Jump to content

my friend has got a nasty virus sent to him i need to know how to remove it


Recommended Posts

hi everyone i have got a little problem if anyone can please help me with it

a friend of mine got a virus sent to him and i need to know what this virus does and how to remove it please
 there is a 1st folder called data then 1 file in that called data base file  then a 2nd folder called db.info then in that 
folder a file called info file
then a 3rd folder called data.DB-journal then a file in that folder called DB-journal-file

 THEN A 1st FOLDER CALLED TN THEN A FILE IN THAT FOLDER CALLED TYPE FILE INFO

and also on windows task manager on the processers tab search and feeds and windows security  and xbox game bar 
and video application all say suspended and i cant turn them on

also on my friends firefox and google chrome broswer on the cache and cookies page IPSNmedia.net pop up a few times
i am not sure what that is and if it is a virus

and also on the page update and security on windows 11
when you click on the windows update it says something went wrong. try to reopen settings later so you cant 
update windows 11 cos it wount do updates cos of that message
how do you remove that message

so what does this virus do and how do you remove it please

 

i have also done every step on this website

 

https://www.partitionwizard.com/partitionmanager/windows-update-something-went-wrong.html

Fix 1: Perform an SFC Scan
Fix 2: Enable Services Required by Windows Update
Fix 3: Reset the Settings App
Fix 4: Reset Windows Update Components

i did also run cmd as admin which this site tells you to do that

i did take pictures of the cmd admin bit when i did theses steps

and i still cant update windows 11 cos of that error message on the update page

so can anyone please help me with this problem

1.JPG

2.JPG

Edited by AdvancedSetup
Disabled hyperlinks
Link to post
Share on other sites

  • Replies 70
  • Created
  • Last Reply

Top Posters In This Topic

Welcome smile.png
 
I'll be helping you with your computer.
 
Please read this post completely before beginning. If there's anything that you do not understand, please don't hesitate to ask before proceeding.
 
Please take note of the guidelines for this fix:

  • Please note that I am a volunteer. I do have a family, a career, and other endeavors that may prevent immediate responses that meet your schedule. Do note that the differences in time zones could present a problem as well. Your patience and understanding will be greatly appreciated.
  • First of all, the procedures we are about to perform are specific to your problem and should only be used on this specific computer.
  • Do not make any changes to your computer that include installing/uninstalling programs, deleting files, modifying the registry, nor running scanners or tools of any kind unless specifically requested by me.
  • Please read ALL instructions carefully and perform the steps fully and in the order they are written.
  • If things appear to be better, let me know. Just because the symptoms no longer exist as before, does not mean that you are clean.
  • Continue to read and follow my instructions until I tell you that your machine is clean.
  • If you have any questions at all, please do not hesitate to ask before performing the task that I ask of you, and please wait for my reply before you proceed.
  • Scanning with programs and reading the logs do take a fair amount of time. Again, your patience will be necessary. smile.png

Let's begin... smile.png

Let's get the info to get the process started.

Please do the following so that we may take a closer look at your system for any possible infections.

Do these 2 steps FIRST so that files and folders are set to SHOW, plus also, Turn OFF Windows Fast Start.
Show-Hidden-Folders-Files-Extensions
https://forums.malwarebytes.com/topic/299345-show-hidden-folders-files-extensions/

Disable-Fast-Startup
https://forums.malwarebytes.com/topic/299350-disable-fast-startup/

Then please restart the computer and do the following.

WARNING: Do Not click the Repair option under Advanced unless requested by a Malwarebytes support agent or authorized helper

NOTE: The tools and the information obtained are safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

  • Download the Malwarebytes Support Tool
  • In your Downloads folder, open the mb-support-x.x.x.xxx.exe file
  • In the User Account Control pop-up window, click Yes to continue the installation
  • Run the MBST Support Tool. The tool also downloads and runs a file called FRSTEnglish. Please allow it to run.
  • In the left navigation pane of the Malwarebytes Support Tool, click Advanced
  • In the Advanced Options, click Gather Logs. A status diagram displays the tool is Getting logs from your machine
  • A zip file named mbst-grab-results.zip will be saved to the Desktop or on the hidden Public desktop (usually C:\Users\Public\Desktop), please upload that file on your next reply
Link to post
Share on other sites

also JSNTGRVR i have done the Disable-Fast-Startup bit uncheck it and done the save bit

i have tried theses softwares to remove the virus Spybot search and destory and hitman pro and windows defender and Malwarebytes i tried them in the beginning and they did not remove whatever this virus is i will do the rest of your steps

Link to post
Share on other sites

ok then i have removed spybot search and destroy software  i have also done the first 2 steps you said Show Hidden Folders Files Extensions and Disable-Fast Startup i have done both of them and restarted the computer

 

then i have downloaded the malewarebytes support tool there is 2 files  mb-support-1.9.7.1002.exe and FRSTEnglish.exe  do i click on the software FRSTEnglish.exe and run it i have only click on the mb-support-1.9.7.1002.exe and opened it i am on the page of advanced were it says gather logs and clean and repair system i have not done anything else yet cos i dont know if i have to click on FRSTEnglish.exe and run it or do i just leave that file alone and do the rest of te steps of the mb-support-1.9.7.1002.exe software

Link to post
Share on other sites

Welcome smile.png
 
I'll be helping you with your computer.
 
