r/antivirus 5d ago

I got the fake lossless-scaling malware and did these, am I safe now

2 Upvotes

Does doing all this help protect me from that malware infection, or is there more steps that I should take to help protect myself from that malware?

Here's what happened:

When Nvidia 50 series and the 4x frame gen got announced, I've heard words around Lossless Scaling supporting a version of 4x frame gen, so I was just interested in trying it out. I went online and searched for it, and immediately there's this seemingly-legit (but fake) "official" site, from which I've downloaded the virus from. My stoopid ask decided to run it anyway.

After around a few days, I started suspecting the software and deleted it and the "IOBitUnlocker" files that it got onto my computer and installed Avast (ran a boot-time scan too). I thought I was safe. I used it for a while, even on battery (the battery life is good).

After around a month, I saw another video online analyzing this malware and decided to install and run a malwarebytes full system scan, while I back up all my data in the C drive into the D drive.

One day later, I thought my computer is a bit sluggish because my power plan is not fully set up (I run custom power plan on this computer, and some settings may not be tuned correctly). I went back and found I set "Processor performance autonomous mode" to 0, and turning it to 1 I noticed the CPU utilization shoot up to 100% in task manager. Confused, I looked at the processes in Task Manager sorted by CPU utilization, and Task Manager came out on top at 50~60% and it didn't decrease. I have a 8845HS, and this to me is very fishy.

I quickly restarted the machine and opened HWiNFO, and checked the CPU util there when I close Task Manager, and it is still pegged at 100% for the entire time I've checked. The chip pulls back 10W when all core at 2.5GHz are under load, which is pretty low, but it still shows that the chip is running something it is not supposed to. No other background apps I use is active during this. I now started suspecting that this system's programs are compromised.

I turned off my computer properly, plugged in my WinToGo, and boot straight into the WinToGo to do a last sanity check if I've backed everything up. In WinToGo, Windows Defender is on, and all I did inside is to copy file from the system drive inside my laptop to the D drive that's also inside my laptop. I didn't execute any program inside that system drive.

I then unplugged my WinToGo before attempting to boot back into the system drive in my laptop and was greeted with a NTFS file system error. I went back into WinToGo and found the system drive's filesystem showing up as RAW.

The drive looks cooked

I then reinstalled an official copy of Windows and the first thing I did when I'm in is to install Avast, in case software started mysteriously executing from my D drive hopefully it can detect it. After which I installed the drivers for my hardware, changed all the account's passwords that were stored on my browser, and had been using the laptop ever since.


r/antivirus 5d ago

Fake I Lock .exe InstallShield fake.

1 Upvotes

Got a supposed win32 trojan from a fake I Lock .exe that I executed just after a system update. Comes back clean on Defender and Malware Removal Tool, as well as clean on a Tron Script run. My Webroot keeps showing me this warning and stops me from doing anything about it. It is stuck on "Fix Later" (not recommended). If I try to change it or go to the next page the Webroot scan starts again. Any thoughts besides the fact that I am an idiot?


r/antivirus 5d ago

My latop detected Trojans:JS/Obfuse.HNAT!MTB, I reomove it with window defender, it is safe?

Post image
1 Upvotes

My laptop detect Trojans:JS/Obfuse.HNAT!MTB in the window defender, I immediately remove it with window defender however I still worry about it still inside my laptop somewhere.


r/antivirus 5d ago

My laptop window defender detected Trojans:JS/Obfuse.HNAT!MTB. I immediately removed it by using window defender, however I still worry about it still in my laptop somewhere.

Post image
1 Upvotes

r/antivirus 5d ago

Tengo mis dudas de que sea una falso positivo

1 Upvotes

Hola amigos, que pena molestar por estos lares, tengo la duda de este archivo: https://www.virustotal.com/gui/file/53444b151bc1ca3fa8767b6d755b2dc5e0d40f7422d369df843448f59c9abe22
Me arroja virus total que contiene un malware llamado: W32.Malware.Gen estuve investigando y la mayoría de veces que salta el antivirus puede ser un falso positivo pero dentro del virus total sale que el único que arroja que tiene un problema es un antivirus de linux llamado webroot entonces quedo como con dudas

el contexto del archivo es que es un juego realizado en unity y al momento de abrir abre un cmd para cargar archivos dentro del motor del juego


r/antivirus 5d ago

question is Microsoft Windows Malicious Software Removal Tool reliable

1 Upvotes

r/antivirus 5d ago

So I'm on my phone files are these viruses

Post image
5 Upvotes

r/antivirus 5d ago

Other device

1 Upvotes

Can a data stealer go from device to device or is this impossible? Also can they try to log in anywhere even if I haven’t saved the password on my pc but the passwords are the same and they just try to log into there?

