Author Topic: ASSIST NEDED  (Read 6997 times)

0 Members and 1 Guest are viewing this topic.

June 29, 2018, 01:05:09 PM

Bri Traci

  • Newbie

  • Offline
  • *

  • 2
  • Reputation:
    0
    • View Profile
ASSIST NEDED
« on: June 29, 2018, 01:05:09 PM »
A scan using roguekiller came back with svchost.exe proc.runPE  ACTION KILL 4492. Assuming 4492 is the PID? If so the process must be hidden because I cant find it running. Plz advise

edited: Found PID 4492 , plz see screenshot
« Last Edit: June 29, 2018, 01:10:38 PM by Bri Traci »

Reply #1June 29, 2018, 03:29:08 PM

Curson

  • Global Moderator
  • Hero Member

  • Offline
  • *****

  • 2809
  • Reputation:
    100
    • View Profile
Re: ASSIST NEDED
« Reply #1 on: June 29, 2018, 03:29:08 PM »
Hi Bri Traci,

Welcome to Adlice.com Forum.
Could you please attach RogueKiller JSON report with your next reply ?

Regards.

Reply #2June 30, 2018, 02:12:17 AM

Bri Traci

  • Newbie

  • Offline
  • *

  • 2
  • Reputation:
    0
    • View Profile
Re: ASSIST NEDED
« Reply #2 on: June 30, 2018, 02:12:17 AM »
absolutley, Im running a new scan as we speak.  little things have happend since I first posted this, such as now my task manager has mysteriously dissapeared, when trying to shut my system down I am informed that other people are logged in to my system and they should save their work first, but yet I can find no other users, hidden or otherwise, no start up keys, no persistent start up keys anywhere in my registry, no hidden processes, nothing in app data local or roaming folders, program data directory seems normal enough..im stumped at this point..Ill be poking around my group policy in a minute ..whatever is in my system, or whoever is in my system is apparently better than me at crypting their trojan ..but no worries eh..takes a hacker to stop a hacker... ( hey mr hacker,,are you reading this log as i type? lol..go eff urself....lmao. You shouldnt have disabled my task manager rookie..
« Last Edit: June 30, 2018, 02:22:41 AM by Bri Traci »