Jump to content
Xvenz

Proxycheck (32 bit) ins my Task Manager

Recommended Posts

This showed up and is using all my RAM, pls help me fix it, it doesent show up or delete on a malwarebytes scan

please help me

Addition.txt FRST.txt

Share this post


Link to post
Share on other sites

Hello @Xvenz and :welcome:

 

Please download the attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST or FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system.

Run FRST or FRST64 and press the Fix button just once and wait.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach or post it to your next reply.

Note: If the tool warned you about an outdated version please download and run the updated version.

fixlist.txt

Thanks

Ron

 

Share this post


Link to post
Share on other sites

Don't worry, we'll get you fixed up soon. Due to one of the infection found on your system, it looks like it had a rootkit at one point in time. Let me have you run the following scanner.

 

Please download the following scanner from Kaspersky and save it to your computer: TDSSkiller

Then watch the following video on how to use the tool and make sure to temporarily disable your security applications before running TDSSkiller.

PC Winvids - How to run Kaspersky TDSSKiller

If any infection is found please make sure to choose SKIP and post back the log in case of a False Positive detection.

Once the tool has completed scanning make sure to re-enable your other security applications.

Thank you

Ron

 

 

Share this post


Link to post
Share on other sites

Is the proxycheck still in your list? If so please take a screenshot and show me. The main issue of the rootkit has been removed from our clean up already. TDSSKiller was unable to find any more parts of it.

 

Thanks

 

Share this post


Link to post
Share on other sites

Please download Autoruns from Microsoft: https://download.sysinternals.com/files/Autoruns.zip

Extract/Copy all files from archive to a new folder.

Locate "Autoruns64.exe" in the new folder. Right-click and select "Run as administrator"

Once it starts, please press the Esc key on your keyboard.

Click on Options. Uncheck "Hide empty locations", Uncheck "Hide Windows Entries"

Then click on Options, Scan Options and ensure "Verify code signatures" is checked

Once that's done press the F5 key on your keyboard, this will start the scan again, Or click File, Refresh, this time let it finish.

It will say "Ready" on the bottom left in the status bar once completed.

When it's finished, please click on the File button at the top of the program and select Save and save the Autoruns.arn file to your desktop and close Autoruns.

Right click on the Autoruns.arn file on your desktop and hover your mouse over Send To and select Compressed (zipped) Folder

Attach the Autoruns.zip folder you just created to your next reply

 

Thanks

Ron

 

Share this post


Link to post
Share on other sites

Okay, I found it there, but let's have FRST give us that list too so that we can compare and act on those items.

Please run FRST again and this time uncheck the items listed as shown in the image below. Match the check marks in the lower section too. Then click the SCAN button.

It will take much longer to run and create a much larger file this time. Please upload that log on your next reply as an attachment.

FRST_NO_Whitelist.jpg

 

 

I'll check back on you sometime tomorrow.

Thank you

Ron

 

Share this post


Link to post
Share on other sites

Please download the attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST or FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system.

Run FRST or FRST64 and press the Fix button just once and wait.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach or post it to your next reply.

Note: If the tool warned you about an outdated version please download and run the updated version.

fixlist.txt

Ron

 

Share this post


Link to post
Share on other sites

I don't think they will come back but if they do, let us know.

 

Help Secure your browsers

Please install uBlock Origin for your browsers to better protect your system

FireFox, ChromeOpera , SafariMicrosoft Edge
AdBlock for Internet Explorer

Follow-up Reading

Everything you need to know about cybercrime
10 easy ways to prevent malware infection 
Keep your data backed up

 

Thank you for choosing Malwarebytes
 

Ron

 

Share this post


Link to post
Share on other sites

thanks admin.... your advice very help my problem....

and what the different of ublock and adblock??

Share this post


Link to post
Share on other sites

uBlock doesn't Internet Explorer so there is Ad Block. However, if at all possible you should not be using Internet Explorer. I would highly recommend using Firefox or Chrome

 

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.