snu Posted April 8, 2020 ID:1371592 Share Posted April 8, 2020 hi, I saw msascuil.exe in my startup and when i went to right click it... "open file location" was greyed out. I got suspicious and googled it turns out it could be malware. the normal file location of that program 'C:\Program Files\Windows Defender' doesn't show me any file called msascuil.exe -- i also checked the x86 folder but then shortly after when I went to look again in my startup it was gone. I still havn't seen it. could it have deleted itself and replicated as another file or process? again..it is now gone from my startup menu but I am suspicious still. currently doing a full scan with MWB..been about 2 hours and nothing is popping up yet on detections Link to post Share on other sites More sharing options...
Directionary Posted April 8, 2020 ID:1371616 Share Posted April 8, 2020 Note, hi admins, I am here to annoy again. MSASCuil.exe appears everytime you have Windows Defender on. It is the Defender notification centre, so no worries. Plus, it dissappears when you install an anti-malware product. Why would Defender remain on when theres an AV, right...? Yeah thats pretty much it. Link to post Share on other sites More sharing options...
snu Posted April 8, 2020 Author ID:1371618 Share Posted April 8, 2020 I have read its not normal for it to be greyed out on the 'open file location' button also that exe does not exist on my machine... that seems wrong. scanned full with MWB and no detection still havn't seen it in my 'startup' menu .. only that one time. i'm suspicous but i dont want to have to wipe my C drive right now ... not sure what to do. Link to post Share on other sites More sharing options...
nasdaq Posted April 8, 2020 ID:1371658 Share Posted April 8, 2020 Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Let's check further. Download the Farbar Recovery Scan Tool (FRST).Choose the 32 or 64 bit version for your system. and save it to a folder on your computer's Desktop. Double-click to run it. When the tool opens click Yes to disclaimer. Press Scan button. It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply. The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply. How to attach a file: In the Reply section in the bottom of the topic Select Click the Choose a File. Navigate to the location of the File. Click the file. It will appear in section. Click the Saving button. Please attach the logs for my review. Wait for further instructions @Dictionary You are not allowed to post in someone else topic in this Malware forum. Read about it.https://forums.malwarebytes.com/topic/12264-groups-authorized-to-help-with-malware-removal-logs/ Link to post Share on other sites More sharing options...
snu Posted April 9, 2020 Author ID:1371815 Share Posted April 9, 2020 Addition.txt FRST.txt Link to post Share on other sites More sharing options...
nasdaq Posted April 9, 2020 ID:1371908 Share Posted April 9, 2020 Hi, Your logs are clean of malware. Stay safe. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted April 13, 2020 Root Admin ID:1372718 Share Posted April 13, 2020 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Please review the following for Tips to help protect from infection Thank you Link to post Share on other sites More sharing options...
Recommended Posts