Jump to content

Suspected powershell trojan


Go to solution Solved by TwinHeadedEagle,

Recommended Posts

Hi, a couple weeks ago I accidentally downloaded a fishy link, and since then I started getting the Google.com main page appearing out of nowhere, so I installed Malwarebytes and ran a few scans, the first one removed 131 files, then 5, and the last scan found nothing. It is worth noting that Combo Cleaner found 4 files which I did not remove as that required a premium version:1394994120_combocleanerreport.png.ee1489251e0096ef4a0203cf4bc3e5cc.png

 Ever since then Malwarebytes has been blocking a website due to trojan once every 25 seconds or so here is the notification I get:

 134572356_malwarebytewebsiteblockednotification.png.d3aab1894dcc0d84dd156e6327538c72.png

Here are the Malwarebytes reports for each scan:

malwarebytes report 1.txt

malwarebytes report 2.txt

malwarebytes report 3.txt

I also rebooted after every scan.

Link to post
Share on other sites

  • Solution

FRST.gif Fix with Farbar Recovery Scan Tool

icon_exclaim.gif This fix was created for this user for use on that particular machine. icon_exclaim.gif


icon_exclaim.gif Running it on another one may cause damage and render the system unstable. icon_exclaim.gif

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

  • Right-click on FRST.gif icon and select RunAsAdmin.jpg Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please upload it to your reply.

fixlist.txt

  • Thanks 1
Link to post
Share on other sites

  • Root Admin

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Please review the following for Tips to help protect from infection

Thank you

 

 

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.