|
|
Post by bilbo336 on Mar 20, 2017 10:09:01 GMT -8
wikisend.com/download/770060/FRST.txtEach time I restart my computer I get a message from Norton that the Kotver!.gm2 virus has been detected - I cannot seem to get rid of it. Please help.
|
|
dbrisen
Malware Removalists
Posts: 3,688 
|
Post by dbrisen on Mar 20, 2017 22:52:56 GMT -8
I also need the Addition.txt file that should have been made at the same time with the FRST.txt log.
|
|
dbrisen
Malware Removalists
Posts: 3,688
|
Post by dbrisen on Mar 21, 2017 22:54:44 GMT -8
Do you still need help or has this been handled via assistance elsewhere?
|
|
|
|
Post by bilbo336 on Mar 22, 2017 11:26:47 GMT -8
Sorry about the delay - I had to leave my computer and just got back. I still need your assistance. I have attached the additional file to this post and will also upload it to you. I appreciate all you do. Thanks. - I just noticed that the files have been deleted. I will start over and send the files from a new scan. Thanks. -- I made a new scan and uploaded the following: wikisend.com/download/615868/Addition.txtwikisend.com/download/130166/FRST.txt |
|
dbrisen
Malware Removalists
Posts: 3,688
|
Post by dbrisen on Mar 23, 2017 8:30:23 GMT -8
Thanks for the fresh logs; we should be able to get it all now. FIRST >>>>Please go to START (Windows Orb) >> Control Panel >> Uninstall a Program or Programs and Features and remove the following (if listed): iLivid
Media BuzzMedia Player
Network System Driver
QuickTime 7
Search App by Ask
Software Version UpdaterTo do so, left clicking on the name once and then click Uninstall/Change at the bar above the list window. Follow the prompts of the uninstaller BUT please read carefully any questions it asks before answering; some uninstallers will try and deceive you into keeping the software. SECOND >>>>Open notepad by pressing the Windows Key + R key, typing notepad in the Run box and pressing Enter. Please copy the contents of the quote box below. To do this highlight the contents of the box and right click on it and select copy. Paste this into the open notepad. Save it to your desktop as fixlist.txtNOTE. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work. NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating systemStart FRST that is on the desktop by right clicking on file and selecting "Run as Administrator..." and press the Fix button just once and wait.  If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run. When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply. THIRD >>>>Please download Malwarebytes Anti-Rootkit from here- Unzip the contents to a folder in a convenient location.
- Open the folder where the contents were unzipped and run mbar.exe
- Follow the instructions in the wizard to update and allow the program to scan your computer for threats.
- Click on the Cleanup button to remove any threats and reboot if prompted to do so.
- Wait while the system shuts down and the cleanup process is performed.
- Perform another scan with Malwarebytes Anti-Rootkit to verify that no threats remain. If they do, then click Cleanup once more and repeat the process.
- When done, please post the two logs produced they will be in the MBAR folder... mbar-log.txt and system-log.txt .
[/ul] LAST >>>>INFO TO REPLY WITH:How is your system running now? How did the uninstall(s) go? Any problems? The Fixlog.txt text file (you should be able to attach this file; no need for wikisend.com usually). The logs from MBAR - mbar-log.txt and the system-log.txt files please. Any questions? |
|
|
|
Post by bilbo336 on Mar 23, 2017 10:46:18 GMT -8
When trying to uninstall Media Buzz Media Player, Network System Driver, and Software Version Updater I got the following error message:
Windows cannot find 'C:/Users/Bill/AppData/Local/SwvUpdater/Updater.exe'
These programs also show as Unavailable on the control panel app menu.
The other programs seemed to uninstall ok. I stopped at this point until I hear from you.
Thanks.
|
|
dbrisen
Malware Removalists
Posts: 3,688
|
Post by dbrisen on Mar 24, 2017 6:22:12 GMT -8
Move on to the next steps please. The uninstalls are always tried but not necessary to remove the main infection right now.
|
|
|
|
Post by bilbo336 on Mar 25, 2017 9:04:45 GMT -8
I finished the process and things seem to be running fine. I have attached the files showing the results. No major problems but I did have to restart when the Farbar Scan tool hung up. A restart got things going again. You've been great and I appreciate your help. Thanks again. Fixlog.txt (52.93 KB) system-log.txt (342.47 KB) mbar-log-2017-03-24 15-01-09.txt (6.51 KB) |
|
dbrisen
Malware Removalists
Posts: 3,688
|
Post by dbrisen on Mar 25, 2017 9:44:31 GMT -8
Looks good so far. Sorry about the hang in the first script run; looks like the large amount of files in temporary locations may have been an issue but it all looks good now. AdwCleaner by XplodeDownload AdwCleaner from here. Save the file to the desktop. NOTE: If you are using IE 8 or above you may get a warning that stops the program from downloading. Just click on the warning and allow the download to complete. Close all open windows and browsers.[/b][/font] Right click the AdwCleaner icon on the desktop, click Run as administrator and accept the UAC prompt to run AdwCleaner. You will see the following console:  Click the Scan button and wait for the scan to finish. After the Scan has finished the window may or may not show what it found and above, in the progress bar, you will see: Waiting for action. Please uncheck elements you don't want to remove.Click the Clean button. Everything checked will be deleted. When the program has finished cleaning a report appears. Once done it will ask to reboot, allow this  On reboot a log will be produced please copy / paste that in your next reply. This report is also saved to C:\AdwCleaner\AdwCleaner[C#].txt[/ul] Optional: NOTE: If you see AVG Secure Search being targeted for deletion, Here's Why and Here. You can always Reinstall it. |
|
