Questions tagged [malware-removal]
The malware-removal tag has no usage guidance.
127
questions
0
votes
1
answer
183
views
Suspicious script meddling with /usr/bin/open
I'm on macOS Ventura 13.2.1 (22D68). I run a script in my computer and the outcome was pretty much as described in this post. So some files were installed to the /tmp/ folder, and the Opera browser ...
- 103
2
votes
2
answers
576
views
What partition needs to be dealt with to get a clean install of windows?
I am trying to do a clean installation of windows and I need a bit of help.
I won’t try to explain why I was targeted. The disk has 4 partitions, below there are pictures that explain the current ...
0
votes
0
answers
30
views
RunDLL and Regsvr32 Exploits - how to mitigate or stop? [duplicate]
I have installed Malwarebytes and Spyhunter 5 and run full scans and yet Malwarebytes still shows blocked calls to nefarious domains and IPs via regsvr32 and rundll32. Is there a way to find the ...
- 121
0
votes
1
answer
47
views
Windows virus removed .exe while allowed
Windows 10 virus & threat removed a .exe file it thought was malware even though it was previously allowed.
When windows security found the .exe file it said it was a threat. I hit "allow&...
- 11
0
votes
2
answers
50
views
If I get malware, should I worry about it propogating over wifi or should I look for signs of that behaviour first? [duplicate]
If I get hit by malware, should I, in addition to doing a clean install, worry about it propogating over the wifi?
I'd first check if there is evidence/signs the malware can do that and then look into ...
user1467454
0
votes
0
answers
55
views
links being inserted into chrome
I'm seeing malicious links being inserted in web-pages when I am browsing using Google Chrome. It doesn't happen all the time, and it happens even with reputed web-pages. A scan with Malwarebytes and ...
- 101
0
votes
1
answer
1k
views
What’s the difference between rootkit and RAT? [duplicate]
I know that both can give attacker remote access to computer. Is RAT easier to detect than rootkit? Where are they typically get installed? Can one make more damage than another? Which one is easier ...
user1276860
0
votes
1
answer
1k
views
Uninstall Paragon HFS+ .msi
I am unable to remove Paragon HFS+ from my Windows 10 computer. The program is still listed after uninstalling using Add or Remove Programs. Running the command
msiexec /x Paragon-607-PEU_WinInstallSN-...
- 101
0
votes
1
answer
117
views
Reinstall win10 to Remove Possible Malware
I have a suspicion my Dell Latitude 7480 might have malware or another tracking hidden software, and I want to reinstall win 10.
I do not have an installation media but Windows is legit and digitally ...
- 165
1
vote
1
answer
312
views
How to remove strange logo during startup
Problem
During startup, My system shows an extra logo before the default Windows 10 logo. How to remove it?
Is my system infected with malware?
Details
This logo is just come out of nowhere. I ...
- 54
0
votes
1
answer
880
views
Windows defender not removing Program:Win32/Cayunamer.A!ml from system [duplicate]
My Windows firewall gives me security alert that my device is affected by Program:Win32/Cayunamer.A!ml. But when I try to remove it by selecting action as Remove, no change occurs. It loads for a time ...
- 15
0
votes
2
answers
1k
views
How to remove wup.exe from windows? [duplicate]
Wup.exe is consuming a lot of CPU power.
enter image description here
I have tried the following things:
To end task but it's useless, it starts again
To delete from registry, it also didn't work
...
0
votes
1
answer
994
views
How do I remove the imklaunchagent malware?
I have been recently checking my Mac for viruses. Doing so, I found the imklaunchagent process. I Googled the process and found out it is indeed a virus, or a malware. When I try to quit this process ...
- 11
0
votes
0
answers
118
views
Cryptic ClamAV results log file?
I installed ClamAV on LMDE4 and ran it using
sudo clamscan -ir ./ | grep FOUND >> /home/user/Desktop/clamscan_results.txt
The results file only contains the following:
Binary file /bin/ntfsfix ...
- 287
0
votes
0
answers
79
views
Can't discover the source of virus. Faulty dll is causing many windows pop up
Attached here some samples of faulty bug report windows which pop up occasionally.
Nvidia Container:
Problem signature:
Problem Event Name: BEX64
Application Name: nvcontainer.exe
Application ...
- 41
0
votes
0
answers
58
views
How do I get rid of the Chrome extension TopSearchEngine?
Somehow (probably me when I wasn't paying attention), a plugin was installed in Chrome called TopSearchEngine. I remove the plugin from Chrome every few weeks but occasionally (every few weeks) Chrome ...
