SOLVED Thanks in advance

Discussion in 'Malware Removal Assistance For Windows' started by RageQuit, Jan 2, 2018.

Need Malware Removal Help?

We offer free malware removal assistance to our members. Sign Up now, and get free malware removal support.

  1. RageQuit

    RageQuit New Member

    Dec 29, 2017
    5
    0
    illinois
    Windows 7
    Avast
    Operating System:
    Windows 7
    Are you using a 32-bit or 64-bit operating system?:
    64-bit (x64)
    Infection date and initial symptoms:
    Christmas. It started Facebook ads, redirects to bing but shows google first, blocks installations.
    Current issues and symptoms:
    System failure at times. Google says I'm sending too much data.
    Steps taken in order to remove the infection:
    Malware Bytes, Avast,
    Logs added to help request:
    • FRST.txt
    • Addition.txt
    Sometime over Christmas I got infected. The scans I try won't help and other installations won't launch. The main culprits in my processes are uprbhls.exe*32 and remhpoa.exe*32. There's also two "clients" running in my processes that spooks me a little. Any help would be appreciated. Thank you.
     

    Attached Files:

  2. TwinHeadedEagle

    TwinHeadedEagle Removal Expert
    Staff Member

    Mar 8, 2013
    21,737
    2,655
    Malware Removal, Gaming
    Windows 7
    ESET
    Hello,


    Please download Farbar Recovery Scan Tool x64 and save it to a flash drive.
    • Now you should get a window like this where you need to click Troubleshoot.
    [​IMG]
    • In the next window, click Advanced options and select Command Prompt.
    • Now you should log in into your account and after that Command Promptwindow.
    [​IMG] Access the notepad and identify your USB drive

    In the Command Prompt please type in:
    Code:
    notepad
    and press Enter.
    • When the notepad opens, go to File menu.
    • Select Open.
    • Go to Computer and search there for your USB drive letter.
    • Note down the letter and close the notepad.


    [​IMG] Scan with Farbar Recovery Scan Tool

    Once back in the command prompt window, please do the following:
    • Type in e:\frst64.exe and press Enter.
      You need to replace e with the letter of your USB drive taken from notepad!
    • FRST will start to run. Give him a minute or so to load itself.
    • Click Yes to Disclaimer.
    • In the main console, please click Scan and wait.
    • When finished it will produce a logfile named FRST.txt in the root of your pendrive and display it. Close that logfile.

    Transfer it to your clean machine and include it in your next reply.
     
  3. RageQuit

    RageQuit New Member

    Dec 29, 2017
    5
    0
    illinois
    Windows 7
    Avast
    The tutorial is for Windows 10 and I'm on Windows 7. I just want to make sure that's not the wrong program too before I do it.
     
  4. RageQuit

    RageQuit New Member

    Dec 29, 2017
    5
    0
    illinois
    Windows 7
    Avast
    I'll assume it's good
     

    Attached Files:

  5. TwinHeadedEagle

    TwinHeadedEagle Removal Expert
    Staff Member

    Mar 8, 2013
    21,737
    2,655
    Malware Removal, Gaming
    Windows 7
    ESET
    Yup. Can you now run a MalwareBytes scan from Normal mode?
     
    Thunderbold likes this.
  6. RageQuit

    RageQuit New Member

    Dec 29, 2017
    5
    0
    illinois
    Windows 7
    Avast
    I weaseled my way into getting it to work and i scan a couple times a day. Malwarebytes wont get rid of it.
     
  7. RageQuit

    RageQuit New Member

    Dec 29, 2017
    5
    0
    illinois
    Windows 7
    Avast
    Actually yeah. After a few scans and reboots I think that let malware bytes get rid of it. Awesome. I expected a process. I'll keep my eyes open but its looking clear. Thanks a lot man that's such a weight off my shoulders. Keep up the good work.
     
Loading...
Similar Threads Forum Date
I am new here, thanks for you help in advance New Member Introductions Jun 25, 2014
Expired IObit Thanksgiving Giveaway: Advanced SystemCare 7, Malware Fighter 2, Driver Booster Giveaways Archive Nov 29, 2013
Video Review OSArmor by NoVirusThanks- An Overview Video Reviews Jan 12, 2018