gudio34

Here are the requested scans Addition.txt FRST.txt

The Virus removal tool and that's it

Scan found no issues, here are the results mbar-log-2018-03-23 (17-08-33).txt system-log.txt

But I'll still have IE for one last blast, before it will be disabled too also anytime I try and research virus pages they are automatically being blocked by AMWB. Its amazing its even letting me on this page anymore.

Currently the only working browser is edge, which I'm using now, but once I reboot, this will stop working as well.

I can right click and it says I can open the file location, but I it never opens.

This is the shot I had to take with my phone

Yes, Its corrupted my Firefox, I am no longer able to open it, nor am I able to open Chrome. Both of which I used to DL antivirus SW and they won't load after. Another issue is within that the folder o1ivhpf5.default is showing a bunch of .json files. on top of that, I'm showing 62 users in my Task manager users. Which seems a bit high to me. As for that file, I searched, while I don't see it in the scan tool, its in my task manager, I tried to take a screen shot, but now I can't do that with task manager open. I did take a pick with my phone. Farbar Recovery Scan Tool (x64) Version: 14.03.2018 Ran by Dell-PC (23-03-2018 15:02:28) Running from C:\Users\Dell-PC\Downloads Boot Mode: Normal ================== Search Files: "swi_lspdiag.exe" ============= ====== End of Search ======

Farbar Recovery Scan Tool (x64) Version: 14.03.2018 Ran by Dell-PC (23-03-2018 13:49:13) Running from C:\Users\Dell-PC\Downloads Boot Mode: Normal ================== Search Files: "conhost.exe" ============= C:\Windows\WinSxS\amd64_microsoft-onecore-console-host-launcher_31bf3856ad364e35_10.0.16299.15_none_8e861506ded6a651\conhost.exe [2017-09-29 08:41][2017-09-29 08:41] 000050688 _____ (Microsoft Corporation) 6A255BEBF3DBCD13585538ED47DBAFD7 [File is digitally signed] C:\Windows\System32\conhost.exe [2017-09-29 08:41][2017-09-29 08:41] 000050688 _____ (Microsoft Corporation) 6A255BEBF3DBCD13585538ED47DBAFD7 [File is digitally signed] ====== End of Search ======

My Mistake, completing a file search now

Will do, also found a rogue profile in my Mozilla C:\Users\Dell-PC\AppData\Roaming\Mozilla\Firefox\Profiles\o1ivhpf5.default LastRegBack: 2018-03-17 22:01 ==================== End of FRST.txt ============================ <------search for Conhost.exe Addition.txt FRST.txt

the file location of that file

also searching Conhost virus, and trying to open any of the T/S pages, are being blocked by Malware bytes, (valid sites).

Yeah, it never opens. just a blue circle for a moment. then nothing.

Thank you so much for all of your help! Okay it ran did not find any issues, but it provided 2 logs, I have attached both, but what is happening now, is in the start up of Task manager I may have finally found what the virus is, There is a CONHOST.exe in my "Startup" for my touchpad, I've also included a screen shot of that. SophosVirusRemovalTool.log SophosVirusRemovalTool_cloud4.log