Oldbox Posted March 18 ID:1624039 Share Posted March 18 This Malware keeps popping up and Malwarebytes doesn't remove it. It shows up with two "Alerts". One states : "Your browser was logged in from Russis" The second state: "Removing useless files is advised" Both how wed address as: secuweb.co.in Link to post Share on other sites More sharing options...
Porthos Posted March 18 ID:1624050 Share Posted March 18 @Oldbox Let's get the info to get the process started. Be aware it will take many steps and scans to fully remove malware. Please respond to all future instructions from your helper in a timely manner. Please do the following so that we may take a closer look at your system for any possible infections. Do these 2 steps FIRST so that files and folders are set to SHOW, plus also, Turn OFF Windows Fast Start. Show-Hidden-Folders-Files-Extensions https://forums.malwarebytes.com/topic/299345-show-hidden-folders-files-extensions/ Disable-Fast-Startup https://forums.malwarebytes.com/topic/299350-disable-fast-startup/ Then please restart the computer and then do the following. WARNING: Do Not click the Repair option under Advanced unless requested by a Malwarebytes support agent or authorized helper NOTE: The tools and the information obtained are safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system. Download the Malwarebytes Support Tool In your Downloads folder, open the mb-support-x.x.x.xxx.exe file In the User Account Control pop-up window, click Yes to continue the installation Run the MBST Support Tool. The tool also downloads and runs a file called FRSTEnglish. Please allow it to run. In the left navigation pane of the Malwarebytes Support Tool, click Advanced In the Advanced Options, click Gather Logs. A status diagram displays the tool is Getting logs from your machine A zip file named mbst-grab-results.zip will be saved to the Desktop or on the hidden Public desktop (usually C:\Users\Public\Desktop), please upload that file on your next reply Then be patient for the next expert to take your case. Thank you Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted March 19 Root Admin ID:1624206 Share Posted March 19 Hello @Oldbox Are you still with us? Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted April 16 Root Admin ID:1630373 Share Posted April 16 Due to the lack of feedback, this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread. Tips to help protect from infection Thanks Link to post Share on other sites More sharing options...
Recommended Posts