• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

Just opened a virus!

J

jlocohustler

Weaksauce
Joined
Jan 25, 2012
Messages
81
Damn some loser got me. So, I downloaded this JPG file and opened it. However, I knew there was something suspicious about it because it had no Thumbnail. However, before I realized that I already double clicked on it. Turns out it's actually an .exe obfuscated with Unicode tricks to make it appear like a JPG image under Windows Explorer.

I noticed the .exe executed the Microsoft Visual Basic Command Line Compiler right after I opened it and it was actually doing some job. I quickly killed the process. So, I guess it was trying to compile some virus and plant them on my computer.

I have Windows 8 and I'm running a scan with Windows Defender right now. Don't know if that will be enough. Man I haven't had a virus in years now this :p
 
Format reinstall. Sorry :p
 
Last edited:
set it on fire and throw it out the nearest window.. sorry for your loss.
 
Doesn't windows have a feature that prevents your from running .exes from untrusted sources?
also grab malwarebytes and run that sucker in safe mode. See what comes up.
 
You can also run Kaspersky from a live CD, and Combofix in normal mode afterwards. I'm not sure of the level of proficiency you have, so I will warn that you need to be careful with Combofix. Only run it in safe mode as a last resort. Let us know the results.
 
Wipe it and reinstall..probably should have before you logged into any sites with your passwords.
 
thedocta45 said:
Doesn't windows have a feature that prevents your from running .exes from untrusted sources?
also grab malwarebytes and run that sucker in safe mode. See what comes up.
Click to expand...

while I have no experience with Win8, I don't believe you get that prompt in Win7 if you've disabled UAC.

I'm guessing OP has also disabled UAC for reasons unknown.
 
Win8 won't let you run an unknown/untrusted EXE without specifically giving it the OK. Unless of course you disabled that feature....
 
Do any of the normal malware removal tools work on Windows 8 yet? I haven't looked into that as none of my clients are running Windows 8 (beta or otherwise).
 
hawk82 said:
Do any of the normal malware removal tools work on Windows 8 yet? I haven't looked into that as none of my clients are running Windows 8 (beta or otherwise).
Click to expand...

IMO OP should test it for us.
At least we can all learn something from this.

OP if you don't mind try in this order.

Malwarebytes
Super AntiSpyware
ComboFix

Combo Fix could break your OS. I would like to find out what happens.
 
You must log in or register to reply here.
Back
Top