Malicious website at startup /w script host

[echuu]

hello, I have a very similar problem to this one : https://forums.malwarebytes.org/index.php?/topic/156746-malicious-website-script-host-error-on-startup/

 

every time I start the computer a mbam error pops up that a malicious website has been blocked
 

IP:46.161.41.113

Port: 49170

Type: Outbound

Process: C:\Windows\System32\wscript.exe

 

and

 

IP:46.161.41.113

Port: 49173

Type: Outbound

Process: C:\Windows\System32\wscript.exe

 

I've attached the mbam daily log, mbam scan log, FRST scan log, and the FRST addition file

 

any help is well appreciated, cheers

 

scan log.txt

daily log - Kopia.txt

Addition.txt

FRST.txt

[echuu]

since I can't edit the first post, I've removed uTorrent (needed it to download the StarTrek Online client) to comply with the rules and updated all the logs so if anyone can please remove them from the first post I would be grateful

 

mbam log.txt

daily log.txt

FRST.txt

Addition.txt

 

cheers

[kevinf80]

Hello and

 

P2P/Piracy Warning:

 

If you're using Peer 2 Peer software such as uTorrent, BitTorrent or similar you must either fully uninstall them or completely disable them from running while being assisted here.Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.If you have illegal/cracked software, cracks, keygens etc. on the system, please remove or uninstall them now and read the policy on Piracy.

 

Unfortunately there is evidence of illegal software running on your system:

 

C:\Windows\AutoKMS\AutoKMS.exe

 

No help can be offered when such software is blatantly in use....

 

Thank you for your understanding,

 

Kevin....

[AdvancedSetup]

This topic will now be closed due to evidence of cracked or pirated software on this system.

Piracy Policy