sparrow560 Posted December 18, 2020 ID:1427760 Share Posted December 18, 2020 I'm getting a Trojan threat from FirewallManagement in SYSTEM32/TASKS. Is this a false positive? Attached TXT file of scan.firewall management.txt Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted December 18, 2020 ID:1427776 Share Posted December 18, 2020 (edited) Hi, We will need more logs from your machine to confirm. I am pretty sure this is related to a Bitcoin miner. Below are the instructions for uploading logs manually. Upload Malwarebytes Support Tool logs offline – Malwarebytes Support Upload MBST archive here once it is done. Edited December 18, 2020 by TwinHeadedEagle Link to post Share on other sites More sharing options...
sparrow560 Posted December 18, 2020 Author ID:1427895 Share Posted December 18, 2020 Hi, I attached the MBST archive. mbst-grab-results.zip Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted December 23, 2020 ID:1428783 Share Posted December 23, 2020 Sorry for the late reply. Do you have this file on your system? %APPDATA%\Decompress\Decompress.exe Link to post Share on other sites More sharing options...
sparrow560 Posted December 23, 2020 Author ID:1428839 Share Posted December 23, 2020 No, I don't Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted December 23, 2020 ID:1428861 Share Posted December 23, 2020 I've seen Decompress folder in your logs. Is that scheduled task still present in MalwareBytes quarantine? Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now