Jump to content

RedCat

Members
  • Content Count

    8
  • Joined

  • Last visited

About RedCat

  • Rank
    New Member
  1. Thank you! I did everthing you said, and haven't got any messages pop up anymore. Also all new scans can't find anything anymore. So I guess we're done right?
  2. Hi, I haven't seen the powershell.exe popup in a couple of days, and haven't seen the wscript.exe pop up anymore that I was getting everytime I restarted my pc. I have attached the new scan logs here MWB Scan.txt AdwCleaner[S01].txt FRST.txt Addition.txt
  3. Hi, I ran the Kaspersky virus removal tool and found this: After the scan my pc had to restart and it performed another bigger scan and found this: I clicked on neutralize all, but a couple of the files are still in quarantine now even though I wanted to delete them. Hope you can help with this
  4. Hi when I'm trying to run combofix it gives me this message: "Current date is 2019-03-15. Combofix has expired. Click yes to run in REDUCED FUNCTIONALITY mode. Click no to exit." When you click yes it only deletes itself
  5. I have done everything you listed and attached everything below mwb threat scan.txt AdwCleaner[C00].txt FRST.txt Addition.txt
  6. Hi Ron thank you for the reply I ran the fix in FRST and restarted my pc, but unfortunately malwarebytes still has to block the same trojan horse connection. Fixlog.txt trojan connection.txt
  7. Hello, so I have a couple of problems I found out about today. I reïnstalled Malwarebytes today after a half a year. I ran a scan and found out there was a keylogger on my system for about 30 days and let Malwarebytes immediately remove it. I have attached the log from that scan below. It is removed from my pc and it doesn't come up in the scans anymore. Is it gone now? Keylogger scan.txt I'm a little bit worried if there is maybe more wrong on my system. I resumed my work and after 2 hours I restarted my pc. When I did that malwarebytes notified me it had blocked three outbound connections. I can't remember exactly what I did after that, I just know I did some cleaning and restarted my pc again. Now instead of 3 outbound connections blocked, only one was left. And that's the only connection it blocks after restarting my pc, the other two are gone. The connection that still gets blocked is a Connection 1: Trojan Horse in the file C:\Windows\SysWOW64\wscript.exe Connection 1.txt The the connections that were blocked before and are not right now are: Connection 2: Trojan Horse in C:\Program Files (x84)\Google Chrome\Application\chrome.exe Connection 2.txt Connection 3: Malware in C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe Connection 3.txt I have attached all the scan report files too. Should I be worried? I hope someone can help me that would be great. I have also attached the FRST scan files from the scan I just did. FRST.txt Addition.txt
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.