[mattgk01]

If he explains it any clearer than me, this is the exact same problem - HELP, Do I have a trojan or keylogger - Computer Technical Help - Software and Hardware Forum

Have noticed this problem since this morning when I opened Firefox and it would just continually load, no errors or anything. Checked task manager and a strange process was running, "38z78FF.exe" with the description "Systray .exe stub". Whenever this was running I could not use the internet.

Have done multiple virus scans and only one found anything which "nt010.info" and "DE34.080" (viruses.png)

Now when the process is terminated I manually have to end the Firefox process, it doesn't do it itself now, then restart it to be able to use the internet. Then within minutes I get the Windows UAC pop up asking me if i want to run the executable (random file name similar to others) and will not go away unless I click yes.

Weird things I've noticed:

• "Startup" folder is gone from start menu
• Browser wont load pages

• When the process is ended, it clears whatever i had copied to the clipboard (ctrl+c)
• Have to manually end firefox process

If I run any virus programs now they will not find any issues, even with this odd process running. Please help.

OTL results attached.

 

[chemist]

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

------------------------------------------------------

We want all our members to perform the steps outlined here:

NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help - Tech Support Forum

After running through all the steps, you shall have a proper set of logs. Please post/attach the logs in your next reply.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

------------------------------------------------------

 

[chemist]

Due to lack of response, this topic will now be closed. If you need continued support, please begin a new thread, and provide a link to this topic. This applies only to the original topic starter. Everyone else please begin a New Topic, after following the steps outlined here:

IMPORTANT - Read This Before Posting For Malware Removal Help

------------------------------------------------------