Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

The requested resource is in use virus


  • This topic is locked This topic is locked
17 replies to this topic

#1 plshelp27

plshelp27

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:10:49 PM

Posted 14 April 2017 - 12:44 PM

So my pc runs Windows 10 and said something about virus protection. Later when I tried to open my antivirus software (McAfee), it said that the requested resource is in use. I ignored it, thinking it was probably a glitch. But now I know its a virus. Please help me and tell me what to do. Thanks. I also attached my FRST.txt 

Attached Files


Edited by plshelp27, 14 April 2017 - 12:47 PM.


BC AdBot (Login to Remove)

 


#2 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,545 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:10:49 PM

Posted 14 April 2017 - 02:01 PM

Welcome :)

 

 

  • Please download Malwarebytes Anti-Rootkit and save the file to your Desktop.
  • Right-Click MBAR.exe and select AVOiBNU.jpgRun as administrator to run the installer.
  • Select your Desktop as the location to extract the contents and click OK. The programme should open upon completion.
  • Click Next, followed by Update. Upon update completion, click Next.
  • Ensure Drivers, Sectors & System are checked and click Scan.
  • Note: Do not use your computer during the scan.
  • Upon completion:
    • If no infection is found, close the MBAR window.
    • If an infection is found, ensure Create Restore Point is checked and click Cleanup. Reboot when prompted.
  • Two logs (mbar-log.txt and system-log.txt) will be created. Copy the contents of both logs and paste in your next reply. Both logs can be found in the MBAR folder.

 


No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif


#3 plshelp27

plshelp27
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:10:49 PM

Posted 14 April 2017 - 05:07 PM

Whenever I scan, after a long time the software stops responding



#4 plshelp27

plshelp27
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:10:49 PM

Posted 15 April 2017 - 09:50 AM

This is my system-log.txt

Attached Files



#5 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,545 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:10:49 PM

Posted 15 April 2017 - 11:24 AM

Are you following the instructions given above. Was the mbar-log.txt produced?


No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif


#6 plshelp27

plshelp27
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:10:49 PM

Posted 15 April 2017 - 12:44 PM

As I already said, the software stops responding. Also, is it normal to have over a thousand malwares?



#7 plshelp27

plshelp27
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:10:49 PM

Posted 15 April 2017 - 01:53 PM

Actually it worked this time sorry. I will attach the files you told me to attach

Attached Files



#8 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,545 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:10:49 PM

Posted 15 April 2017 - 03:27 PM

This is a nasty Trojan Downloader. It does procures the installation of adware.
 
Please download Junkware Removal Tool to your Desktop.

  • Please close your security software to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista or 7, right-mouse click it and select Run as administrator.
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete, depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your Desktop and will automatically open.
  • Please post the contents of JRT.txt into your reply.

Download AdwCleaner from here. Save the file to the desktop.


NOTE: If you are using IE 8 or above you may get a warning that stops the program from downloading. Just click on the warning and allow the download to complete.

Close all open windows and browsers.

  • XP users: Double click the AdwCleaner icon to start the program.
  • Vista/7/8 users: Right click the AdwCleaner icon on the desktop, click Run as administrator and accept the UAC prompt to run AdwCleaner.
    You will see the following console:

iO5EZayK.png

  • Click the Scan button and wait for the scan to finish.
  • After the Scan has finished the window may or may not show what it found and above, in the progress bar, you will see: Pending. Please uncheck elements you don't want to remove.
  • Click the Clean button.
  • Everything checked will be moved to Quarantine.
  • When the program has finished cleaning a report appears.Once done it will ask to reboot, allow this

adwcleaner_delete_restart.jpg

  • On reboot a log will be produced please copy / paste that in your next reply. This report is also saved to C:\AdwCleaner\AdwCleaner[C0].txt

To review run FRST as follows:

  • Double-click to run it.
  • Make sure that under Optional Scans, there is a checkmark on Addition.txt.
  • Press the Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
  • The tool will also produce another log (Addition.txt ). Please attach this to your reply.

No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif


#9 plshelp27

plshelp27
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:10:49 PM

Posted 15 April 2017 - 05:07 PM

Thanks a lot for the help :) Here are the files you requested 

Attached Files



#10 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,545 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:10:49 PM

Posted 15 April 2017 - 05:39 PM

Download the attached file and save it in the same directory FRST64 is saved.

  • Start FRST64 with Administrator privileges.
  • Press the Fix button.
  • When finished, a log file (Fixlog.txt) will pop up and saved in the same location the tool was ran from.

Please copy and paste its contents in your next reply.
 

How is the computer doing?


No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif


#11 plshelp27

plshelp27
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:10:49 PM

Posted 16 April 2017 - 08:57 AM

The PC is doing great, thanks for asking :) and now the regular anti-virus is working.

Attached Files



#12 plshelp27

plshelp27
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:10:49 PM

Posted 16 April 2017 - 09:03 AM

Also I have a problem with Microsoft .Net Framework. I don't know if it's a virus or not but every time I restart my computer a pop up comes up saying unhandled exception has occurred in a component in your application. If you click continue, the application will ignore this error and attempt to continue.



#13 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,545 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:10:49 PM

Posted 16 April 2017 - 11:12 AM

Please download MiniToolBox and run it.

Checkmark following boxes:

  • Report IE Proxy Settings
  • Report FF Proxy Settings
  • List content of Hosts
  • List IP configuration
  • List Winsock Entries
  • List last 10 Event Viewer log
  • List Installed Programs
  • List Users, Partitions and Memory size

Click Go and post the result.

 

Repair .Net Framework.

 

1. Go to Control panel.

2. Choose Uninstall a program under Programs and Features.

3. Click on .net framework 4.0 client profile and then click on Repair.

4. Wait till the Repair process completes and restart the computer.

 

Let me know if repairing .net solve the issue.


No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif


#14 plshelp27

plshelp27
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:10:49 PM

Posted 16 April 2017 - 03:47 PM

Why do you need my ip address and such? It's just that I don't feel comfortable with my ip address being on the internet. I think the virus is gone though. Also I fixed the .net framework problem myself



#15 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,545 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:10:49 PM

Posted 16 April 2017 - 03:52 PM

We can consider then this case as solved, congratulations. :)

 

Lets perform a small cleanup.

 

Please download DelFix by Xplode and save to your Desktop.

  • Double-click on delfix.exe to run the tool.
    Vista/Windows 7/8/10 users right-click and select Run As Administrator.
  • Put a check mark next to these items:
    - Remove disinfection tools
    - Create registry backup
    delfix.jpg
    .
  • Click the "Run" button.
  • When the tool has finished, it will create and open a log report (DelFix.txt)

 

Always keep your antivirus active and updated.

 

Best regards.  :hello:


No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users