rehabsnu Posted April 16 ID:1630424 Share Posted April 16 I have been attacked by this website every 30 seconds throughout the day, 2880 attempts per day. Is there anything I can do to rid this distraction from my screen (and computer). Thank you Link to post Share on other sites More sharing options...
Porthos Posted April 16 ID:1630426 Share Posted April 16 @rehabsnu Let's get the info to get the process started. Be aware it will take many steps and scans to fully remove malware. Please respond to all future instructions from your helper in a timely manner. Let's go ahead and run a couple of scans and get some updated logs from your system. Please read the entire post below before starting so that you're more familiar with the process Then follow each step in the order provided. Unless otherwise asked, please attach all logs Please make the following system changes: If you have not done so already - Enable System Protection and create a NEW System Restore Point Temporarily disable your antivirus real-time protection or other security software first only if it blocks or interferes with the scans or downloads.. Make sure to turn it back on once the scans are completed Temporarily disable Microsoft SmartScreen to download software below only if needed. Make sure to turn it back on once the downloads are completed Disable-Fast-Startup Show-Hidden-Folders-Files-Extensions Please run the following scans: Click the following link and run a Scan with AdwCleaner Click the following link and run a Scan with Malwarebytes RESTART the computer Click the following link and run a Scan with Farbar Recovery Scan Tool Example image of where to click to attach files when posting your reply Then be patient for the next expert to take your case. Thank you Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted April 16 Root Admin ID:1630442 Share Posted April 16 Please run the requested scans @rehabsnu and post back the logs Link to post Share on other sites More sharing options...
rehabsnu Posted April 16 Author ID:1630601 Share Posted April 16 AdwCleaner[S01].txt AdwCleaner[S00].txt Addition.txt FRST.txt Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted April 16 Root Admin ID:1630613 Share Posted April 16 The logs indicate that you have Webroot SecureAnywhere installed. Does a scan with that find any issues? Please run the following Dr.Web CureIt! Please download the Dr.Web CureIt! anti-virus utility https://free.drweb.com/ You will need to send them an email to obtain a link to download the scanner, please do so The downloaded file will normally have a unique name such as: q7a9tr4p.exe Close all open applications and locate the downloaded file and double-click to run it The program will take a moment to launch and bring up the License and Update screen Place a check mark to agree to the terms and then click on the Continue button Click the underlined link Select objects for scanning On the top left click the Scanning objects that should automatically check all objects Click the small wrench and make sure there is a check on Automatically apply actions to threats Then click the large button on bottom right Start scanning Once the scan has completed there will be a link named Open report click that and a log named cureit.log should open in Notepad The log is saved in the folder named Doctor Web in the top of your user profile folders Please attach that log on your next reply Link to post Share on other sites More sharing options...
rehabsnu Posted April 16 Author ID:1630648 Share Posted April 16 I messed up a little. Locked up at 3533, paused, continued, made it to 3534 and locked up again. After a total run time of over 45 minutes elected to stop. After selecting stop, it stated it found one adware issue and processed. Restarted Doctor Webb and it ran unhindered finding no additional adware issues. Restarted computer as directed, judiasverdes continues. cureit.log Link to post Share on other sites More sharing options...
Root Admin Solution AdvancedSetup Posted April 16 Root Admin Solution ID:1630655 Share Posted April 16 Okay, please run the following scanner Please download and run the following Kaspersky Virus Removal Tool 2020 and save it to your Desktop. (Kaspersky Virus Removal Tool version 20.0.10.0 was released on November 9, 2021) Download: Kaspersky Virus Removal Tool https://devbuilds.s.kaspersky-labs.com/devbuilds/KVRT/latest/full/KVRT.exe How to run a scan with Kaspersky Virus Removal Tool 2020 https://support.kaspersky.com/15674 How to run Kaspersky Virus Removal Tool 2020 in the advanced mode https://support.kaspersky.com/15680 How to restore a file removed during Kaspersky Virus Removal Tool 2020 scan https://support.kaspersky.com/15681 Select the Windows Key and R Key together, the "Run" box should open. Drag and Drop KVRT.exe into the Run Box. C:\Users\{your user name}\DESKTOP\KVRT.exe will now show in the run box. add -dontencrypt Note the space between KVRT.exe and -dontencrypt C:\Users\{your user name}\DESKTOP\KVRT.exe -dontencrypt should now show in the Run box. That addendum to the run command is very important, when the scan does eventually complete the resultant report is normally encrypted, with the extra command it is saved as a readable file. Reports are saved here C:\KVRT2020_Data\Reports and look similar to this report_20210123_113021.klr Right-click direct onto that report, select > open with > Notepad. Save that file and attach it to your reply. To start the scan select OK in the "Run" box. A EULA window will open, tick all confirmation boxes then select "Accept" In the new window select "Change Parameters" In the new window ensure all selection boxes are ticked, then select "OK" The scan should now start... When complete if entries are found there will be options, if "Cure" is offered leave as is. For any other options change to "Delete" then select "Continue" When complete, or if nothing was found select "Close" Attach the report information as previously instructed... Thank you Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted April 17 Root Admin ID:1630727 Share Posted April 17 Please post back the log when ready Link to post Share on other sites More sharing options...
rehabsnu Posted April 17 Author ID:1630734 Share Posted April 17 Issue seems to have been resolved running KVRT, thank you, thank you, and thank you. pdf file below are the log files from KVRT. log summary.pdf log summary.pdf Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted April 17 Root Admin ID:1630739 Share Posted April 17 Please do not send PDF files. The logs are text files Thank you Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now