Solved Malware Detection On System Registry

[TwinHeadedEagle]

Can you uninstall that MalwareBytes version and download fresh new from here:

https://www.malwarebytes.org/mwb-download/

Install and then run Hyper Scan. Attach me report if anything is found.

 

[hakah]

MBAM report is enclosed for your reference.
Thanks a lot for your kind assistance!

 

[TwinHeadedEagle]

Report looks clean, no active malware on your system.

 

[hakah]

Really thanks so much for the help! Is there any tools and means I can make use of in the future as a precaution and check of malware and other infection as well?

 

[TwinHeadedEagle]

For future protection I can recommend you:
- Adblock --> https://adblockplus.org/en/chrome
- Unchecky --> http://unchecky.com/
- MalwareBytes for occasional scan


• The following will implement some post-cleanup procedures:

=> Please download DelFix by Xplode to your Desktop.

Run the tool and check the following boxes below;

Remove disinfection tools

Create registry backup

Purge System Restore
Click Run button and wait a few seconds for the programme completes his work.
At this point all the tools we used here should be gone. Tool will create an report for you (C:\DelFix.txt)

The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix
Tool deletes old system restore points and create a fresh system restore point after cleaning.

 

[hakah]

Thanks for the advice ! Do I have to use Adblockplus as I am now using Ad Muncher. I am new in unchecky and will study it features prior installing it.
This morning my MBAM does a Threat Scan automatically and still those recent detected malwares exist in Registry Files. I take no action this time and wait for your further advice after checking the text files submitted.
Waiting for your advice for remedial action!

 

[TwinHeadedEagle]

Did you removed these entries?

 

[hakah]

No, they were still stored in mbam awaiting for action to be applied.

 

[TwinHeadedEagle]

Then please apply and remove them.

 

[hakah]

Action was taken and those entries were removed.

 

[TwinHeadedEagle]

Then you're clean now...

 

[hakah]

Today two System Voulume Information Registry Files were found with Generic29.ASPW & BackDoor.Generic14.BPTG by AVG 2013 which were also removed.

 

[TwinHeadedEagle]

These are restore point detections, and they are harmless. You can run Delfix again to clean these detections.

 

[hakah]

DelFix.txt is enclosed for your reference!

 

[hakah]

Same malwares as before were again detected by MBAM throught Threat Scan and were removed thereafter. MBAM.txt was attached for your checking and advice.
Many thanks!

 

[TwinHeadedEagle]

1. Please download ComboFix by sUBs from here and save it to your Desktop.
If you are unsure how ComboFix works please read this guide carefully.
Note: ComboFix must be downloaded to your Desktop.

--------------------------------------------------------------------
2. Temporarily disable your AntiVirus program, usually via a right click on the System Tray icon. They may interfere with Combofix.
If you are unsure how to do this please read this or this Instruction.

--------------------------------------------------------------------
3. Run ComboFix. Click on I Agree!

- ComboFix will display DISCLAIMER of warranty on software.
By clicking I Agree ComboFix shall continue.
- ComboFix will check if there is a newer version of ComboFix available.
Click Yes if prompted to download.
-If Recovery Console is not installed, ComboFix will offer download & installation.
Click Yes to allow ComboFix to install Recovery Console.
- ComboFix will scan your computer in stages, total of 50 stages.
Do not mouse-click around while ComboFix is running.
Note:If you see a message like "Illegal operation attempted on a registry key that has been marked for deletion" just restart your computer.

--------------------------------------------------------------------
4. When the tool is finished, it will produce a log report for you. (typical location: C:\ComboFix.txt )
Attach log reports ( ComboFix.txt) back to topic.

 

[hakah]

ComboFix.txt is hereby enclosed for your checking and further advice. Thanks!

 

[TwinHeadedEagle]

Please download AdwCleaner by Xplode and save to your Desktop.

Double click on AdwCleaner.exe to run the tool.

• Click on the Scan button.
• After the scan has finished click on the Clean button.

Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.

• After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
• Post logfile will also be saved in the C:\AdwCleaner folder.

 

[hakah]

AdwCleaner[SO].txt is enclosed for your checking and further advice!

 

[TwinHeadedEagle]

Your PC is clean, no active malware.