- 101
1
vote
1
answer
366
views
What is the “Safety Tips” component present on chrome://components?
I'm worried about a component I've seen on my chrome://components list. It's name is Safety Tips (see the Image description here).
Is it malware or a virus of any kind? How do I uninstall it?
My ...
0
votes
1
answer
1k
views
How can I remove an unwanted Chromium installation from Windows 10?
Chromium suddenly installed itself on my computer. It activates on startup. Picking "open file location" from the desktop shortcut shows there's an .exe in \AppData\Local\Chromium\Application. I can't ...
1
vote
2
answers
520
views
Unknown Process sustse/kworkerds running on servers
We have noticed Unknown Process sustse/kworkerds running on CoreOS servers this was identified as Cripto malware,
Followed below article but not helpfull, killed process and deleted the file in temp,...
- 11
0
votes
1
answer
588
views
Is using HP Recovery manager to perform a factory image recovery the same as a full clean format?
I have a HP Windows 10 laptop. Recently I suspected that I contracted some kind of malware on it off the internet, and I didn't want to take any risks, so took the laptop to a tech shop to get it ...
- 3
1
vote
0
answers
4k
views
How to investigate and remove Trojan:EC2/DGADomainRequest.B
My GuardDuty management console on Amazon shows that my server is infected with malware:
"EC2 instance i-7e1d4356 is querying algorithmically generated
domains. Such domains are commonly used by ...
- 11
0
votes
1
answer
220
views
My files are showing .blower file extension
My files are showing .blower file extension. I have tried to remove malware and viruses but this problem is still there. Installed Microsoft Security Essentials and also ran Microsoft Malicious ...
0
votes
0
answers
117
views
Malware Hunting With Free Dos/SPFdisk: Questionable Files and Partition
I am trying to track down the location of persistent malware and have found a small partition I am unable to remove along with some files that I can only see when I use SPFdisk (Free Dos). I have ...
- 27
0
votes
0
answers
49
views
In case of OS and MBR malware, what will be the difference between a factory reset, a format and a disk wipe? [duplicate]
In case of malware infection in latest windows OS, like win 10, which is the best course of action for complete disinfection - a factory reset using troubleshoot and recovery, a format of entire drive ...
- 53
0
votes
1
answer
226
views
I can't delete this folder which contain virus, it keeps being recreated when deleted [duplicate]
So today I was desperate to find a space for my c drive since I want to install something new. in that case I'm scanning my c drive for extra space. and I found this weird folder with weird content. I ...
2
votes
1
answer
8k
views
Unable to uninstall Paragon HFS+ For Windows
I wanted to create a bootable usb key of MacOS Sierra so I needed to be able to read HFS partition on my Windows 10 computer.
After a quick research I found this software: HFS4Win
But this software ...
- 123
1
vote
1
answer
175
views
Remove Sticky Bloatware in Windows 10
Few days back, I installed a software and I do not remember its name on my Windows 10 PC. It showed some error during installation so I immediately removed it.
Since then I am seeing a big square ...
- 111
0
votes
1
answer
112
views
Extra CPU usage by Windows 10
I've have been using windows for such a long time but having a doubt that why would cpu be used even during idle .
Please check the screenshot
How could be that be possible only one user is logged ...
1
vote
1
answer
278
views
"chron-34e2fg command consume 100% CPU on Linux AMI"
Hello i'm not the principal answer of this question, however, i want to answer at this Original post asked at the wrong place, in fist part i said how i fix it and then i will edit this post to say ...
-1
votes
2
answers
206
views
How to trace which JavaScripts are being loaded (Malware in Wordpress)
I'm having trouble with an infected Wordpress website. At random the page is redirected to some shady advertisement.
It's similar to the description here: https://blog.sucuri.net/2016/05/wordpress-...
- 59
0
votes
0
answers
27
views
What are the steps to remove reimageplus virus manually? [duplicate]
What are the steps to remove reimageplus virus manually(as in without using any third party software)? I tried using adwcleaner but it seems to keep coming back or something. How to completely remove ...
- 239
18
votes
4
answers
5k
views
How to be 100% certain a USB drive has not been tampered with and has no malware? [duplicate]
Say you find a usb drive on the street and you want to be 100% sure it hasn't been tampered with, neither via software nor by modifying its hardware (adding or modifying components, etc.), so that ...
- 291
1
vote
1
answer
8k
views
How can I remove all traces of McAfee under Windows 10?
It is well known that it is pretty hard to remove McAfee from a computer once it has been installed.
Unfortunately my new Windows 10 PC came with a test version of McAfee installed.
