Author Topic: .bat Virus keeps coming back.  (Read 2802 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
.bat Virus keeps coming back.
« on: September 02, 2018, 02:12:14 PM »
Hello!
 for about 1-2 weeks, avast has blocked a virus called: .bat.
I put it in the virus chest, but it keeps coming back.

Its located in my appdata folder, in local and temp.
The name of the virus is "package" or something similar, and is a .bat file that tries to run on my pc, but avast blocks it.
I have cleaned the appdata folder many times, but it keeps coming back.
When i do a full scan, no virus is found.

Somehow, it keeps coming back, its like it copies itself from another location. Please, how can i delete this virus for good?


Here is a screenshot of my current viruschest:

https://gyazo.com/13a9dc1f976a6a76e1e4902930ae8c4e
 
« Last Edit: September 02, 2018, 02:16:15 PM by TK7 »

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76014
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: .bat Virus keeps coming back.
« Reply #1 on: September 02, 2018, 02:20:19 PM »
Attach your basic diagnostic logs. (MBAM and FRST)
Instructions: https://forum.avast.com/index.php?topic=194892
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

REDACTED

  • Guest
Re: .bat Virus keeps coming back.
« Reply #2 on: September 02, 2018, 02:41:24 PM »
According to malware bytes, it found over 500 threats. God damn, i hope the files i attached can help you guys help me..Before something bad happens. Thanks !

REDACTED

  • Guest
Re: .bat Virus keeps coming back.
« Reply #3 on: September 02, 2018, 02:46:32 PM »
I couldn't remove the threats in malwarebytes, (did not find a button that said remove) but i could send them to the quarantine. And i did.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37698
Re: .bat Virus keeps coming back.
« Reply #4 on: September 02, 2018, 03:28:30 PM »
I couldn't remove the threats in malwarebytes, (did not find a button that said remove) but i could send them to the quarantine. And i did.
What It Means to Quarantine, Delete, and Clean Malware     >>  https://www.lifewire.com/clean-quarantine-or-delete-3972276


« Last Edit: September 02, 2018, 03:36:11 PM by Pondus »

Offline Sass Drake

  • MyCity AMF R2
  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 820
Re: .bat Virus keeps coming back.
« Reply #5 on: September 03, 2018, 03:23:43 PM »
  • Open Notepad (click Start button -> type notepad.exe -> press Enter)
  • Copy text from code block below and paste it into Notepad
Code: [Select]
Task: {C46A09FE-D9CE-4172-9C2B-D52504A25E25} - System32\Tasks\svchostc => C:\Users\Tobia\AppData\Local\svchostc\svchostc.exe [2018-06-25] () <==== ATTENTION
VirusTotal: C:\Users\Tobia\AppData\Local\svchostc\svchostc.exe;
C:\Users\Tobia\AppData\Local\svchostc
C:\USERS\TOBIA\APPDATA\LOCAL\SVC10.17134
EmptyTemp:
  • Go to File -> Save As
  • Make sure that  UTF-8 is selected as Encoding (left side of Save button)
  • Save it as fixlist.txt on Desktop
  • Open again FRST and click on button Fix
  • Wait until FRST finishes
  • fixlog.txt should be genereted and opened. Attach it your post and wait further instructions.

REDACTED

  • Guest
Re: .bat Virus keeps coming back.
« Reply #6 on: September 04, 2018, 03:54:52 AM »
Done.
i appreciate your time and help. Thanks!

Offline Sass Drake

  • MyCity AMF R2
  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 820
Re: .bat Virus keeps coming back.
« Reply #7 on: September 04, 2018, 01:59:41 PM »
What is system status now?

REDACTED

  • Guest
Re: .bat Virus keeps coming back.
« Reply #8 on: September 04, 2018, 05:01:13 PM »
No more popup alerts from Avast,
And the laptop feels much more stable. I think the virus is gone,
Thanks for all the help, you guys rock ! :)


Offline Sass Drake

  • MyCity AMF R2
  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 820
Re: .bat Virus keeps coming back.
« Reply #9 on: September 04, 2018, 10:46:29 PM »
Rename FRST64.exe to uninstall.exe and run it. That should unisntall FRST.