So I just found this in my process tree - an 'antivirusupdate.exe' with weird latin phrasing.
I found one yesterday, found nothing in MBAM that was wrong with it, deleted it, and now this one.
And when I click it to find the file, it disappears.
What's going on here?
>>54295194
The last one was In the local temp folder.
Have you ever heard of Google.com?
Jesus fucking Christ.
>>54295228
Well there's not much to google. 'Latin phrases anti virus update'? I googled the latin, and it doesn't even come up, so it's probably bad latin.
>>542951941
1.Rescue data
2.Delete all programs on all Partitions/Drives
3.Overwrite boot partition with clean image
4.???
5.Profit
you don't really have to be a technician to see that it's a fucking virus. if you cant find where it's at and delete it idk just reinstall your system.
>>54295406
Well, I presumed that anyway, but I took it you read my post and found that it disappears when you merely try to locate the file through the right click menu in Processes.
And MBAM turns up NOTHING.
What I want to know is, what sort of virus this is. I's scanning the temp folder know, where the last one was.
>>54295194
I want /v/ to leave.
>>54295461
N
S
A
[spoiler]Y O U R F U C K E D
O
U
R
F
U
C
[/spoiler]
>>54295405
what was that in reply to?
>>54295482
be serious pls.
The NSA wouldn't make it that obvious.
>>54295476
What does anything ITT have to do with /v/?
"to this yet until those, in time".
I'm not sure that's grammatical or the intended meaning but whatever.
>>54295484
a post on 4chan
>>54295194
who needs av if you have common sense am i right
According to Google it's a shady process that comes up under several different names such as CommonService.exe, SystemUpdate.exe and so on. Not much info about it other than that though, better just delete system32
>>54295499
They were expecting exact same reaction, you know.
>>54295194
Boot into secure mode and scan with
Kaspersky Virus Removal Tool or ClamAV
Try scanning with hitman pro
>>54296211
Thanks.
Bit of a nub question, but how does one boot into secure mode?
>>54296204
Apart from the fact I'm trying to delete it.
>>54296028
True.
>>54296283
Reboot the damn computer and press F8. It will display a menu.
Try tronscript but make sure to read the documentation so that you can save time and skip the unnecessary steps
otherwise it takes hours
>>54295476
>>>54295194 (OP)
>I want /v/ to leave.
> he forgot he was on /g/
