+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Malware, Rat, and Virus Removal (https://hackforums.net/forumdisplay.php?fid=110)
+---- Thread: [Check-Up] Computer acting strange / possibly infected (/showthread.php?tid=5324004)
Pages: Pages
1
2
Computer acting strange / possibly infected - Avαlαr - Jul 1, 2016
Hey there! I'd love it if someone could help me with this.
Lately (like the past week or so), my PC has been doing some strange things that I'm not used to seeing. Twice now, on two different user accounts, I've started the computer to find that once I login, my desktop and everything on it remains black, and I have to restart again to fix it.
Also, something else that's been happening the past few days that hasn't happened before. I can't leave a game running fullscreen in the background (Dark Souls III, for example) while I do other things without my PC stuttering after a few minutes. I'll check Task Manager to see how much RAM I have left, and I'm using around 6.5 out of 8 GBs, when I could have sworn it didn't take that much before.
Now for the worst of it. A couple days ago, I got an email from Mojang (the makers of Minecraft) saying that my accounts had been compromised. Fortunately, they reset the passwords, and I was able to change my login information. I know for certain that I wasn't on any shady websites recently, however, I have been running lots of different applications.
I know there's a lot I don't know about computer viruses, but I like to think I'm pretty good about taking care of my PC. I run MalewareBytes scan every now and then, but it has yet to find anything for months. I'm not sure if that's a good or a bad thing, lol.
EDIT: To clarify a bit better, I've been downloading and running programs (most of which use Java) that users may infect with RATs and Trojans, and on rare occasion, do not show up in VirusTotal scans, and apparently, neither do they show up in MalewareBytes.
* - Spacefiller - Jul 1, 2016
Please do not go astray from these directions. This may cause damage to your computer if done incorrectly.
Please do not follow any other directions except mine during this time. It may cause a conflict between tools and specialists.
-\1/-Download FRST (Farbar Recovery Scan Tool) <== Click
-\2/-Close all open programs.
-\3/-Execute it on your desktop.
--\4/--When looking at the menu, make sure that these are all checked:
"Registry", "Services", "Drivers", "Processes", "Internet", "Addition.txt", and "Drivers MD5".
These all must be checked, as they are necessary for me to fully diagnose your PC.
--\5/--Click Scan
--\6/--After the scan is complete, two windows will appear. One is the FRST.txt file, and the other is the Addition.txt file. You must copy and paste them into pastebin and paste the two links here.
These two files will also be located in the folder you ran FRST in.
---\I/---If you are unable to post the links here, please say so. If you are unresponsive for 7 days, I may leave this thread.
* - Avαlαr - Jul 1, 2016
FRST.txt: http://pastebin.com/f7D6vwdQ
Addition.txt: http://pastebin.com/X6NugvFi
* - Whiteklaus - Jul 1, 2016
Guys (as in white hats) I need help with some encrypted ransomwared files on my laptop called CTB-Lockers but because of the stupid 50 post rule i cant make any threads pls pm me or help :(
* - Spacefiller - Jul 2, 2016
(Jul 1, 2016 01:41 PM)TheWallsPlayer Wrote: FRST.txt: http://pastebin.com/f7D6vwdQ
Addition.txt: http://pastebin.com/X6NugvFi
Your PC is looking fine, but I'm gonna have you follow these instructions.
-\1/-Download JRT (Junkware Removal Tool) <== Click
-\2/-Close all open programs.
-\3/-Execute it on your desktop.
--\4/--Follow the instructions on-screen.
--\5/--Paste the log onto Pastebin.
Do the same with AdwCleaner. (I dont have instructions for that yet, so just run a scan and give me the logs on Pastebin.
* - Whiteklaus - Jul 2, 2016
Im sorry rocket4wheel but i cant currently send a PM as my post count hasnt passed 25 yet
* - Spacefiller - Jul 2, 2016
^^ Good idea to remove your skype from that post...
* - Avαlαr - Jul 2, 2016
(Jul 2, 2016 12:28 PM)rocket4wheel Wrote: Your PC is looking fine, but I'm gonna have you follow these instructions.
-\1/-Download JRT (Junkware Removal Tool) <== Click
-\2/-Close all open programs.
-\3/-Execute it on your desktop.
--\4/--Follow the instructions on-screen.
--\5/--Paste the log onto Pastebin.
Do the same with AdwCleaner. (I dont have instructions for that yet, so just run a scan and give me the logs on Pastebin.
JRT Log: http://pastebin.com/HKGfSdAi
AdwCleaner Log: http://pastebin.com/eabZKUxa
* - Spacefiller - Jul 2, 2016
Yeah, your PC is looking fine.
get an antivirus for me (Preferrably avast)
Run scans with those and you should be good.
I think the problems your having are hardware problems. Not virus problems.
* - Avαlαr - Jul 2, 2016
(Jul 2, 2016 02:08 PM)rocket4wheel Wrote: Yeah, your PC is looking fine.
get an antivirus for me (Preferrably avast)
Run scans with those and you should be good.
I think the problems your having are hardware problems. Not virus problems.
Alright. Thanks a lot!
* - ProtectNull™ - Jul 2, 2016
(Jul 2, 2016 02:08 PM)rocket4wheel Wrote: Yeah, your PC is looking fine.
get an antivirus for me (Preferrably avast)
Run scans with those and you should be good.
I think the problems your having are hardware problems. Not virus problems.
FRST doesn't fully remove the problem.
OP do you want another full inspection from me?
* - Spacefiller - Jul 2, 2016
(Jul 2, 2016 03:43 PM)ProtectNull™ Wrote: FRST doesn't fully remove the problem.
OP do you want another full inspection from me?
He ran multiple scans with many tools. FRST, JRT, AdwCleaner, MBAM, etc.
Why?
* - ProtectNull™ - Jul 2, 2016
(Jul 2, 2016 04:15 PM)rocket4wheel Wrote: He ran multiple scans with many tools. FRST, JRT, AdwCleaner, MBAM, etc.
Why?
That's not enough for me, every tool has different detection algorithms.
* - Spacefiller - Jul 2, 2016
(Jul 2, 2016 04:25 PM)ProtectNull™ Wrote: That's not enough for me, every tool has different detection algorithms.
What other tools would you run in this scenario other than the ones listed above?
* - ProtectNull™ - Jul 2, 2016
(Jul 2, 2016 04:50 PM)rocket4wheel Wrote: What other tools would you run in this scenario other than the ones listed above?
Roguekiller, ESET or NPE.