Attira

Hello Kevin, I think the issue has been resolved. No new .exe files are being generated, the two Bitcoin miners were also removed and I can't find anything sketchy in the task manager. There hasn't been any issues since I ran the Adwcleaner that you linked. Thanks!

Hi again, I've done all the things you told me to. msert.log Also the fixlog.txt is attached. Fixlog.txt

Hi Kevin, thank you for trying to help me out. Here are the logs: Adwcleaner FRST.txt MalwareBytes log and Addition.txt are attached. Thank you! Addition.txt malwarebytes-scan.txt

Hello everyone, two days ago I've noticed weird programs running (4 letter names with random icons, such as the Whatsapp icon, File explorer icon etc.). I ran MalwareBytes, quarantined flagged files and though it was over. I then visited the %temp% folder and found like 4 .exe files (all were 4 letter names with random letters and numbers). I then wiped my %temp% folder and though it was finally over. Just before going to bed, a cmd pop up appeared on the screen trying to execute a command, it was something like "-k START %path to temp virus file". I clicked no, but it kept reappearing on my screen asking to repeat the action. Recently I had downloaded and ran three files (Internet Download Manager, a pirated version of Adobe Premiere 2021 Pro and DragonBones Pro). I'm really suspicious of the IDM, because the app and the website look outdated, I uninstalled it after 10 minutes of use. What I had done: ran MalwareBytes multiple times, cleared my %temp% folder multiple times, deleted IDM from my PC Shortly: New .exe files keep generating and trying to run thru the cmd.