Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Trojan or rootkit


  • This topic is locked This topic is locked
2 replies to this topic

#1 Mongel96

Mongel96

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Germany
  • Local time:03:43 PM

Posted 29 July 2015 - 08:05 AM

Hi Guys,

I would really need a little help cause i think i have a rootkit/Trojan on my PC.

I started Teamspeak and I wanted to join a Server as I joined the server it said i had to update TS.

After I downloaded the update my Steam crashed and my TS crashed.

 

Then Steam restarted without me clicking anything and i wanted me to put in my username and password whichis a little wierd since i have autologon.

The Steam symbol also changed to the TS symbol.

Thats when i began to think there is something wrong so i scanned my System with Trojanremover,Kaspersky and Malwarebytes they found several things that they thought would be a "Virus".

 

So after i deleted everything that was shown i restarted my computer and started Firefox where it showed a Path to my files//C:Programms instead of www.Google.de so i tried to find the file and i got

it and deleted it but after deleting i just popped up again i did it severa times (5-6) now it vanished.

I am pretty sure it is still on my computer but i just can´t find it.

 

Thanks in for reading all the Text.

If you think you can help me just send me a Message.

(Sorry for my bad english).

Attached Files



BC AdBot (Login to Remove)

 


#2 nasdaq

nasdaq

  • Malware Response Team
  • 40,758 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:08:43 AM

Posted 31 July 2015 - 08:32 AM

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Before suggesting any fix I need to see the content of the FRST.TXT created when you ran the Farbar tool.

I will review it.

#3 nasdaq

nasdaq

  • Malware Response Team
  • 40,758 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:08:43 AM

Posted 05 August 2015 - 07:56 AM

Due to the lack of feedback, this topic is now closed.

In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days.

Please include a link to your topic in the Private Message. Thank you.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users