[*]Then click the Run Fix button at the top.
[*]Let the program run unhindered; it will reboot the system when it is done and open notepad with logreport. Attach here that logreport.
Step #2
Download ComboFixfrom here and save it to your Desktop.
If you are unsure how ComboFix works please read this guide carefully. note: ComboFix must be downloaded to your Desktop.
Temporarily disable your AntiVirus program.
If you are unsure how to do this please read this Instruction.
Run ComboFix. Click on I Agree!
ComboFix will check if there is a newer version of ComboFix available.
Click Yes if prompted to download.
ComboFix will display DISCLAIMER OF WARRANTY ON SOFTWARE.
Click Yes to allow ComboFix to continue.
If Recovery Console is not installed, ComboFix will offer download & installation.
Click Yes to allow ComboFix to install Recovery Console.
When the tool is finished, it will produce a log report for you. (typical location: C:[b]ComboFix.txt[/b] )
Attach log reports ( ComboFix.txt) back to topic.
k i did what u asked. my question is also this computer is only a gaming computer, to reformat it will be no real loss, just need to install a couple games and foxfire and itunes, would it even still be better if it never pops up again to do that or if it fails to pop up on avast is it safe?
Close all browser windows and refering to the picture above.
Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
ComboFix will will re-run. When finished, it will produce a log for you.
Attach the contents of the log in your next reply. (typical location: C:[b]ComboFix.txt[/b] )
avast hasnt came up saying i have anything, i ran inbetween when i got your last msg and by the time i did it i ran malwarbytes and avast, the malwarbytes found nothing but avast found 2 infections says, threat win32:Sirefef-pl rtk, says access is denied 5 and location is windows/assembly/gac_32 and other is _64/desktop.ini
Close all browser windows and refering to the picture above.
Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
ComboFix will will re-run. When finished, it will produce a log for you.
Attach the contents of the log in your next reply. (typical location: C:[b]ComboFix.txt[/b] )
step2
Run avast , click on upgrade and update and than download a fresh versions.
( mainteance > Update > Update program )
Run avast boot time scan:
( scan computers > boot time scan > Shedule Now )
The computer will restart and before starting the system will start the Boot-Scan process.
During scanning, if malware is detected, select Move infected files to Quarantine.
When scan is finish, restart. When system is up and running in normal mode go here:
C:\ProgramData\AVAST Software\Avast[b]report[/b]
found 4 infections, some coin miner, and 2 that i posted on in last post, didnt see other, but guess u will see it in report, still no avast warning coming up. have to go to bed will check when i wake up, i know you are doing this free of charge and wanna say thanks very much for helping me. i can build computers, deal with hardware issues but i lack any sort of knowledge of software issues and code.
The first two detected are files from Combofix Quarantine.
The following two files wase deleted by Combofix with CFScripts if you’re even started Combofix.
I you did follow step1 from my previous message, attach here Combofix log ( C:\ComboFix.txt )
If you skip that step , follow it now, run Combofix with CFScript and when finished, attach here Combofix.txt
Basically, it should be it. You should not have detection and system should be clean.
ya i did it when u asked, so is it still on my system? is it safe to use passwords and etc, worried about banking stuff. also how did this computer get infected, this is a computer inside my home and my brothers live with me, are they getting into stuff i have told them not to watch?
The logs looks good and there is no traces for active malware.
And yes, i recommendet that you change your all important passwords just in case.
also how did this computer get infected,
Honestly to tell you, I would not know how are you get infected. There are so many ways...
For this reason it is important you're using updated and active antivirus softwere.
For additional protection, you have a malwarebytes.
I also recommendet this light tool ( MCShield ) designed to prevent infections transmitted via removable drives. http://amf.mycity.rs/mcshield
It will prevent infection by computer via USB flash drive, mobile phone or any other memory card.
And not only will prevent infection, but will immediately clean Memory card or external HDD…etc
