Explorer.exe gets shutdown by Hitmanpro.alert

Discussion in 'Malware Removal Assistance For Windows' started by M811, Jul 4, 2017.

Need Malware Removal Help?

We offer free malware removal assistance to our members. Sign Up now, and get free malware removal support.

  1. M811

    M811 New Member

    Jul 4, 2017
    8
    0
    Turkey
    Windows 7
    Malwarebytes
    Operating System:
    Windows 7
    Are you using a 32-bit or 64-bit operating system?:
    32-bit (x86)
    Infection date and initial symptoms:
    03/06/2017

    Typical Adware , bitcoinminer , and trojan symptoms.Browser popups like crazy etc.
    Current issues and symptoms:
    There is only one issue left.It started after I run Adwarecleaner on my pc and on the next startup , I had an error that said my event log wasnt able to run and it will prevent any user log onto the PC..My internet connection stopped working.I typed Netsh winsock reset on cmd.exe , not its working.But Hitmanproalert reports that it blocks an attack on every startup.
    Steps taken in order to remove the infection:
    I ran Malwarebytes Anti-Malware(free) on safe mode , removed 700 threats.(log uploaded)
    I ran ESET NOD32 online antivirus scanner , removed 300 threats
    I ran Hitmanpro.alert it removed around 20 threats.
    I ran Chrome Cleanup Tool , it found nothing , and it removed itself everytime after 5 attempts??? not sure if intended by the program.
    I ran AdwCleaner , it removed 88 threats.
    I ran Rkill.exe just in case.It found nothing.
    Logs added to help request:
    • FRST.txt
    • Addition.txt
    • I've also uploaded logs from other scans that I've performed
    I downloaded a game installer from a suspicious source , then got infected couple days ago with tons of adware and trojans.And after that I went into panic mode and tried to download keygen for Malwarebytes Premium which i regret.Even I ran a scan on it and Malwarebytes Anti-Malware found : DontStealOurSoftware.exe or something like that.After I run that I knew it was a mistake my computer went nuts started downloading and installing stuff by itself.It felt like well deserved punishment from Malwarebytes Anti-Malware , lol.

    I was able to clean my pc from the initial symptoms , however I am not still convinced that my pc is clean due to the issue after running Adwcleaner.I typed ''netsh winsock reset'' on cmd.exe and now my internet is working on startup.But on every startup Hitmanproalert says it blocked an attack.And my concern is after my hitmanpro.alert trial ends , I wont be able to access internet.
     
  2. M811

    M811 New Member

    Jul 4, 2017
    8
    0
    Turkey
    Windows 7
    Malwarebytes
    Sorry for doublepost.I meant ''now'' its working.Also I think my uploads didnt work , so here they are.
     

    Attached Files:

  3. TwinHeadedEagle

    TwinHeadedEagle Removal Expert
    Staff Member

    Mar 8, 2013
    21,444
    2,634
    Malware Removal, Gaming
    Windows 7
    ESET
    Hello,


    [​IMG] Fix with Farbar Recovery Scan Tool

    [​IMG] This fix was created for this user for use on that particular machine. [​IMG]
    [​IMG] Running it on another one may cause damage and render the system unstable. [​IMG]

    Download attached fixlist.txt file and save it to the Desktop:

    Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

    • Right-click on [​IMG] icon and select [​IMG] Run as Administrator to start the tool.
      (XP users click run after receipt of Windows Security Warning - Open File).
    • Press the Fix button just once and wait.
    • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
    • When finishes FRST will generate a log on the Desktop, called Fixlog.txt.

    Please attach it to your reply.
     

    Attached Files:

  4. M811

    M811 New Member

    Jul 4, 2017
    8
    0
    Turkey
    Windows 7
    Malwarebytes
    issue persists.I was able to see a command prompt briefly at the start before the hitmanpro notification.how can i get rid of this thing? sometimes screen stays black even tho it says its blocked.
     

    Attached Files:

  5. TwinHeadedEagle

    TwinHeadedEagle Removal Expert
    Staff Member

    Mar 8, 2013
    21,444
    2,634
    Malware Removal, Gaming
    Windows 7
    ESET
    Can you show me what HitmanPro blocks?
     
  6. M811

    M811 New Member

    Jul 4, 2017
    8
    0
    Turkey
    Windows 7
    Malwarebytes
    its in my second post.Thats the event log hitmanpro.alert creates automatically on every start.
     
  7. TwinHeadedEagle

    TwinHeadedEagle Removal Expert
    Staff Member

    Mar 8, 2013
    21,444
    2,634
    Malware Removal, Gaming
    Windows 7
    ESET
    Open MalwareBytes again

    • Click the Settings tab, in the left panel choose Protection and tick Scan for rootkits.
    • Click the Scan tab, choose Threat Scan is checked and click Start Scan.
    • If threats are detected, click the Apply Actions button. You will now be prompted to reboot. Click Yes.
    • Upon completion of the scan (or after the reboot), click the Reports tab.
    • Double-click the Scan Log.
    • At the bottom click Export and choose Text file.
    Save the file to your desktop and include its content in your next reply.
     
  8. M811

    M811 New Member

    Jul 4, 2017
    8
    0
    Turkey
    Windows 7
    Malwarebytes
    I remember I checked scan for rootkits before I start all the Malwarebytes Anti-Malware scans but here it is again as you requested.
     

    Attached Files:

  9. M811

    M811 New Member

    Jul 4, 2017
    8
    0
    Turkey
    Windows 7
    Malwarebytes
    Wrong log sorry.Also I forgot to mention that , ESET 10 found 4 threats when Malwarebytes Anti-Malware tried to access them( So its not in mbams log) , so I exported those too.Here they are.

    By the way the issue is still there.
     

    Attached Files:

  10. TwinHeadedEagle

    TwinHeadedEagle Removal Expert
    Staff Member

    Mar 8, 2013
    21,444
    2,634
    Malware Removal, Gaming
    Windows 7
    ESET
    How is your computer behaving now?
     
  11. M811

    M811 New Member

    Jul 4, 2017
    8
    0
    Turkey
    Windows 7
    Malwarebytes
    As I said issue is there.What I mean is on every startup HPA blocks an attack still(which is my main problem other than some adware/bitcoinminer).And I cant see what it is from default startup applications.And scans dont find any registry error.I had some adware/trojan also but I removed most of them and uninstalled chrome(Using Opera which is fine).Will reinstall chrome now and let you know.Apart from that my computer is fine.However when my HPA trial ends , the inital thing I mentioned will mess up my pc for sure.What would you recommend me to do now ?
     
  12. M811

    M811 New Member

    Jul 4, 2017
    8
    0
    Turkey
    Windows 7
    Malwarebytes
    @publicenemy I already post it in the second post of the thread.Its called event1.txt.Well actually , I can test it if its FP by starting without HPA.I will let you know.
     
  13. TwinHeadedEagle

    TwinHeadedEagle Removal Expert
    Staff Member

    Mar 8, 2013
    21,444
    2,634
    Malware Removal, Gaming
    Windows 7
    ESET
    This is not the first time that HitmanPro has some weird detection. I would contact their support for an explanation.
     
    Sunshine-boy likes this.
Loading...
Similar Threads Forum Date
WebExplorer application removal Malware Removal Assistance For Mac Nov 14, 2017
Internet Explorer, FireFox both were Opening and Can't Install Anything Malware Removal Assistance For Windows Oct 20, 2017
Internet Explorer Bug Leaks What Users Type in the URL Address Bar Security News Sep 27, 2017