Jump to content


  • Content Count

  • Joined

  • Last visited

About Carlosc23

  • Rank
    New Member

Recent Profile Visitors

The recent visitors block is disabled and is not being shown to other users.

  1. Hello again Maurice. Here is the log file from MSERT. For some reason, I could not find a button to save the log in ESET's program, but it did tell me about three infected items which it deleted, all related to an "Output Portal.msi". I know for a fact it was a false positive but I allowed it to remove the files since I don't really think I'll ever install it. msert.log
  2. Sorry again for double posting, but I forgot to answer your question. I did install Emsisoft's Antimalware tool but removed it the same day. How is it that it's still installed? Was it not removed properly?
  3. Maurice, I cannot thank you enough for your help. It seems that the infection has been removed. The files are no longer there, and I can now open the Settings app, regedit and System restore (which are the main three issues I noticed in the first place). I was able to open Malwarebytes, run a scan, and it found nothing. Also, my Windows logon profile picture had disappeared but it is back now. Is it OK for me to delete all the files that were created/downloaded during this cleaning process? Thank you again. If there is anything else to be addressed, do let me know. Fixlog.txt
  4. I was unable to finish the suspicious processes. One of them in fact shut my PC off and I had to turn it on again, only to find out that the processes have changed. One of them is now kcphwgvlh.exe. I found out that both files are stored in a hidden folder inside my AppData > Roaming. I have not touched them so as to not get in more trouble. As you warned, I could not open FRST84.exe until I renamed it to GAZORK.exe. I cannot see the screen that you attached, so I hope the default settings are OK. FRST.txt Addition.txt
  5. I'm sorry for double posting (I know I shouldn't). But I just opened task manager and found three suspicious processes running. They're called jyuvru32.exe (two instances) and myaemimr32.exe. And on the "Start" tab there is a "Microsoft Windows Based Script Host" which I had NEVER seen before there. Is that the infection???
  6. I was able to uninstall and reinstall Malwarebytes using the support tool. I am now running However, I cannot open the application, not even as administrator.
  7. Dear Maurice, thank you so much for your reply. My name is Carlos. I have attached the files that you requested. The mbar application ran smoothly and did not detect any infections. But I am certain that this PC is infected... It wasn't behaving like this a few days ago mbar-log-2020-02-16 (18-01-40).txt info.txt log.txt
  8. Hello to all. I am certain that I have become infected by some malware. I thought it was a windows issue at first because I cannot open Windows Settings app (running Windows 10 Home). I am also unable to open regedit and system restore, as they close automatically after less than a second. So I downloaded Malwarebytes to run a scan only to find out that it wouldn't open either. Installed Chameleon and successfully ran a scan, but it couldn't find anything. I have tried Zemana Antimalware and SuperAntiSpyware to see if anything turns up, but I haven't had any luck. This must be caused by some malware right? Could somebody please help me? I'm desperate. Thank you
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.