HardHatAaron Posted January 11 ID:1610832 Share Posted January 11 Hello, first of all I apologize for my English, since I haven't practiced it lately. An antivirus took my pc and it doesnt let me install the MBSETUP to complete a guide I was following in this forum. First I ran like as I read the mbar, and the scan showed me 3 troyans, I deleted it and followed the steps, also I read a script that only works with the user that had the same problem so I got stucked. please I need help. It would be more help if I need to restart some steps that maybe I pass or for something else. Link to post Share on other sites More sharing options...
JSntgRvr Posted January 11 ID:1610834 Share Posted January 11 Welcome Please download Farbar Recovery Scan Tool and save it to your desktop. Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version. Right click FRST(64) and select Run as administrator. Make sure that under Optional Scans, there is a checkmark on Addition.txt. Press Scan button. It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply. The tool will also produce another log (Addition.txt ). Please attach this also to your reply. Link to post Share on other sites More sharing options...
HardHatAaron Posted January 11 Author ID:1610840 Share Posted January 11 Here it is Addition.txt FRST.txt Link to post Share on other sites More sharing options...
JSntgRvr Posted January 11 ID:1610846 Share Posted January 11 Please remove the following program: WebAdvisor de McAfee (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.859 - McAfee, LLC) Download the enclosed file Fixlist.txt Save it in the same location FRST64.exe is saved. Start FRST (FRST64) with Administrator privileges This time around Press the Fix button and wait When finished, a log file (Fixlog.txt) will pop up and saved in the same location the tool was ran from. Please attach this file in your next reply. Download AdwCleaner and save it to your desktop. Double click AdwCleaner.exe to run it. When AdwCleaner starts, on the left side of the window, click on “Settings” and then enable these repair actions on that tab-window by clicking their button to the far-right for ON status Delete IFEO keys Delete tracing keys Delete Prefetch files Reset Proxy Reset IE Policies Reset Chrome policies Reset Winsock Reset HOSTS file Click Scan Now ... When the scan has finished a Scan Results window will open. Click Cancel (at this point do not attempt to Quarantine anything that is found) Now click the Log Files tab ... Double click on the latest scan log (Scan logs have a [S0*] suffix, where * is replaced by a number, the latest scan will have the largest number) A Notepad file will open containing the results of the scan. Please attach the file in your next reply. Link to post Share on other sites More sharing options...
HardHatAaron Posted January 11 Author ID:1610850 Share Posted January 11 I have an issue, downloading AdwCleaner, the virus took it Fixlog.txt Link to post Share on other sites More sharing options...
JSntgRvr Posted January 12 ID:1610880 Share Posted January 12 Lets remove McAfee entries: Download the enclosed file Fixlist.txt Save it in the same location FRST64.exe is saved. Start FRST (FRST64) with Administrator privileges This time around Press the Fix button and wait When finished, a log file (Fixlog.txt) will pop up and saved in the same location the tool was ran from. Please attach this file in your next reply. Try AdwCleaner after the restart. Link to post Share on other sites More sharing options...
HardHatAaron Posted January 12 Author ID:1610886 Share Posted January 12 I did it, and s ame. Fixlog.txt Link to post Share on other sites More sharing options...
JSntgRvr Posted January 12 ID:1610888 Share Posted January 12 Right click on this file and select Properties. Copy and Paste the target to your reply. C:\Users\aaron\Desktop\Antivirus.lnk Link to post Share on other sites More sharing options...
HardHatAaron Posted January 12 Author ID:1610890 Share Posted January 12 I did it, and it seems its a direct access of adecleaner on my desktop Link to post Share on other sites More sharing options...
HardHatAaron Posted January 12 Author ID:1610891 Share Posted January 12 sorry forgot another image Link to post Share on other sites More sharing options...
