KaiserKing Posted March 3 ID:1621029 Share Posted March 3 Hello, I am having some issues with my computer. Sometimes task manager suddenly closes and I am afraid it is a malware. I downloaded malwarebytes to attempt to install it, but as soon as I run the exe, it immediately closes. I am afraid that my computer is infected. Can someone help me with this issue and install malwarebytes to discard the issue? Link to post Share on other sites More sharing options...
KaiserKing Posted March 3 Author ID:1621031 Share Posted March 3 I just ran the malwarebytes support tool. This is the file that came out of it. mbst-grab-results.zip Link to post Share on other sites More sharing options...
1PW Posted March 3 ID:1621034 Share Posted March 3 Hello @KaiserKing and : The first thing found were the interfering entries in the Windows® Hosts file. To begin, please reset your computer's Hosts file for Windows 11: How to reset the Hosts file back to the default. Then, restart Windows® and see if the Malwarebytes app will start. Thank you. Link to post Share on other sites More sharing options...
KaiserKing Posted March 3 Author ID:1621035 Share Posted March 3 Hello, I did the reset Hosts file. First thing I noticed is that the file was hidden and couldn't see (although I had the option to see hidden files on.) I replaced the host file as instructed and restarted windows. Attempted to run the malwarebytes setup but again, it closes before I can click anything. Link to post Share on other sites More sharing options...
1PW Posted March 3 ID:1621037 Share Posted March 3 Hello @KaiserKing: As you may have noticed, your topic has been moved to a more appropriate subforum where an expert helper can further assist you. Please be patient and make no further changes to your computer while you wait. Thank you. cc: @AdvancedSetup Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted March 3 Root Admin ID:1621058 Share Posted March 3 Hello @KaiserKing Please do the following steps [ 1 ] Please go to Control Panel, Programs, Programs and Features, Uninstall a program Then right-click and uninstall the following CCleaner (computer experts no longer recommend this program) [ 2 ] Please run the following fix If the program FRSTEnglish.exe will not run then rename the program to some unique name and run it. NOTE: Please read all of the information below before running this fix. NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system that cannot be undone. Once the fix has been completed, please attach the file FIXLOG.TXT to your next reply Farbar program: FRSTEnglish.exe Save the attached file: FIXLIST.TXT to this folder C:\Users\cesar\Downloads\ NOTE. It's important that both files, FRSTEnglish.exe, and fixlist.txt are in the same location or the fix will not work. Please make sure you disable any real-time antivirus or security software before running this script. Once completed, make sure you re-enable it. Run the Farbar program with Admin rights and press the Fix button just once and wait. The fix may possibly take up to 60 minutes to complete If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart. The tool will make a log named Fixlog.txt in the same folder you ran the Farbar program from. Please attach that log on your next reply. NOTE: This fix will run a scan to check that all Microsoft operating system files are valid and not corrupt and attempt to correct any invalid files. It will also run a disk check on the restart to ensure disk integrity. NOTE: As part of this fix all temporary files will be removed. If you have any open web pages that have not been bookmarked please make sure you bookmark them now as all open applications may be automatically closed. Also, make sure you know the passwords for all websites as cookies may possibly be removed in some cases, but not all cases. NOTE: As part of this fix, it will also reset the network to default settings including the firewall. If you have custom firewall rules you need to save please export or save them first before running this fix. The following directories are emptied: Windows Temp Users Temp folders Edge, IE, FF, Chrome, and Opera caches, HTML5 storages, Cookies and History Recently opened files cache Discord cache Java cache Steam HTML cache Explorer thumbnail and icon cache BITS transfer queue (qmgr*.dat files) Recycle Bin Important: items are permanently deleted. They are not moved to quarantine. If you have any questions or concerns please ask before running this fix. The system will be rebooted after the fix has run. fixlist.txt Thanks Link to post Share on other sites More sharing options...
KaiserKing Posted March 3 Author ID:1621067 Share Posted March 3 I can't seem to run the FRST exe. It opens and immediately closes. I changed the name of the program and ran with the Windows Real-time protection off. Attempted with the run as administrator option but it will close every time. Link to post Share on other sites More sharing options...
