Adlice forum

General Category => Malware removal help => Topic started by: kalonjf on October 06, 2015, 02:20:31 AM

Title: Possible infection- Need to analyze
Post by: kalonjf on October 06, 2015, 02:20:31 AM

Hello, can someone please take a look at this?  Thought i'd try Rogue Killer and it's produced quite a report.  My pc has been behaving strangely, especially with internet use.  Any help is appreciated!!

Title: Re: Possible infection- Need to analyze
Post by: Curson on October 06, 2015, 05:07:17 PM

Hi kalonjf,

Welcome to Adlice.com Forum.
Could you please describe what you mean by "strangely" ?

The report you posted was generated with the bêta of RogueKiller .
Please download RogueKiller (64 bits version) (http://www.adlice.com//?smd_process_download=1&download_id=2181), redo a full scan and post the report obtained in your next reply.

Regards.

Note : This thread has been moved to the "Malware removal help" section for clarity.

Title: Re: Possible infection- Need to analyze
Post by: kalonjf on October 22, 2015, 10:36:01 PM

I apologize for the delayed response.  By behaving srangely i mean that while on the internet searches take forever and usually don't even load pages.  DNS errors, timed out, and such.  Ive tried different browsers, flushing DNS and reseting winsock but nothing permanently fixes the problem.  It feels like my internet has been hijacked.  Here is a report from RogueKiller 64 bit version.  Thanks for your time!

Title: Re: Possible infection- Need to analyze
Post by: Curson on October 23, 2015, 02:38:30 PM

Hi kalonjf,

RogueKiller report doesn't show anything.
Please download Farbar Recovery Scan Tool (x64) (http://download.bleepingcomputer.com/farbar/FRST64.exe) and save it to your Desktop.

• Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
  
• Press Scan button.
  
• It will produce a log called FRST.txt in the same directory the tool is run from.
  
• Please attach log back here.
• The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST64.exe). Please also attach that along with the FRST.txt into your reply.
  

Regards.

Title: Re: Possible infection- Need to analyze
Post by: kalonjf on October 24, 2015, 12:12:11 AM

Ok, here are the reports from Fabar scan tool.  Thanks again for your help!

Title: Re: Possible infection- Need to analyze
Post by: Curson on November 02, 2015, 10:15:21 PM

Hi kalonjf,

I'm sorry for the late reply. For some reasons, your thread wasn't added to my track list.
I noticed you use cracking tools. Please keep in mind that some of them could be used to infect your computer.

Download attached fixlist.txt file and save it to the Desktop.

NOTE. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system !

Run FRST64 and press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please attach it to your reply.

Regards.