SH20

CLOSED Detected: JS:Trojan.Cryxos.1726 (B) [krnl.xmd]

Recommended Posts

Hello,

Copy the below code to NotepadSave As fixlist.txt to your Desktop.

 

2020-03-23 23:55 - 2020-03-23 23:55 - 000001284 _____ () C:\ProgramData\SMRResults521.dat
2017-09-30 17:09 - 2017-09-30 17:09 - 000000255 _____ () C:\Program Files (x86)\2OA5SGQD.bat
2018-07-05 22:46 - 2018-07-05 22:46 - 000000338 _____ () C:\Program Files (x86)\temp995.bat
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> No File
AlternateDataStreams: C:\ProgramData\TEMP:541E1530 [154]
C:\Users\prent\Downloads\This is a VIRUS.You computer is blocked

 

Close Notepad.

 

NOTE: It's important that both files, FRST, and fixlist.txt are in the same location or the fix will not work.

 

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system

 

IMPORTANT: Save all of your work, as the next step may reboot your computer.

 

Run FRST and press the Fix button just once and wait.

 

If the tool needed a restart please make sure you let the system restart normally and let the tool complete its run after restart.

 

The tool will make a log on the Desktop (Fixlog.txt). Attach it to your reply.

 

NOTE: If the tool warns you about an outdated version please download and run the updated version.

 

Also, let me know how the machine is running now, and what remaining issues you've noticed.

Share this post


Link to post
Share on other sites

Thank you for your help in this matter as it is very much appreciated.  The fix was applied successfully and he is happy with the way it is running now.  Please find the attached fixlog.

Stu

Fixlog.txt

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

  • Recently Browsing   0 members

    No registered users viewing this page.