This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Ransomware Malware need help with analyzing logs.. [Solved]

9 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

The java update is strange, he dosen't even know what java is. Possible to remotely update it? And he is absolutely absolutely adamant it was the FBI virus, couldn't click out of it, desktop locked, etc. How strange.
What was the zeroaccess? With the path 'users/install/desktop' or something like that..

I reset the router, the DNS 1=[removed], DNS2:[removed] which is Google so i believe it's OK.
Thanks again for your time.
Attaching security check log. .
 Results of screen317's Security Check version 1.014 — 12/23/15  
 Windows 7 Service Pack 1 x64 (UAC is disabled!)
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:``````````````
 Windows Firewall Enabled!  
Webroot AntiVirus with Spy Sweeper   
 Antivirus up to date!  (On Access scanning disabled!) 
`````````Anti-malware/Other Utilities Check:`````````
 Webroot AntiVirus with Spy Sweeper 
 Spy Sweeper Core   
 Spybot - Search & Destroy 
 JavaFX 2.1.0    
 Java 7 Update 67  
 Java version 32-bit out of Date!
 Adobe Reader 9 Adobe Reader out of Date!
````````Process Check: objlist.exe by Laurent````````
 Spybot Teatimer.exe is disabled!
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C: 1% 
````````````````````End of Log``````````````````````

All seems good. We’ll update Java when we clean up after the next scan, (if it’s clear).

Let’s run an online scan to be sure nothing is left and if that’s clear I’ll send instructions to tidy up.

Run ESET Online Scan

Note: This may take a long time so please be patient.

IMPORTANT Please make sure you uncheck the box next to Remove found threats. Eset will detect anything that looks even slightly suspicious, which could include legitimate program files. If you do not uncheck the box, Eset will automatically remove all suspicious files which could leave some of your software inoperable.

Note: You can use Internet Explorer, FireFox or Chrome for this scan. You will however need to disable your current installed Anti-Virus, how to do so can be read here.

Hold down Control and click on the following link to open ESET OnlineScan in a new window.

ESET OnlineScan

  • click the Run Eset online Scanner button
  • for alternate browsers only: (Microsoft Internet Explorer users can skip these steps)


    o    click on esetinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.
    o    double click on the Eset installer icon on your desktop
     

  • check Yes, I accept the Terms of Use
  • click the Start button
  • accept any security warnings from your browser
  • check Enable detection of potentially unwanted applications
  • click Advanced settings and select the following:


    o    scan archives
    o    scan for potentially unsafe applications
    o    enable Anti-Stealth technology


    Note: Do not check Remove found threats
     

  • ESET will then download updates, install itself, and begin scanning your computer, (lease be patient as this can take some time)
  • when the scan completes, push List of found threats
  • when the scan is done, click List threats (only available if ESET Online Scanner found something)
  • click Export, then save the file to your desktop
  • click Back, then Finish to exit ESET Online Scanner.

Don't forget to re-enable your antivirus when finished!

Thanks

Satchfan

 

Hi RickSanchez

It has been several days since I asked you to run an Eset scan. Please let me know the result and we can then tidy up.

If I do not hear from you within 24 hours I'll assume that all is well and close this topic.

Thanks

Satchfan

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI