Jump to content

criza

Members
  • Content Count

    7
  • Joined

  • Last visited

Everything posted by criza

  1. Ok, I'll be patient.. I did run Malwarebytes again, it didn't find anything! Best Regards
  2. BTW, I know the attack occurred at 03:40am this morning, (also) because the Mozilla.zip was created at that time. So I scanned all files on drive C: that were created in that hour. I found, now after the clean-up, three files: pluginreg.dat in the Mozilla profile folder, 1508809200781.eaa612bb-afda-4951-a093-1abeb3e3891d.sync.jsonlz4 in a subdirectory (datareporting/archived/2017-10/ and also there a second file: 1508809200927.2314ff81-a146-4ebb-a35d-9436ac7a497a.main.jsonlz4 When I searched for modified files during that hour (it gives me 19 additional files, location is C:\Users\*****\AppData\Local\Google\Chrome\User Data\CertificateTransparency\549\_platform_specific\all\sths and the file endings are .sth, does this mean something?
  3. Here you go, I attached a text file with the results. Thanks so far RogueKiller.txt
  4. Instead of a copy & paste I attached the log file. Thank you again. Fixlog.txt
  5. Hello Aura, so I would like to clean-up the system with your help. Thank you.
  6. Hello, so I had a weird error message popping up in my Windows 7 x64 so I ran all the available security tools, and I unfortunately found a couple of infections. The strangest thing was that there was a Mozilla.zip (with the content of the Firefox /AppData files) in my Roaming folder created last night, so I was wondering if my passwords have been stolen, as I save a lot of them in Firefox and I had no Master Password? I would be also grateful if anyone could check my log files, but I guess my system is clean now, only the Mozilla.zip bugs me..... Malwarebytes.txt AdwCleaner[S0].txt FRST.txt Addition.txt ComboFix.txt HitmanPro_20171024_1332.log
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.