Jump to content

navigations

Members
 View Profile  See their activity

  • Posts

    17

  • Joined

  • Last visited

 Content Type 

Posts posted by navigations

    CPU usage spiking while idle

    in Resolved Malware Removal Logs

    Posted

    Ive been on my pc, and whenever checking task manager, the CPU is around anywhere to 50-90 percent when opening, then quickly shoots back down. Along with this, I have noticed that my malwarebytes just completely skips over the registry check on the virus scans. I have attached both the files on this topic to help explain what I mean. Is this something that I should be looking into?

    Weird Virus message in Windows Defender

    in Resolved Malware Removal Logs

    Posted

    13 minutes ago, ColdlyIndifferent said:

    platforms

    Welp, thanks for the help Coldly, I'm sure it was just a mistake. As I stated earlier about the FarBar though is that it's blocked by the Blue Screen warning, and to be honest I would rather just find their website and get it directly from there, if possible. As to the uninstall thing, I just went into the uninstall App's and Features (built directly into windows) to uninstall it, I did that a few hours ago.

    Possible RAT

    in Resolved Malware Removal Logs

    Posted

    Thanks for the amazing help. I've just been so paranoid because this isn't the first time stuff like this has happened. Last questions before I go, was their a windows update today? Because all my shut down/sleep/restart setting looks very different.

    Screenshot (11).png

    Possible RAT

    in Resolved Malware Removal Logs

    Posted

    So i was checking my Task manager today and saw some weird foreign items. I decided to check my netstat and this popped up. Anything look suspicious to anyone?