JSntgRvr Posted March 4 ID:1621076 Share Posted March 4 (edited) Open a Command prompt as an Administrator. Copy and paste the following at the prompt: reg delete "HKU\S-1-5-21-4048611321-98857604-3745745176-1012\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /f Press Enter If Successful, try saving the Fixlist to the downloads folder, next to FRSTEnglish.exe. Run FRSTEnglish.exe and press the Fix button.. Edited March 4 by JSntgRvr Link to post Share on other sites More sharing options...
KaiserKing Posted March 4 Author ID:1621081 Share Posted March 4 I was able to run the command on Command prompt, but the FRST exe was closing again. I was however fast enough to run the Fix button before it closed and this is what I got. Fixlog.txt Link to post Share on other sites More sharing options...
JSntgRvr Posted March 4 ID:1621082 Share Posted March 4 Malwarebytes for Windows If you already have Malwarebytes installed then open Malwarebytes and click on the small gear icon, then click on the "Check for updates" button on the General tab. After any updates, click the middle Scan button from the main page. It will automatically run a Threat Scan. If you don't have Malwarebytes installed yet, please download it from here or alternative link and install it. Once installed then open Malwarebytes and select Scan and let it run. Once the scan is completed, make sure you have it quarantine any detections it finds. If no detections were found click on the Save results drop-down, then the Export to TXT button, and save the file as a Text file to your desktop or other location you can find and attach that log on your next reply. If there were detections then once the quarantine has completed click on the View report button, Then click the Export drop-down, then the Export to TXT button, and save the file as a Text file to your desktop or other location you can find and attach that log on your next reply. If the computer restarted to quarantine you can access the logs from the Detection History, then the History tab. Highlight the most recent scan and double-click to open it. Then click the Export drop-down, then the Export to TXT button, and save the file as a Text file to your desktop or other location you can find and attach that log on your next reply. If Malwarebytes won't run then please skip to the next step and let us know in your next reply that the scanner would not run. View Reports and History in Malwarebytes for Windows v4 https://support.malwarebytes.com/hc/en-us/articles/360038479194-View-Reports-and-History-in-Malwarebytes-for-Windows Malwarebytes for Windows v4 guide https://support.malwarebytes.com/hc/en-us/articles/360038984693-Malwarebytes-for-Windows-v4-guide Link to post Share on other sites More sharing options...
KaiserKing Posted March 4 Author ID:1621083 Share Posted March 4 Ran Malwarebytes and this is the result. Malwarebytes Scan Report 2024-03-04 025156.txt Link to post Share on other sites More sharing options...
JSntgRvr Posted March 4 ID:1621084 Share Posted March 4 AdvancedSetup will be around shortly for a review. Thanks. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted March 4 Root Admin ID:1621095 Share Posted March 4 Thank you @KaiserKing and @JSntgRvr The Farbar fix ran well. It also found and fixed some other Windows issues Windows Resource Protection found corrupt files and successfully repaired them. The Malwarebytes scan indicates that you did not allow Malwarebytes to remove what it found. Please restart the computer and run the following and make sure you have Malwarebytes remove what it finds if it finds something. Let's go ahead and run a couple of scans and get some updated logs from your system. Please read the entire post below before starting so that you're more familiar with the process Then follow each step in the order provided. Unless otherwise asked, please attach all logs Please make the following system changes: If you have not done so already - Enable System Protection and create a NEW System Restore Point Temporarily disable your antivirus real-time protection or other security software first only if it blocks or interferes with the scans or downloads.. Make sure to turn it back on once the scans are completed Temporarily disable Microsoft SmartScreen to download software below only if needed. Make sure to turn it back on once the downloads are completed Disable-Fast-Startup Show-Hidden-Folders-Files-Extensions Please run the following scans: Click the following link and run a Scan with AdwCleaner Click the following link and run a Scan with Malwarebytes RESTART the computer Click the following link and run a Scan with Farbar Recovery Scan Tool Example image of where to click to attach files when posting your reply Thank you Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted March 6 Root Admin ID:1621684 Share Posted March 6 Due to the lack of feedback, this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread. Tips to help protect from infection Thanks Link to post Share on other sites More sharing options...
Recommended Posts