Jump to content

Variscite

Members
  • Content Count

    3
  • Joined

  • Last visited

About Variscite

  • Rank
    New Member
  1. Hello Kevin and thanks for replying, I went to www.virustotal.com and selected c:\ProgramData\kMGISrp.exe and it displayed this on the details tab (attached). The computer automatically rebooted and when it came back up C:\ProgramData\kMGISrp.exe and C:\ProgramData\nT16F2AOBNbX.exe were gone. I'm running another Malwarebytes scan now to see if they come back.
  2. I have three computers (so far) with this same problem. The browsers won't open. One of the computers, gets a message from Anti-Exploit when he clicks on FireFox that Malwarebytes Anti-Exploit has blocked an exploit attempt. Application: Mozilla Firefox. Protection Layer: Malicious Memory Protection. Protection Technique: Exploit code executing from Heap Memory blocked. When he clicks on Internet Explorer, he gets the same message with the application being Internet Explorer. When I log onto the same computer as another user (an administrator) I can open both browsers without a problem. This didn't work: Opened Anti-Exploit and went to Settings > Advanced Settings and on each tab, I clicked Default Settings. This didn't work: Ran a full scan in Malwarebytes Anti-Malware and removed the Trojan.Emotet malware and rebooted the computer. Windows is fully patched. As a test, I stopped Anti-Exploit on one computer and the browsers worked again for the regular user. I have attached FRST scan results. I searched the results for the text in the Malwarebytes blog under "Identifying the infected machines" and none of the text was found. Please help. Thanks. Addition.txt FRST.txt
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.