Jump to content
chezouns

KMS connection broker Infection

Recommended Posts

Hi,

I detected an unwanted activity on my computer. it's cold KMS connection Broker.exe.

I'm on windows 10.

as mention in the topic: "I'm infected - What do I do now?" after scanning with Malwarebyte which found nothing I ran farbar recovery tools

here is the results:

Addition.txt

FRST.txt

hope someone will have tie to help me.

best regards

Addition.txt

FRST.txt

Share this post


Link to post
Share on other sites

Hello, Welcome to Malwarebytes.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Please download the attached Fixlist.txt file to  the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The tool will create a log (Fixlog.txt) please post it to your reply.
===

Let me know if the problem persists.

fixlist.txt

Share this post


Link to post
Share on other sites

hi, thanks for your fast reply.

I followed the protocol but I still saw :KMS connection broker.exe running at start.I've attached the fixlog.txt

 

 

Fixlog.txt

Share this post


Link to post
Share on other sites

Hi,

The only file that exists is this one 

C:\WINDOWS\system32\browser_broker.exe

Read this article.
https://www.malwarefox.com/browser_broker-exe/

Under this section How to Fix Browser_broker.exe Problems 
Do the Disk Cleanup and if needed the System File Checker

Let me know if the problem persists.

Share this post


Link to post
Share on other sites

Hi,

I thinks the problem is solved, I don't see it appearing anymore.

thanks for your help

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.