Opticipal / Scvhost Malware

Like many of the users here, I’ve been receiving the constant “threat has been detected” notification.
I’ve attached the necessary logs here.

Thanks! :slight_smile:

Let me know if this stops it

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

2014-10-30 23:05 - 2014-11-05 21:20 - 00000000 ____D () C:\ProgramData\ecbaef90-5696-41e1-a1c3-3e8112ce2840 Task: {D84FC3A9-B970-42BA-8E46-C9103AD90FCA} - System32\Tasks\LaunchSignup => C:\Program Files (x86)\MyPC Backup\Signup Wizard.exe <==== ATTENTION C:\Program Files (x86)\MyPC Backup C:\Users\jdimaand\AppData\Local\Temp\f194C9d6\temp\BITF828.tmp EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that

THEN

Please download AdwCleaner by Xplode onto your desktop.

[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S1].txt as well.

Done following your instructions, logs are attached, and so far I haven’t received any notification. But I’ll monitor it for the next couple of days and see if it comes back. Otherwise, thanks for the help! :slight_smile:

Let me know when you are happy and I will tidy up