Did Farbar Recovery Scan Tool scan and got Addition and FRST files, but no idea how to get Fixlog txt file

[Lokkithegamer]

Hello,
I'm pretty sure that my pc is full of malware. I tried to open Malwarebytes website to download Malwarebytes anti-malware software, but I can't open the website. So I downloaded Farbar Recovery Scan Tool and did scan, but now I have no idea how to get Fixlog txt file.

 

[nasdaq]

Hello, Welcome to MalwareTips.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Please attach both logs to your next reply. I will have a look at them and advise.


How to attach a file to your reply:
In the Reply section in the bottom of the topic Click the "Upload file" button.
Do this for both files. Then pres the "Post reply" button.
<<<>>>

Wait for further instructions

 

[Lokkithegamer]

There they are.

 

[nasdaq]

Hi,

I only have the Addition.txt need to have the FRST.TXT also.

 

[Lokkithegamer]

Hi,

I only have the Addition.txt need to have the FRST.TXT also.

Oh right sorry, there it is

EDIT: its not letting me to send it

 

[nasdaq]

Hi,

Copy the contents of the FRST.TXT file and paste it in your next relay.

If it's too long copy one half and paste it. Use a second post give me the rest of it.

 

[Lokkithegamer]

Alright

 

[Lokkithegamer]

Every time I try to copy paste contents of the FRST.TXT file this pops up

 

[nasdaq]

Hi,
The forum could be busy or having problems. Try again. Take a note is the error changes.

 

[Lokkithegamer]

Hi,
The forum could be busy or having problems. Try again. Take a note is the error changes.

I tried again today still giving the same message

 

[Jack]

I tried again today still giving the same message

Hello @Lokkithegamer,
It looks like our server firewall has blocked you, this is why you've got that message. Can you please try again now to attach the logs? Thank you!

 

[Lokkithegamer]

Hello @Lokkithegamer,
It looks like our server firewall has blocked you, this is why you've got that message. Can you please try again now to attach the logs? Thank you!

Still can't

 

[nasdaq]

Hi,

Try to store your Files to Pastebin site.

Pastebin.com - #1 paste tool since 2002!

Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.

pastebin.com

Using Pastebin

Using Pastebin – Bluchic Help

help.bluchic.com

copy and paste the address generated by Pastebin in your next reply.

An other help location.

Pastebin - Ubuntu Wiki

 

[Lokkithegamer]

Hi,

Try to store your Files to Pastebin site.

Pastebin.com - #1 paste tool since 2002!

Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.

pastebin.com

Using Pastebin

Using Pastebin – Bluchic Help

help.bluchic.com

copy and paste the address generated by Pastebin in your next reply.

An other help location.

Pastebin - Ubuntu Wiki

Here :

Spoiler

 

[nasdaq]

Hi,

Remove this program in bold using the Control Panel > Programs > Programs and Features...
RAV Endpoint Protection (HKLM\...\RAVAntivirus) (Version: 4.2.5 - Reason Cybersecurity Inc.)
<<<>>>

Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The Computer will restart when the fix is completed.

It will create a log (Fixlog.txt) please post it to your reply.
===


Please post the Fixlog.txt and let me know what problem persists.

 

[Lokkithegamer]

Hi,

Remove this program in bold using the Control Panel > Programs > Programs and Features...
RAV Endpoint Protection (HKLM\...\RAVAntivirus) (Version: 4.2.5 - Reason Cybersecurity Inc.)
<<<>>>

Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The Computer will restart when the fix is completed.

It will create a log (Fixlog.txt) please post it to your reply.
===


Please post the Fixlog.txt and let me know what problem persists.

I tried to delete the RAV Endpoint Protection but it don't let me to delete it and I did ran the fix in FRST and here is the Fixlog.txt :

 

[nasdaq]

Hi,
The program was rpobably removed and remnant items are still in the registry.
This should take care of it.

Press the Windows key + r on your keyboard at the same time. This will open the RUN BOX.
Type Notepad and and click the OK key.
Please copy the entire contents of the code box below to the a new file.

start

Comment: For your security a new restore point will be created.
CreateRestorePoint:
Comment: We need to close all processes to complete the fix.
CloseProcesses:

Comment: Items from the FRST.TXT log that will be removed from the Registry.

DeleteKey:  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RAV Endpoint Protection

Comment: The system will restart.
Reboot:

End

Save the file as fixlist.txt in the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the Farbar log you have submitted.

Run FRST and click Fix only once and wait.

The tool will create a log (Fixlog.txt) please post it to your reply.
===

How is the computer running now?

 

[Lokkithegamer]

Hi,
The program was rpobably removed and remnant items are still in the registry.
This should take care of it.

Press the Windows key + r on your keyboard at the same time. This will open the RUN BOX.
Type Notepad and and click the OK key.
Please copy the entire contents of the code box below to the a new file.

start

Comment: For your security a new restore point will be created.
CreateRestorePoint:
Comment: We need to close all processes to complete the fix.
CloseProcesses:

Comment: Items from the FRST.TXT log that will be removed from the Registry.

DeleteKey:  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RAV Endpoint Protection

Comment: The system will restart.
Reboot:

End

Save the file as fixlist.txt in the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the Farbar log you have submitted.

Run FRST and click Fix only once and wait.

The tool will create a log (Fixlog.txt) please post it to your reply.
===

How is the computer running now?

Nothing happened
here is the fixlog.txt :

 

[nasdaq]

Hi,

Run RegEdit.exe as an Administrator from the RUN Box or the start menu.


Navigate to the folder in bold.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

Do you see anything concerning RAV?


If not just forget about it.

 

[Lokkithegamer]

Hi,

Run RegEdit.exe as an Administrator from the RUN Box or the start menu.


Navigate to the folder in bold.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

Do you see anything concerning RAV?


If not just forget about it.

Yes, I see RAVAntivirus file there