it appears suddenly. what should i do?
more info … what is the problem
follow instructions here https://forum.avast.com/index.php?topic=53253.0
we need Malwarebytes and Farbar Recovery Scan Tool logs, attach the logs, 3 logs total
see below the box you write in … Attachments and other options
a log/malware expert will then assist you when online
it keeps on appearing in my desktop that it says the virus have been detected though it was written threat blocked…
here are my frst and addition text. i hope you can help me
did you run Malwarebytes? … you should run it before FRST
there may be some hour wait before malware team is online and can assit you
i proceed immediately to the farbar… currently downloading the malware
I would advise to lose Bittorrent. It won’t do you any favors.
Also, have you Modified the FRST log file? You have an incredibly short “One Month created Files and Folders” entry.
Please run MBAM (Malwarebytes), then post a Fresh FRST log file. You have a LOT of Adware on your computer…
malware currently scanning
here are the results scanned from malware, frst and additional txt. i hope you can help me to remove the threat that popped out in my desktop
When these fixes have run could you zip the folder at C:\FRST please as I would like a copy of the file
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
CreateRestorePoint: HKU\S-1-5-21-3497284572-2413806544-361628044-1001\...\Run: [{AA891A77-AF23-4D04-BB94-E83CC9E15348}] => powershell.exe -noprofile -windowstyle hidden -executionpolicy bypass iex ([Text.Encoding]::ASCII.GetString([Convert]::FromBase64String((gp 'HKCU:\Software\Classes\LHEDF').WMWF))); ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => No File BHO: No Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> No File Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File 2012-07-25 18:06 - 2012-07-25 19:20 - 85435392 ___SH () C:\ProgramData\msukfs.exe Task: {4C142B2B-81B9-476B-BDA8-90CB27556AC6} - \PC Performer -> No File <==== ATTENTION Task: {AEB1E972-53F3-4762-BAF8-5BBEC1FAC0FD} - \Ribble -> No File <==== ATTENTION Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f RemoveProxy: EmptyTemp: CMD: bitsadmin /reset /allusers
Save this as fixlist.txt, in the same location as FRST.exe
https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG
Run FRST and press Fix
On completion a log will be generated please post that
THEN
Please download AdwCleaner by Xplode onto your desktop.
[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S0].txt as well.
here is the fixlog
adwcleaner log files
How is the computer now, have the alerts ceased ?
Could you zip the FRST folder and upload to mediafire for me to collect https://www.mediafire.com/ post the sharing link
my computer is okay now. thank you so much
Any chance of that folder as it will help Avast improve detections