+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Malware, Rat, and Virus Removal (https://hackforums.net/forumdisplay.php?fid=110)
+---- Thread: [Infected] Camera Light on for no Reason, Slow Performance and Weird Cursor (/showthread.php?tid=5710572)
Pages: Pages
1
2
Camera Light on for no Reason, Slow Performance and Weird Cursor - Effexion - Sep 4, 2017
Looks like that despite all my best intentions, I have a RAT. Can someone please do a checkup for me?
* - FatStacks - Sep 4, 2017
(Sep 4, 2017 01:58 PM)Effexion Wrote: Looks like that despite all my best intentions, I have a RAT. Can someone please do a checkup for me?
Back up all current files to a external harddrive then use a data des on your main/os hard drive then reinstall windows
* - Effexion - Sep 4, 2017
(Sep 4, 2017 02:18 PM)FatSac Wrote: Back up all current files to a external harddrive then use a data des on your main/os hard drive then reinstall windows
I feel backing up all my files won't solve the problem. I haven't opened anything over suspicious, so the chances are that I will click whatever it is again.
* - camden ™ - Sep 4, 2017
My camera light shows up sometimes, but I am not ratted.
I'd recommend you download Wireshark and search for DNS before you reset anything.
Good luck.
* - Death - Sep 4, 2017
Does anyone have your wifi password?
What system are you running?
* - Not Your Average Orange - Sep 4, 2017
Download Farbar Recovery Scan tool
Run as admin >
Yes to disclaimer >
Scan >
Put logs in pastebin, they will be in the same dir as FRST >
Post here
* - Effexion - Sep 4, 2017
(Sep 4, 2017 02:28 PM)SecureSeal Wrote: My camera light shows up sometimes, but I am not ratted.
I'd recommend you download Wireshark and search for DNS before you reset anything.
Good luck.
Why would the camera light just come on for no reason? You might want to make a thread too, amigo.
It's not just that, my cursor is fucky as fuckery too.
(Sep 4, 2017 02:29 PM)Not Your Average Orange Wrote: Download Farbar Recovery Scan tool
Run as admin >
Yes to disclaimer >
Scan >
Put logs in pastebin, they will be in the same dir as FRST >
Post here
Thanks, doing this now.
* - camden ™ - Sep 4, 2017
(Sep 4, 2017 02:29 PM)Effexion Wrote: Why would the camera light just come on for no reason? You might want to make a thread too, amigo.
It's not just that, my cursor is fucky as fuckery too.
I'm not sure it was a few months ago, i'm sure I wasn't ratted. But I'd really recommend using Wireshark.
* - Death - Sep 4, 2017
Nibba didnt even answer my questions.
ok.
* - Effexion - Sep 4, 2017
FRST.txt: https://pastebin.com/Xe9RD3Y9
Addition.txt: https://pastebin.com/7ZyWrXT2
Thank you!
* - Death - Sep 4, 2017
I can see that mousepoints 2
What is the installer.exe on D:
* - Flaws. - Sep 4, 2017
Just from a quick read I can see
HKU\S-1-5-21-3820243653-2334247829-3564828230-1001\...\MountPoints2: {3d6e705a-5c6c-11e7-b9e2-806e6f6e6963} - "D:\Installer.exe"
which is uh about as sketchy as it gets not gonna lie
* - QQ Spitfire - Sep 4, 2017
Might be worth you checking the following...
Processors Under task manger
Wireshark checking dodgy connections
Virus/Malware Scan
That should give an outcome to what's going on. If not just backup your files and do a fresh install, if your on Windows 10 there's an option to create a clean install of the OS but keep your files.
Hope this helped!
* - Effexion - Sep 4, 2017
(Sep 4, 2017 03:18 PM)linuxdaddy Wrote: I can see that mousepoints 2
What is the installer.exe on D:
(Sep 4, 2017 03:29 PM).Jasper Wrote: Just from a quick read I can see
HKU\S-1-5-21-3820243653-2334247829-3564828230-1001\...\MountPoints2: {3d6e705a-5c6c-11e7-b9e2-806e6f6e6963} - "D:\Installer.exe"
which is uh about as sketchy as it gets not gonna lie
I never use D:/, that's suss as fuck lol. Any way of telling what installed installer.exe because there's no way I would have opened that.
(Sep 4, 2017 03:32 PM)QQ Spitfire Wrote: Might be worth you checking the following...
Processors Under task manger
Wireshark checking dodgy connections
Virus/Malware Scan
That should give an outcome to what's going on. If not just backup your files and do a fresh install, if your on Windows 10 there's an option to create a clean install of the OS but keep your files.
Hope this helped!
I don't want to do a fresh install really as like I said earlier, I would probably end up opening it again because there's nothing I can think i have clicked that would have put that there.
EDIT: I'm such a noob. D:/ is my disk drive and it's WoW lol.
* - Not Your Average Orange - Sep 4, 2017
I couldn't find anything in the FRST logs, but I'm still new to this.
If you're still concerned, try downloading GlassWire, and observing internet connections.