Castor Posted March 19, 2020 ID:1367958 Share Posted March 19, 2020 Hi, There are some suspicious things with weird names in my task manager like BIT, SNARE, KITTY, but the main problem is there is always this "g2499.tmp.exe" which consumes a lot of disk power. Link to post Share on other sites More sharing options...
Maurice Naggar Posted March 19, 2020 ID:1367985 Share Posted March 19, 2020 Hi, My name is Maurice. I will be helping and guiding you, going forward on this case. Let me know what first name you prefer to go by. Let me inquire: Does this pc have Malwarebytes for Windows installed ? Did you scan with it ? Does this pc have the Premium Malwarebytes ? What about antivirus ? and Where there any new downloads of anything just before all this started ? We will be doing many things later. Let's just start with this report. Let’s please try to get and run a special report tool from Microsoft. It does not make changes. It will be just a report. Please download Sysinternals Autoruns from here and save it to your desktop. Note: you also need to do the following: Right-click on Autoruns.exe and select Properties Click on the Compatibility tab Under Privilege Level check the box next to Run this program as an administrator Click on Apply then click OK Double-click Autoruns.exe to run it. Once it starts, please press the Esc key on your keyboard. Now that scanning is stopped, click on the Options button at the top of the program and select Filter Options... In the Autoruns Filter Options dialogue, verify that the following are unchecked, if they are checked, uncheck them: Include empty locations Hide Microsoft entries Hide Windows entries Verify that the following is checked, if it is unchecked, check it: Verify code signatures Once that's done press the F5 key on your keyboard, this will start the scan again, this time let it finish. When it's finished and says Ready. on the lower left of the program window, please click on the File button at the top of the program and select Save and save the Autoruns.arn file to your desktop and close Autoruns. Right click on the Autoruns.arn file on your desktop and hover your mouse over Send To and select Compressed (zipped) Folder Attach the Autoruns.zip folder you just created to your next reply Thank you. Link to post Share on other sites More sharing options...
Maurice Naggar Posted March 21, 2020 ID:1368248 Share Posted March 21, 2020 Hello. How is it going ? Did you see my reply ? Link to post Share on other sites More sharing options...
Maurice Naggar Posted March 23, 2020 ID:1368481 Share Posted March 23, 2020 Good morning. I hope you are doing well. Do you still need help ? Are you still with us ? Link to post Share on other sites More sharing options...
Maurice Naggar Posted March 24, 2020 ID:1368678 Share Posted March 24, 2020 Due to the lack of feedback, this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread. Thanks Link to post Share on other sites More sharing options...
Recommended Posts