Think I Have Some Malware Got Phished

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by Mike Z, Aug 9, 2018.

  1. Mike Z

    Mike Z Private E-2

    MGtools started to run but did not make a log
     

    Attached Files:

  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Please remove this in RogueKiller:
    ¤¤¤ Files : 1 ¤¤¤
    [Root.ZeroAccess][Folder] C:\$Recycle.Bin\S-1-5-21-1692678041-514304052-3265250291-1002\$R17O3N4\l -> Found

    Reboot and rescan with RogueKiller and attach a new log.

    Also run this:
    Please download Zemana Malware Removal to your desktop and run it please.

    It auto updates, and you click scan. After it's finished, click on the icon that looks like Cell phone strength bars. High-light the report (by date log was produced) and click on the "Open Report" icon. (looks like a folder). That notepad.txt can then be copied/pasted into another .txt doc and saved. Upload that, please.
     
  3. Mike Z

    Mike Z Private E-2

    Zemana AntiMalware License Expired
    You are no longer protected against new viruses, ransomware, spyware and other security threats.

    keeps wanting me to buy or activate but won't scan
     

    Attached Files:

  4. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    You already had Zemana? Your RogueKiller log is clear. What malware issues are you still having?


    At the very bottom of this page ==> https://www.zemana.com/Download
    ... second column from the left under AntiMalware > Features..... FREE AntiMalware
     
  5. Mike Z

    Mike Z Private E-2

    No when I downloaded your Zemana link it wouldn't scan without me activating it was I supposed to buy it
     
  6. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    No...you were not supposed to buy it. Please use the last link I gave you for the free version.
     
  7. Mike Z

    Mike Z Private E-2

    I did the free download & got Zemana.AntiMalware.Setup.exe did not enable real time
    pops up license expired with upgrade link ( may have left over registry from using a few months ago?)
    click scan get attached
    click activate & get invalid license key

    no issues just cleaning after got suckered with a phishing thing
     

    Attached Files:

  8. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Did you go all the way down to the bottom? Did you click on "Free Anti-Malware"?
     
    Last edited: Aug 10, 2018
  9. Mike Z

    Mike Z Private E-2

    ok Zemana was clean I'm rerunning the list and noticed I had truesight.sys & funmoods in hitmanpro before & now.
    Some things say it's a trojan are they ok or need to be deleted?
     

    Attached Files:

  10. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    They are fine.
     
  11. Mike Z

    Mike Z Private E-2

    ok thanks alot that might be all I finally got mgtools to run so here is the zip
     

    Attached Files:

  12. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    It didn't complete.

    Now run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista or Win7,or Win8 or Win10 don't double click, use right click and select Run As Administrator).

    Let it run till it says it is finished.
     
  13. Mike Z

    Mike Z Private E-2

    ok I have the uac turned off but got this on the run
     

    Attached Files:

  14. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Please download the latest version of FRST the below link.
    Farbar Recovery Scan Tool and save it to your Desktop.


    Note: Make sure you download the proper version ( 32 bit or 64 bit ) for your PC. Only one will run, the correct one. So it you make a mistake and download the wrong one, go back and get the other.
    • Double-click to run it. When the tool opens click Yes to disclaimer.
    • Press Scan button.
    • It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your next reply.
    • The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.
     
  15. Mike Z

    Mike Z Private E-2

    thanks
     

    Attached Files:

  16. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Not finding any malware.

    If you are not having any other malware problems, it is time to do our final steps:
    1. We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware.
    2. Re-enable your Disk Emulation software with Defogger if you had disabled it in step 4 of the READ & RUN ME.
    3. Go to add/remove programs and uninstall HijackThis. If you don't see it or it will not uninstall, don't worry about it. Just move on to the next step.
    4. If running Vista, Win 7 or Win 8, it is time to make sure you have re-enabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    5. Now go to the C:\MGtools folder and find the MGclean.bat file. Double click ( if running Vista, Win7, or Win 8 or 10 Right Click and Run As Administrator ) on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
    6. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    7. After doing the above, you should work thru the below link:
     
  17. Mike Z

    Mike Z Private E-2

    ok thanks you were a big help
     
  18. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    No problem!! :)
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds