Author Topic: PUM.Proxy Malware Keeps Coming Back  (Read 3289 times)

0 Members and 2 Guests are viewing this topic.

February 01, 2022, 10:36:57 PM

jagtrader

  • Newbie

  • Offline
  • *

  • 2
  • Reputation:
    0
    • View Profile
PUM.Proxy Malware Keeps Coming Back
« on: February 01, 2022, 10:36:57 PM »
I have cleared the malware with RogueKiller but it keeps returning and adding a proxy connection to my chrome browser.

The attached image shows the details of the malware.

Any help with this would appreciated.


Reply #1February 02, 2022, 05:33:52 PM

Curson

  • Global Moderator
  • Hero Member

  • Offline
  • *****

  • 2809
  • Reputation:
    100
    • View Profile
Re: PUM.Proxy Malware Keeps Coming Back
« Reply #1 on: February 02, 2022, 05:33:52 PM »
Hi jagtrader,

Welcome to Adlice.com Forum.
This proxy is not necessary malicious. We need to check this manually.

Please follow the following process :
1) Launch the command prompt windows (cmd) with admin rights and copy/paste the following command :
Code: [Select]
netstat -aobn > "%USERPROFILE%\Desktop\netstat.txt"
Do not close the command prompt !

2) A new file named netstat.txt should has been created on your desktop. Please attach it with your next reply.

Regards.

Reply #2February 04, 2022, 08:26:04 PM

jagtrader

  • Newbie

  • Offline
  • *

  • 2
  • Reputation:
    0
    • View Profile
Re: PUM.Proxy Malware Keeps Coming Back
« Reply #2 on: February 04, 2022, 08:26:04 PM »
Thanks for your help. See attached netstat report.

Reply #3February 04, 2022, 09:37:19 PM

Curson

  • Global Moderator
  • Hero Member

  • Offline
  • *****

  • 2809
  • Reputation:
    100
    • View Profile
Re: PUM.Proxy Malware Keeps Coming Back
« Reply #3 on: February 04, 2022, 09:37:19 PM »
Hi jagtrader,

According to the Netstat log, the port number 8865 is not in use anymore.
Could you please do a new scan with RogueKiller and attach the scan log with your next reply ?

Regards.