Please read this post completely before beginning. If there's anything that you do not understand, please don't hesitate to ask before proceeding.
 
Please take note of the guidelines for this fix:

  • Please note that I am a volunteer. I do have a family, a career, and other endeavors that may prevent immediate responses that meet your schedule. Do note that the differences in time zones could present a problem as well. Your patience and understanding will be greatly appreciated.
  • First of all, the procedures we are about to perform are specific to your problem and should only be used on this specific computer.
  • Do not make any changes to your computer that include installing/uninstalling programs, deleting files, modifying the registry, nor running scanners or tools of any kind unless specifically requested by me.
  • Please read ALL instructions carefully and perform the steps fully and in the order they are written.
  • If things appear to be better, let me know. Just because the symptoms no longer exist as before, does not mean that you are clean.
  • Continue to read and follow my instructions until I tell you that your machine is clean.
  • If you have any questions at all, please do not hesitate to ask before performing the task that I ask of you, and please wait for my reply before you proceed.
  • Scanning with programs and reading the logs do take a fair amount of time. Again, your patience will be necessary. smile.png

Let's begin... smile.png

The tool downloaded FRST64 to C:\Users\Daniel\Downloads\FRSTEnglish.exe

  • Download the enclosed file  Fixlist.txt
  • Save it in the same location FRST64.exe is saved. (C:\Users\René\Downloads)
  • Start FRST (FRST64) with Administrator privileges (FRSTEnglish.exe)
  • This time around Press the Fix button and wait
  • When finished, a log file (Fixlog.txt) will pop up and saved in the same location the tool was ran from.

Please attach this file in your next reply.

 

Download AdwCleaner and save it to your desktop.

  • Double click AdwCleaner.exe to run it.

When AdwCleaner starts, on the left side of the window, click on “Settings” and then enable these repair actions on that tab-window
by clicking their button to the far-right for ON status

  • Delete IFEO keys
  • Delete tracing keys
  • Delete Prefetch files
  • Reset Proxy
  • Reset IE Policies
  • Reset Chrome policies
  • Reset Winsock
  • Reset HOSTS file
  • Click Scan Now ...
  • When the scan has finished a Scan Results window will open.
  • Click Cancel (at this point do not attempt to Quarantine anything that is found)
  • Now click the Log Files tab ...
  • Double click on the latest scan log (Scan logs have a [S0*] suffix, where * is replaced by a number, the latest scan will have the largest number)
  • A Notepad file will open containing the results of the scan.

Please attach the file in your next reply.

Edited by JSntgRvr
Link to post
Share on other sites

hi JSntgRvr i have done the step FRST64 and the file it has done i opened the software as Administrator that software FRSTEnglish.exe and the Fixlist.txt you gave me it is into the same folder as the FRSTEnglish.exe i opened the software as Administrator and clicked the fix button the software first said updateing then i clicked fix button on the software the blue bar went side to side and said fixing please wait so i left that then the software went off and created a folder called FRST-OlderVersion in that folder it has a exe file called FRSTEnglish.exe which i have just left cos the software has created a folder also it has created a fixlog.txt file in the beginning of this step

Fixlog.txt

Link to post
Share on other sites

when i did that 2nd step again it did not scan  i click on the FRSTEnglish.exe i opened the software as Administrator and it did a fixlog.txt but i could not click the fix button on the software

Link to post
Share on other sites

Please download 
Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

  • Right click FRST(64) and select Run as administrator.
  • Make sure that under Optional Scans, there is a checkmark on Addition.txt.
  • Press Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
  • The tool will also produce another log (Addition.txt ). Please attach this to your reply.

Link to post
Share on other sites

  • Download the enclosed file  Fixlist.txt
  • Save it in the same location FRST64.exe is saved. (C:\Users\René\Downloads)
  • Start FRST (FRST64) with Administrator privileges (FRSTEnglish.exe)
  • This time around Press the Fix button and wait
  • When finished, a log file (Fixlog.txt) will pop up and saved in the same location the tool was ran from.

Please attach this file in your next reply.

Link to post
Share on other sites

Please also Download AdwCleaner and save it to your desktop.

  • Double click AdwCleaner.exe to run it.

When AdwCleaner starts, on the left side of the window, click on “Settings” and then enable these repair actions on that tab-window
by clicking their button to the far-right for ON status

  • Delete IFEO keys
  • Delete tracing keys
  • Delete Prefetch files
  • Reset Proxy
  • Reset IE Policies
  • Reset Chrome policies
  • Reset Winsock
  • Reset HOSTS file
  • Click Scan Now ...
  • When the scan has finished a Scan Results window will open.
  • Click Cancel (at this point do not attempt to Quarantine anything that is found)
  • Now click the Log Files tab ...
  • Double click on the latest scan log (Scan logs have a [S0*] suffix, where * is replaced by a number, the latest scan will have the largest number)
  • A Notepad file will open containing the results of the scan.

Please attach the file in your next reply.

Link to post
Share on other sites

  • Root Admin

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.

Tips to help protect from infection

Thanks

 

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.