Filecr Virus

0 views
Skip to first unread message

Manuela

unread,
Aug 4, 2024, 11:34:54 PM8/4/24
to liuprithmecel
Thesoftware is a robust and reliable solution for protecting your computer from viruses, malware, and other online threats. Developed by Ashampoo, a leading software company, this anti-virus program offers comprehensive security features that keep your computer safe and running smoothly.

It is a comprehensive security solution that offers advanced malware detection, real-time protection, and browser protection. It is lightweight, easy to use, and automatically updates itself to ensure that you are always protected against the latest online threats.


Real-time protection is one of the best cyber defenses you can implement for your device and network. Watchdog Antivirus compares any potential threats against a database of known malware, such as viruses and Trojans, and stops them before they can cause harm.


It stores information about virus variants in the cloud rather than on your device to not slow down your PC. This cloud-based antivirus software protects you by interacting with a threat database stored not on your computer but in the cloud.


Hello, I feel as if my PC has an undetectable virus or remote user accessing my system which is causing unstable system performance. System performance degrades over time without any spiking temps or processes. Whenever I try to open the Steam app I get "phantom" clicks in which the application won't start until I double click it twice. Whenever I open task manager I get a CPU spike to 100% initially when I open the application that then disappears. Today, I ran a Malwarebytes scan which found and quarantined a malware.sandbox.7 file. Upon restarting from the quarantine process my system hung at the restarting screen causing me to force shut down the PC. Afterwards I ran an AdWare scan and removed a PUP without issue. Please see the attached Malwarebytes scan, Adware Scan, and FRST scan.Addition.txtFRST.txt




The Farbar Recovery Scan Tool is a free Windows utility designed to create troubleshooting logs for your computer. These logs help our Support team to identify and resolve issues with your computer.


There are two versions of the Farbar Recovery Scan Tool available for download: 32-bit and 64-bit.

To find which operating system is installed on your computer, refer to Microsoft's article: 32-bit and 64-bit Windows: Frequently asked questions


Disable any Antivirus software you have installed ONLY if it stops software we may use from working.

Please remember to re-enable any Antivirus software when we are finished running scans



Click Scan. The scan may take a few minutes to complete.








NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system that cannot be undone.


Run FRST or FRST64 and press the Fix button just once and wait.

If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.

The tool will make a log on the Desktop (Fixlog.txt) or wherever you ran FRST from. Please attach or post it to your next reply.


NOTE-1: This fix will run a scan to check that all Microsoft operating system files are valid and not corrupt and attempt to correct any invalid files. It will also run a disk check on the restart to ensure disk integrity. Depending on the speed of your computer this fix may take 30 minutes or more.


NOTE-2: As part of this fix all temporary files will be removed. If you have any open web pages that have not been bookmarked please make sure you bookmark them now as all open applications will be automatically closed. Also, make sure you know the passwords for all websites as cookies will also be removed. The use of an external password manager is highly recommended instead of using your browser to store passwords.


NOTE-3: As part of this fix it will also reset the network to default settings including the firewall. If you have custom firewall rules you need to save please export or save them first before running this fix.


Important: items are permanently deleted. They are not moved to quarantine. If you have any questions or concerns please ask before running this fix.


I completed both of the scans as requested, please see the attached logs. Something odd I noticed was during the full system Microsoft Safety Scan; 2 files were detected as infected while the scan was running. However, upon completion of the scan it reported no infected files. Not too sure what to make of this. Additionally, the safety scan seems to suggest that my network/PC is being accessed remotely?


I have updated the applications as indicated. After updating Malwarebytes via the application I ran the SecurityCheck again and it still indicates that the Antivirus Firewall is still out of date. Do any additional actions need to be taken at this time?


We are running Photoshop and Illustrator in an enterprise environment and we don't want creative cloud on this environment. Unfortunately, every time you deploy Photoshop or Illustrator on a server, this "creative cloud" malware/virus auto-installs itself (this is what makes it a malware/virus).



