Jump to content

Malware causing a hardware and a software problems

wayne64

By wayne64
in Resolved Malware Removal Logs

 Share

Recommended Posts

wayne64

wayne64

Posted
Posted (edited)

Hello,

Well, i m gonna get into my story from the beginning :

Last week i noticed a process that had been sucking 25% of my cpu power and using alot my internet connection, i got a little worried so i started investigating, turned out that the name of the process was ISUSPM.exe it was related to the InstallShield Updater.

So i scanned the pc with my antivirus : Nothing found.

I downloaded other file cleaners like roguekiller, hitman, AdwCleaner and others they scanned the computer and found some stuff, some of them quarantined some items and others deleted some (some reports and quarantined items still here)

Then i installed malwarebytes i scanned, and he found some registry stuff and  a service scheduler related to this ISUSPM and deleted them.

After all those scans finished i rebooted the pc. Then once i got into the windows logo the fan started to move fast and make a noise.

Most people will say fan noise and heat is a dust problem, but it can't be , cause it happend the moment i finished the scans and rebooted.

Also after 15minutes of usage time, i touched the laptop and it was so hot.

So my thought was maybe those scans deleted system files.

So i deleted malwarebytes and all of the others and restarted to check : But still the same.

I searched the net and came out with nothing.

I was gonna do a clean install of the windows 10, but i came here hoping to get everything fixed and back like it was.

 

SO SOMETHING SUSPICIOUS HAPPEND TODAY WHEN WRITING THIS TOPIC :

I was scanning some files with virustotal to check them but when i refreshed the page it became like this :

MHyGzyg.png

ALSO : When i was trying to post this topic i got a message that the forum was unavailable :

Dy2yqPG.png

Well now it works but the theme has been changed

Also google and facebook (other sites was working fine) didn't wanna work until i rebooted the router.

So my first thought, that this was the doing of the malware redirecting me ( or its just my luck both sites bugged at the same time)

 

Well i don't have the malwarebytes log since i deleted everything but reinstalled to check but i found something simillar in a comment in this forum:

 

 

Edited by wayne64
typo
Link to post
Share on other sites
wayne64

wayne64

Posted
  • Author
Posted
4 hours ago, Valinorum said:

That is the new page of the Virus Total. It is new for me as well. :) How is your PC performing? 

well the fan noise is still here, i tried to scan again with many file scanners for malware remnants everything is clean, only roguekiller displayed ks.sys as a forged file i didn't wanna delete it until someone here tells me what to do

Link to post
Share on other sites
wayne64

wayne64

Posted
  • Author
Posted

"results": {
        "processes": [],
        "modules": [],
        "services": [],
        "registry": [],
        "tasks": [],
        "filesystem": [
            {
                "scan_what": 3,
                "scan_how": [
                    1,
                    2,
                    3,
                    9
                ],
                "vendors": [
                    "File.Forged"
                ],
                "status_choice": 0,
                "processed": [
                    {
                        "type": 1,
                        "name": "ks.sys",
                        "path_expanded": "C:\\Windows\\System32\\drivers\\ks.sys",
                        "path_compressed": "%SystemRoot%\\System32\\drivers\\ks.sys",
                        "extra": "",
                        "md5": "2A36F026A670178332B2F24417993C8F",
                        "md5_low_level": "D458B977F8D152766DD58D5ADA747C24",
                        "forged": true,
                        "lnk_target": "",
                        "lnk_args": "",
                        "junc_target": "",
                        "junc_tag": 0,
                        "junc_error": 0,
                        "exists": true,
                        "signed": false,
                        "signer": "",
                        "status_str": "Found",
                        "status_removed": 0
                    }
                ]
            }
        ],

 

and about the first logs, is there anything wierd or suspicious ?

Link to post
Share on other sites
Valinorum

Valinorum

Posted
Posted

Sorry, I did not know how I missed it. 

  • Step # ESET Online Scanner
    Disable your security programs which includes but not limited to anti-virus, anti-malware, anti-spyware et cetera. Peruse this for additional information. 
    • Download esetsmartinstaller_enu.exe by clicking here.
    • Right-click on the program and choose Run as administrator.
    • Accept their terms and condition and proceed.
    • Install Add-On/Active X if prompted.
    • From the Computer Scan Setting check the following box --
      • Enable detection for potentially unwanted programs
    • Click on Advanced Setting --
      • Check the box beside Remove Found Threats;
      • Check the box beside Scan archives
      • Check the box beside Scan for potentially unsafe applications
      • Check the box beside Enable Anti-Stealth Technology
    • Click on Start and wait for the virus signature database to update.
    • The online scan will begin automatically and can take several hours.
      • Note: Do not touch either the Mouse or keyboard during the scan. Otherwise it may stall.
    • After the Scan finishes --
      • If no threats were found:
        • Put a checkmark in Uninstall application on close.
        • Close the program and report that nothing was found
      • If threats were found:
        • Open the file located in C:\Program Files\ESET\ESET Online Scanner\log.txt (32-bit) or C:\Program Files (x86)\ESET\ESET Online Scanner\log.txt (64-bit).
        • Copy and Paste contents of the log file in your next reply.

    Note: Enable your security programs afterwards.

Link to post
Share on other sites
wayne64

wayne64

Posted
  • Author
Posted
5 hours ago, Valinorum said:

Sorry, I did not know how I missed it. 

 

  • Step # ESET Online Scanner
    Disable your security programs which includes but not limited to anti-virus, anti-malware, anti-spyware et cetera. Peruse this for additional information. 
    • Download esetsmartinstaller_enu.exe by clicking here.
    • Right-click on the program and choose Run as administrator.
    • Accept their terms and condition and proceed.
    • Install Add-On/Active X if prompted.
    • From the Computer Scan Setting check the following box --
      • Enable detection for potentially unwanted programs
    • Click on Advanced Setting --
      • Check the box beside Remove Found Threats;
      • Check the box beside Scan archives
      • Check the box beside Scan for potentially unsafe applications
      • Check the box beside Enable Anti-Stealth Technology
    • Click on Start and wait for the virus signature database to update.
    • The online scan will begin automatically and can take several hours.
      • Note: Do not touch either the Mouse or keyboard during the scan. Otherwise it may stall.
    • After the Scan finishes --
      • If no threats were found:
        • Put a checkmark in Uninstall application on close.
        • Close the program and report that nothing was found
      • If threats were found:
        • Open the file located in C:\Program Files\ESET\ESET Online Scanner\log.txt (32-bit) or C:\Program Files (x86)\ESET\ESET Online Scanner\log.txt (64-bit).
        • Copy and Paste contents of the log file in your next reply.

    Note: Enable your security programs afterwards.

 

 

i already have eset as antivirus, isn't the same ?

Link to post
Share on other sites
wayne64

wayne64

Posted
  • Author
Posted

Well, i did the scan to make sure, no threats were found.

After all the scans i've done, and this scan there is still no sign of infection, i think when i scanned with malwarebytes it cleared everything, i think i'm clean.

And my guess is this is a hardware problem, because when i cleaned some of the dust inside the fan, it is not that loud anymore, there is still sound but not loud as it used to be.

What do you think ?

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Glad we could help. :)If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.