+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Malware, Rat, and Virus Removal (https://hackforums.net/forumdisplay.php?fid=110)
+---- Thread: [Infected] Pretty sure I have a virus (/showthread.php?tid=5223709)
Pretty sure I have a virus - Flowerson - Apr 2, 2016
Screen keeps flashing
Icon's in task bar dissapear.
Wallpaper changes
Need help please
* - Skorn Virus - Apr 2, 2016
I recommend reading this first --> https://hackforums.net/showthread.php?tid=4557247
Also have you tried running a scan with malware-bytes? It might be a hardware issue instead of a actual infection. Also incase you're infected with a RAT or anything with a "remote" connection. Go into CMD Prompt and type in "netstat -a -o" and see what connections are inbound through "PID" and use that to check for anything suspicious. Next I would go through your "processes" in task manager and also look for anything that might be auto-starting or running that normally wouldn't be there. I advise taking screenshots of the processes so I can further evaluate what could be a cause for this.
* - SIM-2502833 - Apr 2, 2016
Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
- Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
- Press Scan button.
- It will produce a log called FRST.txt in the same directory the tool is run from.
- Please copy and paste this log into http://pastebin.com/ and post the URL here.
- The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply, using http://pastebin.com
* - Flowerson - Apr 2, 2016
FRST
http://pastebin.com/T5UjLD7z
Additional
http://pastebin.com/gZEtDJuB
* - SIM-2502833 - Apr 2, 2016
Not seeing any viruses. Looks like you just have a lot of junkware. It's a dell laptop?
* - Flowerson - Apr 2, 2016
(Apr 2, 2016 12:48 AM)MrMcShroom Wrote: Not seeing any viruses. Looks like you just have a lot of junkware. It's a dell laptop?
yeah, what would you say is junk?
* - Skorn Virus - Apr 2, 2016
(Apr 2, 2016 12:51 AM)Flowerson Wrote: yeah, what would you say is junk?
Go to "start" -> "run" -> "%appdata%" and clean that folder. And do same with "%tmp%"
That will clean out a majority of the "junk". Also wouldn't hurt to have a cleaning software like advanced system care or something like that.
* - SIM-2502833 - Apr 2, 2016
(Apr 2, 2016 12:56 AM)Skorn Virus Wrote: Go to "start" -> "run" -> "%appdata%" and clean that folder. And do same with "%tmp%"
That will clean out a majority of the "junk". Also wouldn't hurt to have a cleaning software like advanced system care or something like that.
I wouldn't recommend this. I meant that you are running a lot of unnecessary stuff all at the same time. Discord, steam, pidgin, Flux, firefox, AVG securesearch toolbar updater..
* - Skorn Virus - Apr 2, 2016
(Apr 2, 2016 01:09 AM)MrMcShroom Wrote: I wouldn't recommend this. I meant that you are running a lot of unnecessary stuff all at the same time. Discord, steam, pidgin, Flux, firefox, AVG securesearch toolbar updater..
"Wouldn't recommend"
Lol why would you be be against cleaning a computer out and speeding it up? Also that has nothing to do with the issues that were occuring...
* - SIM-2502833 - Apr 2, 2016
(Apr 2, 2016 07:57 AM)Skorn Virus Wrote: "Wouldn't recommend"
Lol why would you be be against cleaning a computer out and speeding it up? Also that has nothing to do with the issues that were occuring...
Because the things stored in the appdata folder are put there for easy access for things like google chrome and such, and would be immediately replaced anyways, so it weouldn't help at all, if you actually read his FRST scans.
* - BigBill2 - Apr 2, 2016
MrMcShroom please don't offer to fix OP machines with Manual Malware Removal Programs like FRST, ComboFix if you havent been trained in how they work.
OP I will only help you if you remove the possible cracked software from your machine :-
Adobe Photoshop CC 2015 (HKLM-x32\...\{793C2BF7-A4FE-4608-91C9-9282C5801C21}) (Version: 16.0 - Adobe Systems Incorporated)
* - Flowerson - Apr 2, 2016
(Apr 2, 2016 12:19 PM)BigBill2 Wrote: MrMcShroom please don't offer to fix OP machines with Manual Malware Removal Programs like FRST, ComboFix if you havent been trained in how they work.
OP I will only help you if you remove the possible cracked software from your machine :-
Adobe Photoshop CC 2015 (HKLM-x32\...\{793C2BF7-A4FE-4608-91C9-9282C5801C21}) (Version: 16.0 - Adobe Systems Incorporated)
Thanks, I just uninstalled it.