JLWOODEN Posted October 26, 2019 ID:1341652 Share Posted October 26, 2019 Looked on forum, didn't see this problem posted. Malwarebytes detected a trojan as follows: Question is this a FALSE POSITIVE? Any one else have same issue? A program that is installed with HP OMEN laptop is a steaming service and I understand that is the typical port used. However, as I am new to HP OMEN ownership, wanted to be certain. Thank you for any assistance. -Website Data- Category: Trojan Domain: s3.amazonaws.com IP Address: 52.216.108.53 Port: [56853] Type: Outbound File: C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_9.3.8.0_x64__v10z8vjag6ke6\win32\Streamer\omen.exe Malwarebytes.txt Link to post Share on other sites More sharing options...
nasdaq Posted October 26, 2019 ID:1341678 Share Posted October 26, 2019 Hello, Welcome to BleepingComputer. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === The domain is not to be trusted. Category: Trojan Domain: s3.amazonaws.com Download the Farbar Recovery Scan Tool (FRST).Choose the 32 or 64 bit version for your system. and save it to a folder on your computer's Desktop. Double-click to run it. When the tool opens click Yes to disclaimer. Press Scan button. It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply. The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply. How to attach a file: In the Reply section in the bottom of the topic Select Click the Choose a File. Navigate to the location of the File. Click the file. It will appear in section. Click the Saving button. Please post the logs for my review. Wait for further instructions ==== Also please let me know if your default Browser is Synced with other devices. Link to post Share on other sites More sharing options...
JLWOODEN Posted October 26, 2019 Author ID:1341689 Share Posted October 26, 2019 Hi nasdaq Thank you for your assistance. Answering your question, "Also please let me know if your default Browser is Synced with other devices." NO. Files attached. Addition.txt FRST.txt Link to post Share on other sites More sharing options...
nasdaq Posted October 27, 2019 ID:1341754 Share Posted October 27, 2019 (edited) Hi, Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from. The location is listed in the 3rd line of the FRST.txt log you have submitted. Run FRST and click Fix only once and wait. The Computer will restart when the fix is completed. It will create a log (Fixlog.txt) please post it to your reply. === The application is listed in your FRST log. C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_9.3.8.0_x64__v10z8vjag6ke6\win32\Streamer\omen.exe I suggest you scan the file at VirusTotal. Navigate to this site and submit the file for inspection.https://www.virustotal.com/gui/home/upload If the file is found to be problematic run this Virus removal tool form Sophoshttps://www.sophos.com/en-us/threat-center/threat-analyses/controlled-applications/Parsec.aspx Decide if you want to keep it. If you did not install it then I would remove it. Please post the Fixlog.txt and let me know what problem persists. p.s. You can submit the file to Malwarebytes in the False Positive forum for their review.https://forums.malwarebytes.com/forum/122-false-positives/ fixlist.txt Edited October 27, 2019 by nasdaq Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted November 12, 2019 Root Admin ID:1344582 Share Posted November 12, 2019 Due to the lack of feedback, this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread. Thanks Link to post Share on other sites More sharing options...
Recommended Posts