Jump to content

Riskware Question


Cazlar

Recommended Posts

Greeting everyone,

Dealing with a computer that ran afoul of a key logger and attempted purchases overnight, removes the malware and manually got rid of the key logger extension they added to the computer.  Fortuantly damage does seems to be at a minimum but Malwarebytes keeps blocking a Riskware that it identifies every two minutes, here are the details.

-Log Details-
Protection Event Date: 2/22/19
Protection Event Time: 11:19 AM
Log File: 9590ca3a-36bd-11e9-95af-e0d55ea7210e.json

-Software Information-
Version: 3.7.1.2839
Components Version: 1.0.538
Update Package Version: 1.0.9392
License: Trial

-System Information-
OS: Windows 10 (Build 17763.316)
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, , Blocked, [-1], [-1],0.0.0

-Website Data-
Category: RiskWare
Domain: fundpenny.strangled.net
IP Address: 127.0.0.2
Port: [49942]
Type: Outbound
File: 

Oddly it no longer says what File its assoicated with but earlier it did, regasm.exe, deep in the windows files.  Whatever its attempting to do is being blocked but I can't get any information on the domain or purpose here, could be a twitching fragment left behind but I was hoping some more experienced technictions could take a look.  The domain is safe acording to some checks but I am concerned still.

Cazlar

Link to post
Share on other sites

Hello, Welcome to Malwarebytes.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Download the version of this tool for your operating system.
Farbar Recovery Scan Tool (64 bit)
Farbar Recovery Scan Tool (32 bit)
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

How to attach a file to your reply:
In the Reply section in the bottom of the topic Click the "more reply Options" button.
attachlogs.png

Attach the file.
Select the "Choose a File" navigate to the location of the File.
Click the file you wish to Attach.
Click Attach this file.
Click the Add reply button.
===

Please post the logs  for my review.

Wait for further instructions

 

Link to post
Share on other sites

  • Root Admin

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.

Thanks

 

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.