gringo_pr

Moderators
  • Content count

    10,584
  • Joined

  • Last visited

About gringo_pr

  • Rank
    Staff

Contact Methods

  • Website URL
    http://www.malwarebytes.org

Recent Profile Visitors

18,636 profile views
  1. Hello After the restart is it still doing it?
  2. Hello That would sound about right - that is when that version of malware was making the rounds Are you going to get me the FRST reports? grin go
  3. . At this time, I would like you to check things out with the computer and let me know if you still have the same issue or if there is something else you would like me to check out for you while we are still here. . This feedback will let me know if we need to keep digging deeper and will also let me know if we need to go into a different direction. . Regards, William Rowland – “Gringo_pr” Customer Success Specialist & Malware Removal Specialist
  4. Hello lipstickviod Now I need you to download this script that I have made for you --> fixlist.txt It needs to be saved Next to the "Farbar Recovery Scan Tool" (FRST) program (If asked to overwrite existing one please allow) Run FRST again but this time press the Fix button just once and wait. When finished, it will make a log (fixlog.txt) next to FRST. Please attach the contents of this file to your reply. NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system Gringo
  5. Since this issue is resolved I will close the thread to prevent others from posting here. If you need assistance please start your own topic and someone will be happy to assist you.
  6. . I would also like you to rerun “FRST” for me again and send me the new report for me to check over. If you cannot find where you saved “FRST” the first time then here are the links again for you. . Note: You need to run the version compatible with your computer. If you are not sure which version applies to your computer, then download both of them and try to run them. Only one of them will run on your computer, and that will be the right version. . For 32-bit (x86) editions of Windows: >> FRST.exe << For 64-bit (x64) editions of Windows: >> FRST64.exe << . Run the “FRST” download that works on your computer When the tool opens click “Yes” for the disclaimer in order to continue using “FRST”. Under the section called “Whitelist” make sure all boxes are checked Under the section called “Optional Scan” I would like you to have a check mark next to “Addition.txt” Press the “Scan” button. When the scan is done, it will save the reports to the same location as “FRST” (if you had saved “FRST” on your desktop, then the reports will be saved on the desktop). Please attach the “FRST.txt” and the “Addition.txt” log file to your next reply to me (it is best if you do not copy and paste it into an e-mail). . When you reply back to me you should have Two reports for me and I need you to tell me how things are doing. FRST.txt Addition.txt . Regards, William Rowland – “Gringo_pr” Customer Success Specialist & Malware Removal Specialist
  7. At this time, I would like you to check things out with the computer and let me know if you still have the same issue or if there is something else you would like me to check out for you while we are still here. . I would also like you to rerun “FRST” for me again and send me the new report for me to check over. If you cannot find where you saved “FRST” the first time then here are the links again for you. . Note: You need to run the version compatible with your computer. If you are not sure which version applies to your computer, then download both of them and try to run them. Only one of them will run on your computer, and that will be the right version. . For 32-bit (x86) editions of Windows: >> FRST.exe << For 64-bit (x64) editions of Windows: >> FRST64.exe << . Run the “FRST” download that works on your computer When the tool opens click “Yes” for the disclaimer in order to continue using “FRST”. Under the section called “Whitelist” make sure all boxes are checked Under the section called “Optional Scan” I would like you to have a check mark next to “Addition.txt” Press the “Scan” button. When the scan is done, it will save the reports to the same location as “FRST” (if you had saved “FRST” on your desktop, then the reports will be saved on the desktop). Please attach the “FRST.txt” and the “Addition.txt” log file to your next reply to me (it is best if you do not copy and paste it into an e-mail). . When you reply back to me you should have Two reports for me and I need you to tell me how things are doing. FRST.txt Addition.txt . Regards, William Rowland – “Gringo_pr” Customer Success Specialist & Malware Removal Specialist
