Jump to content

Search the Community

Showing results for tags 'bootkit'.

  • Search By Tags

    Type tags separated by commas.
  • Search By Author

Content Type


Forums

  • Announcements
    • Malwarebytes News
    • Beta Testing Program
  • Malware Removal Help
    • Windows Malware Removal Help & Support
    • Mac Malware Removal Help & Support
    • Mobile Malware Removal Help & Support
    • Malware Removal Self-Help Guides
  • Malwarebytes for Home Support
    • Malwarebytes for Windows Support Forum
    • Malwarebytes for Mac Support Forum
    • Malwarebytes for Android Support Forum
    • Malwarebytes for iOS Support
    • Malwarebytes Privacy
    • Malwarebytes Browser Guard
    • False Positives
    • Comments and Suggestions
  • Malwarebytes for Business Support
    • Malwarebytes Nebula
    • Malwarebytes Nebula Modules
    • Malwarebytes Endpoint Security
    • Other Malwarebytes Business Products
    • Malwarebytes Business Products Comments and Suggestions
  • Malwarebytes Tools and Other Products
    • Malwarebytes AdwCleaner
    • Malwarebytes Junkware Removal Tool Support
    • Malwarebytes Anti-Rootkit BETA Support
    • Malwarebytes Techbench USB (Legacy)
    • Malwarebytes Secure Backup discontinued
    • Other Tools
    • Malwarebytes Tools Comments and Suggestions
  • General Computer Help and Security Updates
    • BSOD, Crashes, Kernel Debugging
    • General Windows PC Help
  • Research Center
    • Newest Rogue-Ransomware Threats
    • Newest Malware Threats
    • Newest Mobile Threats
    • Newest IP or URL Threats
    • Newest Mac Threats
    • Report Scam Phone Numbers
  • General
    • General Chat
    • Forums Announcements & Feedback

Find results in...

Find results that contain...


Date Created

  • Start

    End


Last Updated

  • Start

    End


Filter by number of...

Joined

  • Start

    End


Group


AIM


MSN


Website URL


ICQ


Yahoo


Jabber


Location


Interests

Found 6 results

  1. I have a Lenovo Ideapad 3 with AMD Ryzen 5, it's only one year and 3 weeks old. In April, Lenovo released a security advisory stating that their devices had 3 bios/UEFI related vulnerabilities which allowed a virus to rewrite the SPI and deactivate the UEFI (among other things.) I assume that's what caused the issue but I don't know for certain. Lenovo claimed a bios update would fix the vulnerability but did nothing about those of us already infected. I have done everything imaginable to fix this but nothing works.It has survived every reset, every restore, every clean OS install. Each time I reinstall Windows, I completely format and delete every partition, I tried putting Windows 10 Home, 10 N, 10 Pro, 10 Pro N, something called Windows 10 Single Language, Windows 11 Home, Linux, Debian, Ubuntu, and multiple live Linux versions via Yumi. I also tried the Lenovo Recovery Media, nothing works! I have tried MANY different antivirus programs including Sophos, Malwarebytes, ADWcleaner, Microsoft Malicious Software Removal Tool, Windows Defender, Microsoft Security Essentials, Restoro, McAfee, etc. They all claim there's no virus. They do their scan with no problems found! They're wrong. After resetting the PC (done this about 60 times) I go straight to the Event Viewer, it's the only obvious sign of the infection. The very moment the OS starts up, the virus has already made MULTIPLE privileged users with a long list of "special privileges" added to those users. I removed the wifi card in case that might help, it made no difference. I have run the SFC scannow command dozens of times, sometimes it says it fixed corrupt files, sometimes it says it found nothing, sometimes it says "access denied." I have also tried Dism and bootrec commands they all say successful, except /fixboot which says "access is denied." I'm out of ideas! The 4 other laptops in my house and 2 desktops all have the same symptoms now. It must have gotten into the router. I know I probably gave the virus to one of the desktops via a USB that was used to get the OS downloads from a clean computer (the desktop) to my laptop but I never used that USB on any of the other machines. I am open to any possible help... other than replacing the motherboard... but I think that's the only way to fix this Thanks!!
  2. As soon as I insert my hard drive (corrupted with some pirate softwares but cannot delete, too slow), it installs the same pirated software directly onto my Applications folder, every time without fail. Then my cursor kind of becomes laggy and some bits on my google chrome (scroll, select and etc) gets modified on its own. Right now, it's fine since I've disconnected the hard drive forcefully. I'm not so sure how to go about this since it stores many of my important history of work, other files and so on. Will I even be able to retrieve those files- or will I ever be able to fix this corrupted hard drive ever? Previously my macbook pro was incredibly slow until I found installd on Terminal, running the CPU up to 235% or something similar like that and everything was fine after having had it force quit. I also wonder if your product can detect any mac bootkits/rootkits. If they exist also on mac os.
  3. hello and thank you in advance for your help in resolving this I have been battling this thing for well over a year and finally decided to buy another lap top and just start from scratch. upon logging onto the new PC I stupidly added my Microsoft account and the new lap top went haywire. CPU at 100 % Disk at 100 % all types of network activity. It renders me unable to boot into safe mode saying my pass word is incorrect. It seems to create a VM for me to live in and goes out of its way to make all the screens seem legitimate when it tells me that my IT admin has control of these settings (nearly everything is greyed out within important settings) MBAM finds nothing because I don't think it is actually running MBAM but only a virtual clone of it. GMER goes nuts identifying things until it eventually fails and closes. I am tired of all of this and have contemplated just starting anew with a fresh ms account but this one has all of my xbox titles on it and I don't want to go in that direction if I don't have to, It also seems to survive deleting and repartitioning the hard drive and I believe it is within my one drive as well as my android phone. Please help me rid the world of this garbage. I have the MWB support tool zip would you like that to begin ? Im sorry I looked for the instructions of how and what to post and the rules and such but this is my first time doing any type of forum posting and to be honest I don't really know how to use/interact with them properly. forgive me thank you k
  4. Story TL;DR: I seem to be infected with a pretty advanced rootkit/etc. I'm not sure if I am being too paranoid, or, if there is something actually going on (Rootkits are almost impossible to detect, BADUSB , etc... Which are all available by a simple google search nowadays...) I have reinstalled Windows 10 x64 pro, with USB drives multiple times (Re-downloading it). I think the MBR, BIOS, Firmware of devices may be infected. I would appreciate the help and may consider buying software/upgrading components for these type of attacks. Addition.txt aswMBR.txt FRST.txt log file MWB.txt
  5. the windows 10 exploit for the creators edition. Just reinstalled windows and didn't want to restart but it did on its own. but just need help removing it and then getting it off my MacBook air which currently doesn't want to reinstall its OS X FRST.txt MBAMex.txt Addition.txt
  6. Guys, research about bootkit In brief: - Infects MBR - Contains rootkit - Multi-AV killing, system-tools killing features - Some anti-debug features http://artemonsecurity.blogspot.com/2012/07/guntior-detailed-analysis-of-chinese.html
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.