Forum Smadav

halo tim smadav

bagaimana cara membersihkan new heur.lowrep (Cloudnet) ini ya?

- Setiap menscan pc dengan Smadav atau software AV lainnya, setelah beberapa saat software akan terclose dan terdelete sehingga harus diinstal ulang kembali software AV tersebut termasuk Smadav
- entah permasalahan windows atau akibat virus ini pc tidak bisa masuk ke safemode walaupun di restart melalui msconfig
- semua aplikasi MS Office tidak bisa terhubung dengan printer, walaupun aplikasi pdf printer
- pc sudah jelas lebih terasa berat

di tab one virus by user ada 4 aplikasi yaitu:
mrt.exe (process)
csrss.exe (process)
cloudnet.exe (process)
cloudnet.exe (startup)

ini hasil log dari quick scan SMADAV:

==============================
Log File of Smadav 2018 Rev. 11.9
==============================

Scanning Results :
=> Time & Date : 10:10:20, on 07-03-2018
=> Finishing Time : 24 minutes,44 seconds
=> Folder Scanned :30982
=> File Scanned : 186509
=> File Detected : 2
=> File Cleaned : 0
=> File Skipped : 0
=> Value Scanned : 1441
=> Value Detected: 1
=> Value Fixed: 0
=> Path Scanned: 0
=> Path Hidden: 0
=> Path Unhidden: 0

==============================
Before Scanning
==============================
Suspected Paths :
=> Fine(Level 1) as  : 1 Process
   -F:\Program Files\TxGameAssistant\AppMarket\QMEmulatorService.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Windows\SysWOW64\NLSSRV32.EXE
=> Fine(Level 1) as  : 1 Process
   -C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Windows\System32\certutil.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe
=> Fine(Level 1) as  : 1 Process, 1 Startup
   -C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe
=> Fine(Level 1) as  : 1 Process, 1 Startup
   -C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
=> Fine(Level 1) as  : 1 Process
   -C:\ProgramData\DatacardService\DCSHelper.exe
=> Fine(Level 1) as  : 1 Process, 1 Startup
   -C:\Program Files\CCleaner\CCleaner.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Windows\rss\csrss.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
=> Fine(Level 1) as  : 1 Process, 1 Startup
   -C:\Users\nke\AppData\Roaming\Spotify\SpotifyWebHelper.exe
=> Fine(Level 1) as  : 1 Process, 1 Startup
   -C:\Users\nke\AppData\Roaming\EpicNet Inc\CloudNet\cloudnet.exe
=> Fine(Level 1) as  : 1 Process
   -SmadavProtect64.exe
=> Fine(Level 1) as  : 1 Startup
   -C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
=> Fine(Level 1) as  : 1 Startup
   -C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe
=> Fine(Level 1) as  : 1 Startup
   -C:\Users\nke\Documents\app\Internet Download Manager IDM 6.21 Build 14 Final Incl. Crack [ATOM]\Crack\IDMan.exe
=> Fine(Level 1) as  : 1 Startup
   -C:\Program Files (x86)\Trojan Remover\Trjscan.exe

Running Processes :
=> N/A
=> N/A
=> N/A
=> N/A
=> C:\Windows\System32\wininit.exe
=> N/A
=> N/A
=> N/A
=> N/A
=> N/A
=> C:\Windows\System32\svchost.exe
=> F:\Program Files\TxGameAssistant\AppMarket\QMEmulatorService.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\svchost.exe
=> N/A
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\svchost.exe
=> N/A
=> C:\Windows\System32\svchost.exe
=> C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
=> C:\Windows\System32\taskeng.exe
=> C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
=> N/A
=> N/A
=> N/A
=> N/A
=> C:\Windows\SysWOW64\NLSSRV32.EXE
=> N/A
=> N/A
=> C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
=> N/A
=> C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe
=> N/A
=> C:\Windows\windefender.exe
=> N/A
=> N/A
=> C:\Windows\System32\svchost.exe
=> N/A
=> N/A
=> N/A
=> C:\Windows\System32\taskeng.exe
=> N/A
=> C:\Windows\explorer.exe
=> C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
=> C:\Windows\System32\taskeng.exe
=> C:\Program Files (x86)\SMADAV\SMΔRTP.exe
=> C:\Windows\System32\cmd.exe
=> N/A
=> C:\Windows\System32\certutil.exe
=> N/A
=> C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe
=> N/A
=> C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe
=> C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
=> C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
=> C:\ProgramData\DatacardService\DCSHelper.exe
=> N/A
=> N/A
=> C:\Program Files\CCleaner\CCleaner.exe
=> C:\Windows\rss\csrss.exe
=> C:\Windows\System32\svchost.exe
=> C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
=> C:\Windows\System32\SearchIndexer.exe
=> N/A
=> C:\Users\nke\AppData\Roaming\Spotify\SpotifyWebHelper.exe
=> C:\Users\nke\AppData\Roaming\EpicNet Inc\CloudNet\cloudnet.exe
=> C:\Windows\System32\svchost.exe
=> SmadavProtect64.exe
=> C:\Windows\System32\SearchProtocolHost.exe
=> C:\Windows\System32\SearchFilterHost.exe
=> C:\Program Files (x86)\SMADAV\SMΔRTP.exe

