Jul 27, 2015 03:40 PM
(This post was last modified: Jul 28, 2015 08:44 AM by Snoopy.)
I'm pretty sure I've been infected with a virus, I've noticed random mouse movements, a command prompt (vbs.net?) running when I log in and also strange log-ins into my e-mail and PayPal (they even tried to buy something)
Scanned with MBAM multiple times but still nothing detected, can anyone please help
EDIT:
FRST: http://pastebin.com/f6YAX8Pc
Addition: http://pastebin.com/WHzeFHEz
Download and run malware bytes
(Jul 27, 2015 03:40 PM)Snoopy Wrote: I'm pretty sure I've been infected with a virus, I've noticed random mouse movements, a command prompt (vbs.net?) running when I log in and also strange log-ins into my e-mail and PayPal (they even tried to buy something)
Scanned with MBAM multiple times but still nothing detected, can anyone please help
You're definatley infected with a rat then.
(Jul 27, 2015 03:42 PM)kəˈrɪzmə Wrote: Download and run malware bytes
are you retarded? Read the thread.
(Jul 27, 2015 03:42 PM)kəˈrɪzmə Wrote: Download and run malware bytes
He already did that, read the op.
DO NOT DEAL WITH THIS MEMBER
(Jul 27, 2015 03:42 PM)kəˈrɪzmə Wrote: Download and run malware bytes
MBAM Means Malware Bytes, Don't make random suggestions.
Hit me up with your Teamviewer or Join.me i can help you:)
Fuck me sorry I'm tired and shit.
Give me a break
DO NOT DEAL WITH THIS MEMBER
Download Farbar Recovery Scan Tool and save it to your Desktop. - Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
- Press Scan button.
- It will produce a log called FRST.txt in the same directory the tool is run from.
- Please copy and paste the log back here
- The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.
Please don't join that persons TV session or join.me.
PM your Skype. I can help you out.
(Jul 27, 2015 03:45 PM)YungTrigz Wrote: Download Farbar Recovery Scan Tool and save it to your Desktop.- Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
- Press Scan button.
- It will produce a log called FRST.txt in the same directory the tool is run from.
- Please copy and paste the log back here
- The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.
Please don't join that persons TV session or join.me.
FRST: http://pastebin.com/f6YAX8Pc
Addition: http://pastebin.com/WHzeFHEz
I wouldn't think of it but thank you
DO NOT DEAL WITH THIS MEMBER
Jul 28, 2015 06:18 AM
(This post was last modified: Jul 28, 2015 06:19 AM by President Morty.)
Did you happen to add this to your startup?
C:\Users\Tahir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Client.jar
C:\Users\Tahir\AppData\Roaming\1115448083.jar
Sketchy as fuck .jar
C:\Users\Tahir\AppData\Local\Temp\ose00000.exe
O_o I searched and found it as a windows process or something for a reader for like PDFs, I have no idea what that is.
Im just pointing out some odd files.
Dont do anything unless a trained malware specalist (2tired2care4spelling) comes by to review your logs.
(Jul 28, 2015 06:18 AM)President Morty Wrote: Did you happen to add this to your startup?
C:\Users\Tahir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Client.jar
C:\Users\Tahir\AppData\Roaming\1115448083.jar
Sketchy as fuck .jar
C:\Users\Tahir\AppData\Local\Temp\ose00000.exe
O_o I searched and found it as a windows process or something for a reader for like PDFs, I have no idea what that is.
Im just pointing out some odd files.
Dont do anything unless a trained malware specalist (2tired2care4spelling) comes by to review your logs.
I'm only aware of the Client.jar and that's from myself, but the others I'm not sure. Thank you, I will wait.
DO NOT DEAL WITH THIS MEMBER
You seem to be infected, I have no training so I wouldn't try and make you a fixlist or something like that, What I do recommend is you PM Knaut Or Charmz With a link to your thread, if you do not receive help within 12 hours I will pm you a link somewhere you will get help quicker.
(Jul 28, 2015 07:58 AM)YungTrigz Wrote: You seem to be infected, I have no training so I wouldn't try and make you a fixlist or something like that, What I do recommend is you PM Knaut Or Charmz With a link to your thread, if you do not receive help within 12 hours I will pm you a link somewhere you will get help quicker.
Will do, thank you. I haven't noticed anything strange since last night after changing all my passwords and scanning my computer. I also didn't get the "vbs.net" command prompt when I signed in this time but I'll still wait for help just to be safe
|
