Need help fixing 'nslookup.exe' file in C:\Windows\SysWOW64

[Shamsad456]

I found an error that I really need help with.

After downloading the latest version of Malwarebytes, it seems I must've accidentally downloaded something wrong, a trojan to be specific (I think).

Malwarebytes keeps giving me a notification that it has blocked a trojan website in the directory C:\Windows\SysWOW64\nslookup.exe
I have done the research, and know that there are other locations for where this is meant to be, and I do have duplicates of this file in my C (boot) drive.

If anyone is able to help me fix this error, I would really appreciate it.
Thank you.

 

[nasdaq]

Hello, Welcome to MalwareTips.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

[/b][/b]Download the Farbar Recovery Scan Tool (FRST).
Choose the 32 or 64 bit version for your system.
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

How to attach a file:
In the Reply section in the bottom of the topic Select Click the Attach Files.
Navigate to the location of the File.
Click the file. It will appear in the reply section.
Click the Post Reply button.

Please post the logs for my review.

Let me know what problems persists.

Wait for further instructions

p.s.
Please attach also a copy of the Malwarebytes' error message.

 

[Shamsad456]

Thanks for the help. Here are the files.

FRST are the first Files, and Malwarebytes' files are the last 2 ( I went onto Malwarebytes to take a screenshot of the malicious site alert on Malwarebytes(the first screenshot) and Malwarebytes also gave a notification on my desktop (the second screenshot))

 

[nasdaq]

Hi,

Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The Computer will restart when the fix is completed.

It will create a log (Fixlog.txt) please post it to your reply.
===

Please post the Fixlog.txt and let me know what problem persists.

 

[Shamsad456]

No errors were found on my desktop/computer.

 

[nasdaq]

Hi,
Looking good.

Glad we could help.

 

[Shamsad456]

Thanks for the help

 

[Hagonel]

Removed.

 

[nasdaq]

Hi


@Hagonel

You are not allowed to post in someone else topic.

If you need and and to get support please start a new topic in the forum.

Windows Malware Removal Help & Support

Get help removing adware, malware, spyware, ransomware, trojans, and viruses from Windows PCs. Follow the instructions in the pinned topics first. For security purposes, only authorized members may respond to requests for assistance.

malwaretips.com

Repeat the what you have posted here.

I or an other helper will be with you.

nasdaq