Updates to Furtivex Malware Removal Scri ...

Updates to Furtivex Malware Removal Script (FMRS)

Apr 15, 2025

I adjusted the way Furtivex Malware Removal Script repairs service keys damaged by a particular miner. If you have these service keys:

  • BITS_bkp

  • dosvc_bkp

  • wuauserv_bkp

  • WaaSMedicSvc_bkp

  • UsoSvc_bkp

You're likely infected with a particular BitCoinMiner and can't perform Windows Updates. Your Task Manager may also be closing, prohibiting you from locating the suspicious directory / files involved.

Software to aid in its removal is available here: furtivex.net

You should see something like this in your log file if infected

# Services:
HKLM\SYSTEM\CurrentControlSet\services\BITS_bkp
HKLM\SYSTEM\CurrentControlSet\services\dosvc_bkp
HKLM\SYSTEM\CurrentControlSet\services\UsoSvc_bkp
HKLM\SYSTEM\CurrentControlSet\services\WaaSMedicSvc_bkp
HKLM\SYSTEM\CurrentControlSet\services\wuauserv_bkp
Plusieurs clés de service ont été restaurées

Vous aimez cette publication ?

Achetez un café à Furtivex

Plus de Furtivex