DefaultName Posted January 1, 2019 ID:1290076 Share Posted January 1, 2019 Pretty sure I have malware but nothing shows up in any of the programs I've used. Here's the zip file. mbst-grab-results.zip Link to post Share on other sites More sharing options...
LDTate Posted January 2, 2019 ID:1290168 Share Posted January 2, 2019 Hello and Please take your time. I have attached A file I need you to download and save it to the same place that you saved the FRST program Download attached **fixlist.txt** and save it to same location where the FRST tool is located. NOTE: Both FRST.exe and the fixlist.txt must be in the same location or the fix will not work. Close all browsers before running. Double click FRST to run the tool. If the tool warns you the version is outdated, please download and run the updated version. •Click the **Fix Button**. •If you receive a message that a reboot is required, please make sure you allow it to restart normally. •The tool will complete its run after restart. When finished, the tool will make a log (Fixlog.txt) in the same location from where it was run. Please attach the Fixlog.txt in your reply. Restart the pc and let me know how it's running now. fixlist.txt Link to post Share on other sites More sharing options...
DefaultName Posted January 2, 2019 Author ID:1290211 Share Posted January 2, 2019 Actually, the computer seems worse now. My airgapping USB is auto reopening whenever I close it and my PC led lights no longer function. Fixlog.txt Link to post Share on other sites More sharing options...
LDTate Posted January 2, 2019 ID:1290213 Share Posted January 2, 2019 I think that's from MysticLight This was showing in your log: Error: (12/30/2018 06:30:53 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: MysticLight.exe, version: 2.0.0.9, time stamp: 0x5971948f Faulting module name: KERNELBASE.dll, version: 10.0.17134.165, time stamp: 0xfa43f4b2 Exception code: 0xe0434352 Fault offset: 0x0010ddc2 Faulting process id: 0x4bc Faulting application start time: 0x01d4a0a7dac8e887 Faulting application path: C:\Program Files (x86)\MSI\MysticLight\MysticLight.exe See if you can re-install it https://msi-mystic-light.software.informer.com/ Link to post Share on other sites More sharing options...
DefaultName Posted January 2, 2019 Author ID:1290255 Share Posted January 2, 2019 Sure enough, the lights work now that I've reinstalled it. I ended up getting it from the manufacturer's site since that link didn't work. But my computer still has massive outgoing data spikes and CPU near 100% when idle. Link to post Share on other sites More sharing options...
LDTate Posted January 2, 2019 ID:1290259 Share Posted January 2, 2019 As far as I can tell Malware isn't causing those issues that are left. You could try our General Windows Help https://forums.malwarebytes.com/forum/6-general-windows-pc-help/ Link to post Share on other sites More sharing options...
DefaultName Posted January 2, 2019 Author ID:1290260 Share Posted January 2, 2019 After I disconnected it from the network for a few weeks, the problems stopped occurring. Now that I've reconnected it, I can hear the fans working overtime again even though it's idle and my mouse jumps, stuttering across the screen when I move it. There's definitely malware. Link to post Share on other sites More sharing options...
LDTate Posted January 2, 2019 ID:1290262 Share Posted January 2, 2019 If it's an infection, it's in your router, There's no malware showing on the logs. Let’s try to reset the router to its default configuration. This can be done by inserting something tiny like a paper clip end or pencil tip into a small hole labeled "reset" located on the back of the router. Press and hold down the small button inside until the lights on the front of the router blink off and then on again (usually about 10 seconds). You also need to reconfigure any security settings you had in place prior to the reset. You may also need to consult with your Internet service provider to find out which DNS servers your network should be using. Note: After resetting your router, it is important to set a non-default password, and if possible, username, on the router. This will assist in eliminating the possibility of the router being hijacked again. Next: You might need elevated privileges Open the Start Menu, (Windows Globe) click on All Programs > Accessories >, right click on Command Prompt, and click on Run as administrator. In the command prompt window that opens, copy / paste or type the following commands: Note the spaces between G / it needs to be there. Click the Microsoft Start logo in the bottom left corner of the screen Type CMD and click Ok. The MSDOS Window will be displayed. At the command prompt, copy / paste or type the following and press Enter after each line: IPCONFIG /release IPCONFIG /flushdns IPCONFIG /renew IPCONFIG /registerdns netsh winsock reset netsh int ip reset regsvr32 netshell.dll regsvr32 netcfgx.dll regsvr32 netman.dll Type in Exit Restart the computer. Let me know if it's working Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted January 8, 2019 Root Admin ID:1291304 Share Posted January 8, 2019 Due to the lack of feedback, this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread. Thanks Link to post Share on other sites More sharing options...
Recommended Posts