Infected with “virus” , can’t get it removed by clean install windows

[johny]

Hello , 

I have a very persisting spreading screen virus on my asus windows 10 laptop ( and others)  By my knowledge it only messes with my screen ( makes it reddish gloomy and seems to slightly pulsate) but it doesn’t freeze your computer or such or searches for information, to my knowledge. 
I have the same issue on multiple pc’s and 2 macs ... 
they have AlL anti virus protections Malwarebytes , clamxav on macs and also malwarebytes free version and f-secure on pc  , the latest windows updates , And standard and administrative accounts... tried with several anti virus programs but none seem to recognize this.... 
the virus spreads from even connecting an external device without opening anything. From Mac to windows ???? 
it presumably originated from a malicious torrent file Downloaded years ago. And has gotten on every computer in my house via usb connection. 

I know from trying On the macs that erasing your drive and reinstalling the operating system Doesn’t solve the alterations . Even booting to an other drive with a clean system  gives no good result.  The infection on my latest windows pc comes from the ext. ssd connected to that infected Mac ..,,
 

I have tried on the windows to go to a restoration point . But that doesn’t do anything. I am going to try to restore my laptop to original factory settings . But I hoped that I could find a Different thoroughly solution from my malwarebytes antivirus here at the help forum? 
 

I have posted on the forum before but then Mac related.  
And have been told that a virus doesn’t work like this on a Mac . 
I do not really know if it would be categorized as one . But I know these screen alterations spread so that must be some kind of coding or such. 

are there any steps I can take before trying to reStore my pc to factory settings ? 
I didn’t make a backup yet as the pc is a month old . I do have a recovery drive from my windows fully updated. And have enabled the windows restore at start of boot. 
 

with kind regards 
 

jonas
 

 

 

 

 

[AdvancedSetup]

Hello @johny

 

Please run the following steps and post back the logs as an attachment when ready.
Temporarily disable your antivirus or other security software first. Make sure to turn it back on once the scans are completed.
Temporarily disable Microsoft SmartScreen to download software below if needed. Make sure to turn it back on once the scans are completed.
If you still have trouble downloading the software please click on Reveal Hidden Contents below for examples of how to allow the download.
 

Spoiler

 

 

 

 

 

Spoiler

 

When downloading with some browsers you may see a different style of screens that may block FRST from downloading. The program is safe and used hundreds of times a week by many users.

Example of Microsoft Edge blocking the download

 

 

STEP 01

• If you already have Malwarebytes installed then open Malwarebytes and click on the Scan button. It will automatically check for updates and run a Threat Scan.
• If you don't have Malwarebytes installed yet please download it from here and install it.
• Once installed then open Malwarebytes and select Scan and let it run.
• Once the scan is completed make sure you have it quarantine any detections it finds.
• If no detections were found click on the Save results drop-down, then the Export to TXT  button, and save the file as a Text file to your desktop or other location you can find and attach that log on your next reply.
• If there were detections then once the quarantine has completed click on the View report button, Then click the Export drop-down, then the Export to TXT  button, and save the file as a Text file to your desktop or other location you can find and attach that log on your next reply.
• If the computer restarted to quarantine you can access the logs from the Detection History, then the History tab. Highlight the most recent scan and double-click to open it. Then click the Export drop-down, then the Export to TXT  button, and save the file as a Text file to your desktop or other location you can find and attach that log on your next reply.
• If Malwarebytes won't run then please skip to the next step and let me know in your next reply that the scanner would not run.

STEP 02

Please download AdwCleaner by Malwarebytes and save the file to your Desktop.

• Double-click to run the program
• Accept the End User License Agreement.
• Wait until the database is updated.
• Click Scan Now.
• When finished, if items are found please click Quarantine.
• Your PC should reboot now if any items were found.
• After reboot, a log file will be opened. Attach or Copy its content into your next reply.

RESTART THE COMPUTER Before running Step 3

STEP 03
Please download the Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit

• Double-click to run it. When the tool opens, click Yes to disclaimer.
• Press the Scan button.
• It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
• The first time the tool is run, it also makes another log (Addition.txt). If you've, run the tool before you need to place a check mark here each time
• Please attach the Additions.txt log to your reply as well.
• On your next reply, you should be attaching frst.txt and additions.txt to your post, every time.

 

Thanks

[johny]

Hello,

 

thanks for your help and assistence!

i have done all the checks from your reply . i'll post the attachements.

I noticed when running adwcleaner and farbar not all boxes were checked , i ran the application in the settings it original arrived. i hope that's ok?

 

many thanks again for the assistence

 

kind regards

j

scan asus mb.txt AdwCleaner[S00].txt FRST.txt Addition.txt

[AdvancedSetup]

I'm not seeing anything in the logs to account for this.

Have you tried unplugging the video card to your monitor and then plug it back in again?
Have you tried updating your video drivers?

We can run a generic clean script that will clean a bunch of general temp and other files and verify the operating system files.

 

Please download the attached fixlist.txt file and save it to the Desktop or location where you ran FRST from.
NOTE. It's important that both files, FRST or FRST64, and fixlist.txt are in the same location or the fix will not work.

Please make sure you disable any real time antivirus or security software before running this script. Once completed make sure you re-enable it.

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system that cannot be undone.

