cvan

I think so. Thank you very much for all the help that you have provided. Really appreciate it.

Attached. Fixlog.txt

Disabled both WD and MB and ran the tool. Attached log files. Addition.txt FRST.txt

Farbar still has the same problem. Ran as admin from desktop. It goes into "New update found" loop and keeps updating itself again and again. I downloaded it the last time you asked me to.

Windows defender just quarantined zoek.exe as Trojan!!

Please find attached. I dont see any visible difference as such. None of the AV programs reported any issues till now. zoek-results.log

Thanks, will do the same. Is there a "b" at the end of ipconfig /flushdns;b

Ran from Desktop as administrator. Same problem.

Another thing is, I am unable to run farbar tool anymore. As mentioned earlier, it goes into an infinite loop of updating itself again and again. I have run it from both desktop and documents folder with "run as administrator".

Malwarebytes scan shows 0 threats. Shall I run any of the other tools above for validation?

I have reinstalled Chrome following the steps mentioned above. Please let me know the next steps.

Please find attached. Number of threats found is 0. I see lot of "failed to send file reputation request" in one of the logs. SophosVirusRemovalTool.log SophosVirusRemovalTool_cloud4.log

I have done all the steps you have mentioned and Malwarebytes is not showing any threat. Other than that I dont have any other way to know whether my computer is still infected or not. I will run the farbar program later today and post the results.

Thank you. I have not run the FRST in fix mode yet. Do you still want me to run that?

Use this URL instead for the analysis https://www.hybrid-analysis.com/sample/5ef3c8a7ef099bdcb12e6022f2644d3683df65a367eb4dc5640b1cf54e90e244/5c7f7d13038838ab7d1f7310

Attached. Some new information. 1. Malwarebytes just blocked the website (centraeq.net) from my laptop as Trojan! Report attached. I just searched for "centraeq.net" in google and apparently that itself caused MB to throw that alert. Or, I managed to infect my computer again somehow 😟 2. I ran an analysis on the URL that I mentioned in my original post at hybrid-analysis.com. Here is the link to the report: https://www.hybrid-analysis.com/sample/290a26f31d2910af2372638beff8a609d75d0654c27c888a5c0fa3fc9225437f/5c7f6834028838ba7582059d There is also a similar url that was analyzed by the same site: https://www.hybrid-analysis.com/sample/7a5c1a353a355cca3370d92dbbb7dce107faee6b53158f3d833c68f81b45547d?environmentId=100 Question is, do I still have the trojan in my system or not? Repair_MSI_Windows_Installer.txt Repair_Windows_Updates.txt Repair_WMI.txt _Windows_Repair_Log.txt HKLM_Restore_Default_Permissions_Error_Log.txt RR.txt trjn.txt

SystemLook: It never generated a log. However, I explicitly searched for centraleq.net in regedit and could not find any. RogueKiller: This is also not generating txt report. Whatever file name I give, it says "File not found. Check the file name and try again...". If I create a blank file and choose that then it says "Unable to export text report". Anyway, I have attached the screenshots of whatever the scan found. RR.docx

I am sorry, I am still unable to run the program in normal mode. I will run the fixlist in safe mode and post the logs. BTW, any update on the link that I posted in the original post please?

Restarted in safe mode and ran the scan. Attached log files. FRST.txt Addition.txt

As I mentioned multiple times I am not able to get out of the loop of the program updating itself again and again. It goes into "new update found. please wait..." and it keeps updating itself before I can hit scan or fix.

I just did, but still the same problem.

I am having a weird problem. FRST has gone into an infinite "new update found. please wait..." loop! It just keeps updating itself (i have downloaded it again). Please help!

Thank you. Please let me know what you find. I will run the fixlist too.

Hi, Really appreciate your help. 1. I had to restore my system to 24 hours back. So I have run the FRST scan again and the fix after that. Attached all 3 files. 2. I am really worried about the link that I clicked mentioned in my original post. Can you please comment on what does it do actually? 3. Also, I attached the Malwarebytes log in my original post after quarantine. Can you please comment whether any critical malware was detected or not? Thanks Fixlog.txt Addition.txt FRST.txt

Attached Addition.txt FRST.txt