Used_barracuda Posted August 26 ID:1657172 Share Posted August 26 Hi this has gone on too long after 2 years of pulling my hair out with a competitor support, I’ve now found it’s an rdp exploit, replaced DLLs, group policy, named pipes, it’s extensive, well concealed, and unstoppable i own a genuine windows home 10dvd but in only reads cd not dvd when I first ended subscription with Kasp I used Mb and it found a few exploits, now I think there is an admx so the program scans like there is nothing wrong please help me MDMSettingsProv_Uninstall.mof.txt Link to post Share on other sites More sharing options...
1PW Posted August 26 ID:1657204 Share Posted August 26 Hello @Used_barracuda and : Let us get the information to get the process started. Be aware it will take many steps and scans to fully remove malware. Please respond to all future instructions from your helper in a timely manner. Let us go ahead and run a couple of scans and get some updated logs from your system. Please read the entire post below before starting so that you're more familiar with the process. Then, sequentially follow each step in the order provided. Unless otherwise asked, please attach all logs. Please make the following system changes: Please pay close attention to the instructions in all the following links. If you have not done so already, Enable System Protection and create a NEW System Restore Point. Temporarily disable your antivirus real-time protection or other security software first only if it blocks or interferes with the scans or downloads. Make sure to turn it back on once the scans are completed. Temporarily disable Microsoft SmartScreen to download software below only if needed. Make sure to turn it back on once the downloads are completed. Disable-Fast-Startup. Show-Hidden-Folders-Files-Extensions. Please run the following scans: Please pay close attention to the instructions in all the following links. Click the following link and run a Scan with AdwCleaner Alternative AdwCleaner download. Click the following link and run a Scan with Malwarebytes Alternative MB5 download. Please check for application and Update Package updates. RESTART the computer Click the following link and run a Scan with Farbar Recovery Scan Tool. Example image of where to click to attach the 5 files when posting your reply Thank you. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted August 26 Root Admin ID:1657240 Share Posted August 26 Are you still with us @Used_barracuda Please run the requested scans and attach the log and we'll be happy to assist you Thank you Link to post Share on other sites More sharing options...
Used_barracuda Posted August 27 Author ID:1657422 Share Posted August 27 Hi yes it decided to bsod last night and I’ve tried recovering but it undid changes, so I reset but it’s hanging, I’ll have it through soon, I’m sorry I appreciate your help Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted August 27 Root Admin ID:1657484 Share Posted August 27 Thank you for the update @Used_barracuda Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted September 3 Root Admin ID:1658937 Share Posted September 3 Good day, @Used_barracuda How are things going? Do you still need help? Link to post Share on other sites More sharing options...
Used_barracuda Posted September 4 Author ID:1658983 Share Posted September 4 Hi, yes I do, I’m unable to access the web on pc I’ve been trying to restore but I think I’m at the point of full reinstall ill hopefully get it sorted in the next few days Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted September 4 Root Admin ID:1658998 Share Posted September 4 If you copy the Farbar scanner to USB flash drive and run on the affected computer from the flash drive it should save the logs there. Then you can post the logs from the flash drive and we'll see what we can find @Used_barracuda Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted September 8 Root Admin ID:1659710 Share Posted September 8 Due to the lack of feedback, this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread. Tips to help protect from infection Thanks Link to post Share on other sites More sharing options...
Recommended Posts