I have blocked creative cloud in the firewall, and have become pretty adept at finding all the pieces of this malware/virus and removing it, but is there a way to ensure it never installs in the first place?



Thanks. I'm getting absolutely sick and tired of this, I'm looking to a way to have it reported as a virus and added to my anti-virus malware/virus definitions.






Well, its not a virus. If you are in the enterprise you know that software often has complex frameworks and multiple pieces. Leave the installation alone. Photoshop and Illustrator are PARTS of Creative Cloud and if you start deleting things you will be back here complaining about your software not working.


No, it installs itself whenever you install a different piece software (Photoshop or Illustrator). That's what makes it a virus. If I install Chrome, and another program I didn't not give permission to run auto-installs itself without permission and sets it up to start up when you computer starts and runs in the background, all without permission, that's called a VIRUS.


It can. We have a license for every seat. We just want to remove the "creative cloud" malware/virus.



I even talked to support to get a version of the installers that don't include the malware/virus, which they provided, but the installers still secretly installed creative cloud, the difference is they simply don't tell you it's being installed but it shows up on the machine after the install process anyways. This is how viruses and other malicious malware operate. Adobe needs to be punished for this, and users need a way to eliminate this malware/virus from their machines and prevent it from installing.


I'm a sysdmin, I do this for a living, I probably know a lot more about software than you.



It's very simple, if it's the same program, how come I can remove it and Photoshop and Illustrator still run?



It's not the "same program" is a malware/virus that Adobe bundled with their software because they don't respect their customers and think it's OK to push malware/viruses on their customer's computers.






Well that fact that you think malicious software that installs itself without a user's permission is not a virus or malware shows you don't know much about software or IT to start with. The fact that you claim CC is "part of photoshop" when photoshop runs just fine if you manually remove the CC virus provides further evidence that you don't know much about software.



Alternatively, you do know plenty about software [ abuse removed by moderator ]




Ultimately, I didn't come here to debate with virus / malware apologists [ abuse removed by moderator ]. I wanted a solution to this problem. If all you can provide is excuses, I think there's nothing else for me here.


Any program that installs itself without permission while piggy-backed onto another program is a virus. If you are trying to hide a cherry-picked definition of a virus, it's still malware. Either way, it's malicious software that installs itself without permission. It needs to be reported to malwarebytes and AV as a virus so it's removed automatically and blocked, until Adobe learns to ask the user's permission before installing software.


Also, why you would ever try to defend software installing itself without a user's permission is beyond me. I guess Adobe is relying on [ abuse removed by moderator ]to protect them from the backlash from their anti-user, anti-consumer behavior, but the true is they need to be punished for it so they learn their lesson.



Fortunately, most other developers are not malicious like Adobe is, and most don't try the same stunts, but I bet if what Adobe does with CC became common practice, you'd see AV programs and other security-oriented software stepping up to shut down such a toxic and dangerous (from a security perspective) trend.


"Adobe Community Professional" is a funny title given your response being on a forum for professionals using the same type of gaslighting technique teenage boys attempt to employ when I play the occasional online game. Take your toxicity to DMs with me if you want to do this. You're embarrassing yourself.


And the reason I indirectly call comnment like yours apologism is because it is not paranoia, it is measurable, objective fact. The only psychosis-aligned thinking is your blindness to these shady designs is because language like mine and saturn's is probably 'is too extreme of language' for your 'professional' sensibilities.


I am a working UX designer, developer, and technical pedantic who is here to call out brazen dark patterns from Adobe when I see them. Regardless, name calling, especially direct name-calling is unprofessional at best and ableist at worst because whether or not you knew I have dealt with (and successfully come out of) mental illness challenges. Perhaps you should examine the damage your words can do before commenting on a benign pointing out of truth.

3a8082e126
Reply all
Reply to author
Forward
0 new messages