crookeddy

Thanks for all your help! Much appreciated.

Ok, here is that log for completeness sake. kprm-20230502150433.txt

Ok followed these instructions. So far so good, no sign of malware.

Ok I updated all of those apps, uninstalled AVG and updated Windows. Any other recommendations?

Ok, here you go. mbst-grab-results.zip SecurityCheck.txt

Ran all 3. Attaching now. Looks like the scans were clean. Anything more I should or can I use the PC safely now? Thanks! Addition.txt AdwCleaner[C01].txt FRST.txt mbam.txt

OK attaching MS scan log. Not much there. So does this mean I am likely now malware free? I haven't had an outgoing RTP Detection for over 24 hours now... Still worried that all these scans somehow missed something though... Where could this malware have come from? msert.log

It finished. Only the WIFI scanner was detected as suspicious. I am currently running the microsoft safety tool. It will probably take at least until morning.

Oh, looks like after my pc restarted after deleting that Javascript trojan Kaspersky kicked off another full scan. Should I let it finish?

Ok, it's finally done. Attaching all the logs it generated. Advanced IP scanner is a tool I use to find a channel to switch to when I get lots of interference. I COULD delete it, but its not a virus. report_2023.04.28_16.31.41.txt report_2023.04.28_13.53.34.txt

Alright, THIS is the one that will take a very long time... So please don't close this thread. :)

Ok, it finished a lot faster than I expected. Attaching log. eset.txt

Ok, this scan will take a VERY long time. I have a lot of files and its going really slow.

MalwareBytes just detected another RTP event that it marked as 'trojan'. The other events (there are hundreds!) were marked as 'malware' but its all going to the same IP address.

Attaching the requested logs. Addition.txt AdwCleaner[C00].txt FRST.txt mbam-report.txt

Hello, last night someone gained access to my computer. They left some e-mails open on my browser (e-mails that I did not have open when I left for the night). Defender detected a Trojan but as I kept scanning it kept finding it. I installed Mbam and it also detected the trojan and deleted it. I did not write down the name of the virus as I was freaking out. Later I noticed recurring outgoing connections through wscript.exe to the same IP address, over and over. Does this suggest I am still infected? Attaching my FRST log. Addition.txt FRST.txt