lludson

Sorry for my delay, I have been unavailable. Thanks you for all this help! kprm-20230314164550.txt

Hi and thanks. I did a MWB scan and nothing, as usual. I don't use One Drive and prevent it from loading at startup. I didn't want to redo any scans until you were finished with your steps, so I don't know if there is anything detectable yet. Nothing ever appeared amiss other than the notification from Windows. Back to the top in my first step with MSERT, 4 of the 5 items were removed, but only a partial on Trojan:Win32/Alureon.BK. I didn't do the manual steps to remove it. Didn't realise at the time I could click on it to know what else to do. Maybe I run that scan again? Other than that all appears fine. I have such a Minimal Windows install. Never run into this before. Thanks so much for your help! H

SecurityCheck.txt

ESET Online Scanner Scan Report.txt

Ah, it's Memory Integrity that's on I guess...

Getting this on the scan screen. Should I have quite malwarebytes?

>> I think it was only from your old F: drive and some games and hacks that Windows Defender didn't like. Ah wow ok. Software from ages ago. Stuff for Mame PC - I saw that pointed to, but it made no sense to me. I've have that stuff on Storage foreeeever. Never any trouble. Ok let me continue here.

Just adding this is a pretty fresh new system. Only things I had installed are what you see in the log list. Now, I will add, that for fast internet I tether to my phone via USB. I have to turn off the phone's debugging to do so, going through EasyTether. I know it's not the best idea, and not secure, but I have little choice. Never had issues before. Not sure if phone would be compromised.....I run pro MalwareBytes on that too. On all my stuff. THANK YOU!

FRST.txt

Addition.txt

AdwCleaner[S00].txt AdwCleaner[S00].txt

Malwarebytes Scan Results Log.txt

Wow, thank you, Advanced Setup. Let me get started on this...thank you!!

Here are the screenshots of the results from the Microsoft Safety Scanner:

Just FYI for support, I am in the midst of running the MSERT program I saw posted elsewhere. I will attach a log.

When I booted up today (Windows 11) I got two windows notifications for malware. Full scans by a fully updated and active Malwarebytes found or alerted me to nothing. I also saw my Windows defender scans keep finding "TrojanDownloader:Win32/Matcash.O". I can't get rid of it with "actions" in the Windows Defender Scan Options panel. Delete or quarantine won't work. The next full scan keeps finding it. And earlier today a different one called "virtool:win32/DefenderTamperingRestore" showed up. I think I might have got rid of that one. I tried Windows recovery to a 2 week old restore point and it didn't work. Wondering if I should just go ahead and recover from a USB boot disk I made when I redid this machine just two weeks ago. Any ideas? Thanks! lludson