Malware Hidden In System 32

[JulioCesiss]

Hello!

I'm having an issue with a malware that apparently is hiding in my system32. I'm not really good with this kind of thing, so i decided to ask for help here.

This is my problem: So i woke up this morning,turned on my PC and the first thing i did was open Steam and try to play a game i installed last week.(Note:The game worked perfectly fine yesterday.) And the thing is:This game uses Battleye Anti-Cheat,and i can't open the game without it, so when battleye was starting, it did'nt want to open my game due to a problem with blocked files,(All of them from system32) so i searched the internet for a fix, and found out that this problem happens because i have a malware in my computer, so i installed MalwareBytes and tried to clean it up. But even after i did, My game still would'nt work and show the same problem, Because of that, i came to the conclusion that the malware affecting my computer was actually hidden in system32 because the blocked files that battleye could'nt load were all from Sys32.

 

Notes:I have installed some stuff i did'nt completely trust recently,and i can talk about them if needed.

Other than my game not working, my computer is still functional,and runs smoothly.

The image below shows the issue on the game,the problems on the print are some of the files that got blocked(i'm not sure but i have an impression they're increasing over time,but i'm not really sure).

[JulioCesiss]

Edit:Google Chrome is getting slower and slower,i think i might be screwed...

[LDTate]

Hello  and

Have you tried uninstalling / re-installing the game?

[JulioCesiss]

I have...It still has the same problem.

[LDTate]

Hello  and

Please take your time.

 NOTE: The tools and the information obtained is safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

Download Malwarebytes Support Tool
https://downloads.malwarebytes.com/file/mbst?src=Forums-Reply

    Once the file is downloaded, open your Downloads folder/location of the downloaded file
    Double-click mb-support-X.X.X.XXXX.exe to run the program
        You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
    Place a checkmark next to Accept License Agreement and click Next
    You will be presented with a page stating, "Get Started!"
    Click the Advanced tab

Click the Gather Logs button

A progress bar will appear and the program will proceed with getting logs from your computer

Upon completion, a file named mbst-grab-results.zip will be saved to your Desktop. Click OK

Please attach the file in your next reply.

[JulioCesiss]

This is what i got.

mbst-grab-results.zip

[LDTate]

I have attached A file I need you to download and save it to the same place that you saved the FRST program

This fix will include removing temp files and emptying the Recycle Bin.

Download attached **fixlist.txt** and save it to same location where the FRST tool is located.

NOTE: Both FRST.exe and the fixlist.txt must be in the same location or the fix will not work.
Close all browsers before running.

Double click FRST to run the tool. If the tool warns you the version is outdated, please download and run the updated version.
 •Click the **Fix Button**.
 
•If you receive a message that a reboot is required, please make sure you allow it to restart normally.

•The tool will complete its run after restart.

When finished, the tool will make a log (Fixlog.txt) in the same location from where it was run. Please attach the Fixlog.txt in your reply.

Restart the pc and let me know how it's running now.

fixlist.txt

[JulioCesiss]

I'm sorry, but is FRST the MalwareBytes Support Tool? i'm not really sure of what it is.

[LDTate]

FRST is a program that is part of the tool.

C:\FRST

 

[JulioCesiss]

I went to C:\FRST but it only has some folders and txt files and a .exe file but its called "ERDNT". i can't find FRST.exe

[LDTate]

Download a fresh copy.

You need the 64 bit version.

https://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/

Once you have downloaded it, copy the fixlist.txt file to the save folder and run the fix

[JulioCesiss]

I just restarted my computer and opened up unturned,and it works perfectly fine, thanks!

[LDTate]

Great Job

I'm happy to have helped and glad this is resolved. As there are no other issues which need addressing we can now close this ticket.
 

Help Secure your browsers

Please install uBlock Origin for your browsers to better protect your system

FireFox, Chrome, and Safari 
Opera
Microsoft Edge

AdBlock for Internet Explorer

Follow-up Reading

Cryptolocker Ransomware: What You Need To Know
Scams: Tech Support Scams 
PC Safety: Seven tips to keep your PC safe

 

Thank you for choosing Malwarebytes
Peace Be With You

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Thanks