Jump to content

Help, my PC is Infected


Recommended Posts

-I downloaded a file(music album)with no firewall/protection programs on my computer(stupid I know) and now I have  1 or more Trojan+ countless adware? I downloaded avg -free after,  then Emsisoft Anti-Malware program, did a scan quarantined and then did custom scan to find more.

 

-After I received a message saying not all files could be removed, I came here.  because I have some files I quarantined that do not show up (I don't think) on the files you asked for. I included a log for the quarantined log also.

-So I quarantined some things b4 I ran eek and frst

Thank you in advance for your time/help :-)

EEKLog_scan_151009-232046.txt

FRST.txt

Addition.txt

quarantineEAMLOG.txt

Link to post
Share on other sites

I used spybot and removed tons of addware that was blocking me from doing a reset keeping my personal files. Computer is all good now. thanks  tho.

 

 

[update] after an hour or so ... clearly the Trojan is not gone....im so lost..I ended up doing a system reset keeping personal files.  A Hp setting threw control panel. FAILED!  If u need me to do anything additional now , please let me know. thanks

Link to post
Share on other sites

Hello Ondas,

Do the following:

Download AdwCleaner and save it on your desktop.

  • Close all open programs and Internet browsers (you may want to print our or write down these instructions first).
  • Double click on adwcleaner.exe to run the tool.
  • Click on the Scan button.
  • After the scan has finished, click on the Clean button.
  • Confirm each time with OK.
  • You will be prompted to restart your computer. A text file will open in Notepad after the restart (this is the log of what was removed), which you can save on your desktop.
  • Attach that log file to your reply by clicking the More Reply Options button to the lower-right of where you type in your reply.

    NOTE: If you lose that log file for any reason, you can find it at C:\AdwCleaner on your computer.

Download Junkware Removal Tool and save it on your desktop.
  • Run the tool by double-clicking it.
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log is saved to your desktop and will automatically open.
  • Attach the JRT log file to a reply by clicking the More Reply Options button to the lower-right of where you type in your reply.
Link to post
Share on other sites

oddly it finished another scan each time i maximized the window and went back into windowed mode so here it is.dosnt look like it found much. but windows that are hidden keep poping up and as I play my game pathof exile the mouse will randomly click other places and looks like  twice every seconds or so the game tabs out and then tabs back in. as if I'm interrupting a background app. 

JRT.txt

Link to post
Share on other sites

I will re-run the two scans  and attach them after I get back from work. the tabbing in and out was happening since b4 the reset. altho I was getting popups and could not connect to any internet on this computer. now I can. so it has cleaned somethigns but the Trojan is still in effect I'm pretty sure.

Link to post
Share on other sites

there is still something switching  me off my game and randomly I see like 3 or 4 windows side by side pop and disappear about 100 times per second, and then once I click contrl +alt+del it stops when I window back into the desktop from task manager. I have included a video  of my screen . you cannot see the tabbing out of the window as clearly as when I'm viewing it, but you can defiantly see something is running that isn't supposed to be .(when I tried to replay the video it would not play once I converted it , so ill upload the windows encoder version of it and then the wmv version. wmv version was black )  (??? I'm not sure if it was black because it was remote viewing my screen maybe and stopped it from recording ???) I'm not sure? probably a bad conversion. hope this helps ..

 

 ok I guess I cant upload the file here.  not sure what to do, except at some point  take it into best buy geek squad or something.

 

Link to post
Share on other sites

Ondas,

Changing tools.

Download RogueKiller from one of the following links and save it to your desktop:

  • Link 1
  • Link 2
    • Close all programs and disconnect any USB or external drives before running the tool.
    • Double-click RogueKiller.exe to run the tool (Vista or 7 users: Right-click and select Run As Administrator).
    • Once the Prescan has finished, click Scan.
    • Once the Status box shows "Scan Finished", just close the program. <--Don't fix anything!
    • Attach the RogueKiller report to your next reply.
      • The log can also be found on your desktop labeled (RKreport[X]_S_xxdatexx_xtimex)
      • The highest number of [X], is the most recent Scan
Link to post
Share on other sites

not sure  it seems like maybe its just a deselecting issue with my windows? seems its happenign to others aswell , tyed to disable windows report error, didn't help . thought maybe that was issue but I do see a conhost.exe that opens and closes each time the window clicks outside of the game. it starts up and goes away before I can click on it twice. to see source or search online or anything.

Link to post
Share on other sites

conhost.exe is a legitimate windows file.

Let's take a fresh look.

Run fresh scans with Emsisoft Emergency Kit (EEK) and FRST, attach the new EEK and FRST scans to your reply.

Be sure to let me know how things are running?

Link to post
Share on other sites

Thread Closed

Reason: Lack of Response

PM either Kevin, Elise, or Arthur to have this thread reopened.

The procedures contained in this thread are for this user and this user only. Attempting to use the instructions in this thread on your system could result in damaging the Operating System beyond repair. Do not use any of the tools mentioned in this thread without the supervision of a Malware Removal Specialist.

All posters requesting Malware Removal assistance are required to follow all procedures in the thread titled START HERE, if you don't we are just going to send you back to this thread.

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...