     Proto  Local Address          Foreign Address        State
      TCP    127.0.0.1:49668        127.0.0.1:51484        ESTABLISHED
     [UserEdgeService.exe]
      TCP    127.0.0.1:51484        127.0.0.1:49668        ESTABLISHED
     [Haste.exe]
      TCP    127.0.0.1:59135        127.0.0.1:65001        ESTABLISHED
     [nvcontainer.exe]
      TCP    127.0.0.1:65001        127.0.0.1:59135        ESTABLISHED
     [nvcontainer.exe]
      TCP    192.168.1.33:51124     192.168.1.1:53         TIME_WAIT
      TCP    192.168.1.33:51125     40.101.121.34:443      ESTABLISHED
     [SearchUI.exe]
      TCP    192.168.1.33:51126     72.21.91.29:80         ESTABLISHED
     [SearchUI.exe]
      TCP    192.168.1.33:51452     34.232.149.233:5222    ESTABLISHED
     [System]
      TCP    192.168.1.33:51506     104.154.126.226:4070   ESTABLISHED
     [Spotify.exe]
      TCP    192.168.1.33:51529     35.186.224.47:443      ESTABLISHED
     [Spotify.exe]
      TCP    192.168.1.33:52063     52.242.211.89:443      ESTABLISHED
      WpnService
     [svchost.exe]
      TCP    192.168.1.33:52064     52.20.139.23:443       ESTABLISHED
     [System]
      TCP    192.168.1.33:52098     35.186.224.53:443      ESTABLISHED
     [Spotify.exe]
      TCP    192.168.1.33:52148     216.58.192.174:443     TIME_WAIT
      TCP    192.168.1.33:52157     192.168.1.188:8008     TIME_WAIT
      TCP    192.168.1.33:52197     192.168.1.188:8008     TIME_WAIT
      TCP    192.168.1.33:52200     52.230.222.68:443      ESTABLISHED
      WpnService
     [svchost.exe]
      TCP    192.168.1.33:52207     172.217.6.10:443       TIME_WAIT
      TCP    192.168.1.33:52209     52.84.64.84:443        TIME_WAIT
      TCP    192.168.1.33:52212     99.84.168.116:443      TIME_WAIT
      TCP    192.168.1.33:52218     216.58.192.174:443     TIME_WAIT
      TCP    192.168.1.33:52220     172.217.9.78:443       TIME_WAIT
      TCP    192.168.1.33:52227     13.249.134.79:443      TIME_WAIT
      TCP    192.168.1.33:52230     13.249.134.50:443      TIME_WAIT
      TCP    192.168.1.33:52231     34.95.92.78:443        TIME_WAIT
      TCP    192.168.1.33:52232     13.249.134.32:443      TIME_WAIT
      TCP    192.168.1.33:52233     13.249.134.32:443      TIME_WAIT
      TCP    192.168.1.33:52234     52.84.64.84:443        TIME_WAIT
      TCP    192.168.1.33:52256     54.87.31.36:443        TIME_WAIT
      TCP    192.168.1.33:52269     52.169.83.3:443        TIME_WAIT
      TCP    192.168.1.33:52301     40.69.216.129:443      TIME_WAIT
      TCP    192.168.1.33:52305     40.69.216.73:443       TIME_WAIT
      TCP    192.168.1.33:52308     40.69.222.109:443      TIME_WAIT
      TCP    192.168.1.33:52309     40.69.216.129:443      TIME_WAIT
      TCP    192.168.1.33:52310     40.69.223.198:443      TIME_WAIT
      TCP    192.168.1.33:52311     40.69.223.39:443       TIME_WAIT
      TCP    192.168.1.33:52314     52.169.82.131:443      TIME_WAIT
      TCP    192.168.1.33:52317     52.114.128.10:443      TIME_WAIT
      TCP    192.168.1.33:52321     157.240.2.35:443       TIME_WAIT
      TCP    192.168.1.33:52322     13.107.21.200:443      TIME_WAIT
      TCP    192.168.1.33:52323     13.90.95.14:443        TIME_WAIT
      TCP    192.168.1.33:52328     34.199.89.61:443       ESTABLISHED
     [System]
      TCP    192.168.1.33:52329     54.175.27.242:443      ESTABLISHED
     [System]
      TCP    192.168.1.33:52331     34.205.109.204:443     TIME_WAIT
      TCP    192.168.1.33:52332     52.31.122.12:443       CLOSE_WAIT
     [System]
      TCP    192.168.1.33:52333     52.0.195.152:443       CLOSE_WAIT
     [System]
      TCP    192.168.1.33:52334     52.21.102.187:443      ESTABLISHED
     [System]
      TCP    192.168.1.33:52335     204.79.197.200:443     ESTABLISHED
     [SearchUI.exe]
      TCP    192.168.1.33:52336     65.55.163.78:443       ESTABLISHED
      wlidsvc
     [svchost.exe]
      TCP    192.168.1.33:52337     65.55.163.78:443       ESTABLISHED
      wlidsvc
     [svchost.exe]
      TCP    192.168.1.33:52338     13.107.255.52:443      ESTABLISHED
     [SearchUI.exe]
      TCP    192.168.1.33:52339     13.107.255.51:443      ESTABLISHED
     [SearchUI.exe]
      TCP    192.168.1.33:52340     184.84.229.6:443       ESTABLISHED
     [SearchUI.exe]
      TCP    192.168.1.33:52341     204.79.197.222:443     ESTABLISHED
     [SearchUI.exe]
      TCP    192.168.1.33:52343     13.107.42.254:443      ESTABLISHED
     [SearchUI.exe]
      TCP    192.168.1.33:52344     72.21.81.200:443       ESTABLISHED
     [SearchUI.exe]

    Accidentally canceled a Windows Update.

    in General Windows PC Help

    Posted

    So I was updating windows, and didn't notice it was updating. I then had to get back on and reinstall the update. While nothing seemed to change, my computer made a Windows.Old folder for some reason and I can't delete it. Also, my Tamper Protection was off after the update. I have scanned my computer and no threats were found but I am still concerned about why both of these things happened.

    Screenshot (8).png

    Trojan.Yelloader

    in Resolved Malware Removal Logs

    Posted

    Im not sure what i downloaded, but I downloaded something and the Malwarebytes comes up with it to be a Trojan.Yelloader. When i saw it, I just quarantined it and restarted my pc. After every scan and if I had found a threat, I always make sure to run another scan to make sure it was gone. This time, the Trojan.Yelloader was still there. It has turned off my Windows Defender and also wont allow me to reset my PC (which I tried at first to just get rid of it easier). Any suggestions?

    https://gyazo.com/e4514ad4e4d7593acf30299142425ace(shows the Yelloader) Please help me, I fear this is destroying my PC as it seems like a very sophisticated virus.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.