asuKW

I did not, I've been having issues with windows defender and it will not start the anti virus protection. I just installed Kaspersky and am running a scan with it

Attached the 3 log files Addition.txt FRST.txt FSS.txt

I recognize that program, its on an external HDD which has a bad cable which is probably why that popped up. Thank you for the patience here. I've been having issues with window defender and been trying to diagnosis the issue. Windows defender virus and threat protection always stops a few minutes after I start up the PC, I've tried the above fixes with Malwarebytes and added windows defender to the exclusions list but it just doesn't seem to want to turn on. I hit restart and the service just says unexpected error. I've uninstalled the Norton AV program and it still shuts itself off. Logs from Microsoft Safety Scanner look clean, I imagine I might just have some deeper underlying issue with Windows Defender. msert.log

Gotcha, ran the scan again, here are the logs! FRST.txt Addition.txt

I have deleted the 3 registries. The malwarebytes AV did a scan today and it flagged 3 malicious files again relating to powershell. Attached the report below. 2.4.24 AV report.txt

Thank you for bearing with me through this process! Attached is the fixlog. Fixlog.txt

I'll run this fix log tomorrow, I just finished updating all the programs and running another full scan. Nothing was detected or reported in the scans from Norton or Malwarebytes. Thank you again for your help!

Sorry I have been busy but I am still slowly working through the updates! I will come back to this in another day or two at most!

Here is the scan from securitycheck. Is there a possibility the powershell trojan may have gone dormant? Is that still possible to detect? SecurityCheck.txt

I am not, I stopped getting the powershell outbound notifications after I ran a scan/fix with malwarebytes and restarted my pc. In the logs after it shows that it detected Trojans under registry keys and quaratined them. Im not sure if thats the extent of the virus.

Attached is the msert.log from the microsoft safety scan. msert.log

Temporarily disabled Norton and ran the Dr.Web AV program. Attached is the log. cureit.log

Thank you for your quick response! Attached are the files for AdwCleaner, Malwarebytes and Farbar Recovery Scan Tool. I did want to note that the $sxr-powershell pop-up from malwarebytes has stopped after I restarted by PC. AdwCleaner[C00].txt Malwarebytes Scan Report.txt FRST.txt Addition.txt

Hi all, first of all thank you for your assistance here. Norton AV recently flagged a $sxr-powershell.exe program. When I open up the windows location folder, it just brings me to the (C:) windows folder but nothing shows up even when view hidden folders is on. I ended up downloading malwarebytes to double check and then malwarebytes started constantly flagging the same threat ($sxr-powershell.exe) that I've attached under Malwarebytes Threats.txt file. It looks like it was flagged as a trojan so I went ahead and ran a scan, the scan caught some items under registry keys but the notification for the trojan $sxr-powershell.exe threat is still constantly popping up under malwarebytes. Was wondering if anyone could recommend next steps to getting rid of this virus? Malwarebytes Scan Results.txt Malwarebytes Threat.txt Norton Scan Report.txt