ProxiesFood: Unlimited Residential Proxy ◆ [#1] PURE RAT v4 // BEST HVNC RAT ◆ Spoof Call and Spoof SMS set any caller ◆ Private Crypter - Unique Private Stubs ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Whitehat • Blue Team • Defensive Security Malware, Rat, and Virus Removal › [Infected] Pretty sure I have a virus

New Reply 
Infected 

Pretty sure I have a virus
Flowerson
Flowerson Offline
[closed@HF:]
Posts:
496
Threads:
66
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Apr 2, 2016 12:13 AM
Screen keeps flashing

Icon's in task bar dissapear.

Wallpaper changes

Need help please
Skorn Virus
Skorn Virus Offline
[user@HF:]
*
Registered
Posts:
331
Threads:
8
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Apr 2, 2016 12:21 AM
I recommend reading this first --> https://hackforums.net/showthread.php?tid=4557247

Also have you tried running a scan with malware-bytes? It might be a hardware issue instead of a actual infection. Also incase you're infected with a RAT or anything with a "remote" connection. Go into CMD Prompt and type in "netstat -a -o" and see what connections are inbound through "PID" and use that to check for anything suspicious. Next I would go through your "processes" in task manager and also look for anything that might be auto-starting or running that normally wouldn't be there. I advise taking screenshots of the processes so I can further evaluate what could be a cause for this.
SIM-2502833
SIM-2502833 Offline
usually lurkin
***
HF l33t
Posts:
2,965
Threads:
206
Credibility:
300
Popularity:
523
βytes:
β 1,152.28
Game XP:
1
Apr 2, 2016 12:24 AM
Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
  • Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.

  • Press Scan button.

  • It will produce a log called FRST.txt in the same directory the tool is run from.

  • Please copy and paste this log into http://pastebin.com/ and post the URL here.

  • The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply, using http://pastebin.com


[Image: ChZqDxU.gif]
Flowerson
Flowerson Offline
[closed@HF:]
Posts:
496
Threads:
66
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Apr 2, 2016 12:31 AM
FRST
http://pastebin.com/T5UjLD7z


Additional
http://pastebin.com/gZEtDJuB
SIM-2502833
SIM-2502833 Offline
usually lurkin
***
HF l33t
Posts:
2,965
Threads:
206
Credibility:
300
Popularity:
523
βytes:
β 1,152.28
Game XP:
1
Apr 2, 2016 12:48 AM
Not seeing any viruses. Looks like you just have a lot of junkware. It's a dell laptop?
[Image: ChZqDxU.gif]
Flowerson
Flowerson Offline
[closed@HF:]
Posts:
496
Threads:
66
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Apr 2, 2016 12:51 AM
(Apr 2, 2016 12:48 AM)SIM-2502833 Wrote:  Not seeing any viruses. Looks like you just have a lot of junkware. It's a dell laptop?

yeah, what would you say is junk?
Skorn Virus
Skorn Virus Offline
[user@HF:]
*
Registered
Posts:
331
Threads:
8
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Apr 2, 2016 12:56 AM
(Apr 2, 2016 12:51 AM)Flowerson Wrote:  yeah, what would you say is junk?

Go to "start" -> "run" -> "%appdata%" and clean that folder. And do same with "%tmp%"

That will clean out a majority of the "junk". Also wouldn't hurt to have a cleaning software like advanced system care or something like that.
SIM-2502833
SIM-2502833 Offline
usually lurkin
***
HF l33t
Posts:
2,965
Threads:
206
Credibility:
300
Popularity:
523
βytes:
β 1,152.28
Game XP:
1
Apr 2, 2016 01:09 AM
(Apr 2, 2016 12:56 AM)Skorn Virus Wrote:  Go to "start" -> "run" -> "%appdata%" and clean that folder. And do same with "%tmp%"

That will clean out a majority of the "junk". Also wouldn't hurt to have a cleaning software like advanced system care or something like that.

I wouldn't recommend this. I meant that you are running a lot of unnecessary stuff all at the same time. Discord, steam, pidgin, Flux, firefox, AVG securesearch toolbar updater..
[Image: ChZqDxU.gif]
Skorn Virus
Skorn Virus Offline
[user@HF:]
*
Registered
Posts:
331
Threads:
8
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Apr 2, 2016 07:57 AM
(Apr 2, 2016 01:09 AM)SIM-2502833 Wrote:  I wouldn't recommend this. I meant that you are running a lot of unnecessary stuff all at the same time. Discord, steam, pidgin, Flux, firefox, AVG securesearch toolbar updater..

"Wouldn't recommend"

Lol why would you be be against cleaning a computer out and speeding it up? Also that has nothing to do with the issues that were occuring...
SIM-2502833
SIM-2502833 Offline
usually lurkin
***
HF l33t
Posts:
2,965
Threads:
206
Credibility:
300
Popularity:
523
βytes:
β 1,152.28
Game XP:
1
Apr 2, 2016 09:16 AM
(Apr 2, 2016 07:57 AM)Skorn Virus Wrote:  "Wouldn't recommend"

Lol why would you be be against cleaning a computer out and speeding it up? Also that has nothing to do with the issues that were occuring...

Because the things stored in the appdata folder are put there for easy access for things like google chrome and such, and would be immediately replaced anyways, so it weouldn't help at all, if you actually read his FRST scans.
[Image: ChZqDxU.gif]
BigBill2
BigBill2 Offline
Malware Removal is the game :)
**
HF l33t
Posts:
206
Threads:
4
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Apr 2, 2016 12:19 PM
MrMcShroom please don't offer to fix OP machines with Manual Malware Removal Programs like FRST, ComboFix if you havent been trained in how they work.



OP I will only help you if you remove the possible cracked software from your machine :-


Adobe Photoshop CC 2015 (HKLM-x32\...\{793C2BF7-A4FE-4608-91C9-9282C5801C21}) (Version: 16.0 - Adobe Systems Incorporated)
Would you like to learn Malware Removal? Click HERE
Malware Help ? HERE
[Image: 4dhZcEr.png]


Flowerson
Flowerson Offline
[closed@HF:]
Posts:
496
Threads:
66
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Apr 2, 2016 05:08 PM
(Apr 2, 2016 12:19 PM)BigBill2 Wrote:  MrMcShroom please don't offer to fix OP machines with Manual Malware Removal Programs like FRST, ComboFix if you havent been trained in how they work.



OP I will only help you if you remove the possible cracked software from your machine :-


Adobe Photoshop CC 2015 (HKLM-x32\...\{793C2BF7-A4FE-4608-91C9-9282C5801C21}) (Version: 16.0 - Adobe Systems Incorporated)

Thanks, I just uninstalled it.
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
[Infected] by +mKDec 3, 2015 01:00 AM 5 231 Dec 3, 2015 01:00 AM
Last Post: Knautschtabak
[Infected] by No ZodiacOct 28, 2015 05:14 AM 0 43 Oct 28, 2015 05:14 AM
Last Post: No Zodiac
[Infected] by No ZodiacOct 28, 2015 04:57 AM 0 30 Oct 28, 2015 04:57 AM
Last Post: No Zodiac