YojimboSan

Thank you Ron. No more outbound attempts since the file removal. I would say the issue seems to be resolved.

Just a quick update, since running Zemana on it and removing the infected file, there have not been any more outbound attempts. There are 3 that using try to go around 11:23AM and they didn't occur. Maybe in the clear?

I did not see anything in task scheduler that looked like it did not belong. Although there are quite a few subfolders in the Microsoft folder there. Not sure how to go through all of those to determine anything out of place. Running tasks looks fine. The only remnants from this infection seem to be that MalwareBytes blocks an outbound connection attempt to wmi.mykings.top 3 or 4 times a day. Strange that a MalwareBytes scan does not detect and remove. I ran Zemana on it, it detected the WMI f**kyoumm2_consumer and removed it. Is there anything else you might recommend? Otherwise I'll just wait to see if any more outbound connection attempts to mykings occurs. Thank you again for all of your help here.

Hi Ron and thanks for helping. Nothing found in STEP 1 , malwarebytes scan. Nothing found in STEP 2, Adwcleaner scan. STEP3 FarBar I have included the text files. Thank you again. Regards, YojimboSan Addition.txt FRST.txt

wmi.mykings.top malware I saw another thread where if I paste the FRST and Addition txt info to the thread that someone can build a fix.txt I can use to remove this malware. Is this something that I can get help with here? Thanks!