Jump to content

Help with removing viruses/threats from my computer


Recommended Posts

Hey there, I recently downloaded a bit of a suspicious file online, and I got a virus. I was able to understand what I was downloading halfway, and stopped it, ran an antivirus scan, and terminated all processes related to it. I ran a Malwarebytes scan, FRST scan and adwcleaner scan. I will attach the reports. I just wanted to make sure there was nothing else I missed since today morning I got a notification from gmail that there was a suspicious app on my desktop, and I had followed over 1k people on Instagram. I disabled my instagram account, and my gmail has 2FA, so I didnt loose any info yet, but I want to make sure that I am completely secure. The report.txt file is my Malwarebytes scan, and FRST and Addition txts are from the FRST scan. 

FRST.txt Addition.txt report.txt

Link to post
Share on other sites

Hello @IhsanRocks and :welcome:

 

My name is MKDB and I will assist you.

 

  • Please follow the steps in the given order and post back the logs as an attachment when ready. Thank you very much for your cooperation.
  • Temporarily disable your antivirus or other security software first. Make sure to turn it back on once the scans are completed.
  • Temporarily disable Microsoft SmartScreen to download software below if needed. Make sure to turn it back on once the scans are completed.
  • As English is not my native language, please do not use slang or idoms. It may be hard for me to understand.

 

I'm looking through your logfiles now. In the meantime, please follow Step 1.

 

 

Step 1

The Microsoft Safety Scanner (MSS) is a free Microsoft stand-alone virus scanner that can be used to scan for & remove malware or potentially unwanted software from a system.

  • The download links & the how-to-run-the tool are at this link at Microsoft.
  • Please let me know the results of this scan.
  • Run a Quick Scan.
  • The log is named MSERT.log.
  • The log will be at%SYSTEMROOT%\debug\msert.log which in most cases is

C:\Windows\debug\msert.log

  • Please attach that log with your next reply.

 

 

Link to post
Share on other sites

2 hours ago, MKDB said:

@IhsanRocks

Do you still use Reason Cybersecurity? I assume, you don't as I see only some leftovers of it in the logfiles.

If you like, we could remove those leftovers as well.

Thank you!

Hey there, thank you for your fast response, and no I dont use it anymore. It was taking a lot of disk space, and slowing down my computer a lot and blocking a few applications from running, like FRST. After deleting, now there are only a few small spikes in disk usage by the system. 

Link to post
Share on other sites

3 hours ago, MKDB said:

Hello @IhsanRocks and :welcome:

 

My name is MKDB and I will assist you.

 

  • Please follow the steps in the given order and post back the logs as an attachment when ready. Thank you very much for your cooperation.
  • Temporarily disable your antivirus or other security software first. Make sure to turn it back on once the scans are completed.
  • Temporarily disable Microsoft SmartScreen to download software below if needed. Make sure to turn it back on once the scans are completed.
  • As English is not my native language, please do not use slang or idoms. It may be hard for me to understand.

 

I'm looking through your logfiles now. In the meantime, please follow Step 1.

 

 

Step 1

The Microsoft Safety Scanner (MSS) is a free Microsoft stand-alone virus scanner that can be used to scan for & remove malware or potentially unwanted software from a system.

  • The download links & the how-to-run-the tool are at this link at Microsoft.
  • Please let me know the results of this scan.
  • Run a Quick Scan.
  • The log is named MSERT.log.
  • The log will be at%SYSTEMROOT%\debug\msert.log which in most cases is

C:\Windows\debug\msert.log

  • Please attach that log with your next reply.

 

 

Here is the report, I dont think any of the mentioned files under Quick Scan results are a problem, since I was the one who disabled this a while ago since Windows Support asked me to do so. But when I was scanning it found 8 threats, and got cut in between the bar, and then it said it only found 2 threats. 

msert.log

Link to post
Share on other sites

Thank you for your logfile and the provided information @IhsanRocks.

We are going to run a fix with FRST to remove some malware. After that, we run another scan with FRST to check our results.

 

 

Step 1

  • Please download the attached fixlist.txt file and save it to the location where you ran FRST from ( C:\Users\ihsan\Desktop\Applications\Antivirus\ ).

Note: It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

  • Close all open programs and save your work.
  • Run FRST again.
  • Press the Fix button only once and wait. Please be patient.
  • If the tool needs a restart, please make sure you let the system restart normally and let the tool complete its run after restart.
  • FRST will create one log now (Fixlog.txt) in the same directory the tool is run.
  • Please attach this logfile to your next reply.

 

 

Step 2

  • Run FRST again.
  • Do not change any settings.
  • Press the Scan button.
  • FRST will create two logs now (FRST.txt + Addition.txt) in the same directory the tool is run.
  • Please attach these logfiles to your next reply.

 

 

 

fixlist.txt

Link to post
Share on other sites

13 hours ago, MKDB said:

Thank you for your logfile and the provided information @IhsanRocks.

We are going to run a fix with FRST to remove some malware. After that, we run another scan with FRST to check our results.

 

 

Step 1

  • Please download the attached fixlist.txt file and save it to the location where you ran FRST from ( C:\Users\ihsan\Desktop\Applications\Antivirus\ ).

Note: It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

  • Close all open programs and save your work.
  • Run FRST again.
  • Press the Fix button only once and wait. Please be patient.
  • If the tool needs a restart, please make sure you let the system restart normally and let the tool complete its run after restart.
  • FRST will create one log now (Fixlog.txt) in the same directory the tool is run.
  • Please attach this logfile to your next reply.

 

 

Step 2

  • Run FRST again.
  • Do not change any settings.
  • Press the Scan button.
  • FRST will create two logs now (FRST.txt + Addition.txt) in the same directory the tool is run.
  • Please attach these logfiles to your next reply.

