For Macflame - Windows 11 - Block notices nextst1(.)ddns(.)net

[Maurice Naggar]

@macflame I am creating this help thread for you. Please stick to this topic until I give the all clear.

First action for you. 

Take these actions so that Windows 11 is set to show all hidden files and folders.
Open File Explorer from the taskbar.

Select View > Show > Hidden items.

Select View → Show → File name extensions

The Microsoft Safety Scanner has reported these findings.

Found VirTool:MSIL/CryptInject, partially removed.
Found Trojan:Win32/Tiggre!plock, partially removed.
Found HackTool:Win32/Keygen, partially removed.
Found Trojan:MSIL/Gorf, partially removed.
Found Program:Win32/Hadsruda!rfn, partially removed.

We will be doing other scans and runs. Stick with me here.

[Maurice Naggar]

@macflame

Hello  

I will guide you along on looking for remaining malware. Lets keep these principles as we go along.

• Removing malware can be unpredictable
• Please don't run any other scans, download, install or uninstall any programs while I'm working with you.
• Only run the tools I guide you to.
• Do not run online games while case is on-going. Do not do any free-wheeling web-surfing.
• The removal of malware isn't instantaneous, please be patient.
• Cracked or or hacked or pirated programs are not only illegal, but also will make a computer a malware victim. Having such programs installed, is the easiest way to get infected. It is the leading cause of ransomware encryptions. It is at times also big source of current trojan infections. Please uninstall them now, if any are here, before we start the cleaning procedure.
• Please stick with me until I give you the "all clear".
• If your system is running Discord, please be sure to Exit out of it while this case is on-going.

Allow me some time to review your reports. I will have more guidance for you.

[Maurice Naggar]

Hello @macflame 

NOTE-1:  This fix will run a scan to check that all Microsoft operating system files are valid and not corrupt and attempt to correct any invalid files. It attempts to insure that MS Defender antivirus is Enabled. It will reset the Winsock file. It will also attempt to  run scans with MS Defender antivirus.  Depending on the speed of your computer this fix may take 50-55 minutes or more.

This next job will end all open applications and then do its work. Please read all of this. and remember, there is much more to do even after this here.

The tool FRSTENGLISH.exe tool  is already on this machine

Please download the attached fixlist.txt file and save it to Downloads folder

Fixlist.txt<-- - - - -

 

NOTE. It's important that both files, FRSTENGLISH, and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system that cannot be undone.

Use File Explorer to go to the Downloads folder

RIGHT-Click on   FRSTENGLISH and select

RUN as Administrator

and reply YES to allow it to go forward to start.

That is important so that this run has Elevated Administrator rights !!

NEXT press the Fix button just once and wait.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Downloads folder (Fixlog.txt) . Please attach or post it to your next reply.

Note: If the tool warned you about an outdated version please download and run the updated version.

The system will be rebooted after the fix has run. Attach FIXLOG.txt with next reply. We will do more, later. We will be running at least 3-4 trusted scanners later on. Stick with me. Keep much patience. Keep current with this case here. Have faith in this helper. 

[AdvancedSetup]

What is the status for this topic @Maurice Naggar @macflame

 

[Maurice Naggar]

Regretfully O.P. Macflame did not return to forum. I am closing this as a Abandoned case.