I need help with an Alureon Virus
Posted Yesterday, 12:30 AM
Posted Yesterday, 05:09 AM
Do you know what these are for?
Pulse Secure Setup Client (HKU\S-1-5-21-3592585487-3101742847-3297218791-1001\...\Juniper_Setup_Client) (Version: 126.96.36.199491 - Pulse Secure, LLC)
Pulse Secure Setup Client 64-bit Activex Control (HKLM\...\Juniper_Setup_Client Activex Control) (Version: 188.8.131.52 - Pulse Secure, LLC)
Appear to be remote control software. If they are not something she uses then uninstall.
Also I see these pdfs on the desktop.
2017-11-28 12:37 - 2017-11-28 12:37 - 000352151 _____ C:\Users\Owner\Desktop\Computer Bill.pdf
2017-11-27 02:00 - 2017-11-27 02:00 - 000189114 _____ C:\Users\Owner\Desktop\soft experts.pdf
Are they from the malware?
2017-11-28 12:45 - 2017-11-28 12:45 - 000085272 _____ C:\Users\Owner\Downloads\ConnectWiseControl.Client.exe
which is another remote control software. Delete it
Get Process Explorer
Save it to your desktop then run it (Vista or Win7+ - right click and Run As Administrator).
View, Select Column, check Verified Signer, OK
Options, Verify Image Signatures
Click twice on the CPU column header to sort things by CPU usage with the big hitters at the top.
Wait a full minute then:
File, Save As, Save. Note the file name. Open the file on your desktop and copy and paste the text to a reply.
0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users