Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Got hit with the Requested Resource virus, nothing works, help


  • This topic is locked This topic is locked
12 replies to this topic

#1 Dai_Makai

Dai_Makai

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:09:14 PM

Posted 17 April 2017 - 05:13 PM

Computer came down with the Requested Resource rootkit virus thing a few days ago; looked around the internet for ways to get it off my computer but everything I've found, including stuff here with the iExplore.exe work-around.

 

Pretty much nothing seems to work, and there've been times I've tried to boot up and all I get is a black screen.

 

I really don't know what to do and needless to say I'm rather worried.



BC AdBot (Login to Remove)

 


#2 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,426 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:09:14 PM

Posted 17 April 2017 - 05:54 PM

Welcome. :)

 

  • Please download Malwarebytes Anti-Rootkit and save the file to your Desktop.
  • Right-Click MBAR.exe and select AVOiBNU.jpgRun as administrator to run the installer.
  • Select your Desktop as the location to extract the contents and click OK. The programme should open upon completion.
  • Click Next, followed by Update. Upon update completion, click Next.
  • Ensure Drivers, Sectors & System are checked and click Scan.
  • Note: Do not use your computer during the scan.
  • Upon completion:
    • If no infection is found, close the MBAR window.
    • If an infection is found, ensure Create Restore Point is checked and click Cleanup. Reboot when prompted.

  • Two logs (mbar-log.txt and system-log.txt) will be created. Copy the contents of both logs and paste in your next reply. Both logs can be found in the MBAR folder.

 

Attention: When running this program, do not click on it or run any other program, as it will stall. Once starts scanning, walk away from the computer, until finished.


No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif


#3 Dai_Makai

Dai_Makai
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:09:14 PM

Posted 17 April 2017 - 06:42 PM

Okay, got it working this time, though on the reboot I hit a black screen and had to restart again for my computer to boot up properly.

 

Here are the logs.

 

Attached File  mbar-log-2017-04-17 (18-40-43).txt   5.23KB   6 downloads

Attached File  system-log.txt   141.4KB   2 downloads



#4 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,426 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:09:14 PM

Posted 17 April 2017 - 06:49 PM

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

  • Double-click to run it. When the tool opens click Yes to disclaimer.
  • Make sure that under Optional Scans, there is a checkmark on Addition.txt.
  • Press Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
  • The tool will also produce another log (Addition.txt ). Please attach this to your reply.

 


No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif


#5 Dai_Makai

Dai_Makai
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:09:14 PM

Posted 17 April 2017 - 06:56 PM

Just got that finished too.

 

Attached File  Addition.txt   64.57KB   1 downloads

 

Attached File  FRST.txt   57.25KB   3 downloads



#6 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,426 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:09:14 PM

Posted 17 April 2017 - 07:21 PM

The following program is considered a Potential Unwanted Program. I would recommend you remove it.

 

Download Updater (AOL Inc.)

 

Download the attached file and save it in the same directory FRST64 is saved.

  • Start FRST64 with Administrator privileges.
  • Press the Fix button.
  • When finished, a log file (Fixlog.txt) will pop up and saved in the same location the tool was ran from.

Please copy and paste its contents in your next reply.

Please download Junkware Removal Tool to your Desktop.

  • Please close your security software to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista or 7, right-mouse click it and select Run as administrator.
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete, depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your Desktop and will automatically open.
  • Please post the contents of JRT.txt into your reply.

Download AdwCleaner from here. Save the file to the desktop.


NOTE: If you are using IE 8 or above you may get a warning that stops the program from downloading. Just click on the warning and allow the download to complete.

Close all open windows and browsers.

  • XP users: Double click the AdwCleaner icon to start the program.
  • Vista/7/8 users: Right click the AdwCleaner icon on the desktop, click Run as administrator and accept the UAC prompt to run AdwCleaner.
    You will see the following console:

iO5EZayK.png


  • Click the Scan button and wait for the scan to finish.
  • After the Scan has finished the window may or may not show what it found and above, in the progress bar, you will see: Pending. Please uncheck elements you don't want to remove.
  • Click the Clean button.
  • Everything checked will be moved to Quarantine.
  • When the program has finished cleaning a report appears.Once done it will ask to reboot, allow this

adwcleaner_delete_restart.jpg


  • On reboot a log will be produced please copy / paste that in your next reply. This report is also saved to C:\AdwCleaner\AdwCleaner[C0].txt

 


No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif


#7 Dai_Makai

Dai_Makai
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:09:14 PM

Posted 17 April 2017 - 08:24 PM

My fixlogs, as per your request.

 

Attached File  JRT.txt   1.59KB   1 downloads

 

Attached File  sfcdetails.txt   64.79KB   1 downloads

 

Attached File  Fixlog.txt   15.25KB   1 downloads



#8 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,426 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:09:14 PM

Posted 17 April 2017 - 08:34 PM

Did you run AdwCleaner? Let me see the C:\AdwCleaner\AdwCleaner[C0].txt report.


No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif


#9 Dai_Makai

Dai_Makai
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:09:14 PM

Posted 17 April 2017 - 08:41 PM

My mistake, thought I'd attached it.  I'm sorry.

 

It's called AdwCleaner[C2].txt but it's what was shown when I booted up my computer after the last restart.

 

Attached File  AdwCleanerC2.txt   5.9KB   2 downloads



#10 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,426 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:09:14 PM

Posted 17 April 2017 - 08:46 PM

That was a good cleanup. How is the computer doing?


No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif


#11 Dai_Makai

Dai_Makai
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:09:14 PM

Posted 17 April 2017 - 08:50 PM

Been running fine.  In fact, better than!  Opened up youtube and the windows are way bigger now.  Not sure if it's connected or just fortunate timing on account of Easter.



#12 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,426 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:09:14 PM

Posted 17 April 2017 - 08:55 PM

Congratulations. :)

 

Lets cleanup the tools and quarantine.

 

Please download DelFix by Xplode and save to your Desktop.

  • Double-click on delfix.exe to run the tool.
    Vista/Windows 7/8/10 users right-click and select Run As Administrator.
  • Put a check mark next to these items:
    - Remove disinfection tools
    - Create registry backup
    delfix.jpg
    .
  • Click the "Run" button.
  • When the tool has finished, it will create and open a log report (DelFix.txt)

 

Always keep your antivirus active and updated. Malwarebytes offers a good real time protection to avoid these rootkits.

 

Best regards.  :hello:


No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif


#13 JSntgRvr

JSntgRvr

    Master Surgeon General


  • Malware Response Team
  • 11,426 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Puerto Rico
  • Local time:09:14 PM

Posted 19 April 2017 - 06:31 PM

It appears that this issue is resolved, therefore I am closing the topic. If that is not the case and you need or wish to continue with this topic, please send me or any Moderator a Personal Message (PM) that you would like this topic re-opened.

No request for help throughout private messaging will be attended.

If I have helped you, consider making a donation to help me continue the fight against Malware!
btn_donate_SM.gif





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users