"Virus" - GET ALL PASSWORDS

Page 3 of 3 FirstFirst 123

  1. Posts : 19,383
    Windows 10 Pro x64 ; Xubuntu x64
       #21

    SledgeDG said:
    one more idea in case the culprit can't been found:
    Make sure you see extensions of known files

    next time when the exe reappears, delete it and then take any Text file, name it "GET ALL PASSWORDS.EXE"
    Set it to read only and see if that malware file comes back by getting around this "construct"
    I bet it doesn't
    -DG
    Ahhh...clever. It might also help to find the location of this EXE. For example, does it only occur on your deskttop? If it's in other locations, it can help us narrow down it's source.
      My Computer


  2. Posts : 124
    Windows 7 pro 64 bit
       #22

    SledgeDG said:
    one more idea in case the culprit can't been found:
    Make sure you see extensions of known files

    next time when the exe reappears, delete it and then take any Text file, name it "GET ALL PASSWORDS.EXE"
    Set it to read only and see if that malware file comes back by getting around this "construct"
    I bet it doesn't
    -DG
    brilliant
      My Computer


  3. Posts : 7,781
    Win 7 32 Home Premium, Win 7 64 Pro, Win 8.1, Win 10
       #23

    I would offer this piece of advice up. If you have no idea what a program does, where it came from (it pops up on your desktop all of a sudden) and are unsure of it in any way, don't click it without thoroughly researching it first.
      My Computer


  4. Posts : 1,036
    Winbdows 7 ultimate x64 | Ubuntu 12.04 x64 LTS
       #24

    You uploaded the file to virustotal, what was the result negative or positive? Any detections?
    Also, if it comes back after every reboot which is surely not a good thing, download Autoruns from Sysinternals and check if there's any startup entry for it. There're many hidden startup locations too.. If you feel uncomfortable at the startup list, save the report and upload that here. There should be an option for it, may be in file menu. I cant recall now. Also, check your windows folder, any suspicious, randomly named file? Well, it could be little tiring but it's in best interest of you.
    Also, as others said, have a look at running processes under task manager. If you see any suspicious entry, ask us or google that entry.
      My Computer


  5. Posts : 7,781
    Win 7 32 Home Premium, Win 7 64 Pro, Win 8.1, Win 10
       #25

    To find the location of the program you can R click it, click on properties and it will display the target location, from there you can see where it's located on the system.

    You can try deleting the folder and see if they gets rid of it. However, if this is a subborn piece of malware, it may not go quite so easy.

    Other options include Revo uninstaller which will take out all the reg keys too, although this can mess up your system if you don't read the tutorial first.
      My Computer


  6. Posts : 33
    Windows 7 Ultimate 32-bit SP1
    Thread Starter
       #26

    Hey guys,
    The problem is Solved..
    For more details: "ESET online scanner, Startup Repair" :)))
    it was something like .. Keylogger,Trojan

    Thank you all :)
      My Computer


  7. Posts : 1,036
    Winbdows 7 ultimate x64 | Ubuntu 12.04 x64 LTS
       #27

    Kathy said:
    Hey guys,
    The problem is Solved..
    For more details: "ESET online scanner, Startup Repair" :)))
    it was something like .. Keylogger,Trojan

    Thank you all :)
    Very well. Glad its solved. If you've a 32-bit system, consider using Zemana Antilogger. Its a great defence against loggers. Though its a shareware, comes with a 15 day trial.
      My Computer


  8. Posts : 19,383
    Windows 10 Pro x64 ; Xubuntu x64
       #28

    Nice one. Glad its sorted.
      My Computer


 
Page 3 of 3 FirstFirst 123

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 14:31.
Find Us