Virus MaskVPN

RE_

But after cleaning the firewall, programs (e.g. LibreOffice) did not ask me for access on the first launch, is that normal?

Yes, for some well-known programs.

Should I uninstall the FRST version of Farbar and delete the reports?

To conclude:
To automatically delete all files/folders created by FRST and the tool itself, rename FRST/FRST64.exe to uninstall.exe and run it.

The procedure requires a restart.

Good luck ;-)

--
Security Contributor.

Hi,
It seems that MarkVPN has disappeared, at least I can't see it anymore in the program on C:, which wasn't the case yesterday. Just to clarify, I don't know if it matters, but after the firewall cleanup, programs (like Libre Office) didn't ask me for access on the first launch, is that normal?
I'm good with Acrobat RDC. Should I uninstall the FRST version of Farbar and delete the reports?
Thanks a lot for this valuable support!

RE_

Okay for the fixlog.

Are you still having issues with MaskVPN?

Update or uninstall Acrobat Reader DC

--
Security contributor.

Hello
Here is the report for the fixlog:
https://up.security-x.fr/file.php?h=R84b9b46d9a64158dd199a5d0220b11e0
Thank you, for now the procedure is going very well

RE_

--> Copy what's here: https://textup.fr/623641Ii from start:: to end:: (without pasting it anywhere)

--> Open FRST (or FRST64) as administrator and click on Fix
If FRST seems to freeze or is not responding, let it run

--> The PC will restart

--> A fixlog file is created in the same location as FRST, post it like the other reports

--> The fix will clean the firewall, the programs you launch afterwards will request access on first launch

--> Let me know if you're still having the issue.

--
Security contributor.

Here are the two new reports (I managed to uninstall the 3 requested apps using normal mode):

https://up.security-x.fr/file.php?h=R5ad751a02fb86182307c00172bac9204

https://up.security-x.fr/file.php?h=R8b0aab3d3cf937c61ae764394420b5bd

Try to uninstall them in normal mode. Uninstall SSOption last as it is the one that may cause problems.

--
Security contributor.

Thank you, actually I can't restart in safe mode, Windows is blocking me and asking for a key. I went to my account indeed, but I can't retrieve the key code to access the boot options on Windows. A window tells me that it should be the one who installed the system who has the key (it's a second-hand computer)... What should I do?
Thank you

RE_

Yes, that's what needed to be done.

We will do a first cleanup, but in safe mode. (Can you follow along from a phone or another PC?)

------------
--------------------

Reboot in safe mode

=> Press the shift key (Arrow up above ctrl in the bottom left)
=> While holding it down, restart the PC
=> You will arrive at the startup options, release shift
=> Click on Troubleshoot => Advanced options => Startup Settings => Restart
=> The PC restarts, press the 4 or F4 key (5 or F5 if logging in with a Microsoft account)
=> You arrive at the desktop in safe mode

=> Uninstall:

=> SSOption
=> Adobe AIR
=> Adobe Flash Player 32 NPAPI

Once done, reboot in normal mode, run a FRST scan and post the two new reports

--
Security contributor.

Good evening, thank you for your feedback,
I hope I understood and followed the procedure correctly, here are the links:

For report Frst.txt: https://up.security-x.fr/file.php?h=R3bea2c5b02de51a544b86df906c71660

For Addition.txt: https://up.security-x.fr/file.php?h=R98452b07504c7e5b6a95bd077b100089

Is this what needed to be done?
Thank you

Hello,

We will start with a PC diagnosis:

Be sure to read the entire procedure before posting the reports
Do not post them directly in the messages as they are unreadable and incomplete

The reports expected are FRST.txt and Addition.txt

All reports must be hosted on https://security-x.fr/up/ and you must indicate the links obtained in your reply

---------------------------------------------------------------------------------------------

--> The SmartScreen filter may trigger an alert. Click on Actions or More information and then click on Run anyway

---------------------------------------------------------------------------------------------

--> Download the FRST version of Farbar, compatible with your system, and save the file on your Desktop

--> For a 32-bit system
--> For a 64-bit system

How to know which version 32-bit or 64-bit is running on my system?

--> Wait until your browser offers you the download to save, without clicking anywhere, especially not on the sponsors of the page.
--> Close all applications, including your browser
--> Double-click on FRST.exe and click Yes to accept the Disclaimer
--> Under Vista, Windows 7 / 8 and 10, you need to run the file by right-clicking -> Run as administrator
--> Wait for it to indicate The tool is ready to work
--> On the main menu, click on Scan and wait during the scan
--> At the end of the scan, the reports FRST.txt and Addition.txt are created. Post these reports in your next reply.
--> The reports are saved in the same location as the tool and under C:\FRST\Logs

--
Security contributor.