Windows 10: C:\Users\bount\AppData\Roaming\narcoticalness.exe

C:\Users\bount\AppData\Roaming\narcoticalness.exe

:)

 

Suspected infection in AppData\Roaming\.exe

Original title: AppData\Roaming\.exe

Can someone tell me what this is?

• C:\Users\knenina\AppData\Roaming\522001c91a0ba0c96d004d78\522001c91a0ba0c96d004d78.exe

My Antivirus said Application.Downloader.AAB (Suspected infection) but then it also says

"Cannot open file" error occurred: The "Cannot open file" error message means that the scanner was unable to open a file and that this file was not scanned. You can normally ignore this error message as there are many reasons for this message
that do not imply a security threat, including:

• The file was a system file. System files are protected by the operation system by design. You can ignore this message in this case.
  
• You do not have permission to read the file. To scan the file, log in with a user account with sufficient permissions (for example the computer's administrator account) and rescan.
  
• The file was in use by an application when the scan was performed. To scan this file, close all applications and rescan.

Said I have to manually remove i'm unsure how to do that exactly.

Or is this a valid file? This just appeared today.

 

/Users/%appdata%/Roaming/Microsoft/Telemetry/Sihost64.exe Malware

Hi, highlight all the bold text then press Ctrl+C to copy the text to the clipboard.

Run FRST and press the Fix button. FRST will process the clipboard text instructions and restart the computer to complete cleaning.

Let me know how things are running and post the Fixlog.txt file from your Downloads directory.

Start::

CreateRestorePoint:

CloseProcesses:

Task: {41100D28-020D-4D5D-B0BB-8F3899BA8440} - System32\Tasks\sumcheck32 => C:\Users\KL\AppData\Roaming\sumcheck32.exe [2109440 2021-12-01] (Google Inc.) [File not signed] <==== ATTENTION

VirusTotal: C:\Users\KL\AppData\Roaming\sumcheck32.exe

C:\Users\KL\AppData\Roaming\sumcheck32.exe

C:\Users\KL\AppData\Roaming\Microsoft\Telemetry

C:\$WinREAgent

ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => D:\inject\7-Zip\7-zip.dll -> No File

ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => D:\inject\7-Zip\7-zip.dll -> No File

ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => D:\inject\7-Zip\7-zip.dll -> No File

FirewallRules: [{F7018BC3-5907-4E2A-8A64-5DC759CAE40E}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe => No File

FirewallRules: [{5B57D192-852F-417F-8C67-3EC46B765B04}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe => No File

FirewallRules: [TCP Query User{049BFCC5-7CE1-45CC-9165-70ECAA3756D4}C:\program files (x86)\gta\grand theft auto v\gta5.exe] => (Block) C:\program files (x86)\gta\grand theft auto v\gta5.exe => No File

FirewallRules: [UDP Query User{7CBBCC98-1BBE-4202-A13F-8C3CCB5D0138}C:\program files (x86)\gta\grand theft auto v\gta5.exe] => (Block) C:\program files (x86)\gta\grand theft auto v\gta5.exe => No File

EmptyTemp:

End::

 

C:\Users\User\AppData\Roaming\windows.js error

I get a constant error pop-up saying that the windows script host can't find script file "C:\Users\User\AppData\Roaming\windows.js." Has anyone ran into this? Is there a fix?