==============================
After Scanning
==============================
Suspected Paths :
=> Fine(Level 2) as  : 2 Process
   -C:\Windows\rss\csrss.exe
=> Fine(Level 1) as  : 1 Process
   -F:\Program Files\TxGameAssistant\AppMarket\QMEmulatorService.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Windows\SysWOW64\NLSSRV32.EXE
=> Fine(Level 1) as  : 1 Process
   -C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe
=> Fine(Level 1) as  : 1 Process, 1 Startup
   -C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe
=> Fine(Level 1) as  : 1 Process, 1 Startup
   -C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
=> Fine(Level 1) as  : 1 Process
   -C:\ProgramData\DatacardService\DCSHelper.exe
=> Fine(Level 1) as  : 1 Process, 1 Startup
   -C:\Program Files\CCleaner\CCleaner.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
=> Fine(Level 1) as  : 1 Process, 1 Startup
   -C:\Users\nke\AppData\Roaming\Spotify\SpotifyWebHelper.exe
=> Fine(Level 1) as  : 1 Process
   -SmadavProtect64.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Users\nke\AppData\Local\Temp\csrss\mrt.exe
=> Fine(Level 1) as  : 1 Process
   -C:\Users\nke\AppData\Local\Temp\csrss\smb\XVznwLpQBvZ\Eternalblue-2.2.0.exe
=> Fine(Level 1) as  : 1 Startup
   -C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
=> Fine(Level 1) as  : 1 Startup
   -C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe
=> Fine(Level 1) as  : 1 Startup
   -C:\Users\nke\Documents\app\Internet Download Manager IDM 6.21 Build 14 Final Incl. Crack [ATOM]\Crack\IDMan.exe
=> Fine(Level 1) as  : 1 Startup
   -C:\Users\nke\AppData\Roaming\EpicNet Inc\CloudNet\cloudnet.exe
=> Fine(Level 1) as  : 1 Startup
   -C:\Program Files (x86)\Trojan Remover\Trjscan.exe

Running Processes :
=> N/A
=> N/A
=> N/A
=> N/A
=> C:\Windows\System32\wininit.exe
=> N/A
=> N/A
=> N/A
=> N/A
=> N/A
=> C:\Windows\System32\svchost.exe
=> F:\Program Files\TxGameAssistant\AppMarket\QMEmulatorService.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\svchost.exe
=> C:\Windows\System32\svchost.exe
=> N/A
=> C:\Windows\System32\svchost.exe
=> C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
=> C:\Windows\System32\taskeng.exe
=> C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
=> N/A
=> N/A
=> N/A
=> N/A
=> C:\Windows\SysWOW64\NLSSRV32.EXE
=> N/A
=> C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
=> N/A
=> C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe
=> N/A
=> C:\Windows\windefender.exe
=> N/A
=> N/A
=> C:\Windows\System32\svchost.exe
=> N/A
=> N/A
=> N/A
=> C:\Windows\System32\taskeng.exe
=> N/A
=> C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
=> C:\Program Files (x86)\SMADAV\SMΔRTP.exe
=> C:\Windows\System32\cmd.exe
=> N/A
=> N/A
=> C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe
=> N/A
=> C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe
=> C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
=> C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
=> C:\ProgramData\DatacardService\DCSHelper.exe
=> C:\Program Files\CCleaner\CCleaner.exe
=> C:\Windows\rss\csrss.exe
=> C:\Windows\System32\svchost.exe
=> C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
=> C:\Windows\System32\SearchIndexer.exe
=> N/A
=> C:\Users\nke\AppData\Roaming\Spotify\SpotifyWebHelper.exe
=> SmadavProtect64.exe
=> C:\Program Files (x86)\SMADAV\SMΔRTP.exe
=> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
=> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
=> C:\Windows\System32\svchost.exe
=> N/A
=> N/A
=> N/A
=> N/A
=> N/A
=> N/A
=> N/A
=> N/A
=> N/A
=> N/A
=> N/A
=> N/A
=> C:\Users\nke\AppData\Local\Temp\csrss\mrt.exe
=> C:\Windows\rss\csrss.exe
=> N/A
=> N/A
=> N/A
=> N/A
=> N/A
=> C:\Windows\System32\svchost.exe
=> C:\Windows\explorer.exe
=> N/A
=> C:\Users\nke\AppData\Local\Temp\csrss\smb\XVznwLpQBvZ\Eternalblue-2.2.0.exe
=> N/A

Detected Virus :
=> New Heur.LowRep(cloudnet)
   -Detected Process [Killed]
   -C:\Users\nke\AppData\Roaming\EpicNet Inc\CloudNet\cloudnet.exe
=> New Heur.LowRep(cloudnet)
   -Infected File
   -C:\Users\nke\AppData\Local\Temp\csrss\cloudnet.exe

Infected Registry Values :
=> CloudNet
   -HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
   -New Heur.Startup Suspected Virus Value