Explorer.exe gets shutdown by Hitmanpro.alert

  • This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn more.

M811

New Member
Jul 4, 2017
8
Operating System
Windows 7
Installed Antivirus
Malwarebytes
#1
I downloaded a game installer from a suspicious source , then got infected couple days ago with tons of adware and trojans.And after that I went into panic mode and tried to download keygen for Malwarebytes Premium which i regret.Even I ran a scan on it and Malwarebytes Anti-Malware found : DontStealOurSoftware.exe or something like that.After I run that I knew it was a mistake my computer went nuts started downloading and installing stuff by itself.It felt like well deserved punishment from Malwarebytes Anti-Malware , lol.

I was able to clean my pc from the initial symptoms , however I am not still convinced that my pc is clean due to the issue after running Adwcleaner.I typed ''netsh winsock reset'' on cmd.exe and now my internet is working on startup.But on every startup Hitmanproalert says it blocked an attack.And my concern is after my hitmanpro.alert trial ends , I wont be able to access internet.
 

TwinHeadedEagle

Removal Expert
Staff member
Mar 8, 2013
21,993
Operating System
Windows 10
Installed Antivirus
ESET
#3
Hello,


Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.

Running it on another one may cause damage and render the system unstable.

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

  • Right-click on
    icon and select
    Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finishes FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.
 

Attachments

M811

New Member
Jul 4, 2017
8
Operating System
Windows 7
Installed Antivirus
Malwarebytes
#4
issue persists.I was able to see a command prompt briefly at the start before the hitmanpro notification.how can i get rid of this thing? sometimes screen stays black even tho it says its blocked.
 

Attachments

M811

New Member
Jul 4, 2017
8
Operating System
Windows 7
Installed Antivirus
Malwarebytes
#6
its in my second post.Thats the event log hitmanpro.alert creates automatically on every start.
 

TwinHeadedEagle

Removal Expert
Staff member
Mar 8, 2013
21,993
Operating System
Windows 10
Installed Antivirus
ESET
#7
Open MalwareBytes again

  • Click the Settings tab, in the left panel choose Protection and tick Scan for rootkits.
  • Click the Scan tab, choose Threat Scan is checked and click Start Scan.
  • If threats are detected, click the Apply Actions button. You will now be prompted to reboot. Click Yes.
  • Upon completion of the scan (or after the reboot), click the Reports tab.
  • Double-click the Scan Log.
  • At the bottom click Export and choose Text file.
Save the file to your desktop and include its content in your next reply.
 

M811

New Member
Jul 4, 2017
8
Operating System
Windows 7
Installed Antivirus
Malwarebytes
#8
I remember I checked scan for rootkits before I start all the Malwarebytes Anti-Malware scans but here it is again as you requested.
 

Attachments

M811

New Member
Jul 4, 2017
8
Operating System
Windows 7
Installed Antivirus
Malwarebytes
#9
Wrong log sorry.Also I forgot to mention that , ESET 10 found 4 threats when Malwarebytes Anti-Malware tried to access them( So its not in mbams log) , so I exported those too.Here they are.

By the way the issue is still there.
 

Attachments

M811

New Member
Jul 4, 2017
8
Operating System
Windows 7
Installed Antivirus
Malwarebytes
#11
As I said issue is there.What I mean is on every startup HPA blocks an attack still(which is my main problem other than some adware/bitcoinminer).And I cant see what it is from default startup applications.And scans dont find any registry error.I had some adware/trojan also but I removed most of them and uninstalled chrome(Using Opera which is fine).Will reinstall chrome now and let you know.Apart from that my computer is fine.However when my HPA trial ends , the inital thing I mentioned will mess up my pc for sure.What would you recommend me to do now ?
 

M811

New Member
Jul 4, 2017
8
Operating System
Windows 7
Installed Antivirus
Malwarebytes
#12
@publicenemy I already post it in the second post of the thread.Its called event1.txt.Well actually , I can test it if its FP by starting without HPA.I will let you know.
 

TwinHeadedEagle

Removal Expert
Staff member
Mar 8, 2013
21,993
Operating System
Windows 10
Installed Antivirus
ESET
#13
This is not the first time that HitmanPro has some weird detection. I would contact their support for an explanation.
 
Likes: Sunshine-boy