Jump to content

LordWarbo

Members
  • Posts

    5
  • Joined

  • Last visited

Reputation

0 Neutral
  1. I believe somehow I fixed it through a variety of MalwareBytes scans, deleting the PING.EXE file in TaskManager and running ComboFix (although I am not really sure if I ran it right). Most of this help I got from looking at other similar topics in Malware Forums and 1 or 2 other websites I researched. My computer appears to be working fine for now with no random google search pop ups in IE or FF that I was getting most of yesterday. I really appreciate your time in responding to my topic and educating me.
  2. Unfortunately, I cannot seem to find this file when I go into the Windows\assembly folder. There are a few hundred Assembly Names but no folders or files that have "temp" in the name
  3. Yes, the file is still in quarantine. Is there a way for you to view it besides remotely? I have a number of files in quarantine from when the issues first started on 12/14. I received the usual spam popups pretending to be windows virus protection software. Malware found most of it and killed them.
  4. Hi Shadowwar, I have posted three scan logs below from various times today. The first shows the BitMiner program, the second shows some other type of .exe file. The third is the most recent scan which could not find anything. Before the 3rd scan, I was able to delete the PING.EXE file showing in my task manager that many other websites/forums I had researched claimed was related to the PUP.BitMiner issue. I also downloaded and ran ComboFix (another suggestion by many sites/forums). Unfortunately, after ComboFix ran and restarted my computer for me, my computer screen was black for about an entire hour. I manually restarted and ComboFix was not able to run a complete log for me. Here are the 3 scan logs: (let me know if I have provided them correctly) Scan log at 1pm today: Malwarebytes' Anti-Malware 1.51.2.1300 www.malwarebytes.org Database version: 8367 Windows 6.1.7601 Service Pack 1 Internet Explorer 9.0.8112.16421 12/18/2011 1:10:16 PM mbam-log-2011-12-18 (13-10-16).txt Scan type: Full scan (C:\|D:\|) Objects scanned: 313676 Time elapsed: 26 minute(s), 54 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 1 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: c:\Windows\assembly\temp\kwrd.dll (PUP.BitMiner) -> Quarantined and deleted successfully. >>>>>>>>> Scan log at 2:41 today Malwarebytes' Anti-Malware 1.51.2.1300 www.malwarebytes.org Database version: 8367 Windows 6.1.7601 Service Pack 1 Internet Explorer 9.0.8112.16421 12/18/2011 2:41:36 PM mbam-log-2011-12-18 (14-41-36).txt Scan type: Full scan (C:\|) Objects scanned: 314416 Time elapsed: 20 minute(s), 56 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 1 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: c:\Users\Warbo\downloads\uSeRiNiT.exe (Heuristics.Reserved.Word.Exploit) -> Quarantined and deleted successfully. >>>>>>>>>>> Scan log at 7pm today Windows 6.1.7601 Service Pack 1 Internet Explorer 9.0.8112.16421 12/18/2011 6:57:57 PM mbam-log-2011-12-18 (18-57-57).txt Scan type: Full scan (C:\|) Objects scanned: 296841 Time elapsed: 20 minute(s), 34 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected)
  5. Hello, I seem to be yet another user infected by Pup.BitMiner. Malware keeps finding it and removing but it is still on my computer. I also seem to be infected by the google search virus (not sure if it's the same thing or different) I see it is often located in c:windows/assembly/temp yet whenever I got to windows/assembly there is no temp file available. Also having a little trouble finding c: documents and settings on my Windows 7 computer and the area where you can look up Hotkeys Any assistance is appreciated. I am fairly good with computers but this virus is just plain nasty! Thanks! -LordWarbo
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.