A Malware Probblem, I think

[Gib]

Hello, I think I have an infection, lets see how the infection tools run!

 

[TwinHeadedEagle]

Hello,



They call me TwinHeadedEagle around here, and I'll be working with you.



Before we start please read and note the following:

• At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
• Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
• Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
• Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.
  
• All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
• If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
• I visit forum several times at day, making sure to respond to everyone's topic as fast as possible. But bear in mind that I have private life like everyone and I cannot be here 24/7. So please be patient with me. Also, some infections require less, and some more time to be removed completely, so bear this in mind and be patient.
• Please stay with me until the end of all steps and procedures and I declare your system clean. Just because there is a lack of symptoms does not indicate a clean machine. If you solved your problem yourself, set aside two minutes to let me know.
  
• Please attach all report using
  
  button below. Doing this, you make it easier for me to analyze and fix your problem.
  
• Do not ask for help for your business PC. Companies are making revenue via computers, so it is good thing to pay someone to repair it.
• If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed.

You're missing Addition.txt report.

 

[Gib]

Here's the Addition.txt, my bad! I also added the FRST.txt in case there is a difference.

 

[TwinHeadedEagle]

Are you familiar with "Subliminal Messages"?

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.

Running it on another one may cause damage and render the system unstable.

​

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Press the Fix button just once and wait.
• If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
• When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

 

[Gib]

Yeah, I downloaded something that only shows as a message, I don't have plans on signing up but that's what its asking me in order to access the actual SM. When I tried to save fixlist.txt it wouldn't let me,"The file name is not valid."


I know what it is. There is a forward slash in fixlist

 

[TwinHeadedEagle]

So, are you able to download it or not?

 

[Gib]

I was implying that the forward slash in fixlist was the reason I couldn't download the attachment, If I were to save something no matter if it was notepad or anything else, on this laptop I can't save it if the forward slash is in the name of the file. I'm not sure how you were able to save and upload attachment with the forward slash in the txt name, am I making any sense?

 

[TwinHeadedEagle]

I don't understand a single word?

 

[Gib]

Nevermind the download worked this time. The issue I have right now is when I get administrator permissions and the FRST tool and fixlist.txt saved on desktop, its saying no fixlist.txt found.

 

[Gib]

Ok, what happened initially threw me for a loop, two days ago when I tried the download (fixlist.txt) something totally different happened, a new tab in browser would appear and nothing would load in the tab
I tried the download repeatedly but the same thing would occur, then I save target as (which I shouldn't have done) and that sent me on a wild goose chase, when I finally found the download on my pc I right-clicked and copied shortcut (sent to desktop) only to later find out the location on it was different (pictures folder), so when I clicked on the download you sent me yesterday 10/6 I was able to save it to the desktop which was something I totally could not do Sunday and like I said, it sent me on a wild goose chase. I finally have the fixlog.txt for you!

 

[TwinHeadedEagle]

Very good. How is your PC now?

 

[Gib]

I was having some slowness but I think its better. When I was running FRST tool, I noticed more slowness but the FRST was still in progress and it stayed that way until sometime yesterday. I also noticed something else, my system restore won't complete and when I try to reboot pressing F11 I can't access system recovery option, what could those two problems be?

 

[TwinHeadedEagle]

When system restore won't complete?

You enter recovery by pressing F8, not F11.

 

[Gib]

On this laptop, F8 gets you to startup repair (which I was able to give it a shot) and F11 was what I wanted to try because the laptop labels F11 as system recovery at the bottom of the screen.

What I mean by the system restore won't complete is that it will not finish doing its job and that's the reason I had to push the button on the laptop to reboot it.​

 

[TwinHeadedEagle]

In that case, you will need to consult your laptop manual.

 

[Gib]

Are you saying you don't know?

 

[TwinHeadedEagle]

Correct. On your laptop manufacturer's site, search for manual for your model. Then you can see how to enter recovery partition if your laptop has such feature.

 

[Gib]

I'll probably see you again sometime in the future because malware is real and prevalent on the web. Catch you later, and thanks.