HELP! Steam Client Virus or smth...

[Slofis]

Hi.
For the past month I have somekind of "virus" or smth like that which blocks me from entering Steam [ http://imgur.com/2ORYoI2 ] and sends to my steam friends "haha, lol [LINK REMOVED]"
I saw some videos about how image files which, when you download and ends with something like Image_61.exe, installs somekind of virus. I was kinda dum and accidentally "Installed" it by pressing "Run" when it asked. So now I'm having this problem...

I tried scanning my computer with different anti-malware and spyware programs.
One of them detected a lot of 'em [http://imgur.com/NpQjrUt]
Main one where is svhost.exe and that other 'host' file can't be a virus since... it's our internet file or so.

Anyways. can you help me out here? :/

[Forcen]

svchost could be a virus. You could upload it here and see https://www.virustotal.com/

Scan your PC with https://www.malwarebytes.com/

If that doesn't do it ask for help on the malwarebytes forums, they will help if you read their rules.

Or reformat your harddrive and reinstall windows. http://www.howtogeek.com/224342/how-to-clean-install-windows-10/

Last option is the best one,

[dXAHGzxFGmrKNPGfuJgkpWNmJYVygi]

Publicado originalmente por Forcen:

svchost could be a virus. You could upload it here and see https://www.virustotal.com/

Scan your PC with https://www.malwarebytes.com/

If that doesn't do it ask for help on the malwarebytes forums, they will help if you read their rules.

Or reformat your harddrive and reinstall windows. http://www.howtogeek.com/224342/how-to-clean-install-windows-10/

Last option is the best one,

However the virus could be FUD (Fully undetectable) and that would require fresh install of OS better to sort now farther than later.


~HDz

[martinmartyzzz]

Publicado originalmente por .: TADAO :.:

Hi.
...
I tried scanning my computer with different anti-malware and spyware programs.
One of them detected a lot of 'em [http://imgur.com/NpQjrUt]
Main one where is svhost.exe and that other 'host' file can't be a virus since... it's our internet file or so.

Anyways. can you help me out here? :/

The reason the hosts file is relevant and certain modifications can be considered infections is that it overrides all other Internet name resolution (DNS servers). So, if I can update your hosts file such that google.com points to my server, then all your google traffic flows through me, so my server is "man in the middle" and I can watch the data stream for passwords or whatever I want. Likewise, I could point google.com at 127.0.0.1 (which is your machine) where I have installed a little server who does what I just described, man in the middle watching data stream for useful info. I could run my little server as an svchost.exe task so it looks like a legitimate task (that's what you have tp be careful of - svchost.exe is a legitimate part of Windoze and is used for many legitimate purposes. But if you have a whole bunch of them running -that's suspect.

I concur with the use of malwarebytes. Tell it you want a Custom Scan and go into Configure Scan and turn on Scan for Rootkits. Select all SSD/HDDs.

I also agree with the reinstall being the best option "in an ideal world" if it's no big deal to you. That would be a major nightmare for me on my main PC but I ended up making a separate Win10 drive just for my VR games, so it is knid of nice to have it separate that way.

[Slofis]

BIG BIG THANK YOU TO YOU ALL! :3
Option with MalwareBytes helped me.

[Forcen]

Great!

Scan with malwarebytes again just to be sure.

You should also run a real antivirus just in case, this one is free for scanning only:
https://www.vipreantivirus.com/support.aspx
Scroll down for VIPRE Rescue.

Keep malwarebytes installed and scan again maybe twice a week and see if it catches anything new. The program downloads updates so it might see stuff it missed earlier.
Also the program is free and great to have.

Two other programs that malwarebytes has are these.
https://www.malwarebytes.com/adwcleaner/
https://www.malwarebytes.com/junkwareremovaltool/