Jun 12, 2015 12:17 PM
(This post was last modified: Jun 12, 2015 12:18 PM by Knautschtabak.)
I see this possibility for you to proceed now. You can ask in the Windows section here on HF if the others know any way to reformat your system.
If they can't help you, you come back here and I will proceed with cleaning your machine as good as I can.
(Alternatively switch to Linux ;P )
(Jun 12, 2015 12:17 PM)Knautschtabak Wrote: I see this possibility for you to proceed now. You can ask in the Windows section here on HF if the others know any way to reformat your system.
If they can't help you, you come back here and I will proceed with cleaning your machine as good as I can.
(Alternatively switch to Linux ;P )
Alright.
Thank you very much for your help. :')
Changed my username 7/6/18.
WHY ARE YOU ASKING HIM TO REINSTALL? It's an easy removal
Also holy fuck that is a poorly programmed rat. Look at all those startup keys.
OP, if nobody knows how to make a fixlist for this (rly knautschtabak?) then I will make one for you. Just give me the word.
Jun 12, 2015 12:39 PM
(This post was last modified: Jun 12, 2015 12:45 PM by Knautschtabak.)
(Jun 12, 2015 12:35 PM)Null Byte Wrote: WHY ARE YOU ASKING HIM TO REINSTALL? It's an easy removal
Also holy fuck that is a poorly programmed rat. Look at all those startup keys.
OP, if nobody knows how to make a fixlist for this (rly knautschtabak?) then I will make one for you. Just give me the word.
I did not ask him. It was his decision. I always gave the option to remove the malware.
DO NOT DEAL WITH THIS MEMBER
Jun 12, 2015 12:51 PM
(This post was last modified: Jun 12, 2015 12:57 PM by ⭐ ＰＲＯＦＩＴ ⭐.)
I think i have the same thing on my PC.
hopefully a fix can be found for us both.
https://www.virustotal.com/en/file/190b4.../analysis/
^ scan of the infected file
Jun 12, 2015 12:54 PM
(This post was last modified: Jun 12, 2015 12:57 PM by Avαlαr.)
(Jun 12, 2015 12:35 PM)Null Byte Wrote: WHY ARE YOU ASKING HIM TO REINSTALL? It's an easy removal
Also holy fuck that is a poorly programmed rat. Look at all those startup keys.
OP, if nobody knows how to make a fixlist for this (rly knautschtabak?) then I will make one for you. Just give me the word.
Hey dude, if you know how to fix this, I'm all for it. At this point, I don't really care how, I just want it gone. :P
(Jun 12, 2015 12:39 PM)Knautschtabak Wrote: I did not ask him. It was his decision. I always gave the option to remove the malware.
I say we do both at once. I doubt anyone from the Windows section is gonna be able to find a way to reset my PC when I can't even run Windows normally, lol.
Hit me with round 2 if ya got it. 😎
Changed my username 7/6/18.
Jun 12, 2015 12:58 PM
(This post was last modified: Jun 12, 2015 12:59 PM by Knautschtabak.)
(Jun 12, 2015 12:54 PM)Avαlαr Wrote: Hey dude, if you know how to fix this, I'm all for it. At this point, I don't really care how, I just want it gone. :P
I say we do both at once. I doubt anyone from the Windows section is gonna be able to find a way to reset my PC when I can't even run Windows normally, lol.
Hit me with round 2 if ya got it. 😎
?
I always gave you the option that I fix it.
Post fresh FRST logs.
Jun 12, 2015 01:05 PM
(This post was last modified: Jun 12, 2015 01:06 PM by Avαlαr.)
(Jun 12, 2015 12:58 PM)Knautschtabak Wrote: ?
I always gave you the option that I fix it.
Post fresh FRST logs.
Okie dokie, I'm 000n et.
......
(Jun 12, 2015 12:51 PM)⭐ ＰＲＯＦＩＴ ⭐ Wrote: I think i have the same thing on my PC.
hopefully a fix can be found for us both.
https://www.virustotal.com/en/file/190b4.../analysis/
^ scan of the infected file
omg, exactly! I scanned that exact same file and it came up "clean" like in that one.
Changed my username 7/6/18.
DO NOT DEAL WITH THIS MEMBER
(Jun 12, 2015 01:05 PM)Avαlαr Wrote: Okie dokie, I'm 000n et.
......
omg, exactly! I scanned that exact same file and it came up "clean" like in that one.
yea ive been trying to get rid of it for a few days.
i found a way to stall it. not fix it tho. i deleted all the .jar files it made in my startup folder.
(Jun 12, 2015 01:13 PM)⭐ ＰＲＯＦＩＴ ⭐ Wrote: yea ive been trying to get rid of it for a few days.
i found a way to stall it. not fix it tho. i deleted all the .jar files it made in my startup folder.
Ikr, same. Except my computer's not the best, so mine just freezes up now.
Also, here's that next scan: http://www.filedropper.com/frst_1
I haven't even gotten a reply from the guys at the Windows section yet. xD
Changed my username 7/6/18.
DO NOT DEAL WITH THIS MEMBER
https://www.virustotal.com/en/file/d0018...434140421/
heres a scan of one of the files it puts in the startup.
Download attached fixlist.txt file and save it to the same directory as FRST.exe.
Download link: https://d.maxfile.ro/dmbeutaywz.txt (Right click --> Save as... Then rename to fixlist.txt)
Save all work before running this! Your computer will be rebooted.
NOTE: It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work!
Run FRST/FRST64 and press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will reboot your computer and generate a log on the Desktop (Fixlog.txt). Please post it to your reply.
After your reboot I want you to do another FRST scan. So the two logs I need form you are:
- FRST.txt
- Fixlog.txt
🤝
Null Byte
(Jun 12, 2015 01:22 PM)Null Byte Wrote: Download attached fixlist.txt file and save it to the same directory as FRST.exe.
Download link: https://d.maxfile.ro/dmbeutaywz.txt (Right click --> Save as... Then rename to fixlist.txt)
Save all work before running this! Your computer will be rebooted.
NOTE: It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work!
Run FRST/FRST64 and press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will reboot your computer and generate a log on the Desktop (Fixlog.txt). Please post it to your reply.
After your reboot I want you to do another FRST scan. So the two logs I need form you are:
- FRST.txt
- Fixlog.txt
🤝
Null Byte
Ok nice. Hold on, I'll try this in a bit. I'm talking to a friend who has some suggestions as well.
Changed my username 7/6/18.
DO NOT DEAL WITH THIS MEMBER
I think i just fixed it on my own.....
no more java.exe or javaw.exe processess running after restarting my computer!
I deleted all the jar files in C:\users\Austin & in the startup folder
i also removed all scheduled tasks that would put the jar files there on startup.
:D
I hope its gone for good!
(Jun 12, 2015 01:34 PM)Avαlαr Wrote: Ok nice. Hold on, I'll try this in a bit. I'm talking to a friend who has some suggestions as well.
Okay. Keep in mind that if you continue delaying, Jrat could keep replicating (potentially). So you may want to run this soon.
|
