Hi, I created a post the other night to warn about “google(dot)com” and I performed a factory reset since the malware was deeply embedded in the system. I performed a Factory Reset (Full Restore) and the malware still exists. I decided to let it perform its actions and capture the data streams with Wireshark and I have a list of websites that should be checked against. Some are legitimate as I used VirusTotal, Google and a few other websites. Just want to get this out there so there will be protection against this malware and its processes.
You can report a suspicious/malicious sample (File/Website) here: https://www.avast.com/report-malicious-file.php
I performed a Factory Reset (Full Restore) [b]and the malware still exists[/b].Did you also reset your router? https://forum.avast.com/index.php?topic=222458.msg1479158#msg1479158
Yes, however the problem is still occurring. Thank you for that suggestion, by the way. It will hopefully help other users with similar issues.
Edit: Forgot to mention the reset method I used was holding the “reset” button on my modem/router for 10+ seconds.
Also, thank you for the provided link to submit the log containing possible malicious IP addresses. Hopefully that was analyzed and was actually useful for the Avast team and its users.
I’ll be performing a fresh install via Bootable USB so I know it will be a clean copy of Windows 10. I will also update this thread with a post on if that solves the issue or if it persists.
Again, thank you for your time and help.
Update #1: I started a factory reset on my PC and also performed another factory reset on my Modem/Router simultaneously, in case the malware was reinstalled to the router from my PC via LAN. I’m confident that is why the malware was present on my PC after the initial factory reset I performed on my PC. I didn’t think to do a reset on both at the same time for some reason until now. PC should be reset within the next 3 hours and I will provide another update status.