[mimogg]

My is infected with RAT who remain after low level format.

I've tryed also to flash the BIOS.

What to do?

[Advertisements]

Hello.
 
Welcome to GTG Forums.
 
What makes you think that you are still infected?
 
If you want us to check your computer for malware, please do the following:

Download Farbar Recovery Scan Tool and save it to your desktop. 

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

If your antivirus software detects the tool as malicious, it’s safe to allow FRST to run. It is a false-positive detection.

If English is not your primary language, right click on FRST.exe/FRST64.exe and rename to FRSTEnglish.exe/FRST64English.exe

• Double-click the FRST icon to run the tool. When the tool opens click Yes to disclaimer.
• Press Scan button and wait for a while.
• The scanner will produced two logs on your Desktop: FRST.txt and Addition.txt.
• Please attach the content of these two logs in your next reply.

(To attach the files, click on the More Reply Options at the bottom right of the reply area, and then choose Attach File)
 

[DR M]

Hello.
 
Welcome to GTG Forums.
 
What makes you think that you are still infected?
 
If you want us to check your computer for malware, please do the following:

Download Farbar Recovery Scan Tool and save it to your desktop. 

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

If your antivirus software detects the tool as malicious, it’s safe to allow FRST to run. It is a false-positive detection.

If English is not your primary language, right click on FRST.exe/FRST64.exe and rename to FRSTEnglish.exe/FRST64English.exe

• Double-click the FRST icon to run the tool. When the tool opens click Yes to disclaimer.
• Press Scan button and wait for a while.
• The scanner will produced two logs on your Desktop: FRST.txt and Addition.txt.
• Please attach the content of these two logs in your next reply.

(To attach the files, click on the More Reply Options at the bottom right of the reply area, and then choose Attach File)
 

[mimogg]

What makes you think that you are still infected?

Someones is just playing with my computer.

 

-restart my pc

-eject my dvd writer

-close processes

-installs programs without I even notice

-stops my internet (so I have to re-install my Windows.)

-delete the Windows system files

-hide tray icons

-pc is so slower

 

Have the same sympthoms,before HDD formatting and seconds after i re-installed my Windows 10.

Here are the logs you requested :

Attached Files

•  FRST.txt   66.37KB   157 downloads
•  Addition.txt   26.21KB   161 downloads

[DR M]

Hi, mimogg.
 
There are some errors related to the operating system's activation.
 
So, before we start, I would like you to do the following:

• Press Windows icon on your Desktop, together with the letter R.
• Type cmd, and press Ctrl + Shift + Enter to run Command Prompt as administrator.
• Copy and paste the following command and press Enter:

slmgr /dli

• After running the command, you will get a report. Please take a screenshot of what you got and attach it in your next reply. Here is an article where you can see how do you take a screenshot with the snipping tool, in case you need it.

[mimogg]

Here's the report :

Edited by mimogg, 22 January 2022 - 04:23 PM.

[DR M]

Hello, mimogg.

 

The screenshots confirms that there is an issue with Windows activation.

 

How did  you get your Windows Home? Was the Home edition installed in your computer when you bought it? When you formatted the computer did you used the same edition the computer had before?

[mimogg]

Got  Windows 10 from official iso (Microsoft site).

And i do not own a activation key.

I used the same edition to re-install the OS,but the media was created from non infected pc.

Edited by mimogg, 23 January 2022 - 04:33 AM.

[DR M]

That means the computer had installed Windows 10 Home when you bought it?

 

If yes,

1. Press the Windows icon and the letter i on the keyboard.
2. Choose Update & Security from the list.
3. Select Activation in the left pane of the window.
4. Click Troubleshoot.

Let me know what happened. 

[mimogg]

Nope,i don't had it installed when i bough the pc.

 

 

 

I had to update non activated Windows to a newer version.

That's why i got this error.

Edited by mimogg, 23 January 2022 - 04:47 AM.

[DR M]

You installed Windows without buying it. That means that you have to buy a licence so you can activate it on the computer. Otherwise you will have problems, soon or later.

[mimogg]

Yes,i know that.

[DR M]

Having said that, unfortunately I can't provide assistance until you buy a genuine Windows 10 Home licence. 

 

When you do that, I will be glad to help you. 

[mimogg]

I have a Windows 7 genuine key.

What about if i install Windows 7?

[DR M]

If it is a genuine Retail key (not Volume one), you can use it to install Windows 7. Then, you can upgrade to 10. 

[mimogg]

Mhm i didn't knew that.

Ok i will do it.

When i'm ready will post again.

Edited by mimogg, 23 January 2022 - 05:01 AM.