Can't get rid of PUP.Optional.PSScriptLoad.EncJob

[Hith0]

Hello, I am in need of help in the removal of a Malwarebytes detection within my registry.

Whenever I scan I consistently find PUP.Optional.PSScriptLoad.EncJob being detected, and no matter how many times I quarantine and remove it, it returns. I have attached a scan report and a Farbar Recovery Scan Tool Report. I hope that you will be able to help me with this issue.

Scan Log 7-7-17.txt

FRST.txt

Addition.txt

[AdvancedSetup]

Hello @Hith0 and

 

Please start an elevated Admin level Command Prompt and type the following exactly and press the Enter key after each line.

SCHTASKS /Query /FO LIST /V >"%USERPROFILE%\Desktop\MyScheduledTasks.txt"

reg export "HKEY_CURRENT_USER\Console" "%USERPROFILE%\Desktop\MyConsoleSettings.txt" /y

Then locate on your desktop the file MyScheduledTasks.txt and MyConsoleSettings.txt  then attach them back on your next reply and I'll take a look and see what's going on.

Thank you

Ron

 

[Hith0]

Hello Ron,

Thank you for providing your assistance. I have attached the MyScheduledTasks.txt and MyConsoleSettings.txt below.

MyConsoleSettings.txt

MyScheduledTasks.txt

 

[AdvancedSetup]

Please save the attached file hkcu_console_fix.zip to your computer. Then locate it and double-click to open it and inside is a registry fix. Double-click on that and allow it to merge into the registry to fix the Console setting.

hkcu_console_fix.zip

 

Then run the following fix for the other portion.

NOTE: This fix also tells your computer to run a Full Disk Check. This can possibly take a couple hours to run depending on the speed of your computer. Please let it complete on reboot.

 

Please download the attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST or FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system.

Run FRST or FRST64 and press the Fix button just once and wait.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach or post it to your next reply.

Note: If the tool warned you about an outdated version please download and run the updated version.

fixlist.txt

Thanks

Ron

 

[Hith0]

I ran the fix and so far Malwarebytes hasn't detected anything anymore. It seems to be fixed. 

Thank you

[AdvancedSetup]

Great, glad things are back to normal. I'll go ahead then and close your topic, but if you need anything else please let us know.

You can go ahead and delete the FRST files now.

Take care

Ron

 

Edited July 7, 2017 by AdvancedSetup

[AdvancedSetup]

Glad we could help. :)If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks!