NicoNico

Here is the SecurityCheck & FRST files. My computer always ran well, I take good care of it usually. No Malwarebytes issues anymore either. FRST.txt Addition.txt SecurityCheck.txt

Hello MKDB, it's remarkable that you help people in your free time for nothing in return. I have huge respect for that. You make the world a better place in your own way. report_2024.01.31_10.40.00.klr.txt report_2024.01.31_13.02.36.klr.txt

@MKDB what can I do for you in return? Mark your answer as solution?

Hello MKDB, I was about to reply to you. I went through the KVRT routine exactly as you described yesterday. It was a lengthy process. I got the "cure" option and 1 detection and continued, after which a reboot followed and it continued scanning for quite a while longer with 0 detections. Alongside, I also uninstalled GPxPatch as you instructed. I have not got an outbound request anymore since Tuesday. So it appears to me as you've helped me to solve the issue? :) If so, I'd like to express my grattitude - although I do not understand how it works that you spend time here helping people? But I am grateful you did.

I the exe and the rar in question are deleted, I searched for the registry key, its not there anymore so I assume it vanished together with the deletion. I wonder though why I then still had outbound connections today (1 to be precise, the one I linked above)

Here is the ESET logfile esettxt.txt I remember I deleted the exe and the rar last night because it was my suspicion too, but many people use the program without troubles for many years so at first I didn't think about it being an issue. For the Registry Key deletion, could you tell me what to search for?

Hello MKDB, I do not condone or use any pirated software. The patch that you refer to is a freeware add-on/tool for a video game. Which is a bit embarassing, because this is my work machine too that I use for video editing and graphic design. But I can assure you there is no pirated software on my machine. If you say this is the source of the problem, I will remove it of course though! Should I do that?

Do you have any next steps for me MKDB? Today I got this:

Thank you kindly MKDB, I read your instructions thoroughly and also gathered the MBST logs.mbst-grab-results.zip

I keep getting these messages two or three times a day. I ran a full scan, with rootkit scan... I ran the microsoft safety scanner... and adw cleaner... it keeps coming up. Could you help me? I use the paid version of Malwarebytes.