Paco Ciesta

Sorry Marcos, I have sent it to you in a personal message.

That is the log from one of our servers, but we have the same Trojan in several of them, would you need a log from every single one? Thanks

here it is, Thanks efsw_logs2.zip

Good Morning, In my company we had a Trojan (PowerShell/TrojanDownloader.Agent.CRU) infection long time ago in several of our servers, it was all cleaned and everything is working but the Trojan keeps trying to launch in the servers. ESET finds it and delete it but it keeps coming back and we are unable to find it and get rid of it for good. I have read similar infections in this forums but the answer is deleting some registry keys with no more explanations so I can't find a proper solution for my issue. Could someone please help? I'm attaching 2 logs from 2 of our servers Thank you very much ESET.zip