  8. I would like to clear the Cached Data and files from Edge Click the Hub icon . (the three horizontal lines upper right) Click the History icon . (Clock looking icon) Click the link labeled “Clear all history”. Check the boxes for each item you want to clear. Click the Clear button. The message “All Clear!” will appear at the top when the data has been erased. The two main ones that I would like cleared are “Cookies and saved website data” and *"Cached data and files" Please restart the computer for changes to take effect . https://www.wiknix.com/how-to-clear-cache-and-cookies-in-microsoft-edge-browser/ . Regards, William Rowland – “Gringo_pr” Customer Success Specialist & Malware Removal Specialist
  9. Greetings I have not heard from you in a couple of days so I am coming by to check on you to see if you are having problems or you just need some more time. Also to remind you that it is very important that we finish the process completely so as to not get reinfected. I will let you know when we are complete and I will ask to remove our tools . Gringo
  10. Hello What browser are you using when this happens? gringo
  11. Hello I would like to reset Chrome back to defaults to completely clear out what is going on with Chrome. You can keep your “Bookmarks” if you want to keep them, but you have to export them first – >> Export Bookmarks << – Everything else should be removed. Then I need you to go to >> Google Sync << and sign into your account. Scroll down until you see the “reset sync” button and click on the button At the prompt click on “Ok”. . Reset Your Browser Settings . In the top-right corner of the browser window, click the “Chrome Menu” icon (Three horizontal lines) Select “Settings”. At the bottom, click “Show advanced settings…” Scroll down until you see “Reset settings”, Then click on the button “Reset Settings”. In the dialog that appears, click “Reset”. . Close Chrome and restart it and check it out for me please . Regards, William Rowland – “Gringo_pr” Customer Success Specialist & Malware Removal Specialist
  12. Hello LipstickVoid Now I need you to download this script that I have made for you --> fixlist.txt It needs to be saved Next to the "Farbar Recovery Scan Tool" (FRST) program (If asked to overwrite existing one please allow) Run FRST again but this time press the Fix button just once and wait. When finished, it will make a log (fixlog.txt) next to FRST. Please attach the contents of this file to your reply. NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system Gringo
  13. At this time, I would like you to check things out with the computer and let me know if you still have the same issue or if there is something else you would like me to check out for you while we are still here. . I would also like you to rerun “FRST” for me again and send me the new report for me to check over. If you cannot find where you saved “FRST” the first time then here are the links again for you. . Note: You need to run the version compatible with your computer. If you are not sure which version applies to your computer, then download both of them and try to run them. Only one of them will run on your computer, and that will be the right version. . For 32-bit (x86) editions of Windows: >> FRST.exe << For 64-bit (x64) editions of Windows: >> FRST64.exe << . Run the “FRST” download that works on your computer When the tool opens click “Yes” for the disclaimer in order to continue using “FRST”. Under the section called “Whitelist” make sure all boxes are checked Under the section called “Optional Scan” I would like you to have a check mark next to “Addition.txt” Press the “Scan” button. When the scan is done, it will save the reports to the same location as “FRST” (if you had saved “FRST” on your desktop, then the reports will be saved on the desktop). Please attach the “FRST.txt” and the “Addition.txt” log file to your next reply to me (it is best if you do not copy and paste it into an e-mail). . When you reply back to me you should have Two reports for me and I need you to tell me how things are doing. FRST.txt Addition.txt . Regards, William Rowland – “Gringo_pr” Customer Success Specialist & Malware Removal Specialist
  14. Hello JiNCs yes you can use the custom scan option to scan the external drive with the rootkit option
  15. The next program we are going to run is called “ComboFix” . Download “ComboFix” and save it to your desktop. >> Combofix.exe << Shutdown your antivirus to avoid any conflicts. Double click on “ComboFix.exe” and follow the prompts. . Things to note Do not mouse click on “Combofix’s” window while it is running. That may cause it to stall. Your desktop may go blank. This is normal. It will return when “ComboFix” is done. “ComboFix” may reboot your machine. (even more than once) This is normal. If you encounter a message “illegal operation attempted on registry key that has been marked for deletion” Just restart the “COMPUTER” and that will resolve that error. . When finished, it will produce a report for you named. “ComboFix.txt” Please attach this report in your next reply to me for me to review. . Regards, William Rowland – “Gringo_pr” Customer Success Specialist & Malware Removal Specialist