Closed Windows kernel files have been detected as infected. C:\Windows\explorer.exe

[crowmd 0]

scan_181029-203913.txt

[crowmd 0]

just got one of those C:\Windows\explorer.exe warnings that said it was infected.What should I do?

[Kevin Zoll 309]

I would like to get a couple of logs from a tool that we use to aid in diagnosing issues and locating malware on a system.

Download to your Desktop:

• Farbar Recovery Scan Tool
  NOTE: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

  NOTE: If you are unable to download FRST from the infected system, FRST can be saved to and run from a USB flash drive.

• Run Farbar Recovery Scan Tool (FRST):

  • Double-click to run it. When the tool opens click Yes to the disclaimer.
    NOTE: DO NOT change any of the default settings. If you do we will just close your logs and ask for new ones ran with FRST's default settings.
  • Press Scan button.
  • Farbar Recovery Scan Tool will produce the following logs:
    • FRST.txt
    • Addition.txt

• Attach those logs to your reply.

[Kevin Zoll 309]

Thread Closed

Reason: Lack of Response

PM either Kevin, Elise, or Arthur to have this thread reopened.

The procedures contained in this thread are for this user and this user only. Attempting to use the instructions in this thread on a system, other than the one they were written for, could result in damaging the Operating System beyond repair. Do Not use any of the tools mentioned in this thread without the supervision of a Malware Removal Specialist.

All posters requesting Malware Removal assistance are required to follow all procedures in the thread titled START HERE if you don't we are just going to send you back to this thread