 

 

 

fixlist.txt 5.78 kB · 1 download

Here you go.  

 

Addition.txt FRST.txtFixlog.txt

Edited by IhsanRocks
Link to post
Share on other sites

Thank you for those logfiles @IhsanRocks. Good Job! 🙂

As a general note: Please do not install or uninstall any other program until we have finished our work here.

 

We are going to remove some orphans and check windows system files (Step 1). This may take some time (>15 min), please be patient. You should not run any other program during this fix.

After that, please run another scan with FRST.

Thank you again!

 

 

 

 

Step 1

  • Please download the attached fixlist.txt file and save it to the location where you ran FRST from ( C:\Users\ihsan\Desktop\Applications\Antivirus\ ).

Note: It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

  • Close all open programs and save your work.
  • Run FRST again.
  • Press the Fix button only once and wait. Please be patient.
  • If the tool needs a restart, please make sure you let the system restart normally and let the tool complete its run after restart.
  • FRST will create one log now (Fixlog.txt) in the same directory the tool is run.
  • Please attach this logfile to your next reply.

 

 

Step 2

  • Run FRST again.
  • Do not change any settings.
  • Press the Scan button.
  • FRST will create two logs now (FRST.txt + Addition.txt) in the same directory the tool is run.
  • Please attach these logfiles to your next reply.

 

 

 

fixlist.txt

Link to post
Share on other sites

14 hours ago, MKDB said:

Thank you for those logfiles @IhsanRocks. Good Job! 🙂

As a general note: Please do not install or uninstall any other program until we have finished our work here.

 

We are going to remove some orphans and check windows system files (Step 1). This may take some time (>15 min), please be patient. You should not run any other program during this fix.

After that, please run another scan with FRST.

Thank you again!

 

 

 

 

Step 1

  • Please download the attached fixlist.txt file and save it to the location where you ran FRST from ( C:\Users\ihsan\Desktop\Applications\Antivirus\ ).

Note: It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

  • Close all open programs and save your work.
  • Run FRST again.
  • Press the Fix button only once and wait. Please be patient.
  • If the tool needs a restart, please make sure you let the system restart normally and let the tool complete its run after restart.
  • FRST will create one log now (Fixlog.txt) in the same directory the tool is run.
  • Please attach this logfile to your next reply.

 

 

Step 2

  • Run FRST again.
  • Do not change any settings.
  • Press the Scan button.
  • FRST will create two logs now (FRST.txt + Addition.txt) in the same directory the tool is run.
  • Please attach these logfiles to your next reply.

 

 

 

fixlist.txt 962 B · 2 downloads

FRST.txtFixlog.txt

Addition.txt

Link to post
Share on other sites

Thank you for your logfiles @IhsanRocks.

A warning:

Please do NOT install or uninstall any other program until we have finished our work here.

You seem to have a knack for downloading and running crap installers. 😄

 

 

Step 1

  • Please download the attached fixlist.txt file and save it to the location where you ran FRST from ( C:\Users\ihsan\Desktop\Applications\Antivirus\ ).

Note: It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

  • Close all open programs and save your work.
  • Run FRST again.
  • Press the Fix button only once and wait. Please be patient.
  • If the tool needs a restart, please make sure you let the system restart normally and let the tool complete its run after restart.
  • FRST will create one log now (Fixlog.txt) in the same directory the tool is run.
  • Please attach this logfile to your next reply.

 

 

Step 2

  • Please download and run the Kaspersky Virus Removal Tool to remove any found threats. More information here.
  • Let me know if it finds anything or not. You can find a logfile under Report.

 

 

Step 3

  • Run FRST again.
  • Do not change any settings.
  • Press the Scan button.
  • FRST will create two logs now (FRST.txt + Addition.txt) in the same directory the tool is run.
  • Please attach these logfiles to your next reply.

 

 

 

fixlist.txt

Link to post
Share on other sites

Thank you for your feedback @IhsanRocks.

 

Thank you for your cooperation, we're done.

 

Step 1

  • Right-Click on FRST64 and choose Rename.
  • Rename FRST64 into Uninstall.
  • Run Uninstall.
  • FRST and it’s files/folders will be deleted.
  • If the tool needs a restart, please make sure you let the system restarts normally.

 

 

 

A few final recommendations:

  1. Recommend using a Password Manager for all websites, etc. that require a password. Never use the same password on more than one site.
    https://www.howtogeek.com/240255/password-managers-compared-lastpass-vs-keepass-vs-dashlane-vs-1password/
  2. Make sure you're backing up your files https://forums.malwarebytes.com/topic/136226-backup-software/
  3. Keep all software up to date - PatchMyPC - https://patchmypc.com/home-updater#download
  4. Keep your Operating System up to date and current at all times - https://support.microsoft.com/en-us/windows/windows-update-faq-8a903416-6f45-0718-f5c7-375e92dddeb2
  5. Further tips to help protect your computer data and improve your privacy: https://forums.malwarebytes.com/topic/258363-tips-to-help-protect-from-infection/ 
  6. Please consider installing the following Content Blockers for your Web browsers if you haven't done so already. This will help improve overall security

Malwarebytes Browser Guard

uBlock Origin

 

Further reading if you like to keep up on the malware threat scene: Malwarebytes Blog  https://blog.malwarebytes.com/

Hopefully, we've been able to assist you with correcting your system issues.

Thank you for using Malwarebytes.

 

 

Link to post
Share on other sites

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Please review the following for Tips to help protect from infection.

Thank you.

 

As this topic seems to be solved, I do not follow it any longer.

Take care!

Link to post
Share on other sites

  • Root Admin

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Please review the following to help you better protect your computer and privacy Tips to help protect from infection

Thank you

 

 

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.