Operating System
Windows 10
Infection date and initial symptoms
3/31/2016

I started getting consecutive random pop ups of a file called (yorb) that had "downloaded" via google chrome. I left my laptop for an hour to see how far it would go and they just keep going up, the file name just changes by the replacement of a number.
Current issues and symptoms
Same download consistency which is very annoying and might turn into a bigger issue later.
Steps taken in order to remove the infection
None yet.

TwinHeadedEagle

Removal Expert
Staff member
Verified
Hello,


Scan with ZOEK

Please download ZOEK by Smeenk and save it to your desktop.
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

  • Right-click on
    icon and select
    Run as Administrator to start the tool.
  • Wait patiently until the main console will appear, it may take a minute or two.
  • In the main box please paste in the following script:
    Code:
    createsrpoint;
    autoclean;
    emptyclsid;
    emptyalltemp;
    ipconfig /flushdns >>"%temp%\log.txt";b
  • Make sure that Scan All Users option is checked.
  • Push Run Script and wait patiently. The scan may take a couple of minutes.
  • When the scan completes, a zoek-results logfile should open in notepad.
  • If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)
Upload it in your next reply.