Problems with malware warnings copertps.com/k and etpsoprc.ru/a

Hello, I am having this exact same problem. I tried using the System Restore but couldn’t do it, it kept automatically closing everytime I tried running it. How should I proceed?

PS: I tried running the adwcleaner but it keeps automatically closing. :frowning:

Thank you.

follow the guide: http://forum.avast.com/index.php?topic=53253.0

Attach all logs here…If you cant run a particular tool skip it.

I tried running MBAN and OTL many times, but both kept closing before even finishing the scans. Even rebooting my computer didn’t work, so here’s all the logs I could get… Thank you!

try running the tools you ave problem with from safe mode

Ok, here are all the logs. (I ran the aswMBR scan again, btw!)

malware removers are notified, it may take hours before they arrive so be patient

Ok, I’ll wait as long as necessary. Thank you very much. :slight_smile:

they are usually here after work hours european time…

Hi Mirie I will be working on your Malware issues.

Re-run OTL.exe.

[*]Copy and paste the following text written inside of the quote box into the Custom Scans/Fixes box.



:OTL
O4 - HKU\S-1-5-21-581754615-3623660738-4178694372-1000..\Run: [c3f1c] C:\Users\Malu\AppData\Roaming\d5\c3f1c.js ()
O4 - Startup: C:\Users\Malu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\919.js ()
O4 - Startup: C:\Users\Malu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.js ()
O4 - HKU\S-1-5-21-581754615-3623660738-4178694372-1000..\Run: [c3f1c] C:\Users\Malu\AppData\Roaming\d5\*.js ()
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.

:files
C:\Users\Malu\AppData\Roaming\d5
C:\d47
C:\Users\Malu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\919.js
C:\Users\Malu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.js

:commands
[CREATERESTOREPOINT]
[emptytemp]



[*]Then click the Run Fix button at the top.
[*]Let the program run unhindered; it will reboot the system when it is done and open notepad with logreport. Attach here that logreport.

.

Check USB storage devices / removable drives

Download MCShield from one of the following links:

MyCity - Official download link
Softpedija - Mirror download link

[*] Double click MCShield-Setup to install the application.
[*] Wait a few seconds to MCShield finish initial scan.
Recommendation to under General and Scanner tab you click on Defaults button to choose recommended options.
[*] Connect your USB storage devices to the computer one at a time. Scanning will be done automatically.

When all scanning is done, you need to attach a logreport that has made MCShield.

Start → All Programs → MCShield → Logs

Attach here → AllScans.txt

Explanation: USB storage devices are all the USB devices that get their own partition letter at connecting to the PC,
e.g. flash drives (thumb/pen drives, USB sticks), external HDDs, MP3/MP4 players, digital cameras,
memory cards (SD cards, Sony Memory Stick, MultiMedia Cards etc.), some mobile phones, some GPS navigation devices etc.

Hi Argus, I did everything as instructed and I think my computer is no longer infected! Thank you very much! Here are the logs:

Looks is good.

To be sure

Download DDS and save it to your Desktop from here:
http://download.bleepingcomputer.com/sUBs/dds.scr

Double click dds to run the tool.

* When done, DDS will open two (2) logs:
    1. DDS.txt
    2. Attach.txt

Save both reports to your desktop. DDS.txt and Attach.txt attach back to topic.

Hmm, I can’t download DDS for some reason… Is there another link for it?

it works here on my ipad…try again

http://download.bleepingcomputer.com/sUBs/dds.com
http://download.bleepingcomputer.com/sUBs/dds.pif

Ok, it worked now, here are the logs. :slight_smile:

OK, cleanly

Please download DelFix by “Xplode” to your Desktop.

Run the tool and check the following boxes below;

[] Remove disinfection tools
[
] Create registry backup
[*] Purge System Restore

Now click on “Run” button. Wait for the programme completes his work.
All the tools we used should be gone.
Tool will create and open an log report (DelFix.txt)
Note: The report will also be stored on C:\DelFix.txt

I don’t need DelFix log report.