F0rceofnature

Its doing good, no real issues on my end left :D

ty! Fixlog.txt cureit.log

cortex seems to be completely removed yeah!

tells me that i can only run this command for prodcuts installed on my pc, seems clear now :)

Cortex should be uninstalled now, should I re-start the steps with FRST?

Im currently in touch with company regarding the removal of cortex XDR - I think it's the easiest way to get rid of it :-) After that, I'll update here!

iirc, cortex xdr has higher permissions than me on my own device :-) I asked responsible IT-Department to get rid of it, since it was only a temporary solution anyway. However, to come to my very first initial question: How can i be absolutely, 100% sure that my PC is not infected with any trojan? MLB doesnt show me any more warnings etc., is that a negative regarding trojans?

Fixlog.txt

requested file attached Fixlog.txt

Thank you very much for your assistance, btw! Addition.txt FRST.txt

Heyhey, sorry, had a lot of things to do! I will do the steps you have mentioned right after work today! ~

Which program should i check, if it still exists? Fixlog.txt

Alrighty, gotcha! thanks :) Search.txt

I think it is best if I postpone this until I can uninstall Cortex from my device! Will this thread be closed by then? I estimate around 1 week until i am able to uninstall it

"C:\Program Files\Palo Alto Networks\Traps" protect disable -> asks for a password but i cant type anything in the field

takeown /f "C:\Program Files\Cortex XDR" /r /d N -> couldnt find file icacls "C:\Program Files\Cortex XDR" /grant TrustedInstaller:(OI)(CI)F /T -> no mapping was done other 2 worked last one didnt work due to cortex xdr conflicting with permissions

What exactly do these commands execute?

when trying to run takeown /f "C:\Program Files\Cortex XDR" /r /d y, it gives me an incorrect syntax error "y" can not be used for /d Fixlog.txt

Thanks! I'll do this after work today, also, the Cortex XDR can not be deactivated manually on my end. Will this conflict with this process?

Hmm, I tried creating a new profile on my windows 10 and switching to that profile causes the same error as last time, rendering me unable to switch profiles and ultimately giving me no other option than use recovery image to restore working windows state(?) ._.

Thanks for the info! I had tried creating a new profile, and i got the same error today. For some reason, i also was unable to switch profiles because the switch profiles button was missing..? Was this also due to this same issue? Uninstall.txt

Well, not a big fan of this program since it has higher rights than me on my own pc. I fear that the profile issue may have been caused by this antivirus, as well? apparently you cant even uninstall it, let alone exit the task

hey there! The Traps™ Advanced anti virus is one I received from my workplace (i work remote, and some other users were hacked in the past so they are trying to minimize any risks) The program is called Cortex XDR (by PaloAlto Networks)

It's pretty late here too, thank you so much, and a good night! (Luckily no errors or difficulties this time) Fixlog.txt

Hope you are able to detect the issue at hand :( thank you so much for your time and assistance!