RicoMur

It is done. Here are the files from those two scans. Thanks again for all your help. SecurityCheck.txt report_2024.04.18_13.14.02.txt

That's great. Thank you very much for your help. I'll attach the files here. Addition.txt FRST.txt FSS.txt

Alright, I ran FRST again and will attach the file here. Fixlog.txt

No, this is the first I'm learning of it. I'll check it out now. Where exactly does it say that it's located? If I find something about it I'll put it in the reply with the fixlog.

I'm not sure if this is what you meant but I'll attach all the files once again here. Also, I removed those files that I mentioned in the intro before even making this post. Should I restore them to the System32 folder from the recycle bin and then run everything again? Addition.txt FRST.txt Malwarebytes Scan Report 2024-04-17 081433.txt

Alright, thank you for the quick reply. I ran Farbar and I will attach the files here. Addition.txt FRST.txt

Hellp Malwarebytes. I noticed an hour ago that cpu and memory have heavy usage and saw that console windows host is active, sometimes 2 of them. I checked the file location and it led me to System32, which online said that it's probably a trojan. It wouldn't let me access any antivirus websites so I had to download the PC version of Malwarebytes from my phone and transfer it from there. In the folder, I also found perfstringbackup as a config file, as well as perfc009.dat, perfc014.dat, perfh009.dat and perfh01r.dat. I ran a Malwarebytes scan and quarantined what was found but the console windows host is very much still active. I'll attach the report from the Malwarebytes scan to this post. Any help would be greatly appreciated so thank you in advance. I also saw a topic with a similar situation. Should I use the same solution that was used there?Malwarebytes Scan Report 2024-04-17 081433.txt