PLEASE HELP! I CAN´T DELETE A BITCOINMINER TROJAN

7/27/2019 PLEASE HELP! I CANT DELETE A BITCOINMINER TROJAN

1/7

forum.avast.com

Welcome, Guest. Please login or register.

Did you miss your activation email?

Forever Login

Login with username, password and session length

Search

News:avast! Server Edition - protect your server!!

avast!WEBforum viruses and worms viruses and worms (Moderators: Pavel, Maxx_original, misak)

PLEASE HELP! I CANT DELETE A BITCOINMINER TROJAN

PRINTPages: 1 [2] Go Down

Zam1990

Newbie

Posts: 11

magna86

Anti Malware Fighter

avast! Evangelist

Super Poster

Posts: 1832

Gender:

MyCity Forum-ASAP

Zam1990

Newbie

previous topicnext topic

Author Topic: PLEASE HELP! I CANT DELETE A BITCOINMINER TROJAN (Read

HOME HELP SEARCH MY MESSAGES LOGIN REGISTER

return to avast! pages visit our support read blog join us on facebook

Re: PLEASE HELP! I CANT DELETEA BITCOINMINER TROJAN

Reply #15 on: May 24, 2013, 05:32:21 AM

Here is the final log from zoek.exe

My computer looks good, no virus or malware alert for the moment

I think it is clean, Thank you so much for the help

Logged


Reply #16 on: May 24, 2013, 06:09:32 AM

@ Zam1990

I don't see attachments. You forgot to attach.

Logged

Don't hate us because we're good. Hate us because we know it...

Re: PLEASE HELP! I CANT DELETE ABITCOINMINER TROJAN

Reply #17 on: May 24, 2013, 07:01:24 AM

ASE HELP! I CANT DELETE A BITCOINMINER TROJAN http://forum.avast.com/index.php?PHPSESSID=rhgrp0bsj5le6e38

30-Jul-13


2/7

Posts: 11

magna86


avast! Evangelist

Super Poster

Posts: 1832

Gender:

MyCity Forum-ASAP

ups!!

here it goes

Logged


Reply #18 on: May 24, 2013, 08:04:18 AM

Ok, you are clean. Just to kil l some remains and we are done.

Run zoek one last time with this script:

Code: [Select]

C:\Windows\Prefetch\DWM.EXE-A2101CC8.pf;f

C:\Windows\Prefetch\DWM.EXE-6FFD3DA8.pf;f

emptytemp;

I don't need zoek reports.

***************

Please download DelFix by "Xplode" to your Desktop.

Run the tool and check the following boxes below;

Remove disinfection tools

Create registry backup

Purge System Restore

Now click on "Run" button. Wait for the programme completes his work.

All the tools we used should be gone.

Tool will create and open an log report (DelFix.txt)Note: The report will also be stored o n C:\DelFix.txt

> I don't need DelFix log report.

************************

I recommended to keep Malwarebytes and to use MCShield if you will.

You may download MCShield from one of the following links:

MyCity - Official download link

Softpedija - Mirror download link

It will prevent infection by computer via USB flash drive, mobile phone or any other

memory card.

And not only will prevent infection, but it will immediately clean flash drive, memory

card or external HDD.

Logged


30-Jul-13


3/7


4/7

figlioecantero

Newbie

Posts: 3

magna86


avast! Evangelist

Super Poster

Posts: 1832

Gender:

MyCity Forum-ASAP

figlioecantero


Re: PLEASE HELP! I CANT DELETE A

BITCOINMINER TROJAN Reply #23 on: May 27, 2013, 12:39:41 PM

Hi, i have executed the first step of this guide, i attach my zoek reports. Are neeed

other step?

BR

Logged


Reply #24 on: May 27, 2013, 01:10:11 PM

Hi and welcome to avast.

Quote from: figlioecantero on May 27, 2013, 12:39:41 PM

Hi, i have executed the first step of this guide, i attach my zoek reports. Are neeed other step?

BR

That zoek log isn't written for your machine.

Quote from: magna86 on May 25, 2013, 04:44:09 PM

Basically you follow the instructions that were written and made for the user who opened this topic.

Following such instructions can even damage your system because of Zoek and MBAR ...well, they are

not toys.

You need to open a new topic following this guide:http://forum.avast.com/index.php?topic=53253.0

One of us will assist you with removing malware.

One more time:

This is the topic of this user. You all feel free to open a new topic if you are looking

assistance, set&attach the logs for review:

Follow guide from here: http://forum.avast.com/index.php?topic=53253.0

AdwCleaner


5/7

Newbie

Posts: 3

BITCOINMINER TROJAN Reply #25 on: June 01, 2013, 02:09:26 PM

i have problem with aswMBR, it will crash during scanning the directory c:\Windows

\asswmbly\GAC_MSIL. I tried to move the file tath cause the crash but without

success because they are plentiful. the file are System.Security

System.Security.resources

system.servicemodel.install

system.servicemodel.install.resources

system.servicemodel.resources

System.ServiceModel.WasHosting

System.ServiceModel.WebSystem.ServiceModel.Web.resources

System.ServiceProcess

System.ServiceProcess.resources

System.Speech

System.Speech.resources

System.Transactions.resources

System.Web.Abstractions

System.Web.Abstractions.resources

System.Web.DynamicData

System.Web.DynamicData.Design

System.Web.DynamicData.Design.resources

System.Web.DynamicData.resources

System.Web.Entity

System.Web.Entity.Design

System.Web.Entity.Design.resources

System.Web.Entity.resources

System.Web.Extensions

System.Web.Extensions.Design

System.Web.Extensions.Design.resources

System.Web.Extensions.resources

System.Web.Mobile

System.Web.Mobile.resources

System.Web.RegularExpressions

System.Web.resources

System.Web.RoutingSystem.Web.Routing.resources

System.Web.Services

System.Web.Services.resources

System.Windows.Forms

System.Windows.Forms.DataVisualization

System.Windows.Forms.DataVisualization.Design

System.Windows.Forms.DataVisualization.resources

System.Windows.Forms.resources

System.Windows.Presentation

System.Windows.Presentation.resources

System.Workflow.Activities

system.workflow.activities.resources

System.Workflow.ComponentModel

system.workflow.componentmodel.resources

System.Workflow.Runtime

system.workflow.runtime.resources

System.WorkflowServices

System.WorkflowServices.resources

System.Xml

System.Xml.Linq

System.XML.resources

TaskScheduler

TaskScheduler.Resources


30-Jul-13


6/7

figlioecantero

Newbie

Posts: 3

magna86


avast! Evangelist

Super Poster

Posts: 1832

Gender:

MyCity Forum-ASAP

UIAutomationClient

UIAutomationClient.resources

UIAutomationClientsideProviders

UIAutomationClientsideProviders.resources

UIAutomationProvider

UIAutomationProvider.resources

UiAutomationTypes

UiAutomationTypes.resources

VSTADTEProvider.Interop

WindowsBaseWindowsBase.resources

WindowsFormsIntegration

WindowsFormsIntegration.resources

WsatConfig

There is an alternative to the log of aswMbr?

Many thanks

Logged


Reply #26 on: June 02, 2013, 02:15:54 PM

I have try to explain this guide( http://forum.avast.com/index.php?topic=53253.0)

but aswmbr crash. Have any solutions?

Br

Logged


Reply #27 on: June 02, 2013, 06:11:03 PM

Quote from: figlioecantero on June 02, 2013, 02:15:54 PM

I have try to explain this guide( http://forum.avast.com/index.php?topic=53253.0) but aswmbr crash.

Have any solutions?

Br

Quote from: magna86 on May 25, 2013, 04:44:09 PM

You need to open a new topic following this guide:

http://forum.avast.com/index.php?topic=53253.0

One of us will assist you with removing malware.

If aswMBR can't run just wrate that into your topic.

Logged



30-Jul-13


7/7

PRINTPages: 1 [2] Go Up

avast!WEBforum viruses and worms viruses and worms (Moderators: Pavel, Maxx_original, misak)

PLEASE HELP! I CANT DELETE A BITCOINMINER TROJAN

previous topicnext topic

Jump to: => viruses and worms go

avast! on Twitter | avast! on Facebook

SMF | SMF 2012, Simple Machines

XHTML RSS WAP2

Page created in 0.038 seconds with 14 queries.


PLEASE HELP! I CAN´T DELETE A BITCOINMINER TROJAN

Documents

Transcript of PLEASE HELP! I CAN´T DELETE A BITCOINMINER TROJAN