Solved This "Trojan" appears to have altered the List of Programs to uninstal

[Mike Lynch]

This "Trojan" appears to have altered the List of Programs to uninstal

I do not know how to get rid of this but it is not listed in:
Start, Control Panel, Programs, Uninstall Programs.

As a matter of fact, the former list of Programs was much longer.
I have not looked at the List in some time but I know it was longer.

Since I cannot see / find it, I cannot delete it.

Any advice or referral would be appreciated.

Best regards,

Mike Lynch

 

[HAVOC]

Ctrl-Shift-Esc and end the task. Looks like a browser pop-up that's obviously fake.

 

[torchwood]

Its a scam on 2 counts.

The error is coming from a webpage
the phone no:.

If your still on that page, unlikely i know
clear via task manager ctrl+alt+delete. - close application(browser)

then run your AV, and Malwarebytes.




Roy

 

[Mike Lynch]

I ran AV and Malwarebytes but neither found anything.

I was not able to end the Popup by using: Control, Alt, Delete.
I needed to go to the Process and then I was able to end it.

Originally, it appeared in my daughters Desktop as she was trying to set up a PayPal Account.
Now it is appearing on my Desktop.

I have also noticed that when I try and go to a Link in an Email I get the message displayed in the Attachment below.

YIKES!

Thanks again for the suggestions and feedback.

Best regards,

Mike Lynch

 

[Mike Lynch]

Now I cannot even check the weather? TROJAN

YIKES!

This Trojan thing appears to be taking over everything!

What can I do?

Would going back to a Restore Point help in this situation?

Best regards,

Mike Lynch

 

[centaur78]

Hi Mike

Please use the SF diag tool to post all the files here.

Will have a look and advice you

 

[torchwood]

Hi Mike,
please download these
Downloading RKill
Farbar Recovery Scan Tool Download


BEFORE
you run them please
turn off your router min 30 secs then RESET it

copy/paste the >>3<< reports


Roy

 

[torchwood]

PLEASE PLEASE PLEASE

DO NOT SELECT THE DRIVER VERIFIER OPTION

Diagnostic Test

DRIVER VERIFIER

Warning
Please make a backup of your important files and get your rescue media or create one.
Please create a restore point.


Please follow this tutorial to run driver verifier.

Driver verifier stresses your drivers and will crash your pc if any driver fails due to a violation.

Driver verifier should be performed for a max of 48 hours, or when you have a bluescreen, whatever comes first.

If driver verifier has found a violation and you can't get back into windows normally, try to boot into safe mode and reset in safe mode driver verifier, or in the troubleshooting options open command prompt and type verifier /reset.

Note
Your system will act very sluggishly while driver verifier is enabled, this is normal as your drivers will be being subjected to heavy testing in order to make them crash.

 

[Mike Lynch]

I tried several times.

It just will not move it to the upload area.

Best regards,

Mike Lynch

 

[Mike Lynch]

More bad news? Trojan

Mike

 

[Mike Lynch]

Driver List

Mike

I get a message that the File exceeds the limit?

 

[Mike Lynch]

More stuff.

I am unsure how to send you the other Files.
It appears that they are too big to be uploaded.

Best regards,

Mike

 

[Mike Lynch]

Your file of 5.04 MB bytes exceeds the forum's limit of 1.00 MB for this filetype.


This is the message I get for two of the Files:

EventApp and EventSys.

Is there something I can do to fix this?

Mike

 

[centaur78]

Mike

As far as i can see based on the files you have provided there isn't any infection on your PC, thats one of the reason why the AV and Malwarebytes didnt find any. Most of the issues I see i related to IE

Regarding checking your weather from the shortcut link, try opening them using another browser. Try Chrome or Mozilla Firefox.

It should work. let me know

Regarding the email attachments i would need more info on what link are you trying to open or ??

 

[centaur78]

Try to zip the files and upload

the event logs would help

 

[Mike Lynch]

I will try.
I need to get a Zip Program, can you recommend one?

I tried to download IE11 from the offline web site but was unable to do it.
It said there was a "more advanced" version already installed.

FYI - The only way I can get to the Forum is by Goggling it.
When I click on the Link the Forum sends via Email I get the following:

 

[Mike Lynch]

I believe this goes back to my original report.
Many, many programs that used to de displayed in the 'Uninstall Program" List are no longer displayed.
This includes IE11.
If I cannot find it, I cannot delete it and do a re-install hoping to get rid of the damage done by the Trojan.
Maybe I am wrong but that's what I have concluded.

Best regards,

Mike Lynch

 

[torchwood]

Sorry to be a pain but the only worthwhile report was

the hosts log

FOLLOW MY PREVIOUS INSTRUCTIONS


Roy

 

[Mike Lynch]

7-Zip File attached

I used a Zip Program called 7 Zip.
The zipped file is attached.

So much for trying a Zipped File. The file extension 7z is invalid.

What might I try next?

Do you know of a Zip program that works with Seven Forum?

I'll buy it if I have too.

 

[centaur78]

mike

The 7zip has an option to zip the files in .zip format

While selecting the all the files, right click and on the menu you will see 7zip , selecting that you get a submenu ... look down and towards the end you have the option for .zip format.