Restart the computer normally to reset the registry. Run FRST and click Fix only once and wait. Save the files as fixlist.txt into the same folder as FRST S1 ElRawDisk \?\C:\windows\system32\drivers\rsdrv圆4.sys S3 EagleX64 \?\C:\Windows\system32\drivers\EagleX64.sys ShellIconOverlayIdentifiers: -> įF Plugin: /AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll No FileĬHR Extension: (Google Wallet) - C:\Users\Ben\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda ĬHR HKU\S-1-5-21-1550224419-736723516-2154025555-1000\.\Chrome\Extension: - C:\Users\Ben\AppData\Local\CRE\ahlgmchheelpdfhnjemdllikjjlafmio.crx ĬHR HKLM-x32\.\Chrome\Extension: - C:\Users\Ben\AppData\Local\CRE\ahlgmchheelpdfhnjemdllikjjlafmio.crx Winlogon\Notify\WB: C:\Program Files (x86)\Stardock\WindowBlinds\fast64.dll
#Adobe update malware code#
Please copy the entire contents of the code box below. Open notepad (Start =>All Programs => Accessories => Notepad). I did not run the removal because i am only supposed to do what you say while requesting help, but i am at the ready for the command to run the cleaner, just tell me when i can, please. The situation seems to be changing a lot every time i reboot my computer.ĮDIT 3: In researching the names of suspicious files on my computer and processes that were going crazy, i found many of the files linked back to the poweliks backdoor, which i scanned for using bleepingcomputer's manual, and it is indeed on my computer. It has only been mentioned on the forums twice in the past couple days, but is relatively new. It took hours last time for them all to be deleted and within hours i had 500ish new ones, so i ran the FRST scan.log timeĮDIT 1: Now my UAC is blocking AdobeUpdate_#.exe or something like that, using 100% of my cpu, and when i click "no on the UAC window, another one pops up in about 1/5th of a second for the same thing.ĮDIT 2: AVG keeps quarantining things, so the UAC has stopped because that file was quarantined, but i know that i have the Eraem Vire Studaa 2021 virus hidden in a second copy (inactive) of the adobe virus. Also, I did not clean the temporary files because while the CPU is running at 100ish (signifying that the virus is running) the temporary files are being created at a rapid pace. Also, I just noticed that while i type into this box, my window keeps being deselected and my cursor is not in the box. This is the only temporary fix that allows me to use my computer for the time being. If you notice in my addition log, my AVG security is disabled. Most of the time my CPU is running at 100%ish and ram is about 90% full.
The "Adobe" popup has stopped coming up, but now there is a more serious problem.
To attach a file select the "More Reply Option" and follow the instructions.
Please paste the logs in your next reply DO NOT ATTACH THEM unless specified. The first time the tool is run, it makes also another log (Addition.txt). It will make a log (FRST.txt) in the same directory the tool is run. When the tool opens click Yes to disclaimer.
0 kommentar(er)
