"zWrlk2v89.exe" allowed on my Fort Firewall. What is this ?

[dronefox1166]

Hello

the path :
C:\Users\[Username]\AppData\Local\Temp\687EE890-30FFA5C8-10A77E38-612F57F0\zWrlk2v89.exe

when I try to open explorer in order to analyse with VirusTotal, it don't respond :


Thanks !

 

[Bot]

The "zWrlk2v89.exe" file you're referring to is located in the Temp folder, which is often used by programs for temporary storage. It's unusual for a .exe file to be there. It could potentially be malicious. If your explorer freezes when trying to analyze it, it's a red flag. I recommend running a full system scan with your antivirus software. Also, consider using a tool like Process Explorer to kill the process if it's running.

 

[icotonev]

By Staff - [MANDATORY] Preparation Guide Before Requesting Malware Removal Help

Hi and welcome to MalwareTips Malware Removal Forum. If you are reading this, then you are probably seeking help or feel infected. Over 5000 topics have been posted in this forum and most of them have reached a successful conclusion. All instructions are very simple and you need only basic...

malwaretips.com

 

[harlan4096]

This behavior usually happens when it is blocked because it is running on the system... if it is not a virtual machine, I'm moving this thread to Malware assistance section!

 

[icotonev]

Hello , dronefox1166 ..!

My name is icotonev and I'm here to help you remove malware ..! Before we begin, please note the following:

• First, please keep in mind most of us at MalwareTips volunteer our assistance for your benefit in your time of need. Please try to match our commitment to you with your patience toward us.Logs from malware diagnostic or removal programs can take some time to get analyzed. Also, have in mind that all the experts here are volunteers and may not be available to assist when you post. Please, be patient, while I analyze your logs.
• It is important to not run any tools or take any steps other than those I will provide for you.Also, do not uninstall or install any software during the procedure, unless I ask you to do so.
• Cracked or pirated programs are not only illegal, but also can make your computer a malware target. Having such programs installed, is the easiest way to get infected. Thus, no need to clean the computer, since, soon or later, it will get infected again. If you have such programs, please uninstall them now, before we start the cleaning procedure.
• Please perform all steps in the order they are listed. If things are not clear or you experience problems be sure to stop and let me know.
• Please attach all logs into your post unless otherwise requested.
• When your computer is clean I will let you know, provide instructions to remove tools and reports, and offer you information about how you can combat future infections.
• If you do not reply to your topic after 3 days I will assume it has been abandoned and I will close it.

Please follow the following instruction ..:

Download Farbar Recovery Scan Tool and save it to your desktop. --> IMPORTANT

If your antivirus software detects the tool as malicious, it’s safe to allow FRST to run. It is a false-positive detection.
If English is not your primary language, right click on FRST.exe/FRST64.exe and rename to FRSTEnglish.exe/FRST64English.exe

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• Double-click the FRST icon to run the tool. When the tool opens click Yes to disclaimer.
• Press Scan button and wait for a while.
• The scanner will produced two logs on your Desktop: FRST.txt and Addition.txt.
• Please attach the content of these two logs in your next reply.

---------------------------------------------------

In your next reply, please include:

• FRST.txt
• Addition.txt

 

[dronefox1166]

Sorry ;
finally, it's OK, I've purged the old obsolete programs in Fort Firewall.
And in Temp, the targeted source folder is no longer there...
Thanks again!

 

[icotonev]

Thank you for the information. In that case, I close the topic ..!
Be safe..!
Regards..