Hello Friends, My first rat in my network

[jmancillavalenzuela]

Hello everyones, Im suffering with a very heavy hijack rat, I have 3 pcs of my network with this issues,
I dont remember how I get it, but finding some events in windows I get a user connected to my pc on 26 october, and 29 november he send a scammer in discord, at 14hrs, My friends call me and I really dont know how to response to that.
Thanks in advice, Also my samsung s23 ultra is suffering intermitent network issues.
Thanks in advice

CollectionLog-2025.12.03-14.36.zip

Im getting a keybord simulator in one of my pc, another is getting a lan ipv6 with encripted dns, and I try to kill the process but is not effective.
He have control of my net and also create an admin user in my user control account, and I cannot remove ir

Im very desesperate

[Sandor-Helper]

Hi,

Uninstall unwanted or useless programs:

Avast Secure Browser
Bonjour
SpyHunter 5

You have Malwarebytes installed. Please do a whole system scan, export its result to text file and attach it to your next post.

Did you install Meta Quest Remote Desktop by yourself?

[jmancillavalenzuela]

Hi sir, sorry for late response, I wan reseting all my password,
Here is my malwarebytes log and also I delete Meta Quest Remote Desktop. I have meta quest 3 but mo remember install that app.
also avast secure browser can uninstall, here my log and photos.
Thanks in advice

Malwarebytes Scan Report 2025-12-04 190831.txt

[Sandor-Helper]

sorry for late response

OK, no hurry.
Thanks for the log. Nothing suspicious, RSIT is a good program so detect is false positive. Trouble with MRT we'll fix later.
Try to uninstall Avast Secure Browser using Geek uninstaller. Start Geek, right click at the Avast browser and choose forcefully delete.

Next step:
Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• Right click to run as administrator. When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will produce logs called FRST.txt and Addition.txt in the same directory the tool is run from.
• Please attach the logs back here.