Jump to content

Startup windows scan of MBs showed 2x Backdoor.AsyncRAT malware


acesta

Recommended Posts

Good Day Sirs,

I've had the previous day threats found yet I ignored them then since I had my attention tunnel vision'd.

The coming morning I checked to find the mentioned malwares found at startup of my windows and got them quarantined.

For all intents and purposes, if it is not too much to ask from anyone, I simply want to do a full sweep of my system. 

Seeing backdoor named malware at my startup scans just doesn't seem right leaving it at that.

                                                                                                                                            Best Regards,

                                                                                                                                            This

MB startup scan -2 threats quarantiened.txt Addition.txt FRST.txt full system scan MB- 14 threats.txt

Link to post
Share on other sites

  • Root Admin

Hello @acesta

You have an old and compromised version of Java on the computer. Please go to Control Panel, Programs, Add/Remove and uninstall Java - if you really have to have it then keep it up to date at all times.

Please disable Bitdefender and exit out of Malwarebytes and run the following scan.

 

Let me have you run a different scanner to double-check. I don't expect it to find anything, but no harm in checking.

I would suggest a free scan with the ESET Online Scanner

Go to https://download.eset.com/com/eset/tools/online_scanner/latest/esetonlinescanner.exe

  • It will start a download of "esetonlinescanner.exe"
  • Save the file to your system, such as the Downloads folder, or else to the Desktop.
  • Go to the saved file, and double click it to get it started. 
  • When presented with the initial ESET options, click on "Computer Scan".
  • Next, when prompted by Windows, allow it to start by clicking Yes 
  • When prompted for scan type, Click on Full scan 
  • Look at & tick  ( select )   the radio selection "Enable ESET to detect and quarantine potentially unwanted applications"   and click on Start scan button.
  • Have patience.  The entire process may take an hour or more. There is an initial update download.
  • There is a progress window display.
  • You should ignore all prompts to get the ESET antivirus software program.   ( e.g.  their standard program).   You do not need to buy or get or install anything else.
  • When the scan is completed, if something was found, it will show a screen with the number of detected items.  If so, click the button marked “View detected results”.
  • Click The blue “Save scan log” to save the log.
  • If something was removed and you know it is a false finding, you may click on the blue ”Restore cleaned files”  ( in blue, at bottom).
  • Press Continue when all done.  You should click to off the offer for “periodic scanning”.

 

 

Thanks

 

Link to post
Share on other sites

  • Root Admin

Please download and run the following Kaspersky antivirus scanner to remove any found threats

Kaspersky Virus Removal Tool

Let me know if it finds anything or not

 

Once that's done please run a new Threat scan with Malwarebytes and post back that new log too

Thanks

 

Link to post
Share on other sites

  • Root Admin

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Please review the following for Tips to help protect from infection

Thank you

 

 

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.