Trojan in AppData\Roaming

Question

Malwarebytes is detecting a Trojan in
C:\Users\monty\AppData\Roaming\O3Y4sFjLAVb8\whost.exe
but is not removing it. Says it is Outbound?
Can't see where Unhackme might have found it as it is still popping up as a Malwarebytes notification saying Website blocked due to Trojan. Domain: fasfybue.icu

Answer 1

I will help you!

1. Open UnHackMe,
2. Click the "Help in Removal" button on the main screen.
3. Choose "Send us RegRunLog."
4. Enter your e-mail, name, or nick.
5. Describe your problem.
6. Accept our Privacy Policy.
7. Click the "Upload" button.
   If you have any trouble with it, you can manually attach "regrunlog.txt" from your desktop and send us by e-mail to support@greatis.com.
   I will check your log and send you a solution as soon as possible.

https://greatis.com/unhackme/help/kb/removal/what-is-the-help-in-removal-service.htm