Tech Support Guy banner
  • IMPORTANT: Only authorized members may reply to threads in this forum due to the complexity of the malware removal process. Authorized members include Malware Specialists and Trainees, Administrators, Moderators, and Trusted Advisors. Regular members are not permitted to reply, and any such posts will be deleted without notice or further explanation. Notice
Status
Not open for further replies.

Trojan:Win32/Bitrep.B

In Progress 
4K views 6 replies 2 participants last post by  iMacg3 
#1 ·
Hi there

Over a 48 hour period it seems I got a virus of some sort and watched my zippy laptop quickly and steadily get slower until it completely froze and would barely run. Unfortunately, a guest was using my laptop while most of this occured and I did not even get to see how they found out my laptop was infected with the above mentioned Trojan:Win32/Bitrep.B. or if it is is for that matter.

What have I done? I tried restoring twice it failed the first time and the second time finished but at first would not even run windows and then brought me to some places im not familiar with. Btw I have always had Dells and HPs in the past 20 odd years and this Lenovo is my first and I only have had it for under a year. Up to a week ago it ran like a dream and is easily the fastest best running laptop I have ever had. I am devastated and will not lend my computer again.

In the past I have only ever dealt with one trojan that took me a nonstop week of work to get rid of but was very different. From what I read if this is Bitrep.B then I need some help because it is out of my ability zone at this point unless I do a marathon research mission to catch up on the technology front which I have ignored for a while. Anyways, I am not sure what to do Oh I also did a reinstall of windows as a last resort and then gave up when it appeared to be running like **** again. Please help

Tech Support Guy System Info Utility version 1.0.0.4
OS Version: Microsoft Windows 10 Pro, 64 bit
Processor: Intel(R) Core(TM) i5-6200U CPU @ 2.30GHz, Intel64 Family 6 Model 78 Stepping 3
Processor Count: 4
RAM: 7607 Mb
Graphics Card: Intel(R) HD Graphics 520, 1024 Mb
Hard Drives: C: 464 GB (274 GB Free);
Motherboard: LENOVO, 20FN002SUS
Antivirus: Windows Defender, Disabled
I am running Shaw's McAfee security center.

Thank you
Cheri
 
See less See more
#2 ·
Hi there

Over a 48 hour period it seems I got a virus of some sort and watched my zippy laptop quickly and steadily get slower until it completely froze and would barely run. Unfortunately, a guest was using my laptop while most of this occured and I did not even get to see how they found out my laptop was infected with the above mentioned Trojan:Win32/Bitrep.B. or if it is is for that matter.

What have I done? I tried restoring twice it failed the first time and the second time finished but at first would not even run windows and then brought me to some places im not familiar with. Btw I have always had Dells and HPs in the past 20 odd years and this Lenovo is my first and I only have had it for under a year. Up to a week ago it ran like a dream and is easily the fastest best running laptop I have ever had. I am devastated and will not lend my computer again.

In the past I have only ever dealt with one trojan that took me a nonstop week of work to get rid of but was very different. From what I read if this is Bitrep.B then I need some help because it is out of my ability zone at this point unless I do a marathon research mission to catch up on the technology front which I have ignored for a while. Anyways, I am not sure what to do Oh I also did a reinstall of windows as a last resort and then gave up when it appeared to be running like **** again. Please help

Tech Support Guy System Info Utility version 1.0.0.4
OS Version: Microsoft Windows 10 Pro, 64 bit
Processor: Intel(R) Core(TM) i5-6200U CPU @ 2.30GHz, Intel64 Family 6 Model 78 Stepping 3
Processor Count: 4
RAM: 7607 Mb
Graphics Card: Intel(R) HD Graphics 520, 1024 Mb
Hard Drives: C: 464 GB (274 GB Free);
Motherboard: LENOVO, 20FN002SUS
Antivirus: Windows Defender, Disabled
I am running Shaw's McAfee security center.

Thank you
Cheri
Hi again just an update

Well my laptop is getting worse and and worse now. The screen keeps going black and it takes forever to open anything. Dont know what to do now.

Cheri
 
#3 ·
Welcome to the Tech Support Guy malware removal forum.
I'm iMacg3 and will be helping you.

Please keep the following information in mind before we begin:
  • Do not run any fixes or tools on your system unless I request that you do so.
  • Please read all instructions carefully, and complete them in the order listed.
  • If your computer seems to start working normally, please don't abandon the topic. Just because your computer doesn't seem to have a problem doesn't mean that it isn't infected.
  • If you have pirated or illegal software on your computer, uninstall it now before proceeding.
  • If you have questions about anything during the cleanup, please ask.

--------------------

Download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system, download both of them and try to run them. Only one of them will run on your system, that will be the right version.
  • Right-click FRST/FRST64 and select Run as administrator. (Windows XP users double-click on the file).
  • If you receive a SmartScreen alert, click More Info, then Run Anyway.
  • When the tool opens, click Yes to the disclaimer.
  • Press the Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Attach it to your reply.
  • The tool will also produce another log (Addition.txt ). Please attach this, along with FRST.txt, to your reply.

Note - FRST.txt and Addition.txt are saved to the same location as FRST/FRST64.
 
#5 ·
Hi,

Download CKScanner by askey127 and save it to your desktop.
  • Right-click CKScanner.exe and select Run as administrator.
  • When the tool opens click Search For Files.
  • When the cursor loading icon disappears, click Save List To File.
  • A message box will verify the file is saved. Please run the program only once.
  • The tool will create a log on your desktop called CKFiles.txt. Open it, then copy and paste its contents into your next reply.
 
#7 ·
Hi,

Windows Defender detected this file as a Trojan:

C:\Users\cheri\Google Drive\cheri textbooks\Cummins_Insite\Calterm III\KeyGen\ip_kg.exe

This file seems to be a "crack" or "keygen". Using pirated software/cracks is an easy way to get your computer infected - almost as easy as intentionally downloading malware. Additionally, these types of software will be removed by the anti-malware/scanning tools we use.

Please remove any pirated/cracked software from your computer. Then run CKScanner again, and post the CKFiles.txt log.
 
Status
Not open for further replies.
You have insufficient privileges to reply here.
Top