I’ve been fighting this root kit all day today and I’ve just had enough! I’ve ran Malwarebytes and it’s unable to pick it up. But I keep getting popups from Avast saying that this is a root kit/malware. I’ve ran Malwarebytes Anti-Rootkits and Chameleon and it can’t pick up anything. Avast will try to do bootup scans and nothing will pop up but when I do full system scans it finds the virus in the systems.
This is the detailed report from the infected scans:
File Name: SVC Pharos Systems ComTaskMaster >C:\PHAROS~1\Core\CTsMstr.exe
Severity: High
Status: Threat: Win32:Evo-gen [Susp]
I’ve tried repairing it and nothing happens. I try to send it to the chest and Avast is then unable to do so. Then I try to delete it but it comes back or an error message pops up - Error: 0xA0000101. (-1610612479)
Is this a false positive? If this is a real malicious threat what should I do?
After posting your logs, do not attempt to fix or make any changes to your machine. A Malware Removal Specialist will be along to assist you. They come on the forum at different times. Thank you.
I can’t progress past step 1 of that sticky because MBAM won’t pick up any malware or root kits. When it scans it says everything is fine, meanwhile, Avast is popping up constantly saying my laptop is infected with the said root kit.
No problem! I hope I wasn’t coming across as snippy or anything. If I did I am truly sorry. I never intended that. Thanks for the help!
Which tool would you recommend?
I have never used my laptop as a server before and to be honest I have never heard of Pharos. It’s the main reason as to why I was a bit worried that as well as it would never go away, even when I set avast to delete it! So everything is OK then? What should I do if avast pops up with another alert that it found this false-positive root kit?
WARNING:Java is the #1 exploited program at this time. The Department of Homeland Security recommends that computer users disable Java
See this article
I would recommend that you completely uninstall Java unless you need it to run an important software.
In that instance I would recommend that you disableJava in your browsers until you need it for that software and then enable it. (See How to diasble Java in your web browser and How to unplug Java from the browser)
Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:
CryptoPrevent install this programme to lock down and prevent crypto ransome ware