This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Win 8 any worm/remote thing eat my laptop [Solved]

37 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Hi Adam

 

First of all  know that I really appreciate the help you have given and thank you so much for all the time and effort you have used on my problem (and my questions)

 

Here is My eset log

 

C:\$Recycle.Bin\S-1-5-21-3604915464-1756807762-4202892429-1001\$RQZVLN9.exe    Win32/OpenCandy potentially unsafe application
 

No Sophos log this was clean

 

Info: Under both Eset and Sophos scan Norton enabeled it self twice it turn off silentmode too.

Under the Eset scan it also startet background working and do backup so I did the scan two times. Norton enabled twice in both scans

 

-My Hyper-V servises I had to turn of self

 

I looked in Norton sequrity history to si if it said something about the scans
nothing about it but this:
Listpart was blocked because of  WS.reputatipon.1 (quarantined)
Aswmbr.exe was blolcked because of trojan.gen.2 (quarantined)


statistical submissions ws.trojan.h exonerated (isn't this dangerous??)


What is this?
ips detection statistical submissions
sign id 23318
Local or remote attacker: 1
remote port: 50669
local port 80
Protocol;6

 

I feel a bit sorry for you  for asking you about so many stupid questions

Hi Catherine,
 

First of all  know that I really appreciate the help you have given and thank you so much for all the time and effort you have used on my problem (and my questions)

Not a problem. 
 

Under the Eset scan it also startet background working and do backup so I did the scan two times. Norton enabled twice in both scans

OK. I'm not entirely why this is happening. Perhaps you are not disabling the programme for long enough. Either way, it does not matter now. Based on diagnostic scan, rootkit scan, adware scan and malware scan I am confident any issues are non-malware related. 
 

-My Hyper-V servises I had to turn of self

As these articles both state, you must be running Winodws Pro or Enterprise. You are not running either. As such, Hyper-V cannot be running on your machine.  
 
http://blogs.technet…indows-8-1.aspx
http://www.eightforu…indows-8-a.html
 

I looked in Norton sequrity history to si if it said something about the scans
nothing about it but this:

Those are false-positives, are not something to be concerned about. The tools contain certain strings, routines, files, etc that are flagged by the anti-virus because they may be seen in types of malware. These tools are not malware, and pose no risk to your computer. This is why both aswMBR and ListParts failed to run. 
 
————
 
At this point in time I am satisfied that any remaining issues are not caused by malware. I would now like to pass you over to the Tech team. 
 
STEP 1
[external image: CXrghb6.png] Update Outdated Software

Outdated software contain security risks that must be patched. Please download and install the latest version of the programmes below.

  • [external image: u9DsAVv.png] Follow these instructions to check for download the latest Windows Updates.
  • [external image: ehzOq95.png] I recommend installing the latest version of Internet Explorer for added security. The latest version IE can be installed via Windows Update.
     

STEP 2
[external image: AFZxnZc.jpg] DelFix

  • Please download DelFix and save the file to your Desktop.
  • Double-click DelFix.exe to run the programme.
  • Place a checkmark next to the following items:
    • Activate UAC
    • Remove disinfection tools
    • Create registry backup
    • Create system restore
    • Reset system settings
  • Click the Run button.

– This will remove the specialised tools we used to disinfect your system. Any leftover logs, files, folders or tools remaining on your Desktop which were not removed can be deleted manually (right-click the file + delete).
 
— Malwarebytes Anti-Malware will still be present on your computer. I recommend keeping this programme, updating and scanning with it once a week to maintain security on your computer. If you do not wish to keep this programme on your computer, you can uninstall it by pressing the Windows Key [external image: xpdKOQKY.png.pagespeed.ic.tmAgS1-k6q.png] + r on your keyboard at the same time, typing appwiz.cpl, clicking OK and searching for Malwarebytes.
 
 
Please visit the Microsoft Windows section and create a new thread describing your issues. You should be as concise as possible, and mention that malware has been ruled out as a possible cause. 
 
I have complied below useful resources on how to stay safe on the Internet.

  • Answers to common security questions - Best Practices by quietman7, MVP
  • How Malware Spreads - How did I get infected? by quietman7, MVP
  • Simple and easy ways to keep your computer safe and secure on the Internet by Lawrence Abrams, MVP
  • How to Prevent Malware by miekiemoes, MVP
  • How to backup and restore your data using Cobian Backup by YourHighness
  • Slow Computer/browser? It May Not Be Malware by quietman7, MVP
     

All the best, and good luck. 
Adam (LiquidTension).

Hi Catherine,

Just checking in to see how you're doing? Please don't hesitate to ask if you have any questions.

Don't forget to post in the Windows section either! If you still have some issues the Techs there will clear things up. :)

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI