[new malware? vsctxhksvc.exe and pshvkoz.exe files]

Please see attached. System is fine.  

Thank you for helping.

Fixlog.txt

[new malware? vsctxhksvc.exe and pshvkoz.exe files]

Please see attached.

FRST.txt

Addition.txt

[new malware? vsctxhksvc.exe and pshvkoz.exe files]

Please see attached.

AdwCleaner[S0].txt

RogueKillerLog.txt

[new malware? vsctxhksvc.exe and pshvkoz.exe files]

Yes I did.

Thank you.

Anything else? I ran another scan after the prompted reboot and now there are no threats detected.

[new malware? vsctxhksvc.exe and pshvkoz.exe files]

Please see attached.

MBscan20180125.txt

[new malware? vsctxhksvc.exe and pshvkoz.exe files]

Looking good. Many thanks. A definite learning experience, never too old. Even when practicing safe computing one little mistake reaches out a kills you.

thanks again.

[new malware? vsctxhksvc.exe and pshvkoz.exe files]

Looking good. Time to move it back and boot in the original machine?

Fixlog.txt

[new malware? vsctxhksvc.exe and pshvkoz.exe files]

Please see attached.

Fyi - Windows Defender see FRST64.exe as being infected by a [Severe] Trojan. This included an updated file downloaded to a clean PC, prior to being copied to the USB drive.

Fixlog.txt

[new malware? vsctxhksvc.exe and pshvkoz.exe files]

It is E.

[new malware? vsctxhksvc.exe and pshvkoz.exe files]

I am ready. Additional machine is ready to go. I'll be home later.

thanks.

[new malware? vsctxhksvc.exe and pshvkoz.exe files]

frst64.exe

MD5 = 4d317a9f588e1dc474987eee8605e10f

SHA-1 = ee85e232f61ceec679810877106e3492c9c32dc4

I'm going to try adding it as a 2nd drive in another, working system. I spent more time with it last night, building 2 new Win10 boot USB drives. FRST64.exe and FRST.exe will not run in the repair console. Frustrating to say the least. I drive is not that important to me, it is only the challenge to find and cure this issue that's driving me. At this point we are wasting too much time. Any hits when adding it as a second drive?

I do appreciate your help.

Thank you.

[new malware? vsctxhksvc.exe and pshvkoz.exe files]

Yes.

[new malware? vsctxhksvc.exe and pshvkoz.exe files]

I'm using an installation CD. Once in the repair console I'm inserting the USB drive that contains FRST. I can make a bootable Win10 USB drive and add FRST to that.

[new malware? vsctxhksvc.exe and pshvkoz.exe files]

When I boot using the installation CD I get the error re: "Subsystem not available". Unsure re: the different options available in the Repair Console but I can review them later. That was using the FRST program downloaded on a clean PC, copied to a new USB drive.

[new malware? vsctxhksvc.exe and pshvkoz.exe files]

Yes. Got sidetracked fixing a friends machine. Still cannot get it to boot into repair mode using Shift Restart. I held shift key down through to the restart. Wondering if this is some kind of rootkit problem? Anything that will work on this if I stick it in another machine as a D: drive, or external drive? I'm about to give up and scratch the thing.

thanks for your help.

[new malware? vsctxhksvc.exe and pshvkoz.exe files]

Will work on it later today. Thank you.

 

[new malware? vsctxhksvc.exe and pshvkoz.exe files]

I downloaded FRST on a different, uninfected computer then copied it to a brand new USB drive. I did not insert that drive into the infected computer until I rebooted using the Win10 CD and entered the repair console. I am still unable, on any computer, to boot to repair using F8, as I was with previous versions of Windows? I must be slowing down in my old age.

[new malware? vsctxhksvc.exe and pshvkoz.exe files]

The only semblence of Repair mode I can get to is by booting off an installation CD. But in a command prompt I cannot run either the 32 or 64 bit FRST file. I get the error: "The subsystem needed to support this image type is not present". I tried, as I have previously, to use the F8 key during boot but my system just will not pop up the boot menu. Using msconfig to boot in Safe Mode, with minimum drivers, etc. is the closest I can get. I have never had success using F8 w/Win10-64bit. Usually booting from CD gets me to a repair command prompt and I am good from there.

In Safe Mode, using command prompt, the FRST64 file runs but does not find the fixlist.txt file? It says "The fixlist.txt should be in the same folder/directory the tool is located". It's there, I can see it, and I can load the text file from the USB drive to Notepad?

Please advise.

[new malware? vsctxhksvc.exe and pshvkoz.exe files]

Yes I am. Sorry, I was in training for a couple days. I'll be back at it this afternoon.

[new malware? vsctxhksvc.exe and pshvkoz.exe files]

Please see attached.

Fixlog_09-01-2018 22.53.42.txt

[new malware? vsctxhksvc.exe and pshvkoz.exe files]

Please see attached.

Addition_08-01-2018 15.44.24.txt

FRST_08-01-2018 15.44.24.txt

[new malware? vsctxhksvc.exe and pshvkoz.exe files]

Thank you. I am working also and will be home later. I will respond then.

thank you for your help.

[new malware? vsctxhksvc.exe and pshvkoz.exe files]

I downloaded a freeware music converter, with pre-warning and knowledge of how to deselect unwanted add-ons, plugins, etc. Downloaded file is supersetup and I still have it. I believe it's this file that somehow infected me with the 2 files (vsctxhksvc.exe & pshvkoz.exe). I cannot get rid of them and find nothing via Google. Even booting in safe and repair (console) mode. I can delete the files but they come back. Cannot find anything in registry. I use Kaspersky for AV (have full Internet Security version) and they are no help. I believe it's malware and not a virus as it's only affecting my resources and on/off browsing & downloading (AV updates, Malwarebytes downloads, etc.), intermittently disconnecting my internet browsing. No other machine on my home network is affected, nor do they contain these files. The longer the computer stays on the browser (primarily Chrome, but Edge & Firefox are affected), grows to over 90% RAM use. Reboot and I'm fine for about 5 mins. This is all my fault and I can usually clean these things with tools. I cannot believe there is no mention of these files via Google. Any help would be appreciated.