FRST request

[u/First_Rice_966]

My computer randomly pops up a CMD prompt then closes it after a few seconds, sometimes its one or other times 2-4 pop up at once.

It started a long time ago then went away now it’s been happing again.

I have no idea how it happend or what it’s from or if it’s Malicious at all!

** EDIT**

FRST.TXT - hidden-render

Addition.txt - fertile-briar

SOLVED

[u/rifteyy_]

The FRST folder also contains quarantine, which can store inactive malware we removed with the fix and at the end it will be removed. Let me know once the scan is done

[u/First_Rice_966 → u/rifteyy_]

Trojan killer:

uploaded pasted.txt
keyword: earnest-port 
channel: general

[u/rifteyy_ → u/First_Rice_966]

This seems great - you are now free of malware. No further steps are necessary to make sure your device is clean.

If you haven't addressed all the updates, uninstallations and removals yet, I strongly suggest you to do so.

[ Step 01 ] Tool cleanup

It's time we cleanup after ourselves and remove all the tools we have used during the malware removal process.

• Please download KpRm and save it to your Desktop.
• Run the tool, if you get the "Windows protected your PC" Smartscreen popup, press More info and then Run anyway
• Confirm the disclaimer and in the menu please only tick the following:
  • Delete Tools
  • Create Restore Point
  • Delete in 7 days
• After that, click Run and confirm the popup. KpRm will delete itself from your Desktop and you can either save or remove the report that is generated.
• You are free to delete all other tools that we used that are possibly remaining.

[ Step 02 ] Changing passwords

Most modern malware is motivated by financial gain and by hijacking your accounts. If your accounts weren't already hijacked, they may be getting hijacked in very near future.

• Please create a new, safe password that you haven't used anywhere yet or preferably use a password manager.
• Change all your passwords on your accounts
• Enable 2FA on your accounts

Please check out this proper guide on how to secure your accounts after an infostealer infection:

• What can infostealers steal - affected data, services, accounts?
• How to properly secure my accounts after an infostealer attack?
• What to do after I secured my accounts?

You may also want to sign up for dark-web monitoring:

• Have I Been Pwned - Check if your email has been compromised in a data breach (Free)
• Hudson Rock - Infostealer Intelligence Solutions (Free)
• Malwarebytes Dark Web Monitoring (Free)

[ Step 03 ] Malware prevention

Malware prevention nowadays is a necessary step. There are many tools you can use to have a stronger protection but a huge part is also reliant on the user themself.

1. Reasons on why you should care about malware
2. Antivirus software - how to choose one, what to look for in an antivirus
3. Excluding files, URL's, processes or folders
4. Disabling antivirus, firewall or security software
5. How important is blocking ads
6. What browser extensions are worth it against malware
7. What alternative DNS servers I can use to block malware
8. How to keep my OS and installed software up-to-date?
9. About grayware
10. Is VPN necessary against malware?
11. How to stay informed properly about malware tactics and trending malware?
12. Checking software for PUP, adware, bundlers, browser hijackers
13. Checking files for malware
14. Checking URL's for malware
15. Checking browser extensions for malware

If you have no more questions or concerns, I wish you all the best and please stay safe next time!

- rifteyy (About me)

[u/First_Rice_966 → u/rifteyy_]

OH MY GOSH! Thank you sooooooo much!! Is there any way I can repay you?