/wsr/ - Worksafe Requests » Thread #534237

[19 / 5 / ?]

I'm a stupid faggot and I fucked up

Anonymous Mon 09 Jul 2018 14:19:42 No.534237 View View Reply Original Report

I used public torrents one too many times and it bit me in the ass finally for the first time, I opened an installer from said pirated program and it installed a bunch of shit on my pc, and the process tab keeps getting spammed with .exes
What the fuck do I do help

Anonymous

Anonymous Mon 09 Jul 2018 14:30:30 No.534242 Report

Quoted By: >>534243

>>534237
>run your antivirus (full scan)
>end all unrecognized .exe tasks using task manager
After doing those things restart your computer, see if the problem persists

Anonymous

Anonymous Mon 09 Jul 2018 14:36:18 No.534243 Report

Quoted By: >>534244

>>534242
Well I am running the full scan. And I try killing the tasks but they keep popping up, every second I hear the windows "ding" sound like a new file or folder being opened, it's spamming them or something
Also it automatically installs an application in my browser that I can't uninstall, only turn off

Anonymous

Anonymous Mon 09 Jul 2018 14:38:59 No.534244 Report

Quoted By: >>534247

>>534243

>>534243
Just keep closing the tasks until the scan is finished, also what browser are you using?

Anonymous

Anonymous Mon 09 Jul 2018 14:47:00 No.534247 Report

Quoted By: >>534257

pc being slowed down, CPU usage sometimes spikes to 99%
fuck man, FUCK

>>534244
Firefox
Not sure if it's the same thing or what but I also can't seem to access many sites
Also I'm scanning with MSE if that changes anything

Anonymous

Anonymous Mon 09 Jul 2018 15:01:50 No.534257 Report

Quoted By: >>534262

>>534247
If there aren't many important files on your computer, you could just reinstall windows and have the installation process wipe your drive so you can start over
Also you could just uninstall and reinstall firefox and see if that does anything, but for the most part you're better off waiting for the scan to finish

Anonymous

View Same Google ImgOps iqdb SauceNAO wat.png, 180KiB, 1485x932

Anonymous Mon 09 Jul 2018 15:08:21 No.534262 Report

Quoted By: >>534283

>>534257
Yes, I actually seemed to have solved the task manager process/service spam by locating the .exe files it had installed and removing them manually
Also the other full scan from Malwarebytes says I have a bunch of malware/unwanted programs in SysWOW64??? And System32? What the fuck is this? Pic related

Anonymous

Anonymous Mon 09 Jul 2018 15:49:38 No.534283 Report

Quoted By: >>534291

>>534262
Looks like more rootkits to me, OP.

https://forums.malwarebytes.com/topic/217421-very-persistent-rootkitagent/

Anonymous

View Same Google ImgOps iqdb SauceNAO wat.png, 12KiB, 1225x231

Anonymous Mon 09 Jul 2018 16:06:30 No.534291 Report

Quoted By: >>534303 >>534347

>>534283
I'm not sure, using Malwarebytes and some manual tracking down of .exes I seem to have removed everything, no process popups anymore and the pc is at normal speeds. I guess that did it?
My last problem now is that I still get this shit, pic related, installed on my Firefox even if I reinstall the whole thing, and it says another program has installed the component in Firefox

Anonymous

View Same Google ImgOps iqdb SauceNAO wat.png, 61KiB, 1192x514

Anonymous Mon 09 Jul 2018 16:43:51 No.534303 Report

Quoted By: >>534316

>>534291
Alright, other than that firefox plugin that is forced to be installed every time I try to reinstall chrome, Malwarebytes is also blocking this site like every minute. It's trying to fuck with firefox so I guess this is it?
Anyone know what this is and what should I do?

Anonymous

Anonymous Mon 09 Jul 2018 17:04:33 No.534316 Report

Quoted By:

>>534303
>It's trying to fuck with firefox so I guess this is it?
Yup, most likely trying to phone home to reinstall its shit.

Have you tried rebooting to safe mode to run all the scans and malware killers yet?

Anonymous

Anonymous Mon 09 Jul 2018 17:06:26 No.534318 Report

Quoted By: >>534340

Adwcleaner and rogue killer
Then ccleaner

Anonymous

Anonymous Mon 09 Jul 2018 17:48:35 No.534336 Report

Quoted By: >>534340

cloak your pc device then reinstall monitor
the task to watch your exe processes has dependencies. you need to re-allocate them

Anonymous

Anonymous Mon 09 Jul 2018 17:55:40 No.534340 Report

Quoted By:

>>534318
I scanned and deleted adware with both malwarebytes and Adwcleaner but it still shows that same website blocked as adware almost every time I open a new tab with both Firefox and IE.

>>534336
Can you elaborate? Why wouldn't malwarebytes or other have removed anything I can't see?

Anonymous

Anonymous Mon 09 Jul 2018 18:13:59 No.534347 Report

Quoted By: >>534367

>>534291
>no processes pop up
The whole point of a rootkit is to modify the kernel so that malware can run undetected.

Anonymous

Anonymous Mon 09 Jul 2018 18:50:34 No.534367 Report

Quoted By:

>>534347
I see but wouldn't there be any sign it's running? Like the CPU usage or something?

Anonymous

Anonymous Mon 09 Jul 2018 18:55:51 No.534372 Report

Quoted By: >>534435

nuke and pave OP. Nuke and pave.

Anonymous

View Same Google ImgOps iqdb SauceNAO mr_arashi's_amazing_freak_show__ (...).jpg, 14KiB, 210x152

Anonymous Mon 09 Jul 2018 21:26:33 No.534430 Report

Quoted By: >>534435

>>534237
I know it's a hassle, but if possible back up your important documents and data from safe, non-pirated programs into an external drive, and factory reset the MFer.

Anonymous

Anonymous Mon 09 Jul 2018 21:42:44 No.534435 Report

Quoted By:

>>534372
>>534430
At this point I don't think it's necessary since it seems mostly safe now but I backed up the vital data to an usb key, and have it checked tomorrow just to be sure, most of the stuff on the pc is just games anyway but I'd rather not fucking lose it

Thanks anons ITT for the help

Capcode	All Only User Posts Only Verified Posts Only Moderator Posts Only Manager Posts Only Admin Posts Only Developer Posts Only Founder Posts
Show Posts	All Only With Images Only Without Images Only Spoiler Images Only Non-Spoiler Images
Deleted Posts	All Only Deleted Posts Only Non-Deleted Posts
Ghost Posts	All Only Ghost Posts Only Non-Ghost Posts
Post Type	All Only Sticky Threads Only Opening Posts Only Reply Posts
Results	All Grouped By Threads
Order	Latest Posts First Oldest Posts First

On these archives

Your latest searches

I'm a stupid faggot and I fucked up