Jump to content


  • Content Count

  • Joined

  • Last visited

Everything posted by antares

  1. Correct me jf I am wrong but I think I got a big clue last night. I was able to zemana Anti-malware to run for a brief few seconds before it was terminated. Zemana software told me that I was infected by a rootkit "WINNT/AdClicker....driver....ndistpr64.sys. If this is so what is the safe way to deal with it.
  2. Fixlist applied and ran within a few seconds follwoed by a reboot. However when I went to run JRT or Adwarecleaner, the result was the same..Resource is in use" software blocked. A friend of mine says there must be a driver hidden somewhere that is triggering this and we can't find it by the means used. Fixlist log attached Fixlog.txt
  3. Program run as instructed. Results attached virusinfo_syscheck.zip
  4. This is all that Rough Killer is showing which is strange case I use antvideodownloader all the time and it's never caused an issue but it is the one highlighted in red. The program has either quarinteened or removed everything else but my cleaning programs still remained blocked. Today run.txt
  5. Results of Safe Mode run. No change that I can see. Fixlog attached. The advice offered in the article is no longer valid. All avenues suggested by the article are now being blocked Restore Reset on Windows Recovery Environment is likewise blocked from running. Windows reinstall file from Microsoft is also blocked. A new HDD seems to be the only way out Fixlog.txt
  6. I finally got the code copied exactly as written. Checked it against a printout. Seems some of it was off the screen and didn't get copied. The computer was rescanned and removing any previous dates so that there was only today's scan present. Fixlist was then attached to the folder and desktop. It is now running. About how long should this run before I think something has gone wrong? Browser is Firefox 53. UPDATE ON FIX PROCEEDURE However, the results are not favorable. Apparently this malware keeps FRST from using the FIX option to rewrite the HDD. Nothing has chan
  7. That is exactly what I did. I copied only the lines from Close Processes down through Reboot but Windows 10 copies the whole thing and not just the highlighted area. I guess I shall have to copy it by hand since Copy and Paste don't seem to work as normal.
  8. Since there is often confusion in emails I am going to list step by step what I did. 1. I went into the fix log folder and removed all previous scans. 2, I scanned with frst and copied to desktop. 3. I copied your code beginning with "Close processes" and ending and including "reboot" 4, I titled this fixlist and placed it in the same folder with the two scan pages (frst & addition) and on the desktop. 5. I then ran Fix and waited 1 hr. Nothing happened. 6. I did another scan with frst to see if there were any changes. There were none. Apparently Frst
  9. Things are now turning worse. Before running FRST II wanted to generate a fresh report which is attached. Then your program crashed and upon reinstallation I got the following "cannot create bin64\epp.sys", so I downloaded a fresh copy but upon installation got the same error message. Something has gone wrong and I don't know how to correct it. scan_170424-210249.txt scan_170424-220942.txt
  10. Just so I am understanding you correctly, On the code page I copy the code only and not the words Close Processes at the beginning and the words Reboot at the end. Those lines are excluded form the Fixlist. Copy everything in between those words. .About how long should the operation run once fix is initiated?
  11. copied the code to a fixlist file ran the fix option on the FRST tool. the log is attached. Tool ran continuously for 6 hrs. programs AWD and JRT still refuse to load. "requested resource in use" Fixlog.txt
  12. Both ADWCleaner and JRT Removal Tool were both rejected at installation, "The Requested Resource is in Use."
  13. The scan had to be run in normal mode because instructions on the website are incorrect. Even Microsoft's directions for Safe Mode do not work. The FRSTScan was completed in normal more is attached. However since I tried to run Safe Mode my Apps screen is 2/3 normal size and I do not know how to return it to normal. FRST.txt Addition.txt
  14. Kevin: Thank you for your assistance in this matter. All instructions will be complied with and I fully understand the need for time for a reply. One doesn't expect instant answers but must be patient. As I have been working on the situation things have improved. I am posting the original Emsisoft log alone with a copy of today's log. As you can see I have reduced the number of detected infections from 32 to 8. To make this situation clearer, this is a Windows 10 laptop and as such doesn't have the usual access that you mentioned through My Computer so I am unable to chan
  15. Gentlemen: I recently got infected by a piece of malware that locks me out of all my cleaning tools. It won't let me install any new tools to deal the the problem. It has even gone so far as to now allow me to reinstall Windows 10. While your software did remove some of the issues others remain and when after a reboot it notified me that those files could not be moved and thus on a rescan they remain detected. Am posting a copy of your report from the scanner. An assistance you can provide would be helpful as I wish to regain access to my cleaning tools and to reinstall Windows 10
  • Create New...