bạn scan nó mới hiện ra hay mở máy là bị ? nếu mở máy lên mà bị thì bạn nhấn phím Windows và R đánh msconfig sau đó chọn Startup sau đó xem cái dòng nào nghi ngờ rồi bỏ chọn nó, sau đó ok và khởi động lại,nếu ko dc thi chup hình lên đây nha
Trojans are a group of malicious programs distinguished by their ability to masquerade as benign software. Depending on their type, trojans possess a variety of capabilities, ranging from maintaining full remote control over the victim’s machine to stealing data and files, as well as dropping other malware. At the same time, the main functionality of each trojan family can differ significantly depending on its type. The most common trojan infection chain starts with a phishing email.
Malware Trends Tracker >>>
Analysis date: January 07, 2019, 09:18:56 OS: Windows 7 Professional Service Pack 1 [build: 7601, 32 bit] Tags:
trojan
sinkhole
Indicators: MD5:
100DA6547A34C8F30300077D305ACD8D
SHA1:
1AE6C58ACD13FE2F94E4B61CB5B2870C5C768DC5
SHA256:
867E73FA04C60702DD3F09567ECE824AD69306D2B2E7F64BE3C33846926A1933
SSDEEP:
3:N1KNAXWycWJSASDzR/0:CS5cDX+
ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.
//social.msdn.microsoft.com/Forums/en-US/fb17d998-b0f7-43e2-8ff0-40f1ab2f92c8/windows-script-component-httpserver139slxu3bwrudeployxml?forum=scripting
Please follow the instructions for posting information which is reflected in the link [in my signature] for initiating malware topics.
Louis
Edited by hamluis, 17 August 2019 - 08:30 AM.
nasdaq
nasdaq
- Malware Response Team
- 48,328 posts
- OFFLINE
- Gender:Male
- Location:Montreal, QC. Canada
- Local time:03:57 PM
Posted 17 August 2019 - 09:27 AM
Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.
If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
\===
Please download Malwarebytes Anti-Malware from here
- Right-click on the MBAM icon and select Run as administrator to run the tool.
- Click Yes to accept any security warnings that may appear.
- Once the MBAM dashboard opens, on the right detail pane click on the word "Current" under the Scan Status to update the tool database.
- On the left menu pane click the Settings tab, and then select the Protection tab on the top.
- Under the Scan Options, turn on the button Scan for rootkits and Scan within archives.
- Click the Scan tab on the right detail pane, select Threat Scan and click the Start Scan button
- Note: The scan may take some time to finish, so please be patient.
- If potential threats are detected, ensure to check mark all the listed items, and click the Quarantine Selected button.
- While still on the Scan tab, click the View Report button, and in the window that opens click the Export button, select Text file [*.txt], and save the log to your Desktop.
- The log can also be viewed by clicking the log to select it, then clicking the View Report button.
Please post the log for my review.
Note: If asked to restart the computer, please do so immediately.
\===
Please download AdwCleaner by Malwarebytes your Desktop.
- Close all open programs and internet browsers.
- Double click on AdwCleaner.exe to run the tool.
- Click the Scan button and wait for the process to complete.
- Click the LogFile button and the report will open in Notepad.
IMPORTANT
- If you click the Clean button all items listed in the report will be removed.
If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.
- Close all open programs and internet browsers.
- Double click on AdwCleaner.exe to run the tool.
- Click the Scan button and wait for the process to complete.
- Check off the element[s] you wish to keep.
- Click on the Clean button follow the prompts.
- A log file will automatically open after the scan has finished.
- Please post the content of that log file with your next answer.
- You can find the log file at C:\AdwCleanerCx.txt [x is a number].
\===
Download the Farbar Recovery Scan Tool [FRST].
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log [FRST.txt] in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log [Addition.txt]. Please attach it to your reply.
How to attach a file to your reply:
In the Reply section in the bottom of the topic Click the "more reply Options" button.
Attach the file.
Select the "Choose a File" navigate to the location of the File.
Click the file you wish to Attach.
Click Attach this file.
Click the Add reply button.
\===
Please post the logs for my review.
Let me know what problems persists.
Wait for further instructions
\====
nguyenanhvu
nguyenanhvu
- Topic Starter
- Members
- 44 posts
- OFFLINE
- Local time:02:57 AM
Posted 17 August 2019 - 11:10 AM
After I scan with adwcleaner, these .txt files appear.
I restarted the computer but the error still appears
Attached Files
nguyenanhvu
nguyenanhvu
- Topic Starter
- Members
- 44 posts
- OFFLINE
- Local time:02:57 AM
Posted 17 August 2019 - 08:53 PM
This is the .txt file that was created after I scanned with FRST64.exe.
Is it due to a win 10 error? Because I have updated the new version of Windows 10 half a month ago.
Edited by nguyenanhvu, 17 August 2019 - 08:56 PM.
nasdaq
nasdaq
- Malware Response Team
- 48,328 posts
- OFFLINE
- Gender:Male
- Location:Montreal, QC. Canada
- Local time:03:57 PM
Posted 18 August 2019 - 06:34 AM
Hi,
Did you also run the Malwarebytes program.
Post the log if you can.
Quoted
It will make a log [FRST.txt] in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log [Addition.txt]. Please attach it to your reply.
If you have executed the FRST64.exe you should have these two files.
Please attach them to your next reply.
Follow my instructions on how to attach the files.
nguyenanhvu
nguyenanhvu
- Topic Starter
- Members
- 44 posts
- OFFLINE
- Local time:02:57 AM
Posted 18 August 2019 - 08:40 AM
This is a .txt file that has been created, please show me how to fix it
Attached Files
nasdaq
nasdaq
- Malware Response Team
- 48,328 posts
- OFFLINE
- Gender:Male
- Location:Montreal, QC. Canada
- Local time:03:57 PM
Posted 19 August 2019 - 07:08 AM
Hi,
Remove this program in bold via the Control Panel > Programs > Programs and Features.
COC COC[HKU\S-1-5-21-1191911756-3841296612-3966034170-1001\...\CocCocBrowser] [Version: 74.0.3729.180 - Ðon v? ch? qu?n C?c C?c]