Not sure if I'm rid of MSE Ransomware. Still have file JRT was unable to delete.

wzbzjmn111

New Member
Thread author
Feb 20, 2014
2
I have uploaded the files below. Please let me know what else I should do. I currently have MacAfee free version from my ISP provider. I however, turned it off, and the Firewall to run these programs. Am I ok now? Please let me know ASAP.

I thank you soooooo much in advance for everything you've done for me and for your superior knowledge. I've spent hours in MS Community and finally got sent to you. You guys are spectacular and as soon as I get a job I'm donating. In the meantime I'll send my friends with money to you and hopefully they can help monetarily for the cause. Thank you again.

Respectfully submitted
 

Attachments

  • aswMBR.txt
    2.2 KB · Views: 69
  • FRST.txt
    154.3 KB · Views: 146
  • JRT.txt
    799 bytes · Views: 79
  • HitmanPro_20140215_1528.log
    16.2 KB · Views: 75

TwinHeadedEagle

Level 41
Verified
Mar 8, 2013
22,627
Hi,


1. Please download ComboFix by sUBs from here and save it to your Desktop.
If you are unsure how ComboFix works please read this guide carefully.
Note: ComboFix must be downloaded to your Desktop.


--------------------------------------------------------------------
2. Temporarily disable your AntiVirus program, usually via a right click on the System Tray icon. They may interfere with Combofix.
If you are unsure how to do this please read this or this Instruction.

--------------------------------------------------------------------
3. Run ComboFix. Click on I Agree!

- ComboFix will display DISCLAIMER of warranty on software.
By clicking I Agree ComboFix shall continue.

- ComboFix will check if there is a newer version of ComboFix available.
Click Yes if prompted to download.
-If Recovery Console is not installed, ComboFix will offer download & installation.
Click Yes to allow ComboFix to install Recovery Console.
- ComboFix will scan your computer in stages, total of 50 stages.
Do not mouse-click around while ComboFix is running.
Note:If you see a message like "Illegal operation attempted on a registry key that has been marked for deletion" just restart your computer.

--------------------------------------------------------------------
4. When the tool is finished, it will produce a log report for you. (typical location: C:\ComboFix.txt )
Attach log reports ( ComboFix.txt) back to topic.
 

wzbzjmn111

New Member
Thread author
Feb 20, 2014
2
I followed your instruction and that of Combofix and downloaded from the link in your reply. It took a couple times to get it to download. All Virusware is turned off except HitmanPro Free Trial. It asked me if I wanted it to download the Recovery counsel I said yes and it ran and ran and ran and ran. I never saw it stating that it was on any stages though. My computer was doing something. I went shopping came back and closed it and the logo showed up on my computer. I do not see the recovery counsel an did a search for combofix.txt but didn't see any.

A very strange thing happened when I left for the store. A presumably Microsoft Tech called me on my cell phone saying something that my computer was going to read all kinds of error messages to me. I told him I wasnt at home. He left his phone number a (312) area code. I told him I would call him when I got back. Then he called again this time from a different number and he seemed upset that I wasn't home yet. This time his accent was not as thick. I don't even think it was the same guy. \

I dont understand why he is calling me. Anyway please get back to me ASAP. This guy is giving me the creeps and I really don't know how to proceed. I have some other logs I'd like to sent you, however, not the combofix.txt.
 

Attachments

  • kap - file.txt
    787 bytes · Views: 101
  • kap - malware.txt
    239 bytes · Views: 75
  • kap- vunerability.txt
    50 bytes · Views: 77
  • TDSSKiller.2.8.16.0_15.02.2014_13.08.46_log.txt
    98.1 KB · Views: 76

TwinHeadedEagle

Level 41
Verified
Mar 8, 2013
22,627
You have been called by fraudsters, please do not respond to their calls, because they want to take your money.

Can you see if there is ComboFix report located in C:\ or C:\Qoobox
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top