to post Share on other sites More sharing options...
MKDB Posted March 1, 2022 ID:1504963 Share Posted March 1, 2022 (edited) Hi @Rescpt, Thank you for your feedback! As this topic seems to be solved, I do not follow it any longer. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Please review the following for Tips to help protect from infection. Thank you. Edited March 1, 2022 by MKDB Link to post Share on other sites More sharing options...
Recommended Posts