Curtis
Curtis GRM+ Memberand UltimaDork
5/20/19 8:49 a.m.

A few days ago my laptop got a virus of some sort.  I was surfing my normal sites (my home tabs include GRM, two Gmails, and CL, so nothing crazy) when I noticed my processor fan was running faster than normal.  I noticed something in the taskbar being copied.  I opened that window to see "copying x files from 'package' to '11'."  I navigated to those folders to see that they were part of the ASUS auto update software and didn't think much about it, but something about the copy progress window wasn't right.  The resolution was a little off.  So I cancelled the copying and my anti-virus (webroot) popped up with a notification that it found and deleted malware.  I disconnected from my wifi to be cautious.  A full scan revealed nothing.  Task Manager showed that it was the ASUS update that was consuming the most processing bandwidth.  About 20 minutes later, the copy window came back, and same thing.  I went in and deleted the folders and ended up uninstalling the auto-update suite entirely, then re-added it.  

Last night the same thing happened.  It doesn't seem to be doing anything particularly harmful to the computer, but I'm concerned that someone is stealing info or trying to spy on my sexy body through the webcam (which is covered with tape... the camera, not my body.)

Webroot keeps catching it, but what is it doing?  How do I get rid of it?  Is there a way to trace back the file path so I can find where the stuff is and burn it with fire?

ASUS republic of gamers laptop, win10 home.

GameboyRMH
GameboyRMH GRM+ Memberand MegaDork
5/20/19 8:59 a.m.

First just get rid of the ASUS auto-update. Wouldn't be the first time a manufacturer's unecessary update software was hijacked for malware delivery...even for ASUS in particular:

https://www.apnews.com/bfc12ada689c4c88a58a6fad88446369

Then run scans and see if you can remove what's ailing the computer once and for all.

Curtis
Curtis GRM+ Memberand UltimaDork
5/20/19 9:01 a.m.

Whatever the malware is, webroot doesn't detect it until it executes.  I think I'll try adding AVG to see if it can find it.  Any other good free AV software to try?

Dr. Hess
Dr. Hess MegaDork
5/20/19 9:14 a.m.

Run malwarebytes on it with a full scan and see what it says.

Brett_Murphy
Brett_Murphy GRM+ Memberand UltimaDork
5/20/19 10:27 a.m.

Combo Fix is really good for this sort of thing, too.

FSP_ZX2
FSP_ZX2 Dork
5/20/19 10:52 a.m.

Malwarebytes followed by CCleaner

rustybugkiller
rustybugkiller HalfDork
5/20/19 1:24 p.m.

This is why I went to the apple platform!

Curtis
Curtis GRM+ Memberand UltimaDork
5/20/19 2:20 p.m.

Meh... I'll take an innocuous bug once every 6 years to save a few thousand dollars on non-proprietary hardware.

bentwrench
bentwrench SuperDork
5/20/19 3:07 p.m.
BoxheadTim
BoxheadTim GRM+ Memberand MegaDork
5/20/19 3:49 p.m.

Yeah, get rid of the ASUS update ASAP.

Malwarebytes might be able to help, otherwise you might have to boot the machine of a suitable USB stick and use an external virus scanner.

The good news is that your virus scanner seems to be able to find the malware, but you might not be able to delete it from the currently running Windows instance.

Curtis
Curtis GRM+ Memberand UltimaDork
5/21/19 9:11 a.m.

Live Update uninstalled.  Webroot, malwarebytes, and CCcleaner didn't find anything, but we'll see what the next boot has to reveal.

You'll need to log in to post.

Our Preferred Partners
GfQw7Y4e0oFCSEhwyda9yS4XgC7IyNxSRCWIftAggJB2v4fZ1nZ1UeBTNEF524Qg