Author Topic: Concerned about possible infection.  (Read 1623 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Concerned about possible infection.
« on: April 12, 2018, 01:16:55 AM »
Hello, i am having some issues, i turned on my computer today around 1:13 PM (BRT) when i noticed a task in the task manager called "unsecapp.exe", i did some research and found out it was safe, so i turned my computer off again because i had some stuff to do, then i came back and found a ton of strange files created, modified or accessed today and yesterday located here "C:\Users\Biel\AppData\Local\Temp", the only programs that i installed/updated were Avast and Adobe Flash Player yesterday, i don't know if i am being paranoid ;D. If you have any questions feel free to ask me.
 
« Last Edit: April 12, 2018, 01:19:29 AM by worthlessbird »

Offline Michael (alan1998)

  • Massive Poster
  • ****
  • Posts: 2768
  • Volunteer
Re: Concerned about possible infection.
« Reply #1 on: April 12, 2018, 03:55:29 AM »
It's completely normal to have temp files.

If you're concerned about infection follow the instructions @ https://forum.avast.com/index.php?topic=194892.0

Post FRST and MBAM logs. CCleaner (or a similar program, like TFC) will remove temp files.

CCleaner >> https://www.ccleaner.com/
TFC >> https://www.bleepingcomputer.com/download/tfc/
VOLUNTEER

Senior Security Analyst; Sys Admin (Linux); Forensics/Incident Response.

Security is a mindset, not an application. Think BEFORE you click.

REDACTED

  • Guest
Re: Concerned about possible infection.
« Reply #2 on: April 12, 2018, 06:23:29 PM »
There you go, the logs are now attached. My computer is running fine but to be honest, i have never seen that task and those files before and also, i have been using the same computer for over 1 year, that got me kinda worried.

REDACTED

  • Guest
Re: Concerned about possible infection.
« Reply #3 on: April 17, 2018, 11:04:24 PM »
It's something to do with Avast, unsecapp has also appeared on my pc after updating to the last version a few days ago.

Offline Michael (alan1998)

  • Massive Poster
  • ****
  • Posts: 2768
  • Volunteer
Re: Concerned about possible infection.
« Reply #4 on: April 17, 2018, 11:59:45 PM »
Not sure if you were forgotten about by me or one of the other experts.

I'm terribly sorry - I've PM'd another expert.
VOLUNTEER

Senior Security Analyst; Sys Admin (Linux); Forensics/Incident Response.

Security is a mindset, not an application. Think BEFORE you click.

Offline Sass Drake

  • MyCity AMF R2
  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 820
Re: Concerned about possible infection.
« Reply #5 on: April 18, 2018, 01:33:41 AM »
It's something to do with Avast, unsecapp has also appeared on my pc after updating to the last version a few days ago.

unsecapp.exe is part of Windows. Your FRST logs doesn't show traces of malware infection.

The following will implement some post-cleanup procedures:

=> Please download DelFix by Xplode to your Desktop.
Run the tool and check the following boxes below;
Remove disinfection tools
Create registry backup
Purge System Restore

Click Run button and wait a few seconds for the programme completes his work.
At this point all the tools we used here should be gone. Tool will create an report for you (C:\DelFix.txt)

The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix
Tool deletes old system restore points and create a fresh system restore point after cleaning.



REDACTED

  • Guest
Re: Concerned about possible infection.
« Reply #6 on: April 22, 2018, 01:01:25 AM »
Okay, no worries mate and i have been busy that's why i didn't see the posts, so far no strange activities but if anything comes up, i'll let you know, thanks.