Jump to content

Recommended Posts

So I have been hijacked about 3 weeks ago through steam witch was used to take all of my inventory items after that I ran a scan with avg and it found a trojan and a worm I thought that ok thats done them but then I hear form a friend who got hijacked by the same person got re hijacked and said he did scanns with malwarebytes and all the usual anti-virus and malware stuff so I was scared luckily my acount is steam guarded until march the 6th I have downloaded loads of anti virus and malware software and the came up clean then i downloaded avast and it found a win32:malware-gen but that could have just been avast messing up. So then I downloaded kaspersky and it found and deleted a back door and a RAT when ever I restart windows it says in a window with netsupport a the top this file cannot be read (one of the files kaspersky deleted) please check it exists or is valid I look were it is stored and nothing is there what im asking is is my computer safe to re log into steam and email and all that stuff because formatting my hard drive is not an option for me and also if I may have help stopping that anoying pop up when ever I start windows about the start up file not being valid sorry I have not asked this question in the right place or haven't layed it out properly im very new in fact this is my first post here im pretty panicked and paranoid about what will happen

Share this post


Link to post
Share on other sites

Remote Administration Tool (RAT)

A clear clue to RAT infection is an unexpected open IP port on the suspected machine.

Do you have a working Firewall on the computer? Or a different application that monitors internet connections?

 

downloaded loads of anti virus and malware software

did you save any of the logs? And which scanners were they?

 

a window with netsupport (Desktop Remote Control) at the top this file cannot be read (one of the files kaspersky deleted)

Can you supply the filename or file path that is in question?

Share this post


Link to post
Share on other sites

hey thanks for responding

 

im pretty sure I have a fire wall but im not quite sure what an open ip port is im pretty nooby to say the least at computers like this I solely rely on my anti viruses to clear this stuff

 

I have AVG, McAfee, malwarebytes, avast, hitmanpro, and kaspersky im not quite sure how to get a save log you might have to guide me through it to make sure im giving the right info

 

the window pops up a few seconds before the computer loads the desk top. The header is netsupport and it reads Cannot read file C:\Users\Christin\AppData\Roaming\system86\client32.ini (80). Please check this file exists and is valid. I have checked C:\Users\Christin\AppData\Roaming and there is no file named system86

Share this post


Link to post
Share on other sites

The Client configuration file Client32.ini is in a text file, the program itself is setup to run at bootup.

 

If you should need other help don't hesitate to ask.

Share this post


Link to post
Share on other sites

AVG, McAfee, malwarebytes, avast, hitmanpro, and kaspersky

 

Thats overkill. It actually does more harm then good to have more then 1 antivirus on your computer.

 

Malwarebytes runs compatible with antivirus programs so keep that and let it update or you update it manually.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×
×
  • Create New...