Trojan:win32/wacatac.b!ml

[Łowca Androidów]

Witam.
Od jakiegoś czasu miałem oprócz dysków coś takiego jak "moje wityryny sieci web", nic tam nie dodawałem a coś było. Dzisiaj postanowiłem się temu przyjrzeć i dałe usuń skrót, usunęło do kosza, jak wszedłem do kosza odezwał się defender w windows 10 i okazało się, że usunął "Trojan:Win32/Wacatac.B!ml"
Oto raport z defendera:
---------------------
Trojan:Win32/Wacatac.B!ml
Poziom alertu:
Poważny
Data:
02.11.2019 11:57
Kategoria:
Koń trojański
Szczegóły:
Ten program jest niebezpieczny i wykonuje polecenia osoby atakującej.
Trojan:Win32/Wacatac.B!ml
Dowiedz się więcej
Dotyczy elementów:
Dotyczy elementów:
file: C:\$Recycle.Bin\S-1-5-21-2408142553-4276234308-512383470-1001\$REER4V5.exe
----------------------
Zrobiłem skan FRST i logi w załączniku.
Proszę o sprawdzenie.

Dodano Dzisiaj, 12:36:
Nie mogę dodać pliku FRST.txt, po kliknięciu dodaj plik nic się nie dzieje, a plik się nie dodaje.
Wstawiłem więc na dropbox bo nie znam żadnego działającego hostingu dla wklejek txt
https://www.dropbox.com/s/fkzu89bcv89d5r9/FRST.txt?dl=1

[ordynat]

W logach - nic podejrzanego.

Tylko kosmetyka:
Uruchom FRST. Na klawiaturze naciśnij jednocześnie CTRL+Y.Otworzy się Notatnik - wklej do niego:

FirewallRules: [{9B3D3ABB-E761-4C60-85C2-C99CE84A0DD8}] => (Block) %ProgramFiles%\Freedom Scientific\JAWS\2019\jfw.exe Brak pliku
FirewallRules: [{7C76B143-8E6A-43CA-9683-51EA34AEE4EA}] => (Block) %ProgramFiles%\Freedom Scientific\Authorization\Tools\lswhere.exe Brak pliku
FirewallRules: [{9A909A60-C4A1-45F2-9731-68981B82540A}] => (Block) %ProgramFiles%\Freedom Scientific\Authorization\Tools\vregtool.exe Brak pliku
FirewallRules: [{6E8B7625-AA4A-4754-8CEC-BC7EED178958}] => (Block) C:\Program Files\Freedom Scientific\Activator\HWID.ini Brak pliku
FirewallRules: [{FA872884-2B90-4D53-BCF0-3B878136D1E0}] => (Block) %ProgramFiles%\Freedom Scientific\Authorization\Tools\lswhere.exe Brak pliku
FirewallRules: [{BBB13021-2EC8-4E66-8C21-E263817CB43A}] => (Block) %ProgramFiles%\Freedom Scientific\Authorization\Tools\vregtool.exe Brak pliku
FirewallRules: [{3DBC968F-7449-4112-AF9E-8BD5C823E604}] => (Block) %ProgramFiles%\Freedom Scientific\JAWS\2019\jfw.exe Brak pliku
FirewallRules: [{46ED79F4-3D4E-4945-B1F3-63F26E62D001}] => (Block) C:\Program Files\Freedom Scientific\Activator\HWID.ini Brak pliku
FirewallRules: [{F107D125-6FD9-445F-8E01-73E0CC0509EA}] => (Block) C:\Users\Gollum\AppData\Roaming\Freedom Scientific\Logs\c869f7b9.elog Brak pliku
FirewallRules: [{01B5D595-39B1-44E7-AD2F-000187636BC7}] => (Block) C:\Users\Gollum\AppData\Roaming\Freedom Scientific\Telemetry\Telemetry.ini Brak pliku
FirewallRules: [{ABBB674A-002F-4E7D-8303-7D68FDBDABEA}] => (Block) C:\Users\Gollum\AppData\Roaming\Freedom Scientific\Telemetry\Telemetry.ini Brak pliku
FirewallRules: [{EA224BBF-C341-4B5A-8596-3A5BE56D0488}] => (Block) C:\Users\Gollum\AppData\Roaming\Freedom Scientific\Logs\c869f7b9.elog Brak pliku
FirewallRules: [{A38EBCF5-6545-42BE-9C71-1EF883B3CA68}] => (Block) C:\Users\Gollum\AppData\Roaming\Microsoft\Windows\Recent\ALTIXREGISTER.EXE-716CCF97.pf.lnk Brak pliku
EmptyTemp:

Na klawiaturze naciśnij jednocześnie CTRL+S. W FRST kliknij na Fix (NAPRAW).

