My Windows Security shows a list of Threats that I can't remove, or fix.

Question

My Windows Security shows a list of Threats that I can't remove, or fix.

Ramiro Cibrian 25

Good day.

2 days ago I got hacked with a trojan by opening a file a friend sent me. The individual did some damage like buying things. I went ahead and changed all the passwords and ran a full scan of the PC.

The thing is, the PC says that it has detected threats, but I can't get rid of them. I'm not sure if it's fixed and it's the program failing to remove the threats, or if it's failing to remove them.

Thanks a lot in advance.

0 comments

Answer accepted by question author

Ramesh 183.5K Volunteer Moderator

Hi Ramiro,

The system is clean. To clear the Defender threat history and the obsolete firewall rules, please run this fixlist. The fixlist also empties the browser cache, history, and cookies.

Download fixlist.txt
Save Fixlist.txt to the same folder as FRST64English.exe.
Close all programs.
Launch the Farbar Scanner tool and click "Fix".
Restart Windows when prompted.
Upload the output log file (FixLog.txt) to your OneDrive.

NOTE: The fixlist.txt script was written specifically for this user and for use on that particular machine. It is not recommended to run it on another machine, and don't run the same fixlist.txt more than once.

Ramiro Cibrian 25 Reputation points

2025-07-22T14:07:59.9033333+00:00

Thanks a lot for the help!

It looks like yesterday someone bought something using my account at 21:00 local time, even though I, in theory, already went through the hoops of changing passwords, and doing a cleanup.

The transaction was
"Transaction date July 21, 2025, 20:59 GMT"

Am I certain that it is safe?

At that time I was using my PC without issues, but somehow this transaction happened.
Ramesh 183.5K Reputation points Volunteer Moderator

2025-07-22T14:11:00.2966667+00:00

It could be due to stolen credentials. Avast is protecting your system, and the FRST logs indicate that the system is clean. Changing your passwords and enabling two-factor authentication (2FA) for your email/accounts is recommended.

2 additional answers

Your answer

Ramiro Cibrian 25 Reputation points

2025-07-22T14:07:59.9033333+00:00

Thanks a lot for the help!

It looks like yesterday someone bought something using my account at 21:00 local time, even though I, in theory, already went through the hoops of changing passwords, and doing a cleanup.

The transaction was
"Transaction date July 21, 2025, 20:59 GMT"

Am I certain that it is safe?

At that time I was using my PC without issues, but somehow this transaction happened.
Ramesh 183.5K Reputation points Volunteer Moderator

2025-07-22T14:11:00.2966667+00:00

It could be due to stolen credentials. Avast is protecting your system, and the FRST logs indicate that the system is clean. Changing your passwords and enabling two-factor authentication (2FA) for your email/accounts is recommended.

Answer 1

Ramiro Cibrian 25

Thanks for the prompt response.

Here you have a link with the Scan files.

Let me know if it works.

https://1drv.ms/f/c/35a77c0f67b440f2/Er7-SlTQ_RtCsCNE-6M1tiQBgbMyrWNkQfgAghGZf_HQ1Q?e=a0hSUc

0 comments

Answer 2

Please share your Farbar scan logs for analysis.

1] Download Farbar Recovery Scan Tool 64-bit (FRST64.exe)

https://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/

2] If the OS language is not English, rename FRST64.exe to FRST64English.exe.

3] Run the program. Don't check or uncheck any options. Click "Scan".

4] Add the two logs, FRST.txt and Addition.txt, to a Zip archive, share them on OneDrive or GoFile.io, and post the link here.

Note: If Microsoft Edge or Chrome mislabels the Farbar Scanner executable as PUA/malware, choose to keep it by tapping … in the bottom bar, choosing Keep, and then choosing Keep anyway in the dialog that appears.

See this screenshot: https://learn.microsoft.com/en-us/deployedge/media/microsoft-edge-security-download-interruptions/dowload-was-blocked.png. It's a safe tool used in most antimalware forums.