[Wolfman360]

Dear G2G team,

 

I recently installed NetExtender for a work project and today windows defender informed me that the version I installed was actually a rigged version

https://www.sonicwal...ers-information

https://www.microsof...atID=2147944484

 

I've removed the virus flagged by Windows Defender but I still have parts of NetExtender showing on my computer. I was hoping you would be able to help with ensuring it is all completely removed and that there are no other viruses present please. Anything Sonicwall/Netextender if this could be removed please.

 

Many thanks,

 

FRST Logs attached.

Attached Files

•  FRST.txt   85.64KB   17 downloads
•  Addition.txt   171.75KB   11 downloads

[Advertisements]

Hello ,  Wolfman360..!    My name is icotonev and I'm here to help you remove malware ..! 

 

Please give me some time to examine your logs and I will get back to you as soon as possible.

 

Thank you..!   

 

 

[icotonev]

Hello ,  Wolfman360..!    My name is icotonev and I'm here to help you remove malware ..! 

 

Please give me some time to examine your logs and I will get back to you as soon as possible.

 

Thank you..!   

 

 

[icotonev]

Farbar Recovery Scan Tool - Fix
 
NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system that cannot be undone
 
Please download the attached file to the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.
 
Run FRST and click Fix only once and wait.
 The Computer will restart when the fix is completed.
 

It will create a log (Fixlog.txt) please post it to your reply.

• Copy/paste the following in the Search: box

Searchall: SonicWall;NetExtender

• Click Search Files button

• When completed click OK and a Search.txt document will open on your desktop

• Аttach the report in your reply. If the file is too large zip and upload it here.

 

In your next reply, please include:

• Fixlog.txt

• Search report

 

•  fixlist.txt   15.83KB   7 downloads

[Wolfman360]

Thank you for your help it is greatly appreciated.

 

See attached below

Attached Files

•  Fixlog.txt   35.44KB   6 downloads
•  Search.txt   16.36KB   8 downloads

[icotonev]

Thank you ..! Let"s remove the leftovers..!

 

Farbar Recovery Scan Tool - Fix
 
NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system that cannot be undone
 
Please download the attached file to the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.
 
Run FRST and click Fix only once and wait.
 The Computer will restart when the fix is completed.
 

It will create a log (Fixlog.txt) please post it to your reply.

 

 

In your next reply, please include:

 

 fixlist.txt   9.5KB   4 downloads

[Wolfman360]

Many thanks - see attached.

 

 

Occasionally finding that my computer goes a bit slow/mouse stutters. Whether you'd be able to help to look in to this too?

Attached Files

•  Fixlog.txt   10.02KB   3 downloads

[icotonev]

Thank you ..!

IMPORTANT: Please allow FRST to announce that the procedure has been completed. A message will be generated on your desktop..! 

 

Fresh FRST logs

 

Please run FRST tool once more, and attach for me fresh logs:

• Double-click on the FRST icon to run it, as you did before. When the tool opens click Yes to disclaimer.
• Press Scan button and wait for a while.
• The scanner will produce two logs on your Desktop: FRST.txt and Addition.txt.
• Please attach these two logs in your next reply.

 

Run Malwarebytes

• Download Malwarebytes and save it to your Desktop.
• Once downloaded, close all programs and Windows on your computer.
• Double-click on the icon on your desktop named MBSetup.exe. This will start the installation of MBAM onto your computer.
• Follow the instructions to install the program.
• When finished, double click the program's icon created on your Desktop.
• Click the little gear on the top right (Settings) and when it opens, click the General tab. Under the title Windows Security Center, make sure the option is disabled.
• Click the Scan and Detections tab and under the Scan options title, enable Scan for rootkits option. Do not change any other option.
• Return to the Dashboard and choose Scan.
• Malwarebytes will now scan your computer for browser hijackers and other malicious programs. This process can take a few minutes, so we suggest you do something else and periodically check the status of the scan to see when it is finished.
  • When removing files, Malwarebytes may require a reboot to fully eliminate some threats. If you see a message indicating that a reboot is needed, please allow it. Once your computer has restarted and you are logged back in, you can continue with the remaining steps.
• When finished, you will see the Threat Scan Summary window open.
• If threats are not found, click View Report and proceed to the two last steps below.
  
  If threats are found, make sure that all threats are selected and click the "Quarantine" button.
  • Malwarebytes will now delete all of the files and registry keys and add them to the program’s quarantine.
  • Open Malwarebytes again, click on the Scanner, and then on the Reports tab.
  • Find the report with the most recent date and double click on it.
  • Click on Export and then Copy to Clipboard.
  • Paste its content here, in your next reply.

 

Scan with SecurityCheck by glax24

• Temporarily disable Microsoft SmartScreen only if it blocks the download of the software. The program is safe
• Download SecurityCheck by glax24 from here
• If SmartScreen blocks the file from running click on More info and Run anyway
• This tool is safe. Smartscreen is overly sensitive. You can check the VirusTotal scan of the tool from here
• Right-click with your mouse on the Securitycheck.exe and select "Run as administrator" and reply YES to allow it to run
• Wait for the scan to finish. It will open a text file named SecurityCheck.txt Close the file. Attach it with your next reply.
• You can find this file in a folder called SecurityCheck, C:\SecurityCheck\SecurityCheck.txt

 

 In your next reply, please post:

• Fresh FRST logs
• The Malwarebytes report
• SecurityCheck.txt