C drive filling up, ran MWB and it's still happening. How do I get rid of it and the files it's downloaded?

[dlaney]

MWB found and quarantined a bunch of threats, I restarted. It's now blocking something from access to "1.winsrw.com" every ~15 seconds which I assume is what caused C to fill.

I'm now running Spybot S+D, and ran MWB again, which found one thing. It's still doing its heuristic analysis thing.

The outbound thing is apparently happening from a folder somewhere in APPDATA called Aptworks\spc32.exe. I haven't been able to find it, and I can't figure out how to get MWB to show me the full path.

Can anyone tell me how to get rid of it, and how to find and delete the files it's downloaded? I have less than 1gb left on C and I need to get some work done!

Thanks!


Windows 8.1
6.00gb RAM

I'm around tonight so let me know if I've missed anything and I'll reply asap.

 

[Paul NZ]

I would get trojan remover install it update it then click on scan

Then select all the options under utils to reset everything

And yes it is safe I use it

 

[BadActor]

Boot up in safe mode and run Malwarebytes Antimalware again along with Adwarecleaner. Next run Hitman Pro, and finally, Zemana Antimalware. I would also follow up with a couple of online scanners such as ESET's and TrendMicro. It often takes several different scans to remove threats as most apps won't get everything.

https/www.malwarebytes.com/adwcleaner/

https/www.bleepingcomputer.com/download/hitmanpro/

https/www.zemana.com/en-US/download

https/www.eset.com/us/home/online-scanner/

https/www.trendmicro.com/en_us/forHome/products/housecall.html

 

[Paul NZ]

I would also disable system restore. If you do it in normal windows

 

[Chugalug_]

Can confirm that Adwcleaner is fantastic, finds stuff that malware bytes and Norton skip over and does an in depth registry search.

 

[dlaney]

Ran Adwcleaner and Hitman, restarted, re-ran everything, no threats found anywhere The outgoing thing has also apparently stopped. Thanks!

However my C drive is still pretty full - does anyone know what sort of files the thing was downloading / where they'd be likely to be found?

 

[BadActor]

You might have to go into the file explorer and look around for suspicious files and folders. Also go into Programs and Features and uninstall any apps that you don't use or didn't install. Running CCleaner and the system cleanup may help with cleaning up some of those files.

https/www.piriform.com/ccleaner/download

 

[Chugalug_]

Run CCleaner, removes clutter etc. from your system.
Be sure to also defragment your C drive.

 

[dlaney]

Thanks all! I consider this fixed