I uninstalled it ...
- 584
0
votes
1
answer
280
views
I updated Chrome through brew cask and getting suspicious behavior
I have updated my Google Chrome to version 59.0.3071.115 by using:
brew cask reinstall google-chrome
and now when I start chrome, it opens two tabs with these URLs:
http://www.prosoftwarepc.com/...
- 1,002
0
votes
1
answer
283
views
How do I get rid of showad.js in windows 10?
I keep getting this pop-up at the bottom of my screen that asks me what I want to do with Showad.js? It gives me the choice of Save - Save as or cancel. I always hit cancel. Is the sites I see with ...
- 101
1
vote
0
answers
214
views
Windows 8.1 - "Chrome is out of date" Malware?
I've recently started getting a suspicious window appear in chrome which suggests chrome is out of date even though it isn't.
The window isn't part of chrome and can be closed using altf4 when it ...
- 11
0
votes
0
answers
45
views
I can not remove malware from a laptop?
A computer virus is driving me crazy. The virus types "x" continuously wherever it finds a text field and at the top of open applications ( where the name of the application is displayed). This means ...
- 101
-1
votes
1
answer
565
views
Google searches in Internet Explorer redirects to cse.google.com
In Internet Explorer under Windows 10 Pro, Google searches suddenly redirects to cse.google.com. This wasn't happening previously, and this problem does not occur with Firefox. Google searches with ...
- 1,262
0
votes
1
answer
132
views
Chrome Adware Infected Across Windows and OSX
Not sure if this is the right place to ask, but I have some adware infecting Chrome and it started at the same time on both my Windows 10 machine and my Mac. Basically, a few times a day, a full ...
- 101
0
votes
1
answer
509
views
Find out what program is creating a folder
Some program (malware I suspect) keeps creating a folder on my Windows 7 Pro desktop titled "gg" with nothing inside of it but another empty folder titled "Administrative Tools". How do I track down ...
- 13
1
vote
3
answers
70
views
Is there a reasonable way to clean risky thumb drives?
I have used a lot of thumb drives in an environment with high risk of malware, and I never put one back into the laptop I rely on. So now I have all these exposed thumb drives. Is there a reasonable ...
- 133
0
votes
2
answers
238
views
Windows Vista malware changed my admin password [duplicate]
I accidentally installed malware on my computer and it changed the admin user account password. Is there any way to bypass putting in the password, so I can run anti-malware?
1
vote
1
answer
7k
views
Completely remove FlexNet Connect software [duplicate]
I installed software from Nuance recently, and they surreptitiously installed a program called FlexNet Connect (even with a custom install). FlexNet Connect does not provide useful information on its ...
- 11.8k
-1
votes
1
answer
114
views
A malware in Mozilla, An URL opens automatically? [duplicate]
Some times when I open a site in Mozilla, a URL that starts with vadabzauefrpph4xraz8ewblhsbsbxkfq7sx8d9me4nuemgnx2yt5cnyfzzlxek.com will replace with the site's URL, What should I do to solve this ...
- 1
0
votes
1
answer
128
views
pseudohydrophobia process Mac
Recently I started noticing when I browse a web page in my MBP 10.10.5 Yosemite that Chrome Canary Version 53 was opening a new tab or some pages were not opening...this tab was redirecting me to ...
0
votes
1
answer
97
views
Every time I boot my pc a website loads
the website is http://gameloft.name/ obviously a malware
but I did run programs like rkill (http://www.bleepingcomputer.com/download/rkill/)
Then adwcleaner then spybot then browserbased scanners ...
- 21
0
votes
1
answer
262
views
Adware, malware popups and redirects [duplicate]
About a week ago, while browsing the internet - with my Lenovo S860 / Android / Chrome -, some popups came out, and initially i thought that the site has some ads, but it was something else. I've ...
- 1
1
vote
0
answers
197
views
Noad steep tv ads running on PC
I have ads playing in the background of my PC. In the task manager there is a process named noad steep tv. If I try to end it, it just reappears after a few minutes. My antivirus doesn’t find anything....
- 11
0
votes
2
answers
3k
views
Can I determine a ransomware decryption key, given an encrypted file and its original?
I've recently been victim of a ransomware attack. I lost some of my files because but I have some of them backed up. If I have for example, the same txt file, one of them encrypted, and the other, ...
0
votes
1
answer
86
views
How do I get rid of istartsurf browser hijacker
My Firefox browser has become infected with the istartsurf hijacker, which means that an istartsurf tab is added to my browser's tabs each time I start Firefox. How do I get rid of it?
What I already ...
- 584