Search the Community
Showing results for tags 'wmcagent.exe'.
Found 2 results
Hi so i got a pretty crappy virus, normally i am pretty good with manual removal myself however this one is realllllly a pain and malwarebytes hasnt worked for it nor detected it...i am attaching my frst scan to this post in hopes of some solution i saw you helped another guy remove the same thing people need to watch out this thing is coming bundled with software that seems legit make sure you take my advice and download only from official links if you can otherwise you will be in the same boat possibly or worse. FRST.txt Addition.txt
After trying to install a program from a third party website my PC got a virus. At first I recognized something was wrong because a bunch of random desktop apps appeared and my browser (chrome) redirected to yahoo when I tried to search up "Bitdefender". I also began to see "wmcagent.exe", and processes consisting of random letters in task manager. I uninstalled any suspicious programs and deleted chrome and ran scans from HitmanPro, Kaspersky, and Malwarebytes. At first i tried to delete the "wmcagent" folder in AppData/Local (and suspicious files 'mbdrklu" and "scrxmpt") but it gave the message "access is denied." I tried to change the permissions of the folder, 'access is denied." I tried to force kill the "wmcagent.exe" process using Command Prompt but it again said "access is denied." There are multiple other folders that I cannot delete that look suspicious in AppData/Local. As mentioned before, I then used various anti-malware programs but none were able to remove the malware folders/files upon reboot. I've tried using multiple of those programs but none can remove the "wmcagent.exe" processes. which still appear. I've been able to delete some malware files when I run anti-malware, maybe they stopped their process just to trick the program. Also, once when I was able to get into the malware folder and changed the malware.exe file to "thisismalware.exe", the description of the malware process in task manager changed to "thisismalware". Any help would be greatly appreciated!