Operating System
Windows 10
Infection date and initial symptoms
Sunday 9th, immediately after trying to install a seemingly safe program. Scans were made as fast as possible, as I didn't have the installed antivirus at the time. This is a practically fresh computer.
Current issues and symptoms
Every 5 to 10 minutes, a website will be prompted to open, either on an open browser or, if closed, to open a new window for it. The website is blocked by Malwarebytes, yet I cannot locate the source process that is causing those to pop up to start with.
Steps taken in order to remove the infection
Multiple scans through Malwarebytes Premium and Avast, browsing through disk files for anything that would come up with no good results.
System logs
Yes and I've also uploaded logs from other scans that I've performed

lemonbonp

New Member
Greetings,
I've recently accidentally slipped on a trojan and brought down programs from who-knows-where on my computer. I've been fiddling with this for around 12 hours now with manual removals and countless Malwarebytes scans with restarts and the one thing that seems to linger is a trojan/spyware/ransomware pop-up that creates a tab in the open browser, but is stopped by Malwarebytes. I'm looking for what is opening those tabs anyway, which pop up at 5-10 minute intervals.
I've tried running a different antivirus, Avast in this case, to no new results.
I'd like some real human help, unlike the great support service Malwarebytes offers... Which consisted of emailing me the same pre-written response twice. :emoji_disappointed:

The attached picture is an example of the reports I get, the only changing information being the website it redirects to, the IP adress, and the type of threat per website.
 

Attachments

  • Like
Reactions: oldschool

TwinHeadedEagle

Removal Expert
Verified
Staff member
Hello,


Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.

Running it on another one may cause damage and render the system unstable.

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

  • Right-click on
    icon and select
    Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finishes FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.
 

Attachments