1 month later - Strange thing happening

[Myon ♥]

Hello guys!

I didn't use my computer for a month, but I came home today to use it.
Used the antivirus Windows Defender, full scan, nothing detected.
Used the Iobit Advanced System Care, and I cleaned up my PC.
Updated Windows and restarted.

But, a strange thing is happening here...

- I was using my computer, but i had to be away from the PC, when I'm back, the "My computer" window is open (Nobody at home did that)
- After using for a minute, suddenly, the Virtual keyboard (No idea if this is the correct name for that, It's a keyboard that you can use with your mouse to press the buttons) pops up.

Anyone know if this is a virus or something?

Thank you guys for helping me.

[Silicon Vampire]

Virus and malware scan IMMEDIATELY. Do any of these you can from "Safe mode with Networking".

First impression is someone one has remote access to your computer. Hard to tell without being there.

[Myon ♥]

Escrito originalmente por Silicon Vampire:

Virus and malware scan IMMEDIATELY. Do any of these you can from "Safe mode with Networking".

First impression is someone one has remote access to your computer. Hard to tell without being there.

Ok them. I will do the scan again on safe mode, just to be safe.
But before that, can you tell me if the Windows defender is a good antivirus? Or should I get another one?

[Silicon Vampire]

MSE or Defender is all I ever use but that's me. I am a little more savvy than most, it seems.

I also use malwarebytes if i feel i have been at risk. (Definately use this in safe mode, at least the first time every scan).

https://www.malwarebytes.org/‎

[SilentHorizon]

Yeah, use malwarebytes to scan your pc. Windows Defender is pretty good, but I would highly recommend getting Webroot, it has a really small footprint and it has also detected malware that other anti-virus software hasn't seen.

[The Real Slim Shaney]

Do you have Windows 8? Windows Defender does not have built in Antivirus for Windows 7 or Vista, only in 8 or 8.1.

If you are using Windows 7 and below, install Microsoft Security Essentials IMMEDIATELY, enable Active Protection, and run a full system scan. Also consider using lock screen on your computer with a password and enforce the required Ctrl-Alt-Delete policy for logon.

If you want to be the safest you can be, use Windows Defender Offline (google it). It runs off a CD and runs without Windows starting.

[Bad 💀 Motha]

Offline? BootCD?
Just update your security softwares definitions first, then reboot into Safe Mode. That is how u effectively scan offline. Unless u have something really nasty that is still able to load up it's DLL or whatever, even in Safe Mode, which is very rare, but I have seen infections where that can occur.

And u are probably always running the Admin account right, stop doing that.
Lock that account with a password. For normal usage, use a secondary Limited User Account.

If all u have is one user account, u'r doing it all wrong!

[Myon ♥]

Hello guys!

Just used the Windows Defender on Safe mode: nothing detected.

Escrito originalmente por Shaneisthepain:

Do you have Windows 8? Windows Defender does not have built in Antivirus for Windows 7 or Vista, only in 8 or 8.1.

If you want to be the safest you can be, use Windows Defender Offline (google it). It runs off a CD and runs without Windows starting.

I'm using Windows 8.1. And thank you for the tip.

Escrito originalmente por Silicon Vampire:

MSE or Defender is all I ever use but that's me. I am a little more savvy than most, it seems.

I also use malwarebytes if i feel i have been at risk. (Definately use this in safe mode, at least the first time every scan).

https://www.malwarebytes.org/‎

Thank you, going to download it and test it today.

Escrito originalmente por HBZK100:

Yeah, use malwarebytes to scan your pc. Windows Defender is pretty good, but I would highly recommend getting Webroot, it has a really small footprint and it has also detected malware that other anti-virus software hasn't seen.

I've never heard about this one, anyone else reccomend this one?

[Bad 💀 Motha]

Windows Defender alone isn't gonna cut it.
Highly recommend installing Malwarebytes Free Edition
and Spybot Search & Destroy (do not select TeaTimer during install)
And keep them installed for manual scanning purposes.
Update them, then run full scans with both.

[Myon ♥]

I used the Malwarebytes, and here is the results:
http://imgur.com/imXkmmt

5 bad things were found!
(I also removed them)

Thank you guys for helping me. So, what should I do now? Run another anti-virus?

[Bad 💀 Motha]

Escrito originalmente por avL | Tsutsukakushi Tsukiko:

Thank you guys for helping me. So, what should I do now? Run another anti-virus?

Windows Defender built into Win8 is fine. As is what Microsoft Security Essentials is under Vista/Win7.

I would keep that for realtime scanning, then use other good apps to run manual scans every week or so. No real reason to choose a different realtime antivirus, cause even if u do, it's not going to catch everything.

If Malwarebytes found bad stuff, try running Spybot, chances are it will find more.

However that .DLL from "Risk of Rain" is most likely a false positive and should be safe. I would have it quarantine that file, then go in Steam, right click Risk of Rain in your Library, properties > local files > verify game cache. If it redownloads that same file, then u should be ok.

I've had a few false positives with a couple games myself over the years. Nothing to worry about as long as those are original files and not some kind of hack/crack.

I would reboot into safe mode however and go to C:\ProgramData and delete that "InstallMate" folder to get rid of that.

[Myon ♥]

Escrito originalmente por Bad-Motha:

Escrito originalmente por avL | Tsutsukakushi Tsukiko:

Thank you guys for helping me. So, what should I do now? Run another anti-virus?

Windows Defender built into Win8 is fine. As is what Microsoft Security Essentials is under Vista/Win7.

I would keep that for realtime scanning, then use other good apps to run manual scans every week or so. No real reason to choose a different realtime antivirus, cause even if u do, it's not going to catch everything.

If Malwarebytes found bad stuff, try running Spybot, chances are it will find more.

However that .DLL from "Risk of Rain" is most likely a false positive and should be safe. I would have it quarantine that file, then go in Steam, right click Risk of Rain in your Library, properties > local files > verify game cache. If it redownloads that same file, then u should be ok.

I've had a few false positives with a couple games myself over the years. Nothing to worry about as long as those are original files and not some kind of hack/crack.

I would reboot into safe mode however and go to C:\ProgramData and delete that "InstallMate" folder to get rid of that.

Thank you for your advice. I will run spybot both in my PC and my laptop (MBAM found something like a trojan.0access on my laptop)

I took a look on the InstallMate folder, I'm sure that I never installed anything from them, so I'm going to delete them.

EDIT: I installed Spybot on my PC, but I can't use it on Safe mode. The system scan duration is less than a second and the file scanner cna't be opened (access violation). Any ideas?