I'm having this issue where a Firefox.exe process opens anytime I open a program, and wont go away until I close it manually. This has also affected some steam games that would give me (Steam error code 51) and will say I'm still in-game until I close the firefox.exe process.
[IMG]http://i39.tinypic.com/20rns6h.jpg[/IMG]
Have you done malware scans? That seems suspicious.
I did one with Malwarebytes and apparently everything on my computer is a virus
[IMG]http://i39.tinypic.com/2ihxld2.png[/IMG]
Oh fucking boy. Ramnit.
You're gonna have some fun here. And by fun, I mean anal bleeding.
[url]http://en.kioskea.net/faq/12026-getting-rid-of-ramnit[/url]
[url]http://www.tomsguide.com/us/steam-malware-ramnit-trusteer-hacking,news-17426.html[/url]
[URL="http://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?Name=Win32%2fRamnit"]Microsoft claims that MSE detects and cleans it.[/URL] At any rate, run whatever you use in Safe Mode.
From Wikipedia:
[quote]Ramnit was first detected in 2010, attaching itself to most executable files and USB drives to infect additional computers. Originally a generic worm, it did not have many capabilities and was thus not considered dangerous. In 2011, malware writers altered the worm to capture data from web sessions, letting hackers commit financial fraud. Most recently, it was responsible for the theft of 45 000 login credentials, using them to infect the victims' friends and remotely access corporate networks.[2] The current version of Ramnit is a hybrid version of the original worm, with some code taken from the ZeuS trojan horse.[/quote]
So the reason everything is infected is because once the worm is running on the computer, it injects itself into every executable it can find.
You're going to need a real AV program like Avast!, Avira or Kaspersky to clean all of your executables of the worm. If you click "Remove Selected" your computer will likely be bricked.
Update: Microsoft's removal tool pretty much cleaned it all, and Avira isn't picking anything up anymore. So I hope its all good.
Thanks guys.
Sorry, you need to Log In to post a reply to this thread.
