Jump to content

Help ! I think im infected


Recommended Posts

I think i got infected on Friday 14th. A windows dialogue box appeared to install a genuine looking file, I clicked on OK to install it before Malwarebytes intercepted it. Ever since then it keeps displaying:

 

"Malicious website blocked

 

Domain:

 

IP: 194.165.0.3

Port: 6881

Type: inbound

Process: C:\windows\explorer.exe "

 

and

 

"Malicious website blocked

 

Domain:

 

IP: 79.35.131.29

Port: 6881

Type: outbound

Process: C:\windows\explorer.exe "

 

I tried the usual scans with Avast Internet Security, Malwarebytes Premium, Windows Defender  and System Restore but no luck and nothing found.

 

System is now running slow with something take up a lot of RAM

 

I cant reformat as I have nowhere to backup data.

 

(There is no bit-torrent on the system, it has been uninstalled)

 

 

(The logs are attached)

 

 

FRST.txt

Addition.txt

Link to post
Share on other sites

  • Staff

Hello jaffacake2000, welcome to Malwarebytes' Malware Removal forum!
 
My username is LiquidTension, but you can call me Adam. I will be assisting you with your malware-related problems.
If you would allow me to call you by your first name I would prefer that. :)
 
General P2P/Piracy Notice: 
 

If you are using Peer to Peer (P2P) filesharing software such as uTorrent, BitTorrent or similar you must either fully uninstall or completely disable the programme(s) from running whilst receiving assistance at this forum. 
Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.
If you have illegal/cracked/keygen or similar software on the computer, please remove/uninstall the software now and read the policy on Piracy. Failure to do so will also result in your topic being closed.

 
======================================================

 

After considering the above notice - 

Rerun FRST. Place a checkmark next to Addition.txt and click Scan. Include both logs (FRST.txt & Addition.txt) in your next reply.

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.