[DR M]

Hi, Athena.

 

Please run FRST tool once more and give me fresh FRST logs (Addition and FRST) to check.

[Advertisements]

Hi. Dr. M,

Is it ok if it is not for a couple of days? I am not in the office right now.

Edited by Athena28, 02 June 2023 - 12:40 PM.

[Athena28]

Hi. Dr. M,

Is it ok if it is not for a couple of days? I am not in the office right now.

Edited by Athena28, 02 June 2023 - 12:40 PM.

[DR M]

Sure. Take your time. I'll be here. Thanks for letting me know. 

[Athena28]

Thx. 😊 Have a good weekend.

[DR M]

Thank you. Have a nice weekend too, Athena.  

[Athena28]

Hi Dr. M,

 

Here are the two latest scans you've requested.

 

Thx.

Attached Files

•  Scan result of Farbar Recovery Scan Tool (FRST).txt   30.2KB   52 downloads
•  Additional scan result of Farbar Recovery Scan Tool.txt   48.97KB   53 downloads

[DR M]

Hi, Athena.
 
I see you removed Malwarebytes. I wouldn't recommend this. It's an excellent antimalware solution and its free version works well with the other antivirus. Your computer, your decision, but I would let it there.
 
Also, I see FRST in the Downloads folder. Please move it on to the Desktop.
 
The logs are clean, and the following fix will do some maintenance.
 
 
FRST fix

Please do the following to run a FRST fix.

NOTICE: This script was written specifically for this user. Running it on another machine may cause damage to your operating system

• Select the entire contents of the code box below, from the "Start::" line to "End::", including both lines. Right-click and select "Copy ". No need to paste anything to anywhere.

Start::
CreateRestorePoint:
2023-05-31 14:11 - 2020-09-15 17:20 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2023-05-31 13:03 - 2020-09-09 14:45 - 000000000 ____D C:\Program Files (x86)\UltraViewer
FirewallRules: [{030AC689-F582-4C58-83F3-30F0590B0BFF}] => (Allow) C:\Users\PXP\AppData\Local\Temp\7zS4216\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{844D2385-7CBB-4696-9505-2DE4AC1AEBE0}] => (Allow) C:\Users\PXP\AppData\Local\Temp\7zS4216\HPDiagnosticCoreUI.exe => No File
CMD: DISM /Online /Cleanup-Image /RestoreHealth
CMD: SFC /scannow
CloseProcesses:
EmptyTemp:
End::

• Right-click on FRST64 on your Desktop, to run it as administrator. When the tool opens, click "yes" to the disclaimer.
• Press the Fix button once and wait.
• FRST will process fixlist.txt
• When finished, it will produce a log fixlog.txt on your Desktop.
• Post the log in your next reply.

 

In your next reply please post:

1. The fixlog.txt
2. Feedback: How is the computer running now? Any remaining issue/question/concern? 

[Athena28]

Hi,

 

I reinstalled Malwarebytes. 

 

I moved FRST to the Desktop.
 
Please find the latest Fixlog.txt attached.

 

Things seem to be good on the computer so far. 

 

Thx.

Attached Files

•  Fixlog.txt   44.96KB   54 downloads

Edited by Athena28, 04 June 2023 - 01:46 PM.

[DR M]

Glad to hear that the computer now is running without issues.

The following tool will remove the tools we used as well as reset system restore points:

Download KpRm by kernel-panik and save it to your desktop.

• Right-click kprm_(version).exe and select Run as Administrator.
• Read and accept the disclaimer.
• When the tool opens, ensure all boxes under Actions are checked.
• Under Delete Quarantines select Delete Now, then click Run.
• Once complete, click OK.
• A log will open in Notepad titled kprm-(date).txt.
• Please copy and paste its contents in your next reply.

[Athena28]

Hi Dr. M,

 

 

I've attached the kprm.txt.

 

Thx.

Attached Files

•  kprm-20230604162318.txt   3.21KB   51 downloads

Edited by Athena28, 04 June 2023 - 04:00 PM.

[DR M]

Athena, 

 

Your computer is now clean.

Thus, here are are some final tips about your computer's security from now on:

Some of the following, are from Klein's (2005) article, So how did I get infected in the first place. Since then, the article has been reproduced or linked to in dozens of locations. As a result, many malware experts have continued updating it, to include current operating systems and software program information. My source is Security Garden, and I marked for you the following:

1. Keep your Windows updated!
It is important always to keep current with the latest security fixes from Microsoft. This can patch many of the security holes through which attackers can infect your computer.

2. Update 3rd Party Software Programs
Third Party software programs have long been targets for malware creators. It has been stated that "Adobe’s Reader and Flash and all versions of Java are together responsible for a total of 66 percent of the vulnerabilities in Windows systems exploited by malware.'' It's important to keep everything updated.

3. Update the browsers you use
Many malware infections install themselves by exploiting security holes in the Internet browser that you use. So... Keep them updated.

4. Be careful about what you download and what you open!

• Many "freeware" programs come with an enormous amount of bundled spyware that will slow down your system, spawn pop-up advertisements, or just plain crash your browser or even Windows itself. Watch for pre-checked options such as toolbars that are not essential to the operation of the installed software.
• Peer-to-peer (P2P) programs like Kazaa, BearShare, Imesh, Warez P2P, and others, allow the creation of a network enabling people to connect with other users and upload or download material in a fast efficient manner. BUT even if the P2P software you are using is "clean", a large percentage of the files served on the P2P network are likely to be infected.
• Cracked or pirated programs are not only illegal, but also can make your computer a malware target. Have this in mind.
• Do not open any files without being certain of what they are!

5. Avoid questionable web sites!
Visit web sites that are trustworthy and reputable. Many disreputable sites will attempt to install malware on your system through "drive-by" exploits just by visiting the site in your browser. Lyrics sites, free software sites (especially ones that target young children), cracked software sites, and pornography sites are some of the worst offenders. Also, never give out personal information of any sort online or click "OK" to a pop-up unless it is signed by a reputable company and you know what it is.

6. Registry cleaners/driver boosters/system optimizers
I do not recommend registry cleaners, system optimizers, driver boosters and the like. It is your computer and certainly your choice. However, please consider that modifying registry keys incorrectly can cause Windows instability, or make Windows unbootable. With registry cleaner and system optimization software programs, the potential is ever present to cause more problems than they claim to fix. Do note, however, that Microsoft does not support the use of registry cleaners. See Microsoft support policy for the use of registry cleaning utilities.

7. PC means personal computer!
Don't give access to your computer to friends or family who appear to be clueless about what they are doing.

8. Back-up your work!
Make back-ups of your personal files frequently. You never know when you'll have to reformat and start from scratch. You can always reformat and reinstall programs, but you cannot replace your data if you haven't made backups.

9. Must-Have Software
An anti-virus and an anti-spyware program is a necessity for the security of your computer. Be sure that you keep them updated, and that real time protection is enabled. You have now Spybot. Together with Malwarebytes, if you run it occasionally, depending on how often you use your computer, can keep you safe.

Happy safe computing.


I'm glad I was able to help you.

[Athena28]

Thank you so much, Dr. M. For all your help.

[DR M]

You are most welcome, Athena.

 

Thank you too, for being a great partner.

[DR M]

It appears that this issue is resolved, and therefore this topic has been marked as such.

 

If you are the topic starter and still need assistance, please reply back to the thread. Everyone else, please start a new topic by following the instructions here.