Infected by Anythicago, opticguardzip, and others.

Hello,

I am a newbie to this forum, so please forgive my ignorance. It looks like I have to start a new thread because this infection is very specific to each computer. My laptop is infected with the Anythicago virus and I keep getting messages that Avast has blocked the infection, but it still appears to be on my computer. I don’t even know how I got the virus. I use Avast and Malawarebytes, but neither seems to be able to remove the infection. Any help would be appreciated.

https://forum.avast.com/index.php?topic=53253.0

Monitoring

Here are the results of Malawarebytes and FRST scan. Still scanning with AswMBR and will upload those asap.

Here are results from the aswMBR scan.

https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
Fix with Farbar Recovery Scan Tool

https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[B] This fix was created for this user for use on that particular machine.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif

https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
Running it on another one may cause damage and render the system unstable.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[/B]

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

[*]Right-click on
https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File).
[*]Press the Fix button just once and wait.
[*]If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
[*]When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

Hello,

I have run the scan twice and get the same message: “No fixlist.txt found.” The scan and the addition files both saved to the desktop, but apparently a fixlog file was not created. I sent over the scan and addition log files last night. Is there something I am doing wrong?

Is FRST on desktop as shortcut or as .exe file?

It is an exe file. I saved it to the desktop when I downloaded. Both of the other scan files saved directly to the desktop.

Then you’re doing something wrong.

Is fixlist.txt named exactly fixlist

Create a new folder.
Put FRST.exe (or FRST64.exe if you have a 64 bit system) in the folder.
Put fixlist.txt in the same folder.
Run FRST.exe and select fix.

Ok, I placed it in a separate folder and ran the scan again. These are the scan results the program provided. Still no file called “fixlist.txt” I have attached both files the program gave me. I have searched the drive and found nothing by that name. Sorry to be a bother, but I don’t see what we are looking for.

Should I try re-downloading FRST?

Did you downloaded the fixlist.txt that TwinHeadEagle created for you ?

See reply #5

And that was the step I missed. Thanks for being patient with a noob! Please see attachment.

We charge noob double prices.
So that will cost you…
Let see…
Double is 2 right ?
Ok, that wil make it 2 x $0 = $0 ;D

Haha! At least the price is right. Let me know if I need to provide anything else to you. Thanks!

How is the system behaving now ?
Is the problem gone ?
If not run Farbar again and attach the new logs to your next post please.

How is PC behaving now?

It is doing very well now. I have restarted it a couple of times and I haven’t received any warnings since I ran your fix. I’ll keep an eye on it and let you know if it changes. Thanks a lot for your help!