[Hexalogy]

Previously

https://hackforums.net/showthread.php?tid=5580437

I was infected I did spend countless hours using AV's going through everything and what not and never had a FRST semi professional/professional; User take a look for me. My suspicions are definitely being raised as when my PC starts up there is a black screen for a second with a blinking underscore top left hand corner now I'm not concerned that it may be my hard drive failing by any means cause I simply know its not. Its when im on my desktop as soon I login. Then disappears instantly. Also about 5 minutes ago from making this post I noticed this I quickly got a screenshot of this if you check the bottom task-bar there is an application with no icon and randomly there and then it disappeared so now that is two things randomly doing something sketchy AND just plain out random.

Don't think i'am crazy just need someone to do a FRST for me please? Would be much apprenticed.
Thank you,
credx

[Hackoo]

1 - Farbar Recovery Scan Tool (FRST)

• Please download Farbar Recovery Scan Tool (x32) or Farbar Recovery Scan Tool (x64) and save the file to your Desktop.
  


• Note: Download and run the version compatible with your system (32 or 64-bit). Download both if you're unsure; only one will run.
  


• Double-Click FRST.exe or FRST64.exe to run the programme
  


• Click Yes to the disclaimer.
  


• Ensure the Addition.txt box is checked.
  


• Click the Scan button and let the program run.
  


• Upon completion, click OK, then OK on the Addition.txt pop up screen.
  


• Two logs (FRST.txt & Addition.txt) will now be open on your Desktop. Copy the contents of both logs and paste them to https://pastebin.com. Post the links here.
  

---

2 - Scan_Registry_Run_Keys.bat is a batch file to get informations about your running keys on the registry and to check all your startup items that starts with windows, all running processes with their commands lines, all connections (established and in listening)

• Startup items
  


• Process list
  


• Services List
  


• Scheduled task list
  


• File Hosts's contents
  


• All Network connections
  


• DNS Cache
  

So you should, copy and paste this code with your notepad and save it as Scan_Registry_Run_Keys.bat and execute it as administrator to generate a text report that you can join it on the http://pastebin.com and post its link here in your next reply !

[Hexalogy]

1 - Farbar Recovery Scan Tool (FRST)

• Please download Farbar Recovery Scan Tool (x32) or Farbar Recovery Scan Tool (x64) and save the file to your Desktop.
  


• Note: Download and run the version compatible with your system (32 or 64-bit). Download both if you're unsure; only one will run.
  


• Double-Click FRST.exe or FRST64.exe to run the programme
  


• Click Yes to the disclaimer.
  


• Ensure the Addition.txt box is checked.
  


• Click the Scan button and let the program run.
  


• Upon completion, click OK, then OK on the Addition.txt pop up screen.
  


• Two logs (FRST.txt & Addition.txt) will now be open on your Desktop. Copy the contents of both logs and paste them to https://pastebin.com. Post the links here.
  

---

2 - Scan_Registry_Run_Keys.bat is a batch file to get informations about your running keys on the registry and to check all your startup items that starts with windows, all running processes with their commands lines, all connections (established and in listening)

• Startup items
  


• Process list
  


• Services List
  


• Scheduled task list
  


• File Hosts's contents
  


• All Network connections
  


• DNS Cache
  

So you should, copy and paste this code with your notepad and save it as Scan_Registry_Run_Keys.bat and execute it as administrator to generate a text report that you can join it on the http://pastebin.com and post its link here in your next reply !

I rather PM you these 2 things so randoms don't just read my personal data.

[5chn4pp]

I rather PM you these 2 things so randoms don't just read my personal data.

I'd like those FRST files aswell, since I'm the only trained FRST user active on here.

[Hexalogy]

I'd like those FRST files aswell, since I'm the only trained FRST user active on here.

Yeah thank you the user above hasn't responded and there doesn't seem anyone too active.

[5chn4pp]

1. You have something called "HtmlScreenSaver", this may be causing some of your issues, do you want me to remove it?

2. Firefox has some sort of proxy, is it intentional or unwanted?

EDIT: also, your ratted, I just need to know these before I make a fixlist.

[Hexalogy]

1. You have something called "HtmlScreenSaver", this may be causing some of your issues, do you want me to remove it?

2. Firefox has some sort of proxy, is it intentional or unwanted?

EDIT: also, your ratted, I just need to know these before I make a fixlist.

I PM'd you thank you.

[5chn4pp]

Download fixlist.txt file and save it to the Desktop.

NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Run FRST/FRST64 and press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

[Hexalogy]

Download fixlist.txt file and save it to the Desktop.

NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Run FRST/FRST64 and press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

I've PM'd you, Thanks again.

[5chn4pp]

Your computer should be clean now, do you still have the symptoms or are they gone?

[Hexalogy]

Your computer should be clean now, do you still have the symptoms or are they gone?

From what ive noticed there gone i think ill let you know if anything happens again thank you very much !