simonspink24 Posted December 12, 2016 ID:1079666 Share Posted December 12, 2016 Hi, I've got the same issue as some other users, NanoCore client has appeared in my system tray and masquerades as Microsoft .NET Services Installation Tool in task manager (but the nanocore icon gives it away). Although the task can be ended, it comes back after a short delay. I've noted that other victims have been advised on your forums to run FRST and upload the FRST and Addition logs, hence I have done this in advance. Many thanks for your help, and I look forward to your reply. Simon FRST.txt Addition.txt Link to post Share on other sites More sharing options...
kevinf80 Posted December 12, 2016 ID:1079678 Share Posted December 12, 2016 Hello simonspink24 and welcome to Malwarebytes, Run the following and post the produced log... Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into. NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work. Open FRST and press the Fix button just once and wait. The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply. Let me know how your system is responding, aso if any remaining issues or concerns.. Thank you, Kevin... Fixlist.txt Link to post Share on other sites More sharing options...
simonspink24 Posted December 12, 2016 Author ID:1079704 Share Posted December 12, 2016 Thanks, Kevin. Looks to have done the trick. Here's the fixlog, attached. Everything seems to be operating normally now. Thank you so much for your help! FIXLOG.TXT Link to post Share on other sites More sharing options...
kevinf80 Posted December 12, 2016 ID:1079705 Share Posted December 12, 2016 Excellent, if no remaining issues or concerns run the following to clean up: Download "Delfix by Xplode" and save it to your desktop. Or use the following if first link is down:"Delfix link mirror" If your security program alerts to Delfix either, accept the alert or turn your security off. Double Click to start the program. If you are using Vista or higher, please right-click and choose run as administrator Make Sure the following item is the only one checked: Remove disinfection tools <----- this will remove tools we have used. Now click on "Run" and wait patiently until the tool has completed. The tool will create a log when it has completed. We don't need you to post this. Any remnant files/logs from tools we have used can be deleted… Next, Read the following links to fully understand PC Security and Best Practices, you may find them useful....Answers to Common Security Questions and best PracticesDo I need a Registry Cleaner? Take care and surf safe Kevin... Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted December 29, 2016 Root Admin ID:1084773 Share Posted December 29, 2016 Glad we could help. :)If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts