sdnian 6 Posted February 16, 2022 Share Posted February 16, 2022 Please help to clean this trojan, thank you! eea_logs.zip Link to comment Share on other sites More sharing options...
Administrators Marcos 4,935 Posted February 16, 2022 Administrators Share Posted February 16, 2022 Please provide ELC logs collected with "Threat detection" profile selected: Link to comment Share on other sites More sharing options...
sdnian 6 Posted February 16, 2022 Author Share Posted February 16, 2022 20 minutes ago, Marcos said: Please provide ESET Log Collector logs collected with "Threat detection" profile selected: ESET Log Collector log file - eea_logs.zip Link to comment Share on other sites More sharing options...
Administrators Marcos 4,935 Posted February 16, 2022 Administrators Share Posted February 16, 2022 Please delete HCKU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Screenshot. It downloads an html file from a blacklisted url via mshta.exe Nightowl 1 Link to comment Share on other sites More sharing options...
Recommended Posts