Windows 10: Infected by mail.ru virus

I reinstalled Java, now its version is 64-bit. We have deleted and cleaned a lot of things. So I think I shouldn't think my PC is infected now. I thought silly about residual files, sorry for that. This infected virus disrupted my psychology. Anyway, is there any step to clean or do something else for harmful file or stuff in my PC?

Thanks. *Smile

 

cookies1,

There is nothing silly about all this, and, after having a computer fall prey to malware, anyone can become concerned about it happening again.

Try using your computer for a few days, and see how it goes. If you start having problemas again, post back. However, if the system remains stable, and you have plenty of room on the hard drive, consider creating a Restore Point.

See the following:
System Restore Point - Create in Windows 10

If you did not follow up with the Zemana instructions, please do so. See Post #14


In order to increase our comfort level, there is another program that we can run. It will take a while, though.

Please download RogueKiller:
Downloading RogueKiller
Save to the Desktop.

Close all windows and browsers.
Right-click the downloaded program file and select: Run as Administrator
RogueKiller opens to its dashboard and Home page.

Click: Start Scan (You will also need to press Start Scan on the next screen displayed.)

Once the Scan begins, it will take about an hour, or longer, depending on the size of the drive.
Just let it scan, and do not use the computer until it is done.

When the scan finishes, a results screen with possible entries is displayed.
Do not remove anything (if found), since not all entries shown are malware!!

Press: Open Report
Next, click the Open Txt button, save the report to the Desktop, and attach the scan results in your reply

Exit RogueKiller by clicking on the red circular icon at the top right of the dashboard.

 

Yes, there is!
If you did not try this yet, go ahead:Access Denied,

Here's how we were doing it in the old days: Open regedit and search for mail.ru if it's the name of the malware and delete files one by one. You must be precise and prudent at what you delete. Plus, you must click F3 each time to kill the entire process (one by one again). It may also operate under another name?

 

I got the same problem after download from mediadisk, its suddenly open my browser and direct me to adv site. I really scared beside injecting adware can this virus possibly key logger too or some other dangerous malware?

 

Here you are, I have attached RogueKiller results.

Thanks.

 

cookies1,

RogueKiller is flagging µTorrent.
This does not mean uTorrent itself is infected, but, although Peer-to-Peer (P2P) programs of themselves are not malicious, the chance of downloading a malicious file is like playing Russian roulette. For all we know, this is how malware gained access to your system!

It is your choice to keep or remove the program, but, be aware it can have consequences.

Otherwise, you are good to go!!

 

I installed µTorrent when I bought my PC. But I couldn't see any problem with that program. Although, I should keep in my mind that can be a malicious program. Thanks for your helps, you're really so helpful. *Smile

 

I also got the mail.ru malware and it also infected a 2nd laptop, because it installs into your Google Chrome account settings. Malwarebytes removed all suspect files on the hard drive, but you need to do some manual deletions in Google Chrome.

1. Select the RH side Chrome drop down menu, select "more tools", "extensions" and delete unwanted Russian extensions.
2. In the Chrome drop down menu, select, "settings", "advanced" and select "reset" (restore settings to their original defaults).

This will remove mail.ru completely from Chrome. I also check any mail.ru entries in "Regedit" and delete all.
I can also recommend a excellent malware removal program, equal to Malwarebytes, called HitmanPro, but it is only a 30 day working free trial, or "buy now". Go to HitmanPro Malware Removal Tool: Secondary Anti-Virus Scanner | Download HitmanPro 3.7
.