12,194guides5,440members
8 Octporterneuman.mx: PowerShell and JavaScript files tied to the AveMaria remote access trojan, and what to do8 Octdonutclientsmods.xyz: fake DonutSMP Minecraft mods tagged SilentNet, and what to do if you ran one8 Octsqpengg.com: a server handing out crypted PowerShell scripts, and what to do if one ran on your PC8 Octdonutsmpcheats.org: fake Minecraft cheat mods with the SilentNet stealer, and what to do if you installed one8 Octmaciejbi.hosting24.pl: a hosting subdomain that served Remcos scripts and a stego picture, and what to do if your PC fetched them8 Oct87130921-60-20220830152356.webstarterz.com: an open folder serving Formbook and XWorm PowerShell scripts, and what to do if one ran8 Octficus.in: picture files hiding the Remcos remote access trojan, and what to do if a script fetched them8 OctOpenDrive virus: why web.opendrive.com shows up in malware alerts, and what to do if a file from it installed Remcos

Help

Windows help: viruses, hijackers and unwanted programs

Something changed on your Windows PC and the guide did not fix it, or you are not sure which guide applies.

Before you ask

  • The name of the threat or the guide you followed, and the step where it went differently.
  • Your Windows version (Settings > System > About) and the browser you use.
  • What you see: a pop-up, a changed homepage, a process in Task Manager. A screenshot helps, but cover personal data.
  • Whether Microsoft Defender (full and offline scan) found anything.

Questions are answered by members and editors, not by an automated service.

Questions and experiences

Ask about this page: members and our editors answer. Reading is open; writing needs a free account.

0 comments

…

5,440 members already hereReading, writing, commenting and voting. 0 verified · 165 joined this year
All membersJoin