Help! Malware Atomic and Diff

system · 2017-09-04T19:19:59.000Z

Hi! I need help with a malware, atomic and diff

URL: http://atomictrivia.ru/atomic.php
Infection: URL:Mal
Process: C:\Windows\system32\msiexec.exe

URL: http://differentia.ru/diff.php
Infection: URL:Mal
Process: C:\Windows\system32\msiexec.exe

Can anyone help me please, there are the 2 logs from Farbar Recovery Scan Tool

Eddy · 2017-09-04T19:22:27.000Z

What is KMS doing on your system ?

system · 2017-09-04T19:33:48.000Z

Is the PC from my work so… not my personal PC

Eddy · 2017-09-04T20:02:39.000Z

Let the admin deal with it.

polonus · 2017-09-05T09:59:13.000Z

Eddy has a point here as the negative community score for this malware site is -149!!!
See: https://www.virustotal.com/#/url/3985dfaa178c72e9dcac15bfb1ed8967944ef69582d7e4e0931816fd59a13553/detection
The domain won’t resolve now…

To compare a cleansing methodology your admin could take a look here: https://malwaretips.com/threads/detecting-atomictrivia-ru-atomic-php-and-differentia-ru-diff-php.73080/ but remember that is a personal fix for a particular victim, on your machine and with your configuration cleansing should be performed according to personal logs provided to a qualified malware remover.

Your admin might be savvy enough to perform these approved cleansing methods:

Method A: Manual Removal Guide

Step 1. Stop htxp://atomictrivia.ru/atomic.php associated running process in Windows Task Manager.

Press CTRL+ALT+DEL or CTRL+SHIFT+ESC or Press the Start button, type “Run” to select the option, type “taskmgr” and press OK > end its associated running process.

Step 2. Uninstall http://atomictrivia.ru/atomic.php associated program in Control Panel.

Click Start button> Control Panel > Uninstall a program > find its associated program and right click on it and then click Uninstall to uninstall the program.

Step 3. Reset your browsers to clear your internet history records, internet temp files and cookies.

Internet Explorer:

Open Internet Explorer, click the gear icon > Internet options.
Go to the Advanced tab, click the Reset button > Reset Internet Explorer settings > Delete personal settings > click on Reset option.
Click Close and OK to save the changes.

Mozilla Firefox:

Open Mozilla Firefox, go to the Help section > Troubleshooting Information.
Select Reset Firefox and click Finish.

Google Chrome:

Click the Chrome menu button, select Tools > Extensions, find unknown extension and remove them by clicking Recycle bin.
Click Settings > Show Advanced settings > Reset browser settings and click Reset.

Step 4. Restart your computer to take effect.

polonus (volunteer website security analyst and website error-hunter)

Announcements