Can not find script file

das10 said:

https://lapweol.me/ is being flagged as a malware site by 3 anti virus engines, although personally I wouldn't know if the "findmail.ps" could be a virus or not ( a .ps is a postscript file ; although it could be masquerading as something else ).

Actually, post #7 shows:

Contents of file are" run=https://lapweol.me/sload/ps1/findmail.ps1 "

.ps1 files are PowerShell scripts, not postscript files.

Hope this helps...

vgkfan83 said:

Have you tried deleting both of those files?

Both currently disabled.

Both now been deleted. Both my AV and malware checkers are up to date so hopefully a problem of the past. Fingers crossed.

The names of the scheduled tasks match a known but not very common infection that we are tracking at the moment. This is a powershell malware loader that can install banking Trojans and remote control software. Given that you don't know whether it downloaded anything, the safest thing to do is rebuild your machine.

I wouldn't mind a quick chat about this if you are able to PM me.