win malware (GoogleUpdateTaskMachineQC)

[tueonzz]

i wanted to download an application on microsoft store but i got a notification saying "error encountered, one of the update services is not running properly". i went to autoruns then found "GoogleUpdateTaskMachineQC". after looking it up, then i realised it was a malware i prob downloaded earlier, any solutions? every time i delete it, it come back.

[tueonzz]

by the way, i tried downloading malwarebytes, when i go to the website it tells me the site cant be reached, so im unable to download it.

[MKDB]

Hello  @tueonzz  and 

 

My name is MKDB and I will assist you.

 

 

Let's keep these principles as we proceed. Make sure to read the entire post below first.

• Please follow the steps in the given order and post back the log files.
• Please attach all log files into your post.
• Before we start, please make sure that you have an external backup, not connected to this system, of all private data.
• Only run the tools I guide you to. Please don't run any other scans, download, install or uninstall any programs while I'm working with you.
• As English is not my native language, please do not use slang or idioms. It may be hard for me to understand.
• If you do not respond within 4 days, your topic will be closed.
• Cracked or hacked or pirated programs are not only illegal, but also will make a computer a malware victim. Having such programs installed, is the easiest way to get infected. It is the leading cause of ransomware encryptions. It is at times also a big source of current trojan infections. If you are running any kin of illegal software on your system, please uninstall them now, before we start the cleaning procedure.

 

 

Step 1

• Please download the Malwarebytes Support Tool (MBST).
• Run MBST and accept license agreement.
• In the left navigation pane of MBST, click Advanced.
• In the Advanced Options, click Gather Logs. A status diagram displays the tool is Getting logs from your machine.
• A zip file named mbst-grab-results.zip will be saved to your desktop, please upload that file on your next reply.

[MKDB]

@tueonzz

If you are not able to visit malwarebytes website, please go to a clean machine and download the attached zip file to an USB device.

Copy the zip file from your USB device onto the desktop of the infected machine.

Extract the zip file. You will get two files:

1) "explorer.exe" which is RKill

2) "tueonzzEnglish.exe" which is FRST

 

 

Step 1

Run "Explorer.exe". RKill should start and do some checks. This may take some time.

It should create a file called Rkill.txt in the end. Attach that file with your next answer.

 

 

Step 2

• Double-click on "tueonzzEnglish.exe" to run FRST.
• If you receive any warning about the download it is a false positive and you can ignore it. Click on More info to get the Run anyway option.
• When the tool opens, click Yes to disclaimer.
• Press the Scan button.
• FRST will create three logs (FRST.txt + Addition.txt) in the same directory the tool is run.
• Please attach these logfiles to your next reply.

 

 

files.zip

[tueonzz]

ive already gotten rid of the malware, but thanks for your help!

[MKDB]

Thanks for your feedback @tueonzz.

As this topic seems to be solved, I do not follow it any longer.

Take care!

[AdvancedSetup]

Since this issue is resolved the topic will now be closed to prevent others from posting here.

If you need assistance please start your own new topic and someone will be happy to assist you.

Thanks