Threat secured messages

Viruses and worms
1

The last days I get every 10-15 minutes a threat secured message. Avast secures an [trj] threat from a website which I have never visited. I launched a quick scan and a targeted scan at system 32 and they found nothing. Here 's the full message.

2

Instructions https://forum.avast.com/index.php?topic=194892.0

3

Alright so after downloading malwarebytes I launched a scan. The scan found a few viruses so I instantly quarantined and deleted them. After restarting my pc I launched another scan just to be sure. The second scan found nothing else but right after finishing a threat secured message from avast popped again.
I have the logs both from the first and the second scan.

4
I have the logs both from the first and the second scan.
And the rest?
5

Here you go. Sorry for not including them in the previous post.

6

Malware experts are notified, it may take hours before they are online

7

This will automatically restart your PC so save your work before doing this.

  • Open Notepad (click Start button → type notepad.exe → press Enter)
  • Copy text from code block below and paste it into Notepad
Task: {B80EB22B-9C3F-44C3-82C9-C247792E231A} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {FB9BA845-B1E9-4FBE-9782-59BB2ECE77EC} - System32\Tasks\ACC => C:\Program Files\DriverSetupUtility\FUB\FUB_Send.bat [2015-06-22] () <==== ATTENTION
cmd: type "C:\Program Files\DriverSetupUtility\FUB\FUB_Send.bat"
AlternateDataStreams: C:\Users\Someone:Heroes & Generals [38]
cmd: reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters" /v SearchList /d "" /f
Reboot:
  • Go to File → Save As
  • Make sure that UTF-8 is selected as Encoding (left side of Save button)
  • Save it as fixlist.txt on Desktop
  • Open again FRST and click on button Fix
  • Wait until FRST finishes
  • fixlog.txt should be genereted and opened. Attach it your post and wait further instructions.
8

Here it is.

9

so what should I do now?

10

Wait for the moment, I have tried to attract attention back to your topic.

For now are you experiencing any of the same issues ?

11

Sorry for late response. What is the system status now?

12

Well I don 't get threat secured messages anymore. There 's one thing I forgot to mention though. For the last months some times I have really high disk usage like 90-100%. But I am not sure if a virus causes this problem

13

Glad to hear that.

• The following will implement some post-cleanup procedures:

=> Please download DelFix by Xplode to your Desktop.
Run the tool and check the following boxes below;
[i]
http://www.mcshield.net/personal/magna86/Images/checkmark.png
Remove disinfection tools

http://www.mcshield.net/personal/magna86/Images/checkmark.png
Create registry backup

http://www.mcshield.net/personal/magna86/Images/checkmark.png
Purge System Restore [/i]
Click Run button and wait a few seconds for the programme completes his work.
At this point all the tools we used here should be gone. Tool will create an report for you (C:[b]DelFix.txt[/b])

The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix
Tool deletes old system restore points and create a fresh system restore point after cleaning.

As for disk usage, you are not only Windows 10 user with that problem. Some users solved that problem with disabling telemetry.

14

So, is my computer save now? ;D ;D

15

It should be.

16

Alright, thanks a lot for your time and help. :slight_smile: