Need help fixing 'nslookup.exe' file in C:\Windows\SysWOW64

Status
Not open for further replies.

Shamsad456

New Member
Thread author
Sep 5, 2020
4
I found an error that I really need help with.

After downloading the latest version of Malwarebytes, it seems I must've accidentally downloaded something wrong, a trojan to be specific (I think).

Malwarebytes keeps giving me a notification that it has blocked a trojan website in the directory C:\Windows\SysWOW64\nslookup.exe
I have done the research, and know that there are other locations for where this is meant to be, and I do have duplicates of this file in my C (boot) drive.

If anyone is able to help me fix this error, I would really appreciate it.
Thank you.
 

nasdaq

Moderator
Verified
Staff Member
Nov 5, 2019
1,425
Hello, Welcome to MalwareTips.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

[/b][/b]Download the Farbar Recovery Scan Tool (FRST).
Choose the 32 or 64 bit version for your system.
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

How to attach a file:
In the Reply section in the bottom of the topic Select Click the Attach Files.
Navigate to the location of the File.
Click the file. It will appear in the reply section.
Click the Post Reply button.

Please post the logs for my review.

Let me know what problems persists.

Wait for further instructions

p.s.
Please attach also a copy of the Malwarebytes' error message.
 
  • Like
Reactions: harlan4096

Shamsad456

New Member
Thread author
Sep 5, 2020
4
Thanks for the help. Here are the files.

FRST are the first Files, and Malwarebytes' files are the last 2 ( I went onto Malwarebytes to take a screenshot of the malicious site alert on Malwarebytes(the first screenshot) and Malwarebytes also gave a notification on my desktop (the second screenshot))
 

Attachments

  • Addition.txt
    71.5 KB · Views: 5
  • FRST.txt
    276.8 KB · Views: 4
  • Annotation 2020-09-06 191801.png
    Annotation 2020-09-06 191801.png
    30.8 KB · Views: 4
  • Annotation 2020-09-06 191856.png
    Annotation 2020-09-06 191856.png
    11.2 KB · Views: 4
  • Like
Reactions: upnorth

nasdaq

Moderator
Verified
Staff Member
Nov 5, 2019
1,425
Hi,

Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The Computer will restart when the fix is completed.

It will create a log (Fixlog.txt) please post it to your reply.
===

Please post the Fixlog.txt and let me know what problem persists.
 

Attachments

  • fixlist.txt
    18.3 KB · Views: 9
  • Like
Reactions: upnorth

nasdaq

Moderator
Verified
Staff Member
Nov 5, 2019
1,425
Hi


@Hagonel

You are not allowed to post in someone else topic.

If you need and and to get support please start a new topic in the forum.


Repeat the what you have posted here.

I or an other helper will be with you.

nasdaq
 
Status
Not open for further replies.

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top