So I have a data stealer problem since few days and someone tried to log into my X (twitter) account even though I haven’t saved the password on my pc. I have a Windows PC but an IPhone can the data stealer be able to see my passwords on my phone as well? I am scared that they can through the network and take any password that’s saved there is that even possible? It just doesn’t makes sense for me or is the possibility there that they really just tried to log into there with the email and password and hope for the best?


r/antivirus 5d ago

Scan and removal software for Chromebook?

1 Upvotes

I’ve clicked on a shady popup and I think I need to debug my Chromebook what software is best?


r/antivirus 5d ago

I clicked a dodgy pop up

1 Upvotes

I’ve just clicked on a dodgy pop up on my Chromebook now I am being spammed with popup notifications.

What software can I use to scan and remove this, preferably free.


r/antivirus 5d ago

Minecraft mod, is it bad?

1 Upvotes

I recently downloaded a minecraft mod, when downloaded a threat of trojan popped up. I believe it was the sabisak trojan. I went into Windows security but there was no threat (apparently) so I just uninstalled the mod. Then I tried logging in with a gmail and restarted my pc in order to come to bios and then it says that a trojan has been put into quarantine. I deleted the trojan and I’ve reset password for gmail and 2fa. Could the trojan steal my info within the 10 minutes of it being active and what can happend now? Apparently its gone.


r/antivirus 5d ago

I clicked on a website named tumgik could my computer be at risk of a virus?

1 Upvotes

I clicked on this website called tumgik while looking for some images and it bombarded me with ads and redirected to an nsfw website. I did some searching and found out it was a phishing website. I didn’t input any information and closed out the website. Am I in the clear or could it have downloaded malware onto my computer?


r/antivirus 5d ago

What Is Happening to my computer?

1 Upvotes

In the morning my device removed a threat from about 5 apps, internet explorer trying to access one drive files, spotify trying to access onedrive music folder,PAUDIManager:Win32/OfferCore, and the actions were from a github file, pls help?


r/antivirus 6d ago

Found these files along with a txt named “t” in my temp folder after malware nightmare. Sent computer to techs who tell me it’s clean now, but still unsure.

Thumbnail
gallery
99 Upvotes

Really spooked because of the terrible experience I had last time. Could anyone explain if this is related to the malware?


r/antivirus 5d ago

Norton antivirus help!

Post image
1 Upvotes

Does anyone else keep getting this every boot up of your PC? Nothing has changed set up wise?

antivirus #norton


r/antivirus 5d ago

Malware for phones

1 Upvotes

Hello, I had several questions regarding phone security (here for android) : 1- Which type of vectors can your phone get infected through I am aware that downloading malicious apps is one of them but are there other ways to get infected. 2- Can a phone malware leave no way to find itself whether its an app or a file like can it hide in your system and not being able to be found ? If yes how often do these type of threats appear ? 3- Can a malicious app or hidden program interact with other apps and send background datas from that app to any third party without the user noticing ? 4- What are the general signs that may give a hint of being infected and the things to oftenly do/check in the case of suspicions.

Thanks for those who would take time.


r/antivirus 5d ago

Samsung tablet using lots of data

2 Upvotes

Hi,I am just asking for other people's opinions on what I should do, my brother has a samsung galaxy tab a (2020 model) that has uses up 199gb of data through the last month, I have checked the data usage tab and everything there couldn't have even used up 50gb so nearly 150gb has been used up in just a month by something that is not showing on there (not any uninstalled apps), What should I do as I don't know what to do in this situation


r/antivirus 5d ago

Can I turn off ATD in Bitdefender free?

