Solved NSlookup.exe

Status
Not open for further replies.

aviseth20

New Member
Thread author
Mar 25, 2022
13
I cleaned my pc recently and now that I switched it on it keeps showing the nslookup.exe cmd pop up. It takes up a lot of CPU power, please help me fix this issue.
 

icotonev

Super Moderator
Verified
Staff Member
Mar 9, 2017
538
Hello, Welcome to MalwareTips..! :)

Please follow the following instruction ..:

Download Farbar Recovery Scan Tool and save it to your desktop. --> IMPORTANT

If your antivirus software detects the tool as malicious, it’s safe to allow FRST to run. It is a false-positive detection.
If English is not your primary language, right click on FRST.exe/FRST64.exe and rename to FRSTEnglish.exe/FRST64English.exe

Note:
You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
  • Double-click the FRST icon to run the tool. When the tool opens click Yes to disclaimer.
  • Press Scan button and wait for a while.
  • The scanner will produced two logs on your Desktop: FRST.txt and Addition.txt.
  • Please attach the content of these two logs in your next reply.
---------------------------------------------------

In your next reply, please include:
  • FRST.txt
  • Addition.txt
 

aviseth20

New Member
Thread author
Mar 25, 2022
13
Here ya go...
I also disabled a program in task manager startup section which has reduced the frequency of it popping up
 

Attachments

  • Addition.txt
    91.7 KB · Views: 21
  • FRST.txt
    64.9 KB · Views: 21
Last edited:

icotonev

Super Moderator
Verified
Staff Member
Mar 9, 2017
538
Farbar Recovery Scan Tool - Fix

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system that cannot be undone.


Please download the attached file to the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The Computer will restart when the fix is completed.

It will create a log (Fixlog.txt) please post it to your reply.


In your next reply, please include:
  • Fixlog.txt
 

Attachments

  • fixlist.txt
    19 KB · Views: 22

aviseth20

New Member
Thread author
Mar 25, 2022
13
It said not responding multiple times during the fix.....
 

Attachments

  • Fixlog.txt
    150.6 KB · Views: 18

icotonev

Super Moderator
Verified
Staff Member
Mar 9, 2017
538
Wonderfully..! :) How your computer behaves ..? We are dealing with Bitcoin minier..! Next ....:

FRST scan
  • Double-click FRST.exe/FRST64.exe to run it.
  • Press the Scan button.
  • When finished, it will produce logs called FRST.txt and Addition.txt in the same directory the tool was run from.
  • Please copy and paste the logs in your next reply.

Run AdwCleaner (Scan mode)

Download AdwCleaner and save it to your desktop.
  • Double click AdwCleaner.exe to run it.
  • Click Scan Now.
    • When the scan has finished, a Scan Results window will open.
    • Click Cancel (at this point do not attempt to Quarantine anything that is found)
  • Now click the Log Filestab.
    • Double click on the latest scan log (Scan logs have a [S0*] suffix, where * is replaced by a number. The latest scan will have the largest number)
    • A Notepad file will open containing the results of the scan.
    • Please post the contents of the file in your next reply.


Scanning with SecurityCheck by glax24
  • Download SecurityCheck by glax24 from here and remember the tool on the desktop.
  • Run the program right-click the administrator name
  • Wait for the scan to finish. It will open in a text file named SecurityType.txt. Copy the contents of this file to your next post
  • You can find this file in the root of the system disk in a folder called SecurityCheck, C: \\ SecurityCheck \\ SecurityCheck.txt

In your next reply, please include:
  • FRST.txt
  • Addition.txt
  • The AdwCleaner[S0*].txt
  • SecurityCheck.txt
 

aviseth20

New Member
Thread author
Mar 25, 2022
13
I want to get rid off the mining stuff aswell pls help
 

Attachments

  • Addition.txt
    78.6 KB · Views: 19
  • AdwCleaner[S03].txt
    1.7 KB · Views: 19
  • FRST.txt
    58.7 KB · Views: 18
  • SecurityCheck.txt
    8.4 KB · Views: 20

aviseth20

New Member
Thread author
Mar 25, 2022
13
its fine currently but it shuts down randomly sometimes, and if it has some mining stuff please help me get rid off it
 

icotonev

Super Moderator
Verified
Staff Member
Mar 9, 2017
538
We have already removed the Bitcoin minier .. You should not have the initial symptoms ..!
 

icotonev

Super Moderator
Verified
Staff Member
Mar 9, 2017
538
For the final:

KpRm by Kernel-panik
  • Download KpRm and save it to your Desktop (see here if you must use Chrome)
  • Note: If the file is detected as malware it is not and it is safe to download. The detection is a false positive.
  • Right click on the icon and select Run as administrator
  • Click Yes on the Disclaimer
  • Place a check mark in Delete Tools, Create Restore Point, and Delete in 7 days
  • Click Run
  • Click OK on All operations are completed
  • KpRm will delete itself from you Desktop and you can either save or remove the report that is generated
  • You are free to remove any other tools/reports still remaining
  • Please copy and paste its contents in your next reply.
 
Status
Not open for further replies.

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top