Windows 10: Hijacked by malware, on windows 10 v er 1803.

I have the malware disabled will like to send a copy to Microsoft, Kaspersky and the rest for research, if you wish.


It is used by a gang that plays facebook games (online casino) and cheats of course. It is also applicable to other facebook games as far as I know.


What it does :


1. it hijacks the legit UnistackSvcGroup , and it takes control of group policies

2. it downloads its own code to take over the control of the computer, usually hiding it in the UEFI of the drive, making it even for rootkit scanners to find it.

3. Usually its passive, just loading your system since it is spyware, and it takes control of your camera, microphone and kyeloging (it wants your money credentials + fb accounts or whatever it can get its hands on you).

4. It gets into the system by hijacking weak servers of fb gameroom , by stealing the IP + email of people connectinghaving theand infest m in chat to be sure it is them.

5. then they wait for you to go to fb or the web from the game.

6. with 3 locations (game, web, your IP (virtual or not )) they can triangulate and send you ads that have malicious code, and infest your windows temp folder.

7 With me they had the nerve to say that they where Microsoft representatives doing housekeeping.

8 Your device becomes a surveillance machine in the hands of criminals with malicious intent.




How to protect your self :


1. clean you windows temp folder before you log off

2. open the computer, having logged on offline, then go online (once your antivirus, firewall, list of programs that start finish.

3. whatever is persistent and cannot be deleted manually from your windows temp folder, temporary internet folders is malware.



p.s. Any Internet Security want my log files, contact Microsoft all my windows 10 installs are kept under this name.


ps2. Anyone wants to check the malware , spyware ( its just the start, it infests around 9-18GB of space ) from a legit Antivirus Company let me know in facebook.


ps3. If Microsoft wants a submission of the malware and my deposition of false claim of representing Microsoft Server IT. Let me know


yours,

Vaios Ganesh, retired software engineer

:)

 

Browser hijacked by safesurfs.com Malware

After reading what you went through I would strongly suggest you read the advice of Monkey57 and try his steps. Normally

Browser hijackers don't show this kind of behavior and more could be going on. Normally I don't suggest Resetting your computer but in this case....

 

browser hijacker malware it effects IE11, MS Edge, and Chrome

Background:

• Windows 10 64 bit (with auto updates turned on)
• I have a browser hijacker malware it effects IE11, MS Edge, and Chrome.
  
• I have Virus guards ect in place (McAfee- Security centre)

To date I have:

• Run a full scan with McAfee
• Used ad remove programmes , found a suspicious programme, could not uninstall it, used combination of tools to find its location (including Regedit).
  
• Removed reference to it in Regedit.
• removed Chrome
• Reset IE11, removed unwanted search engines
• Reset landing page
• re run McAfee scan – no virus etc found
• hijacker malware still there
• installed Spyboot, run scan, and repeated resetting IE11 ect
• Scan showed no problems
• Run Microsoft’s MRT (malicious Software)
• Scan showed no problems
• downloaded and ran Microsoft’s Safety Scanners. –
• Scan showed no problems
• hijacker malware still there
• Full review of Programmes listed in add/remove programmes – none are un expected.
  
• Any ideas?

***Post moved by the moderator to the appropriate forum category.***

 

V.1803 & File History..


Just for grins, I ran the "Rest File History to Default in Windows 10" tutorial .bat file and then rebuilt the include folder list to include all of the folders on the "C" drive. I let it run overnight and it backed up all of the folders to an internal 1TB drive. I've added files to a couple of the folders and FileHistory has done the backups as it should. I'm glad they fixed the function, rather than delete it as was thought with v.1803. Next step is to check the System Image function.

Reset File History to Default in Windows 10 | Windows 10 Tutorials