I am helping a friend clean a grossly infected computer. Windows 10. Uses McAfee AV.
He ran Malwarebytes 3 without difficulty and it cleaned with no problem at all. I do have the log if needed but cannot find a way to attach the text file
He then attempted to use AdwCleaner v. 7.0.3.1 but it would not complete cleaning and received a box with notification that a problem had stopped the clean....
The fact that this is Spanish(Maybe?) makes it very VERY difficult to read.... Any way you could turn it into English? On the first glance noticed some things that MIGHT be potential issues, unsure, cause..... I am not yet used to reading the logs, and different language doesn't help the issue :)
JoshRoss, 2017-09-07 14:26:07 (UTC)
Of course sorry.
If you see something that is not translat...
Ports, applications, accessibility. Maybe your other device is used a lot less, you haven't messed with any ports or have any applications that require forwarding. Honestly, very weird issue, I would need to investigate the files. Can you scan your PC With Farbar MiniToolBox and Malwarebytes JRT? Post the logs that you get.
JoshRoss, 2017-09-06 13:16:38 (UTC)
MiniToolBox by Farbar Version...Hi,
Don't panic, this is a classic "aggressive (scam) advertising" and a (real) false 'Zeus' alert! None zeus virus is present on your computer!
https://www.bleepingcomputer.com/virus-removal/remove-zeus-virus-detected-popups
https://blog.malwarebytes.com/threat-analysis/2017/06/the-numeric-tech-support-scam-campaign/
I've not seen yet MalwareBytes, ADWCleaner, HitmanPro, uBlock, adblock, a...
1) Open HiJackThis.
2) Click on "Do a system scan only"
3) After end of scanning check following records:
O1 - Hosts: 127.0.0.1 down.baidu2016.com
O1 - Hosts: 127.0.0.1 123.sogou.com
O1 - Hosts: 127.0.0.1 www.czzsyzgm.com
O1 - Hosts: 127.0.0.1 www.czzsyzxl.com
O1 - Hosts: 127.0.0.1 down.baidu2016.com
O1 - Hosts: 127.0.0.1 123.sogou.com
O1 - Hosts: 127.0.0.1 www.czzsyzgm.com
O1 - Hosts: 127....le 2eme :
# AdwCleaner v6.021 - Rapport créé le 13/10/2016 à 20:31:25 # Mis à jour le 06/10/2016 par ToolsLib # Base de données : 2016-10-13.1 [Locale] # Système d'exploitation : Windows 10 Home (X64) # Nom d'utilisateur : willy - DESKTOP-IT3AHAH # Exécuté depuis : C:\Users\willy\Downloads\adwcleaner_6.021.exe # Mode: Nettoyage # Support : https://toolslib.net/forum
***** [ Services ] *****...Voici : bizarrement j'ai deux fichiers rapports comme précédemment et me clavier est passé en qwerty ! Grrr !!!
# AdwCleaner v6.021 - Rapport créé le 13/10/2016 à 20:31:25 # Mis à jour le 06/10/2016 par ToolsLib # Base de données : 2016-10-13.1 [Locale] # Système d'exploitation : Windows 10 Home (X64) # Nom d'utilisateur : willy - DESKTOP-IT3AHAH # Exécuté depuis : C:\Users\willy\Downloads\a...Bonjour,
Pouvez-vous relancer AdwCleaner, allez dans Outils > Options, et cochez:
Lancez alors une analyse, suivie d'un nettoyage, et fournissez le rapport généré.
Cordialement,
1) Run HiJackThis again, press Do a system scan only In scan window check following lines:
O1 - Hosts: 127.0.0.1 down.baidu2016.com
O1 - Hosts: 127.0.0.1 123.sogou.com
O1 - Hosts: 127.0.0.1 www.czzsyzgm.com
O1 - Hosts: 127.0.0.1 www.czzsyzxl.com
O1 - Hosts: 127.0.0.1 union.baidu2019.com
O1 - Hosts: 127.0.0.1 down.baidu2016.com
O1 - Hosts: 127.0.0.1 123.sogou.com
O1 - Hosts: 127.0.0.1 www.czzsy...Voici chose faite et merci infiniment de votre aide !!
# AdwCleaner v6.020 - Rapport créé le 26/09/2016 à 19:06:27 # Mis à jour le 14/09/2016 par ToolsLib # Base de données : 2016-09-26.1 [Locale] # Système d'exploitation : Windows 10 Home (X64) # Nom d'utilisateur : pierr - DESKTOP-LG310NK # Exécuté depuis : C:\Users\pierr\Downloads\adwcleaner_6.020.exe # Mode: Nettoyage # Support : https...