It has been a couple months since i scanned my computer so i decided to start a quick scan and by the time it was finished i had about 13 threats, some being pups but mostly these JS:Agent-DRW trojans and a couple adware gens which came as a surprise because i have no idea where these came from. The first time i applied the usual (fix) setting to the box avast just completely crashed and i ended up having to restart my computer ( i dont know if this is related or not but i thought id just say it to be sure).
Second time around it actually sent all of the threats to quarantine but it seems it couldn’t send this one because Error:access is denied(5)?
heres a snip from the list
http://postimg.org/image/h143zge6f/
another worrying thing is that it seems to be stuck in system32.
So i was wondering could anyone help me get rid of it?
Attach your basic diagnostic logs. (MBAM, FRST and aswMBR)
Instructions: https://forum.avast.com/index.php?topic=53253.0
Monitoring…
Hm i don’t think the bytes scan found anything in system 32, do i still follow the instructions?
could it be as simple as going into sys32 and deleting hibiki?
Without your logs, we can’t answer that.
weird, it also looks like it didn’t create a scan log after the initial scan yet it creates one if i cancel a scan.
guess ill have to scan again.
here they are, i hope i did them correctly.
You’re missing Addition.txt report.
Sorry, here it is.
https://sites.google.com/site/cannedfixes/malwarebytes-anti-malware/51a46ae42d560-malwarebytes_anti_malware.png
Scan with Malwarebytes’ Anti-Malware
Please re-run
https://sites.google.com/site/cannedfixes/malwarebytes-anti-malware/51a46ae42d560-malwarebytes_anti_malware.png
Malwarebytes’ Anti-Malware.
[*]First of all, select update.
[*]Once updated, click the Settings tab, in the left panel choose Detection & Protection and tick Scan for rootkits.
[*]In the same tab, under PUP and PUM detections make sure it is set to Treat detections as malware.
[*]Click the Scan tab, choose Threat Scan is checked and click Start Scan.
[*]If threats are detected, click the Apply Actions button. You will now be prompted to reboot. Click Yes.
[*]Upon completion of the scan (or after the reboot), click the History tab.
[*]Click Application Logs and double-click the newest Scan Log.
[*]At the bottom click Export and choose Text file.
Save the file to your desktop and include its content in your next reply.
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
Scan with ZOEK
Please download ZOEK by Smeenk and save it to your desktop.
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.
[*]Right-click on
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
[]Wait patiently until the main console will appear, it may take a minute or two.
[]In the main box please paste in the following script:
createsrpoint;
autoclean;
emptyclsid;
emptyalltemp;
ipconfig /flushdns >>"%temp%\log.txt";b
[*]Make sure that Scan All Users option is checked.
[*]Push Run Script and wait patiently. The scan may take a couple of minutes.
[*]When the scan completes, a zoek-results logfile should open in notepad.
[*]If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)
Upload it in your next reply.
Here are the Zoek results
As for malwarebytes it says its fully updated, and im fairly certain scan for rootkits was checked at the time of scan but i guess ill scan again.
[b]EDIT[b]
heres the second malwarebytes scan.
How is your PC behaving now?
Well actually my computer has seemed to be running fine the entire time.
Edit
Well thats strange, i decided to scan System32 with avast again and this time it was actually able to send Hibiki.dll to the chest, yet before it couldn’t. Well, i guess thats that? thanks for the help.