JSntgRvr Posted January 12 ID:1610892 Share Posted January 12 There is a nasty on the logs: Download the enclosed file Fixlist.txt Save it in the same location FRST64.exe is saved. Start FRST (FRST64) with Administrator privileges This time around Press the Fix button and wait When finished, a log file (Fixlog.txt) will pop up and saved in the same location the tool was ran from. Please attach this file in your next reply. Try AdwCleaner after the restart. Link to post Share on other sites More sharing options...
HardHatAaron Posted January 12 Author ID:1610894 Share Posted January 12 Im I doing something wrong? I did it the same way u mention it Fixlog.txt Link to post Share on other sites More sharing options...
JSntgRvr Posted January 12 ID:1610895 Share Posted January 12 Download the enclosed file MBSetup.zip Save and extract its contents to the desktop Double click MBSetup.exe to run it. When AdwCleaner starts, on the left side of the window, click on “Settings” and then enable these repair actions on that tab-window by clicking their button to the far-right for ON status Delete IFEO keys Delete tracing keys Delete Prefetch files Reset Proxy Reset IE Policies Reset Chrome policies Reset Winsock Reset HOSTS file Click Scan Now ... When the scan has finished a Scan Results window will open. Click Cancel (at this point do not attempt to Quarantine anything that is found) Now click the Log Files tab ... Double click on the latest scan log (Scan logs have a [S0*] suffix, where * is replaced by a number, the latest scan will have the largest number) A Notepad file will open containing the results of the scan. Please attach the file in your next reply. Link to post Share on other sites More sharing options...
HardHatAaron Posted January 12 Author ID:1610898 Share Posted January 12 Log.txt Link to post Share on other sites More sharing options...
Solution JSntgRvr Posted January 12 Solution ID:1610903 Share Posted January 12 AdwCleaner - Clean Double click AdwCleaner.exe to run it. When AdwCleaner starts, on the left side of the window, click on “Settings” and then enable these repair actions on that tab-window by clicking their button to the far-right for ON status Delete IFEO keys Delete tracing keys Delete Prefetch files Reset Proxy Reset IE Policies Reset Chrome policies Reset Winsock Reset HOSTS file Click Scan Now When the scan has finished a Scan Results window will open. Please check all boxes and then click Quarantine Click Next If any pre-installed software was found on your machine, a prompt window will open ... Click OK to close it Check any pre-installed software items you want to remove (if they're not causing you a problem I recommend you don't select any) Click Quarantine A prompt to save your work will appear ... Click Continue when you're ready to proceed. A prompt to restart your computer will appear ... Click Restart Now Once your computer has restarted ... If it doesn't open automatically, please start AdwCleaner ... Click the Log Files tab ... Double click on the latest Clean log (Clean logs have a [C0*] suffix, where * is replaced by a number, the latest scan will have the largest number) A Notepad file will open containing the results of the removal. Please attach the file in your next reply. Dr.Web CureIt! Please download the Dr.Web CureIt! anti-virus utility https://free.drweb.com/ You will need to send them an email to obtain a link to download the scanner, please do so The downloaded file will normally have a unique name such as: q7a9tr4p.exe Close all open applications and locate the downloaded file and double-click to run it The program will take a moment to launch and bring up the License and Update screen Place a check mark to agree to the terms and then click on the Continue button Click the underlined link Select objects for scanning On the top left click the Scanning objects that should automatically check all objects Click the small wrench and make sure there is a check on Automatically apply actions to threats Then click the large button on bottom right Start scanning Once the scan has completed there will be a link named Open report click that and a log named cureit.log should open in Notepad The log is saved in the folder named Doctor Web in the top of your user profile folders Please attach that log on your next reply Link to post Share on other sites More sharing options...
HardHatAaron Posted January 12 Author ID:1610907 Share Posted January 12 cureit.logMB Log.txtstilll I cant open Adwcleaner but here they are the 2 logs Link to post Share on other sites More sharing options...
HardHatAaron Posted January 12 Author ID:1610909 Share Posted January 12 I tried downloading again the adwcleaner and now it works here it is the log AdwCleaner[C00].txt Link to post Share on other sites More sharing options...
JSntgRvr Posted January 12 ID:1610987 Share Posted January 12 Your computer was quite infected. Download the enclosed file Fixlist.txt Save it in the same location FRST64.exe is saved. Start FRST (FRST64) with Administrator privileges This time around Press the Fix button and wait When finished, a log file (Fixlog.txt) will pop up and saved in the same location the tool was ran from. Please attach this file in your next reply. Please download and run the following Kaspersky Virus Removal Tool 2020 and save it to your Desktop. (Kaspersky Virus Removal Tool version 20.0.10.0 was released on November 9, 2021) Download: Kaspersky Virus Removal Tool https://devbuilds.s.kaspersky-labs.com/devbuilds/KVRT/latest/full/KVRT.exe How to run a scan with Kaspersky Virus Removal Tool 2020 https://support.kaspersky.com/15674 How to run Kaspersky Virus Removal Tool 2020 in the advanced mode https://support.kaspersky.com/15680 How to restore a file removed during Kaspersky Virus Removal Tool 2020 scan https://support.kaspersky.com/15681 Select the Windows Key and R Key together, the "Run" box should open. Drag and Drop KVRT.exe into the Run Box. C:\Users\{your user name}\DESKTOP\KVRT.exe will now show in the run box. add -dontencrypt Note the space between KVRT.exe and -dontencrypt C:\Users\{your user name}\DESKTOP\KVRT.exe -dontencrypt should now show in the Run box. That addendum to the run command is very important, when the scan does eventually complete the resultant report is normally encrypted, with the extra command it is saved as a readable file. Reports are saved here C:\KVRT2020_Data\Reports and look similar to this report_20210123_113021.klr Right-click direct onto that report, select > open with > Notepad. Save that file and attach it to your reply. To start the scan select OK in the "Run" box. A EULA window will open, tick all confirmation boxes then select "Accept" In the new window select "Change Parameters" In the new window ensure all selection boxes are ticked, then select "OK" The scan should now start... When complete if entries are found there will be options, if "Cure" is offered leave as is. For any other options change to "Delete" then select "Continue" When complete, or if nothing was found select "Close" Attach the report information as previously instructed... Thank you Link to post Share on other sites More sharing options...
HardHatAaron Posted January 12 Author ID:1611040 Share Posted January 12 Sorry im at work, here they are report_2024.01.12_11.30.27.klr.txt Fixlog.txt Link to post Share on other sites More sharing options...
JSntgRvr Posted January 12 ID:1611071 Share Posted January 12 Please re-scan with FRST and post new FRST.txt and Addition.txt logs. Link to post Share on other sites More sharing options...
HardHatAaron Posted January 12 Author ID:1611075 Share Posted January 12 FRST.txt Addition.txt Link to post Share on other sites More sharing options...
JSntgRvr Posted January 12 ID:1611080 Share Posted January 12 Download the enclosed file Fixlist.txt Save it in the same location FRST64.exe is saved. Start FRST (FRST64) with Administrator privileges This time around Press the Fix button and wait When finished, a log file (Fixlog.txt) will pop up and saved in the same location the tool was ran from. Please attach this file in your next reply. Link to post Share on other sites More sharing options...
HardHatAaron Posted January 12 Author ID:1611085 Share Posted January 12 Fixlog.txt Link to post Share on other sites More sharing options...
JSntgRvr Posted January 12 ID:1611090 Share Posted January 12 Download the enclosed file Fixlist.txt Save it in the same location FRST64.exe is saved. Start FRST (FRST64) with Administrator privileges This time around Press the Fix button and wait When finished, a log file (Fixlog.txt) will pop up and saved in the same location the tool was ran from. Please attach this file in your next reply. Link to post Share on other sites More sharing options...
HardHatAaron Posted January 12 Author ID:1611093 Share Posted January 12 Fixlog.txt Link to post Share on other sites More sharing options...
Recommended Posts