I need help, a malware keeps appearing when i turn on my computer

[drawwwet]

it is located on APPDATA/TEMP/

its a .exe file and it's caled AI.MALWARE.(random numbers)

the numbers always change, i need help :(

[drawwwet]

[Porthos]

@drawwwet

Although I will not be directly assisting you, a malware removal expert will be along to assist after you do the following.

Let's get the info to get the process started. Be aware it will take many steps and scans to fully remove malware.

Please respond to all future instructions from your helper in a timely manner.

Let's go ahead and run a couple of scans and get some updated logs from your system. Please read the entire post below before starting so that you're more familiar with the process

Then follow each step in the order provided. Unless otherwise asked, please attach all logs

 

Please make the following system changes: Please pay close attention the the instructions in all of the following links.

• If you have not done so already - Enable System Protection and create a NEW System Restore Point  <<<<< Important.
• Temporarily disable your antivirus real-time protection or other security software first only if it blocks or interferes with the scans or downloads.. Make sure to turn it back on once the scans are completed
• Temporarily disable Microsoft SmartScreen to download software below only if needed. Make sure to turn it back on once the downloads are completed
• Disable-Fast-Startup   Windows 8 and newer only <<<<< Important.
• Show-Hidden-Folders-Files-Extensions

Please run the following scans: Please pay close attention the the instructions in all of the following links.

1. Click the following link and run a  Scan with AdwCleaner
2. Click the following link and run a  Scan with Malwarebytes
      RESTART the computer <<<<< Important.
3. Click the following link and run a  Scan with Farbar Recovery Scan Tool 

Example image of where to click to attach files when posting your reply

Then be patient for the next expert to take your case. <<<<< Important.

 

Thank you

[MKDB]

Hello  @drawwwet  and 

 

My name is MKDB and I will assist you.

 

 

Let's keep these principles as we proceed. Make sure to read the entire post below first.

• Please follow the steps in the given order and post back the log files.
• Please attach all log files into your post.
• Before we start, please make sure that you have an external backup, not connected to this system, of all private data.
• Only run the tools I guide you to. Please don't run any other scans, download, install or uninstall any programs while I'm working with you.
• As English is not my native language, please do not use slang or idioms. It may be hard for me to understand.
• If you do not respond within 4 days, your topic will be closed.
• Cracked or hacked or pirated programs are not only illegal, but also will make a computer a malware victim. Having such programs installed, is the easiest way to get infected. It is the leading cause of ransomware encryptions. It is at times also a big source of current trojan infections. If you are running any kin of illegal software on your system, please uninstall them now, before we start the cleaning procedure.

 

Please attach the requested logfiles and we will be happy to help you.

Thank you!

[drawwwet]

hi, how are you, the things got worse and they were robbing my acounts, i want to restore the system but idk how, from the bios or from the Windows normal opción?

I'm desperate, I keep getting notifications about account changes

[drawwwet]

i was doing the process and it detected hijack and wacatac, and others just called malware.ai i'm sorry for not sending the log, but i just want to restorate my Windows to be sure things are okay (i'm sorry if my English is a lil Bad, my native is spanish)

[MKDB]

@drawwwet

11 minutes ago, drawwwet said:

(...) but i just want to restorate my Windows to be sure things are okay

 

Backup all private data and start a clean install of windows.

Clean Install Windows 10 & 11 (2024)
https://answers.microsoft.com/en-us/windows/forum/all/clean-install-windows-10-11-2024/1c426bdf-79b1-4d42-be93-17378d93e587

 

@AdvancedSetup

[drawwwet]

Do you recommend me to change my Google and derivative accounts? I'm afraid they have some kind of access to

[MKDB]

@drawwwet

Yes, I do.

Either after the clean windows install from this machine or from another clean system.

I suggest to change all passwords.

Edited September 28 by MKDB

[MKDB]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Please review the following for Tips to help protect from infection.

Thank you.

 

As this topic seems to be solved, I do not follow it any longer.

Take care!