Ramen Posted April 30, 2019 ID:1310312 Share Posted April 30, 2019 I downloaded a movie but it turns out it was an LNK file and I absentmindedly clicked on it before realizing it. It opened powershell and I don't know what happened after that. I've run Rkill, malware bytes as well as avast to try and scan to see what may have happened (just throwing ideas on the wall) but nothing turned up. Also, I'm very nervous about my privacy and financial information. How badly did I mess up? Any help and re-assurance would be much appreciated. FRST.txt Addition.txt Malwarebytes Scan Report.txt Link to post Share on other sites More sharing options...
nasdaq Posted April 30, 2019 ID:1310378 Share Posted April 30, 2019 Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === ATTENTION: System Restore is disabled Turn System Restore ON for Drives in Windows 10 - Immediately.https://www.tenforums.com/tutorials/4533-system-protection-turn-off-drives-windows-10-a.html <<<>>> Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from. The location is listed in the 3rd line of the FRST.txt log you have submitted. Run FRST and click Fix only once and wait. The tool will create a log (Fixlog.txt) please post it to your reply. === Reset Firefox Firefox: Reset Firefox, Default Browsing settings:https://support.mozilla.org/en-US/kb/refresh-firefox-reset-add-ons-and-settings Please post the Fixlog.txt and let me know of any remaining issues with this computer. fixlist.txt Link to post Share on other sites More sharing options...
Ramen Posted April 30, 2019 Author ID:1310420 Share Posted April 30, 2019 Hi! I have followed your instructions! Is it possible to know what the malware was intended to do based on the fix you've provided? Thanks again for your help! Fixlog.txt Link to post Share on other sites More sharing options...
nasdaq Posted May 1, 2019 ID:1310595 Share Posted May 1, 2019 Hi, There was not malware found. It removed the restrictions on Firefox and deleted the empty registry items. Stay safe. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted May 16, 2019 Root Admin ID:1313107 Share Posted May 16, 2019 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks Link to post Share on other sites More sharing options...
Recommended Posts