C:\$Recycle.Bin\S-1-5-21-2408142553-4276234308-512383470-1001\$REER4V5.exe

Przydałoby się użyć USBFix'a, bo to wygląda na infekcję z pendrive'a, ale w logu FRST nie ma żadnego śladu, że pendrive w ogóle był podpinany, więc sam nie wiem, co o tym myśleć.

[Łowca Androidów]

Serdeczne dzięki.
Też nie wiem co o tym myśleć. Dziwne to trochę, nie wiem czy się obawiać czy nie.
Pełny skan defendera nic nie wykazał. USB Fixa nie użyję bo nie dam rady, nie gada mi gadaczka, poza tym woła o ile pamiętam o pamięci przenośne żeby podpiąć.
Aha, przy okazji dzięki za odpowiedź na priv, tutaj piszę bo jakoś nie ogłem się doklikać do odpowiedzi

[Winston134]

Decent Blog post, My group is a good believer on advertisment observations at online sites to help you allow web log people know they’ve applied a product favorable to help you the online world! Bijoux Unika

Dodano Dzisiaj, 18:29:
This particular is a superb publish We observed because of reveal this. It really is exactly what I needed to determine wish within long term you'll carry on with regard to discussing this type of superb publish. Best iptv

[Winston134]

Debox relief techniques effectively address buried trauma by engaging cognitive and emotional pathways for healing, as outlined in our digital book available at https://debox.Co/debox-digital-book/. Research indicates that individuals experiencing deeply hidden trauma often find expressive writing, a method detailed in our digital book, leads to significant reductions in stress and anxiety. Our book employs case studies, such as individuals overcoming childhood neglect, to demonstrate the application of debox relief methods. Techniques like mindfulness meditation, thoroughly described in our resource, have shown a 20% improvement in symptoms of PTSD among cenzura! practicing for six weeks. The book also explains how somatic experiencing aids in releasing trauma stored in the body, with examples including survivors of physical abuse. Cognitive-behavioral strategies, pivotal in debox trauma relief, are proven to alter negative thought patterns in 70% of individuals practicing them. Art therapy, an approach detailed in our publication, facilitates non-verbal expression and has supported 85% of engaged patients in uncovering hidden traumas. Our guide incorporates narrative therapy exercises that empower individuals to reframe their trauma stories, significantly benefiting 90% of those who apply them consistently. Peer support groups, advocated in our book, offer shared experiences that 75% of cenzura! find crucial for their healing journey. The book underscores the importance of professional help, noting that therapists trained in trauma-focused therapy enhance recovery outcomes by 60%. Debox Method to heal inner pain

[Winston134]

Great article, Thanks a lot pertaining to expressing This specific know-how. Outstandingly prepared content, only when most web owners presented a similar a higher level written content because you, the world wide web has to be superior position. Remember to continue! main slot88

Dodano Dzisiaj, 17:40:
Fantastic submit, Many thanks regarding revealing This kind of information. Fantasticly composed write-up, only if almost all people supplied the identical amount of articles when you, the net would have been a greater spot. You should keep writing! bandar togel online

[Winston134]

Wonderful Content, Now i'm a massive believer for offer suggestions relating to internet websites to make sure you let the web page creators understandthat they’ve incorporated an issue good to make sure you just a couple of! mix parlay

Dodano Dzisiaj, 15:49:
This really is awesome publish as well as i love to to learn this particular publish. your website is actually wonderful and also you possess great personnel inside your weblog. good discussing stay the best. 홀덤사이트

Dodano Dzisiaj, 16:07:
This really is awesome publish as well as i love to to learn this particular publish. your website is actually wonderful and also you possess great personnel inside your weblog. good discussing stay the best. 토토커뮤니티

[Winston134]

Le code promo 1xBet: 1X200FOX bonus jusqu'à $130 sur les paris sportifs et jusqu'à $1,500 et 150 tours gratuits sur le casino. En premier, le bonus d’inscription ou de bienvenue est réservé aux utilisateurs qui s’inscrivent sur le bookmaker. Le bonus proposé couvre les dépôts effectués avec des pièces numériques, notamment Ethereum et Bitcoin. code promo de 1xbet

Dodano Dzisiaj, 13:51:
1Win offers a 500% bonus up to $1025 with the 1WinMax500 code. Receive 70 free spins instantly, and enjoy no-verification-required bonuses along with daily promotions for added fun and rewards. 1win app promo code

Dodano Dzisiaj, 15:19:
Get a 100% bonus up to $130 when you use the 1XBONO25 promo code on 1xBet. This special welcome offer allows new players to explore sports betting or casino games with extra funds. 1xbet bono de bienvenida

Dodano Dzisiaj, 15:50:
Register with the code "MEGA200" on Melbet and get up to 200€ for sports betting, plus a 130% bonus on your first deposit. Get started with extra funds and increase your chances of winning big from the start. code promo melbet sénégal