kovasoh ransomware

August 10, 2019, 6:46 am

≫ Next: This setting is enforced by your administrator

≪ Previous: Google Chrome | mail.ru | Secure Preferences

$

0

0

Hi Friends,

Please help me out this my pc is infected with ransomware all my doc pic video etc file extension is changed unable to open the file, I think virus is removed with the help of malware byte but i need to get back my all files ,

please find the attached file
anyone please help me sort out this
expecting reply
Thank you

---

This setting is enforced by your administrator

August 11, 2019, 1:01 am

≫ Next: Grayed-out Exclusions

≪ Previous: kovasoh ransomware

$

0

0

I read your tips already but nothing seems to work.
I need someone to help me fix it.
It's an annoying to notification that pops up once in a while about "bad stuff".

Grayed-out Exclusions

August 21, 2019, 8:24 am

≫ Next: Chrome.exe keeps coming back after ending task

≪ Previous: This setting is enforced by your administrator

$

0

0

Hey there everyone,

I was cleaning my computer today and I stumbled upon my exclusions list which had some suspicious grayed-out exclusions in it that I could not remove.

I tried to remove them from the registry but that did not work (see image).

I also installed Malwarebytes and scanned my computer and removed the threats but when I restarted my computer and went onto my exclusions list, the grayed-out files were still there.

The last possible option I can think of is to factory reset...

Grayed-out Exclusions

Chrome.exe keeps coming back after ending task

August 23, 2019, 12:43 pm

≫ Next: Suspicious connections blocked by Comodo Firewall.

≪ Previous: Grayed-out Exclusions

$

0

0

Tried ccleaner and anti-rootkit to remove chrome.exe but failed.

Suspicious connections blocked by Comodo Firewall.

August 26, 2019, 10:50 am

≫ Next: Chrome Browser Malware and Adware

≪ Previous: Chrome.exe keeps coming back after ending task

$

0

0

I was going through my monthly security checkup when i saw some suspicious connections that are blocked by Comodo Firewall. While I do not deny the effectiveness of Comodo, I am somewhat suspicious as to what applications could have caused this. I scanned using hitman pro and malwarebytes, yet it came out cleaned. I also used adwcleaner, which cleaned some registries. But to be sure, I uploaded some logs and some pictures of the logs, since I am having problem exporting the logs in...

Suspicious connections blocked by Comodo Firewall.

Chrome Browser Malware and Adware

September 6, 2019, 2:33 pm

≫ Next: Server infected. Need help!

≪ Previous: Suspicious connections blocked by Comodo Firewall.

$

0

0

Hi Guys,

I have Adware and Malware on my Google Chrome browser. Every time I open the Google Chrome browser, I get pop ups

Could someone please advice me on how to remove these adware and malware?, also please advice me how to avoid these in the future

Kind Regards
Taga

Server infected. Need help!

September 8, 2019, 2:48 pm

≫ Next: Virus?

≪ Previous: Chrome Browser Malware and Adware

$

0

0

I found a processes in my task manager that I do not know, and in Scheduled Tasks appers tasks i didn't set it up (attached picture).

This is stopping some services like SQL.

The machine is a Windows Server 2008 R2 Datacenter.

What do I need to do to remove this from the server?

Thanks for the help!

Virus?

September 9, 2019, 5:11 pm

≫ Next: Is VsHub.exe good or bad or what?

≪ Previous: Server infected. Need help!

$

0

0

I downloaded a software from the internet...my mistake was, I turned my antivirus off. After download, I noticed all my files to have a ".meds" suffix on the extension names. I tried to remove/delete the added ext name but when I open, it was already an invalid file. Can I still recover my important files? Anyone, I need a lending hand. Thanks.

---

Is VsHub.exe good or bad or what?

September 10, 2019, 7:12 am

≫ Next: Can't get rid of pup ( PUP.Optional.Ask)

≪ Previous: Virus?

$

0

0

All,

Please help with the file...

vshub.exe

This link says vshub is bad...

How to remove Vshub.exe CPU Miner Trojan (Virus Removal Guide)

This page contains step by step instructions on how to remove Vshub.exe CPU Miner Trojan from Windows 10, Windows 8.1 and Windows 7.

malwaretips.com

But...

According to Visual Studio Blog site ( Visual Studio “14” CTP 3 Released | The Visual Studio Blog ):

"The Visual Studio Hub is an executable that supports multi-tool communication across the VS family...

Is VsHub.exe good or bad or what?

Can't get rid of pup ( PUP.Optional.Ask)

September 10, 2019, 1:30 pm

≫ Next: How to disinfect Watchonline.band and any connected malware

≪ Previous: Is VsHub.exe good or bad or what?

$

0

0

So yeah basically I downloaded stuff from internet and got pup. Bad idea and the results are shown. Please help, I'm getting desperate and my computer is so slow.

How to disinfect Watchonline.band and any connected malware

September 13, 2019, 11:24 am

≫ Next: Getting Infected Notification From Avast.

