Henry_K Posted September 28 ID:1663704 Share Posted September 28 Good morning, Avira is popping out a warning as per pic attached. Sorry, it is in Italian but I believe it is understandable. I ran the report suggested in other topics. I can share it if required. Can anyone support me in solving this matter? Thanks a lot! Enrico Link to post Share on other sites More sharing options...
Porthos Posted September 28 ID:1663705 Share Posted September 28 @Henry_K Although I will not be directly assisting you, a malware removal expert will be along to assist after you do the following. Let's get the info to get the process started. Be aware it will take many steps and scans to fully remove malware. Please respond to all future instructions from your helper in a timely manner. Let's go ahead and run a couple of scans and get some updated logs from your system. Please read the entire post below before starting so that you're more familiar with the process Then follow each step in the order provided. Unless otherwise asked, please attach all logs Please make the following system changes: Please pay close attention the the instructions in all of the following links. If you have not done so already - Enable System Protection and create a NEW System Restore Point <<<<< Important. Temporarily disable your antivirus real-time protection or other security software first only if it blocks or interferes with the scans or downloads.. Make sure to turn it back on once the scans are completed Temporarily disable Microsoft SmartScreen to download software below only if needed. Make sure to turn it back on once the downloads are completed Disable-Fast-Startup Windows 8 and newer only <<<<< Important. Show-Hidden-Folders-Files-Extensions Please run the following scans: Please pay close attention the the instructions in all of the following links. Click the following link and run a Scan with AdwCleaner Click the following link and run a Scan with Malwarebytes RESTART the computer <<<<< Important. Click the following link and run a Scan with Farbar Recovery Scan Tool Example image of where to click to attach files when posting your reply Then be patient for the next expert to take your case. <<<<< Important. Thank you Link to post Share on other sites More sharing options...
Henry_K Posted September 28 Author ID:1663711 Share Posted September 28 @Porthos Thanks a lot for your kind reply and support. I have attached the reports herewith. Thanks Addition.txt FRST.txt mbst-check-results.txt AdwCleaner[C00].txt Link to post Share on other sites More sharing options...
Porthos Posted September 28 ID:1663715 Share Posted September 28 (edited) @Henry_K You missed a step. Click the following link and run a Scan with Malwarebytes Edited September 28 by Porthos 1 Link to post Share on other sites More sharing options...
Henry_K Posted September 28 Author ID:1663718 Share Posted September 28 @Porthos Here is the report. Many thanks Malwarebytes Report della scansione 2024-09-28 083330.txt Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted September 28 Root Admin ID:1663720 Share Posted September 28 Thank you for the logs @Henry_K Malwarebytes was able to remove many unwanted items. It is about 2:00 AM for me so I'm heading to bed, but please RESTART the computer and run the following again to get me NEW fresh logs and I'll check back and try to reply to you tomorrow. [ 1 ] Scan with Malwarebytes https://forums.malwarebytes.com/topic/304827-scan-with-malwarebytes/ [ 2 ] Scan with AdwCleaner https://forums.malwarebytes.com/topic/304822-scan-with-adwcleaner/ [ 3 ] Scan with Farbar Recovery Scan Tool https://forums.malwarebytes.com/topic/306601-scan-with-farbar-recovery-scan-tool/ [ 4 ] Scan with FSS Farbar Service Scanner https://forums.malwarebytes.com/topic/306736-scan-with-fss-farbar-service-scanner/ [ 5 ] Scan with SecurityCheck by glax24 https://forums.malwarebytes.com/topic/307301-scan-with-securitycheck-by-glax24/ Link to post Share on other sites More sharing options...
Henry_K Posted September 28 Author ID:1663723 Share Posted September 28 @AdvancedSetup thanks for replying so late! I still get the same Advice from Avira. Anyway, I'll restart and post the results of the scans! Enjoy your sleep, and thanks again! Link to post Share on other sites More sharing options...
