Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Trojan.Multi.Proxy.Changer + mouse/touchpad is weird


  • This topic is locked This topic is locked
4 replies to this topic

#1 Riiga

Riiga

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:08:47 PM

Posted 19 May 2017 - 01:26 AM

Hello. Yesterday, my mouse began to act very, very strange. When I began to scroll down/up, the right click button menu would pop up. The same would happen with the left click mouse button, it just opens up the menu box where you can choose wether to add a new file (notepad, folder, or just some similiar stuff) or just copy and paste, etc.

 

When I downloaded both MalwareBytes and Kaspersky Anti-Virus trial, Kaspersky noticed two malware programs - Trojan.Multi.Proxy.Changer and a second one, with no name at all? So, Kaspersky removed the threat, but the mouse problem isn't gone and I struggle with it. I still suspect that there is a trojan/rat on my PC, because at one point, my camera light has flashed for a brief second, and sometimes, my internet edge windows get turned off, but rarely. Also, when I scroll with the mouse down, it freezes my PC completely and I need to do the CTRL+ALT+DEL and open task manager to unfreeze my pc.

When I opened my task manager, I see these files, that look suspicious:

 

Browser_Broker

Google Crash Handler (I don't believe it's a program made by google)

Install Agent User Broker (huh, funny, huh? Browser_Broker and then this)

Install Agent

 

When I tried to turn these programs off, they dissapear, but no effect is done.

 

Also, the mouse problem is shared with my touchpad.

 

I have a Dell laptop.

Anyways, thank you.



BC AdBot (Login to Remove)

 


#2 Riiga

Riiga
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:08:47 PM

Posted 19 May 2017 - 02:02 AM

Update: I am scanning my computer right now in a full scan, and my PC has noticed this: http://imgur.com/a/2hXna (Link to image)

 

Yep, I have found myself a pair of new friends :/



#3 Riiga

Riiga
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:08:47 PM

Posted 20 May 2017 - 09:39 AM

Hello?



#4 nasdaq

nasdaq

  • Malware Response Team
  • 40,197 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:11:47 PM

Posted 21 May 2017 - 07:53 AM

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Download the version of this tool for your operating system.
Farbar Recovery Scan Tool (64 bit)
Farbar Recovery Scan Tool (32 bit)
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

How to attach a file to your reply:
In the Reply section in the bottom of the topic Click the "more reply Options" button.
attachlogs.png

Attach the file.
Select the "Choose a File" navigate to the location of the File.
Click the file you wish to Attach.
Click Attach this file.
Click the Add reply button.
===


Please post both logs for my review.

Wait for further instructions.

#5 nasdaq

nasdaq

  • Malware Response Team
  • 40,197 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:11:47 PM

Posted 27 May 2017 - 08:14 AM

Due to the lack of feedback, this topic is now closed.

In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days.

Please include a link to your topic in the Private Message. Thank you.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users