wrawlind

Hi Kevin, Here are all the logs that you asked for. From the scan results of the various tools, it looks like things are clean. Do you see anything else that needs looking into? Fixlog 2017-04-06.txt AdwCleaner[C0] 2017-04-06.txt malwarebytes scan results 2017.04.06.txt mrt 2017-04-06.log Addition 2017-04-06.txt FRST 2017-04-06.txt

Hi Kevin, So I looked into starting the first step in your response--resetting the router--but I'm a little concerned about what to do once the router is reset. The website that you referred me to, Setuprouter.com, links to Port Forward's Network Utilities Suite as a tool for finding my router's internal IP address. I downloaded and installed the tool, but while it shows me my Public IP as well as my computer's internal IP, the router's brand and internal IP are both listed as "Unknown." I am pretty inexperienced when it comes to networking, and worry that once my router is reset, I will have to call someone from my ISP to come help me get it back up and running. Can I skip this step and go ahead with the other steps? Let me know and thanks again for your help!

Hi, thanks for your reply, Kevin. I was tied up all day yesterday and couldn't respond to your post until now. I purchased my computer overseas a few years ago with software already loaded onto it, and it's likely that some of it could have been pirated software. If so, I have no problem getting rid of now, although I do find it strange that I didn't start getting these malware notifications until just recently. As for the first step in your response, resetting the router, I think I will have to wait until later this evening to do so, as there are several people are using it during business hours. Once that's done, I will follow the remaining steps and post my logs as you have instructed. Thanks for your help!

Hi--about a week ago, Windows Defender began notifying me that it had found Trojan: Win32/Fuery.B!cl on my Windows 10 Pro 64-bit Lenovo laptop, and that it was in the process of removing the malware. The Windows Defender history showed that it had quarantined the trojan which was found in file:C:\Windows\System32\KMSServer.exe. Since the trojan was in quarantine, I figured it was okay to leave Windows Defender to do it own thing. Ever since then, however, I have been getting the exact same notifications from Windows Defender a few times a day telling me that the same trojan is present and that WD is trying to remove it. I've tried manually removing the trojan in Windows Defender (as opposed to just quarantining it) but that doesn't seem to get rid of it either. I've also done full system scans with Windows Defender as well as Malwarebytes Premium (free demo), but neither of them are able to detect Trojan: Win32/Fuery.B!cl. MWB found a couple of other things that it promptly got rid of for me, but my Fuery problem still won't go away. The thing is, it's hard for me to check if the malware is still present because I have to rely on WD's occasional notifications, as it doesn't show up in any scans. Any help getting rid of thing will be very much appreciated! I know a few other folks on this forum have had problems with this particular trojan, but it seems like the solutions provided are all tailored to their specific setup. I've attached my FRST logs below, but I'm new here, so my apologies if there's something obvious that's been previously discussed that I'm missing. In any case, thanks in advance for your help! FRST.txt Addition.txt