Run FRST or FRST64 and press the Fix button just once and wait.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Desktop (Fixlog.txt) or wherever you ran FRST from. Please attach or post it to your next reply.

Note: If the tool warned you about an outdated version please download and run the updated version.

NOTE-1:  This fix will run a scan to check that all Microsoft operating system files are valid and not corrupt and attempt to correct any invalid files. It will also run a disk check on the restart to ensure disk integrity. Depending on the speed of your computer this fix may take 30 minutes or more.

NOTE-2: As part of this fix all temporary files will be removed. If you have any open web pages that have not been bookmarked please make sure you bookmark them now as all open applications will be automatically closed. Also, make sure you know the passwords for all websites as cookies will also be removed. The use of an external password manager is highly recommended instead of using your browser to store passwords.

The following directories are emptied:

• Windows Temp
• Users Temp folders
• Edge, IE, FF, Chrome and Opera caches, HTML5 storages, Cookies and History
• Recently opened files cache
• Flash Player cache
• Java cache
• Steam HTML cache
• Explorer thumbnail and icon cache
• BITS transfer queue (qmgr*.dat files)
• Recycle Bin

Important: items are permanently deleted. They are not moved to quarantine. If you have any questions or concerns please ask before running this fix.

The system will be rebooted after the fix has run.

fixlist.txt

Thanks

 

[johny]

Hello, 

 

I have checked if this would be hardware related , and have brought my computers in for a check all with no result. 
as the problem is the same on 5 computers here now   . And it all comes from connecting usb devices from 1 computer to another. 
the problem has started some 6 years ago , 

I have done several reinstallments and resetting my video memory but non seem to get rid of this altered screen look .

more worriesum is no anti virus detects this problem . 
I have found reports of similar issues on the net but I can’t seem to find any solutions other then it should be a graphics issue or cable. 
I am sadly very much doubting this as it all occurs the same way on all computers. 
 

I am doing the filistijnen.txt right now 

[johny]

in attachement the fixlist log

 

many thanks again for your help

Fixlog.txt

[AdvancedSetup]

Yes, not really much found. The log looks good.

Can you take a small video or a couple of screenshots showing what you're talking about?

 

[johny]

Hello, 

I have Actually tried that Before and it is not really visible . 
the screen has a kind of pinkish red glow . 
there is also some sort of filter over the screen that acts over the normal Windows desktop. That interferes with your perception of the screen.  Like you loose your focus.
 

it looks “normal” but there is definitely a difference in looks and experience of the screen. 
when connecting the usb yesterday , my screen started to look this gloomish glow , and a feeling of anxiety came over me so I really noticed something was wrong ( again) . i can’t relax when looking at it . And my brain tences up when even looking for short moment. 
and it feels like something is imposed on me from this screen. 
when stop looking at it I am aware that I was looking at something that was not ”normal” . Have had the same experience on the other pc’s. And actually bought this one . Cause I couldn’t work any more on the older ones because of this issue . 
in a moment of unknowing I connected a device which had been connected to the older Mac for short moment. And it spread the issue to the replacement laptop .       

on the older pc with same problem you can really notice the redness of the screen . And other people have remarked it too. 
 

very strange such thing that is already older , can’t be detected .
 

kind regards 

Jonas 

[AdvancedSetup]

Well "can't be detected" is sort of a misnomer. It you can't even see it in a video then obviously no one is going to be able to assist.

Scans, Logs show nothing
Video shows nothing
 

Sorry, but put yourself in other people's shoes. We need something more to go on otherwise we can't help you even though we'd like to.

Thank you again

 

[johny]

Hello sir, 

Thanks for your reply again.
I am Very sorry that I have given a wrong impression sir . I was somewhat disoriented and agitated from this thing happening .  
 

I’ll put a picture of the older pc with the red glow . And Of my laptop. With the blurry overlay . 
For me it is noticeable because I know what it looked/feld like before the alteration. And now. I think it would be Definitely more obvious visible when comparing a normal with an infected screen .  
 

the blurry overlay is like a filter That disturbs the normal look of The screen 

I hope this can give you an impression of what’s on my computers. 

 

most sincerely , 

jonas

 

 

[johny]

Hello again,  

i was so free to I try to reset and erase my windows 10 laptop with a usb recovery drive I made before the issue. To try to wipe the problem. 
Sadly it does not clear up my screen . I did notice that my bios layout has the same reddish glow too and while running the recovery software too.  
 

I have removed the CMOS battery en short-circuited the connectors . to reset my bios . 

I tried making a video where this gloomy blurry filter over my screen is visible. 
I hope it gives an idea . 

many thanks again . 
 

kind regards 

Jonas 


 

 

[AdvancedSetup]

That really looks like a faulty monitor to me. Are you sure you tried another monitor?

 

[johny]

Hello advanced setup, 

I just wanted to let you know , I tried  with another screen but it sadly stays the same. 
 

I decided I am buying an new desktop and second hand laptop and throw everything of storage devices out the window. And start fresh . 
I would love to find a solution for this thing causing these screen alteration, but I can’t work on those computers any longer as it gives me headaches for days afterwards. 
 

I was maybe thinking if It would be possible to send an storage device via mail to malwarebytes Lab . So they could see what’s on it ?? 

 

Thanks for your assistance and time !

 

 

kind regards , 

jonas



 

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Please review the following for Tips to help protect from infection

Thank you