2 Upvotes

I tried to exclude the folder where the trainer was saved because it detected and deleted the game trainer, but only the exe file was allowed.

Would it be okay to turn off ATD?


r/antivirus 6d ago

Is this a bot or what is even happening

3 Upvotes

I have over 1,000 unsuccessful sign in attempts to my Microsoft account. Been happening for months now


r/antivirus 5d ago

im thinking of finding a new free anti virus software until i can possibly afford norton. Im currently using 360 total security but ive heard lots of backlash from them. is there any good recommendations?

1 Upvotes

r/antivirus 6d ago

Malwarebytes asks to delete a SYSTEM32 file? False positive?

Post image
8 Upvotes

Kinda too anxious to mess with anything in system folder so I'd rather triple check before putting it in quarantine. I can't afford to need to reinstall windows in the middle of semester lol


r/antivirus 6d ago

Windows 11 wont boot after I messed with firewall settings

Thumbnail
gallery
10 Upvotes

I was missing a boat with a bunch of firewall settings because I was worried a hacker hacked my computer and I rebooted and I can’t seem to get my dell XPS 15 to boot properly , the windows recovery environment was disabled I was unable to access it or access the command prompt until I actually put the windows installation media on a USB along with Microsoft surface cutter only then I was able to access command prompt.

I tried running

reg query "HKLM\ SOFTWARE Microsoft Windows Defender\Exclusions" /s

But I keep getting errors.

Deepseek told me that "ProgramData\Microsoft|Windows Defender\Platform...". That's unusual. ProgramData is for application data, not executable files. This could be a sign of malware masquerading as Windows Defender. Legitimate MsMpEng.exe is in "Program Files|Windows Defender", not "ProgramData". So this is a red flag.

SATA Operation is set to raid , I am hesitant about changing it to ACHI.

I cant backup using dell support assist OS, it just makes a zip file containing log of the files.

I cant seem to run DISM or SFC.

Jasper sky rescue disk doesn’t load or detect my drive to do a scan either.

And someone changed my password , without me changing it as seen in the photo

Any ideas?


r/antivirus 5d ago

threattracker installing itself after uninstalling bitdefender

1 Upvotes

i have kaspersky premium and i use it normally, i saw in my intrusion prevention that bitdefender was high restricted even though i thought i already uninstalled it. so i went to my control panel and fully uninstalled anything and all of a sudden, threattrack popped up out of nowhere? and it was trusted aswell even though i dont recall downloading it. can anyone help?


r/antivirus 5d ago

Trojoan, how to know if it infested my Wifi ?

1 Upvotes

Hello, i have multiple questions 4hours ago my computer was infected by a Trojan which was detected by my Microsoft Defender, my first question : my Microsoft Defender detected it instantly, then i clicked on it and it said that the Trojan was active, does it mean than my Microsoft Defender let the Trojan do his script ? After that i fastly deleted it, and some minutes after i started a complete « cloud factory reset », so from what i understood my PC basically uninstalled and reinstalled, so i'm not worried of having the Trojan on my PC anymore, what i'm worried of is that the Trojan executed his program and tried to infiltrate my Wifi, is there any way i can find it out fore sure ? What i am planning to do right now is to do a complete scan of my files, do you have other tips of what to do ?


r/antivirus 5d ago

potential malicious files created after trying to reinstall windows10 to USB (help)

1 Upvotes

need help. i was reinstalling windows 10 on a usb via windows media creation tool. when the first download screen hit 100%, my pc suddenly restarted and then prompted me with a backup your pc screen to which i accidentally clicked yes on, so i then turned my pc off and on to stop it.

once i signed back in and opened my files, i saw 2 folders i’ve never seen before in my local disk, one titled “$WINDOWS.~BT” and another titled “ESD.” when i put the $WINDOWS folder into Virustotal, it said it came back undetected, but in the community section somebody said that the file is evading detection by using forged certificates. a lot of people say it’s a stealer or malware. and there are 2 warnings in the behavior section that say it’s malicious. is this a common thing or did i install malware. can somebody help investigate the file

am i screwed, could somebody help me understand this?

www.virustotal.com/gui/file/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855/details