This topic is locked
Hi, Mark.
I'm glad the computer seems to work better now.
Some last comments:
1. qBitTorrent
Signs of qBitTorrent continue to be present. Please, have in mind, and also let your son know that this is a P2P program. P2P programs form a direct conduit on to a computer. They have always been a target of malware writers and are increasingly so of late. P2P security measures are easily circumvented and if your P2P program is not configured correctly, you may be sharing more files than you realize. There have been cases where people's passwords, address books and other personal, private, and financial details have been exposed to the file sharing network by a badly configured program. Now, we will remove the remnants. But using it again, or just downloading from pages that are using it, or any other torrent, your computer will probably get infected again.
2. FRST fix
Please do the following to run a FRST fix.
NOTICE: This script was written specifically for this user. Running it on another machine may cause damage to your operating system
- Please select the entire contents of the code box below, from the "Start::" line to "End::", including both lines. Right-click and select "Copy ". No need to paste anything to anywhere.
Start::
CreateRestorePoint:
CloseProcesses:
FirewallRules: [UDP Query User{482FC0C1-F375-4FA3-A68F-556051F318C8}C:\program files\qbittorrent\qbittorrent.exe] => (Allow) C:\program files\qbittorrent\qbittorrent.exe => No File
FirewallRules: [TCP Query User{410746F1-D982-4433-B156-804FFF31F7CF}C:\program files\qbittorrent\qbittorrent.exe] => (Allow) C:\program files\qbittorrent\qbittorrent.exe => No File
2021-08-06 23:58 - 2021-08-09 12:10 - 000000000 ____D C:\Users\moond\AppData\Roaming\qBittorrent
2021-08-06 23:58 - 2021-08-06 23:58 - 000000000 ____D C:\Users\moond\AppData\Local\qBittorrent
EmptyTemp:
End::
- Please right-click on FRST64 on your Desktop, to run it as administrator. When the tool opens, click "yes" to the disclaimer.
- Press the Fix button once and wait.
- FRST will process fixlist.txt
- When finished, it will produce a log fixlog.txt on your Desktop.
- Please post the log in your next reply.
3. Change a Malwarebytes setting
I asked you to do that before, but perhaps you didn't see it.
- Open Malwarebytes.
- Click the little gear on the top right (Settings) and when it opens, click the Security tab and make sure about the following:
Under the title Scan Options, all the options are checked. Under the title Windows Security Center (Premium only) the option is NOT checked. Under the title Potentially unwanted items all options are set to Always.
4. Scan and fix Drive Z
There were signs that this drive has errors. You can fix them for now, but please make sure to save the content of it somewhere else, in case it permanently fails.
How to proceed:
- Insert the drive in the computer and open it.
- Select all the content of the drive and copy it.
- Paste the content of the drive either on a folder in your computer or in another good drive.
- Unplug the drive and insert it again.
- When you get the message that you need to scan and fix it, agree and proceed.
- Unplug the drive, insert it again and check if the warning message appears again. If not, then copy and paste your files in it again. If yes, then you need another drive. If the warning appears after a while, then again, you need to buy another drive.
In your next reply please post :
- The fixlog.txt
- Any remaining question
Sign In
Create Account