≪ Previous: Can't get rid of pup ( PUP.Optional.Ask)

$

0

0

1. Until this month, can't recall experiencing a malware. My AVG free always protected me. At first (1 Sept), I noticed just a persistent 'popup' called 'Watchonline.band', just above the righthand side of the system tray; the initial one states "This site has been updated in the background". Unless I click on its top-right delete icon, after several minutes subsequent popups accumulate above. All I have done is click the top-right delete icon, never accepted offers.

Typical...

How to disinfect Watchonline.band and any connected malware

Getting Infected Notification From Avast.

September 14, 2019, 5:04 am

≫ Next: Cannot get rid of PUP

≪ Previous: How to disinfect Watchonline.band and any connected malware

$

0

0

Hi friends,

I am getting infected notification from Avast. It says that my router is infected. Does it have it any validity or it is some adware?

Cannot get rid of PUP

September 17, 2019, 3:00 am

≫ Next: testpid

≪ Previous: Getting Infected Notification From Avast.

$

0

0

Last couple of week I got these Veinlacrolat.pro pop-up ads, after searching google for a solution I found this forum.
After following advice here I downloaded Malwarebytes and followed the instructions.
I got rid of the Veinlacrolat.pro OK.

After doing a scan It detected 5 threats and quarantined 4, why doesn't it quarantine the 5th one?

Since Installed Malwarebytes, I cannot open any thing , I just get this,

This site can’t provide a secure...

Cannot get rid of PUP

testpid

September 17, 2019, 12:00 pm

≫ Next: ransowmare (.domn)

≪ Previous: Cannot get rid of PUP

$

0

0

i followed Ur instructions to get rid of testpid and it didn't work BC in the control panel it doesn't show up there and i don't know what to do can u guys help me i just got my laptop yesterday and i don't know what to do

ransowmare (.domn)

September 18, 2019, 12:18 am

≫ Next: How to get rid of malware?

≪ Previous: testpid

$

0

0

Excuse me, I'm from Indonesia. Files on my laptop were affected by .domn virus (ransowmare). I was very confused because I was new to the world of ransowmare. I really need help to restore my files that have been encrypted by ransowmare (.domn) because most of the files contain important tasks for my studies. Is there a decryption key or another way to get my file reopened? *sorry if my English is bad

---

How to get rid of malware?

September 20, 2019, 3:13 pm

≫ Next: Help, i can't remove my adware

≪ Previous: ransowmare (.domn)

$

0

0

Hi, I have a malware program on my computer. I tried to delete the files, but unfortunately I used the wrong free software to delete the files with. I remember last time i did it I used BullGuard, and it worked, but I used Total AV. After deleting the files that were found to be a threat the malware is still making ads pop-up in my screen. With BullGuard when I deleted the files the ads went away. How do I locate these files and make sure they're removed? Or is there some other way to get...

How to get rid of malware?

Help, i can't remove my adware

September 22, 2019, 6:48 am

≫ Next: Can't Remove OneSafe PC Cleaner

≪ Previous: How to get rid of malware?

$

0

0

The logs are in the comments

Can't Remove OneSafe PC Cleaner

September 25, 2019, 12:16 am

≫ Next: Hidden malware?

≪ Previous: Help, i can't remove my adware

$

0

0

This OneSafe PC Cleaner appeared a few days ago on my Windows 10 machine. It keeps popping up annoying messages on the desktop, which I have to close each time. It sometimes pops up a new tab to its home page OneSafe PC Cleaner in Avast Secure Browser.

I've tried to get rid of it by running an Avast virus scan, Malwarebytes, HitmanPro, Zemana...

Can't Remove OneSafe PC Cleaner

Hidden malware?

September 27, 2019, 7:21 pm

≫ Next: Immunet alerts me of ransomware recognizerCryptolocker.dll as Clam.Win.Ransomware

≪ Previous: Can't Remove OneSafe PC Cleaner

$

0

0

Hello,

I got a new PC. It was setup by trustworthy person - but still... I have some sensitive files, money etc. on the computer.

That's why I'd like to ask for a preventive checkup, which I know is not allowed, but given the circumstances I hope it will be alllowed.

I installed KIS - clean. Malwarebytes - clean.

FRST log is included.

Thanks for help


FRST: Gofile - File sharing platform, anonymous and free

ADDITION...

Hidden malware?

Immunet alerts me of ransomware recognizerCryptolocker.dll as Clam.Win.Ransomware

September 30, 2019, 8:45 am

≫ Next: Help Please i cant get rid of this Trojan:Win32/CoinMiner

≪ Previous: Hidden malware?

$

0

0

Downloaded Immunet after reading here and ran a scan yesterday. Nothing. Ran again today and it found several. The most worrisome is the following message: recognizerCryptolocker.dll has been detected as Clam.Win.Ransomware.Generic-6545091-0. Quarantine failed. There were two notifications for the same issue.

It found 3 other viruses which is quarantined but they seem to be associated with a program I use called ProcessHacker which shows computer use. One is kprocesshacker.sys, detected...

Immunet alerts me of ransomware recognizerCryptolocker.dll as Clam.Win.Ransomware