
Carelia
Member-
Content Count
22 -
Joined
-
Last visited
Community Reputation
0 NeutralAbout Carelia
-
Rank
Member
-
CLOSED C:/Windows/SysWOW64/runonce.exe is infected
Carelia replied to Carelia's topic in Help, my PC is infected!
Ok, and is there any substance in this story from now on? And what was that original theme? In any case thanks to all the information so far. -
CLOSED C:/Windows/SysWOW64/runonce.exe is infected
Carelia replied to Carelia's topic in Help, my PC is infected!
And now TMP and TEMP-paths are like this. Can't, in the earth, even guess what the actual “Path”-rows means in that windows. - Can I now remove all those “Tempzxpsignf3868bae9fdfe16d” etc.-files from my computer? Maybe we're again a bit closer to the solution, thank you for it! -
CLOSED C:/Windows/SysWOW64/runonce.exe is infected
Carelia replied to Carelia's topic in Help, my PC is infected!
Here's the result of the set-command. -
CLOSED C:/Windows/SysWOW64/runonce.exe is infected
Carelia replied to Carelia's topic in Help, my PC is infected!
https://www.tenforums.com/general-support/77650-empty-temporary-folders-appearing-outside-system-temp-folder.html Something about temporary folders appearing outside system temp folder. Maybe not so interesting... -
CLOSED C:/Windows/SysWOW64/runonce.exe is infected
Carelia replied to Carelia's topic in Help, my PC is infected!
New Logs. FRST.txt Addition.txt -
CLOSED C:/Windows/SysWOW64/runonce.exe is infected
Carelia replied to Carelia's topic in Help, my PC is infected!
After the scan, Chrome had opened. However, the internet connection was not on. Is that OK. -
CLOSED C:/Windows/SysWOW64/runonce.exe is infected
Carelia replied to Carelia's topic in Help, my PC is infected!
rk_E07.tmp.txt -
CLOSED C:/Windows/SysWOW64/runonce.exe is infected
Carelia replied to Carelia's topic in Help, my PC is infected!
The reason for scanning without internet connection was that it was the only way to do it at all. Means that WITH the connection the process will be ended always in the middle. And I hope your team could advise me how to prevent such an external manipulation of the PC. -
CLOSED C:/Windows/SysWOW64/runonce.exe is infected
Carelia replied to Carelia's topic in Help, my PC is infected!
This Scan has been done without net connection. rk_B3B3.tmp.txt -
CLOSED C:/Windows/SysWOW64/runonce.exe is infected
Carelia replied to Carelia's topic in Help, my PC is infected!
Latest ones. FRST.txt Addition.txt -
CLOSED C:/Windows/SysWOW64/runonce.exe is infected
Carelia replied to Carelia's topic in Help, my PC is infected!
This is the second time I respond to this same request. What has happened to the previous answer, where has it disappeared? Anyway the fixlog is here. Fixlog.txt -
CLOSED C:/Windows/SysWOW64/runonce.exe is infected
Carelia replied to Carelia's topic in Help, my PC is infected!
This time, everything seemed to go smoothly. - First time at the very beginning, Windows Defender SmartScreen tried to prevent FRST64 scanning, so I had to temporarily disable it. For the second time, when I initiated a fixing scan, EAM warned of suspicious behavior of FRST64. But now everything went without distractions. Hopefully the logs are also good for their content. scan_170802-212511.txt FRST.txt Addition.txt -
CLOSED C:/Windows/SysWOW64/runonce.exe is infected
Carelia replied to Carelia's topic in Help, my PC is infected!
and here we are with the fixlog. Fixlog.txt -
CLOSED C:/Windows/SysWOW64/runonce.exe is infected
Carelia replied to Carelia's topic in Help, my PC is infected!
Sory, I forgot these attachments from my previous answer. Otherwise, where can I find the "More Reply Options" button? AdwCleaner[C0].txt JRT.txt -
CLOSED C:/Windows/SysWOW64/runonce.exe is infected
Carelia replied to Carelia's topic in Help, my PC is infected!
This appears when I pressed the black “Quote this”-square when selecting the text above. I plugged also the text into Notebad and saved it on my desktop. Then I copy the FRST64.exe back to the desktop from the downloaded files folder, where it was located (I had removed it already from my desktop after the previous scan) and have tried to run the fixing-process, but it failed. FRST 64 reported that "No fixlist.txt found". Maybe something has gone wrong during the process. See the attachments. Anyway, the Advanced SystemCare program seems to dropped out of the machine.