Henry_K Posted September 28 Author ID:1663763 Share Posted September 28 @AdvancedSetup As required I attach the reports. Thanks! I see what I wrote above sounds strange. I didn't mean so late in terms of promptness but clearly because it was late night for you. :) Thanks again! SecurityCheck.txt FSS.txt Addition.txt FRST.txt AdwCleaner[C02].txt Malwarebytes Report della scansione 2024-09-28 131115.txt 1 Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted September 28 Root Admin ID:1663844 Share Posted September 28 Thank you for the logs @Henry_K Please run the following fix NOTE: Please read all of the information below before running this fix. NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system that cannot be undone. Once the fix has been completed, please attach the file FIXLOG.TXT to your next reply Farbar program: FRSTEnglish.exe Save the attached file: FIXLIST.TXT to this folder C:\Users\crocc\Downloads\ NOTE. It's important that both files, FRSTEnglish.exe, and fixlist.txt are in the same location or the fix will not work. Please make sure you disable any real-time antivirus or security software before running this script. Once completed, make sure you re-enable it. Run the Farbar program with Admin rights and press the Fix button just once and wait. The fix may possibly take up to 60 minutes to complete If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart. The tool will make a log named Fixlog.txt in the same folder you ran the Farbar program from. Please attach that log on your next reply. NOTE: This fix will run a scan to check that all Microsoft operating system files are valid and not corrupt and attempt to correct any invalid files. It will also run a disk check on the restart to ensure disk integrity. NOTE: As part of this fix all temporary files will be removed. If you have any open web pages that have not been bookmarked please make sure you bookmark them now as all open applications may be automatically closed. Also, make sure you know the passwords for all websites as cookies may possibly be removed in some cases, but not all cases. NOTE: As part of this fix, it will also reset the network to default settings including the firewall. If you have custom firewall rules you need to save please export or save them first before running this fix. The following directories are emptied: Windows Temp Users Temp folders Edge, IE, FF, Chrome, and Opera caches, HTML5 storages, Cookies and History Recently opened files cache Discord cache Java cache Steam HTML cache Explorer thumbnail and icon cache BITS transfer queue (qmgr*.dat files) Recycle Bin Important: items are permanently deleted. They are not moved to quarantine. If you have any questions or concerns please ask before running this fix. The system will be rebooted after the fix has run. fixlist.txt Thanks Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted September 28 Root Admin ID:1663847 Share Posted September 28 After running the fix above, please run the following Please Uninstall, Update, or otherwise address the following as appropriate for your computer Google Chrome v.129.0.6668.60 Warning! Download Update Microsoft Edge WebView2 Runtime v.129.0.2792.52 Warning! Download Update | Uninstall old version and install new one. Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.32.31332 v.14.32.31332.0 Warning! Download Update Please Uninstall the following ---------------------------- [ UnwantedApps ] ----------------------------- (We will use Farbar to unhide it so you can uninstall it) Avira System Speedup v.7.3.0.502 << Hidden Warning! Suspected demo version of anti-spyware, driver updater or optimizer. Please uninstall this one Bonjour (This program is rarely needed on Windows, but often causes networking issues. Please uninstall) Then RESTART the computer and check for Windows Updates and install any found Link to post Share on other sites More sharing options...
Henry_K Posted September 29 Author ID:1663857 Share Posted September 29 @AdvancedSetup I did follow all the procedures you described in both above messages. I get no more warnings from Avira now. I try again later this morning. I have attached the Fixlog as required. Thanks a lot for your great support! Have a fantastic Sunday! Fixlog.txt Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted September 30 Root Admin ID:1663990 Share Posted September 30 Thank you for the log @Henry_K Overall the fix ran well. Please go ahead and run the following to get me new, fresh logs and we'll see if any other issues are left to deal with. Scan with Farbar Recovery Scan Tool https://forums.malwarebytes.com/topic/306601-scan-with-farbar-recovery-scan-tool/ Scan with FSS Farbar Service Scanner https://forums.malwarebytes.com/topic/306736-scan-with-fss-farbar-service-scanner/ Scan with SecurityCheck by glax24 https://forums.malwarebytes.com/topic/307301-scan-with-securitycheck-by-glax24/ Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted Tuesday at 02:13 AM Root Admin ID:1665415 Share Posted Tuesday at 02:13 AM Due to the lack of feedback, this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread. Tips to help protect from infection Thanks Link to post Share on other sites More sharing options...
Recommended Posts