[Trojan Egguard PrxySvrRST]

2 minutes ago, kevinf80 said:

How is your system responding now, do you have any remaining issues or concerns...?

So far I no longer get any automatic opening of CMD windows, Malwarebytes along with ADW cleaner and hitam pro as well as windows malicious software removal tool show nothing anymore. I have done more scans now including rootkits and nothig pops up.

I watched the process names and inspected the "C:" drive and found no suspicious folders or anything, So far it's responding good. My only real concern apart from the egguard persistent registry key was something that looked like a miner in the processess list called "zminer" but has been removed in the process of the instructions I followed.

If anything else comes up within the week I'll post here again, Thanks a lot for the help!

[Trojan Egguard PrxySvrRST]

6 hours ago, kevinf80 said:

Hiya Miriam,

Ok will catch up later, i`m in the UK so we are right out of sync time wise...

Regards,

Kevin..

Forgot to quote in my reply, Sorry for the double post as I couldn't figure another way to notify you without sending a PM.

[Trojan Egguard PrxySvrRST]

Finally had time to do all the scans and steps in the instructions, Here are the requested logs.

AdwCleaner[S8].txt

Fixlog.txt

MBAM Scan.txt

mrt.log

[Trojan Egguard PrxySvrRST]

Thanks for the instructions, I'll do those in the morning as it's late night around here. I'll post the logs as soon as I'm done tomorrow.

[Trojan Egguard PrxySvrRST]

11 minutes ago, kevinf80 said:

Why are you running in safe mode...?

I was trying to remove the egguard virus with malwarebytes anti rootkit tool, now it seems I have gotten rid of the persistent registry key.

 

Malwarebytes no longer shows the egguard registry key virus, adw cleaner and hitman pro show nothing anymore as well.

[Trojan Egguard PrxySvrRST]

 

9 minutes ago, kevinf80 said:

Hello Miriam and welcome to Malwarebytes,

Follow the instructions at this link and post the requested logs:  https://forums.malwarebytes.com/topic/9573-im-infected-what-do-i-do-now/

Thank you,

Kevin

 

Here are the requested logs.

Addition.txt

FRST.txt

[Trojan Egguard PrxySvrRST]

Got it, I'm following the instructions now.

[Trojan Egguard PrxySvrRST]

So I was surfing the net and downloaded an iso mounting software which happened to have just one setup file, After I executed it a window not typical of an installation program opened which had about three buttons. After that a bunch of CMD windows opened and I powered off my modem right away and ran malwarebytes along with adw cleaner and hitman pro.

 

That seems to have taken care of most of all pups and trojans as well as the fishy processes and registry keys. The problem is that a single trojan egguard resgistry key keeps coming up each time I boot up my pc and run malwarebytes and it's called Egguard PrxySvrRST which it seems no matter what I do I can't get rid of it.

egguard.txt