Main Forum > General Computer Support

windows 8 firewall problems caused by bitcoin miner trojan

<< < (2/10) > >>

Shane:
You may still have an infection. Those errors mean the services couldnt start and I bet if you check the registry you will see they have been deleted.

My repair tool puts those keys back in the registry, so if they are still gone then something is still deleting them.

Try running these two tools.

Malwarebytes Anti Rootkit (Different than there normal scanner)
http://www.malwarebytes.org/products/mbar/

And then combofix
http://www.bleepingcomputer.com/download/combofix/

Lets see if they find anything. :wink:

Shane

pablo204:
will combofix work with windows 8?  i thought i read somewhere that it didnt - well anyway ill try them both now
thanks

pablo204:
Hi,

I have run malware bytes anti-root, combofix and the windows repiar tool again and the problem remains - I have attached the logs here

thanks

Shane:
They both did find a few more things.

Also I noticed you have norton internet security installed, which has its own firewall and I believe will turn off the Windows firewall.

Also lets see if the regkeys are back or if they are still being deleted.

See if you have these reg keys
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess
and
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS

Shane

pablo204:
Hi, yes I have both of those regkeys.  the problem is still there though - ive tried switching off the firewall on norton.

thanks

Navigation

[0] Message Index

[#] Next page

[*] Previous page