Blocking Trojans From Sites I Didn't Visit- persistant

[RiskyINIT]

Hi,

I recently tested a crack file, which i scanned on virustotal.com and was completely clean, and now ever since i am getting pinged 3 times roughly every 20 seconds about 2 trojans and 1 malware websites being blocked, websites which im not accesing. Ive seen a few posts on the forum with people who have the same issue as here: 

 And it quotes somewhere, "No action is required unless you’re also experiencing malware symptoms or there are multiple (different) IPs (ex;123.23.34 and 4.44.56)." which is the case here, these are the following ips and the details:

RTP detection - 09/10/2022 20:43 - Malware - Blocked website - 5.161.120.43

RTP detection - 09/10/2022 20:43 - Trojan - Blocked website - ioc.exchange - Actual IP from cmd - 127.42.0.3

RTP detection - 09/10/2022 20:43 - Trojan - Blocked website - ioc.exchange - Actual IP from cmd - 127.42.0.3

This is the website i downloaded it from: 

https://softlab.site

And this is the link of the file: 

https://www.mediafire.com/file/i52ahe373qk1wk1/Loader.rar/file

From a previous post i saw someone run the malwarebytes support tool which i ran and got the ouput:

mbst-grab-results.zip

I then proceeded to run Malwarebytes AdwCleaner 8.4.0 and it outputed:

I did some research and found that mindspark is something that redirects you to random browsers for ad revenue but the problem is still persisting.

One final thing, I have malwarebytes premium free trial atm and it hasnt picked up anything, ive run Comodo full scan, CCleaner, Advanced system care and Malwarebytes Adwcleaner and it is still a problem.

Thank you for you time, please try and get back asap.

 

 

 

 

 

mbst-grab-results.zip

Edited October 9, 2022 by AdvancedSetup
Disabled live hyperlinks

[1PW]

Hello @RiskyINIT and :

While you are waiting for the next qualified/approved malware removal expert helper to weigh in on your topic, and even though you may have run one or more of its following procedural steps, please carefully follow the instructions within the following:

I'm infected - What do I do now?

Remember, please be certain to attach (not Copy and Paste) the three (3) resulting report files in your next reply to this topic.

Thank you.

[1PW]

Hello @RiskyINIT:

Are you still with us?

Thank you.

[AdvancedSetup]

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.

Tips to help protect from infection

Thanks