Infected installer

Discussion in 'Malware Help (A Specialist Will Reply)' started by hallo, Dec 25, 2012.

  1. hallo

    hallo Private E-2

    A friend of mine sent me a game installer that had a virus in it and I caught it.

    I scanned the file with MSE but that didn't find anything.

    I first tried all my scanners, like Mbam, avast, bitdefender, and spybot all to no avail. None of them found anything. And the problem persists.

    The symptom is that my CPU runs at 50%, and now it seems to have increased to 100%. Whichever process I am using at the time is what is using all the CPU, and if I close it then some other program or system process uses it all. Safe mode is not affected which I am in now.

    I came across this forum and went through the read me and here are my log files.

    Thank you in advance for your time.








    View attachment MGlogs.zip

    View attachment HitmanPro_20121225_1954.log

    View attachment mbam-log-2012-12-24 (00-59-49).txt

    View attachment RKreport[1]_S_12242012_02d0057.txt

    View attachment TDSSKiller.2.8.15.0_24.12.2012_09.06.31_log.txt
     
    hallo, Dec 25, 2012
    #1
  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Have you tried a system restore?
     
    TimW, Dec 26, 2012
    #2
  3. hallo

    hallo Private E-2

    I don't have any restore points. I had disabled it a while back.
     
    hallo, Dec 26, 2012
    #3
  4. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    I am not finding anything in your logs. However, you have 2 AV programs installed. Uninstall one.

    Tell me what issues you are having.
     
    TimW, Dec 26, 2012
    #4
  5. hallo

    hallo Private E-2

    Right after I ran the installer and opened the game, I noticed my computer was running slowly. I opened task manager and saw that the CPU usage was 50%. I closed what using it and then another program (I think chrome) was then using 50%. I have seen virus do this in the past so I figured I should boot up in ubuntu and run a scan. Neither Avast or Bitdefender found anything so I ran more scans in Windows safe mode again to no avail. I then booted up normally and my CPU was constantly at 100% usage. So I hit up google and came across this forum. So that is my problem, something is using all the resources and it began immediately after running the installer.

    BTW were you referring to avast and spybot as the two AV's. I will get rid of spybot if you like but I didn't think it would matter because I'm not running teatimer.
     
    hallo, Dec 26, 2012
    #5
  6. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    You have both of these installed:
    avast! Free Antivirus
    Microsoft Security Essentials
     
    TimW, Dec 28, 2012
    #6
  7. hallo

    hallo Private E-2

    Alright I just got rid of Microsoft Security Essentials.
     
    hallo, Dec 30, 2012
    #7
  8. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Has that helped with your speed issues?
     
    TimW, Dec 30, 2012
    #8
  9. hallo

    hallo Private E-2

    No it hasn't.

    I had to login to regular mode to uninstall MSE and the CPU was running pretty much full blast. The program that was using all the processor was svchost.exe, if that helps.
     
    hallo, Dec 30, 2012
    #9
  10. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Since we aren't seeing any malware, I suggest you pursue this in the software forum.

    Since you are not having any malware problems, it is time to do our final steps:
    1. We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware. You can uninstall RogueKiller and HitManPro.
    2. Go back to step 4 of the READ ME and renable your Disk Emulation software with Defogger if you had disabled it.
    3. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    4. If running Vista or Win 7, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    5. Go to add/remove programs and uninstall HijackThis.
    6. Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders
      related to MGtools and some other items from our cleaning procedures.
    7. After doing the above, you should work thru the below link
    Malware removal from a National Chain = $149
    Malware removal from MajorGeeks = $0
     
    TimW, Dec 31, 2012
    #10
  11. hallo

    hallo Private E-2

    I'm pretty sure I do have malware because I've dealt with viruses exactly like this before and eventually got rid of them. Not to disregard what you said, but this happened only after and immediately after I installed this program which is typical of an infected installer, I just don't want to give up on this so soon. Also my computer is still pretty much unusable.
     
    hallo, Dec 31, 2012
    #11
  12. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    TimW, Jan 1, 2013
    #12

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds