Cjhrjone54

I also had this exact problem yesterday, around the time this topic was created. Upgraded from 3.0.6 > 3.1.2, still failed. Database seemed to have been updated automatically this morning, so I restarted my computer and all is working for now. Will update if there's any other changes. On a side-note, @dcollins I had to manually install the 3.1.2 release. Was this necessary for me to do a manual install or should MB have done it automatically? *And by manual I mean I only found out there was a version 3.1.2 after trying to rectify the above problem by searching it online, and seeing a comment saying "Upgrade to 3.1.2". I never saw or received a notification of any type that version 3.1.2 was released.

Update: I *think* I may have solved the issue, actually... Turns out that the mysterious program I initially found on Tuesday was still running in camouflage, masked as an "audiogui.exe" file in Task Manager. I found the location and eventually managed to end and delete the file (hopefully), and whilst I was in that directory I also came across the original file I first discovered on Tuesday, so I deleted that as well. So I ran several quick scans to see what they came up with, and the first one came across three more stolen.data. Two were ordinary files and one was the folder they were in. I quarantined and removed them and then ran two more quick scans that came up with no further results. Hooray!? Is it fixed now? Task Manager still shows the audiogui.exe file running with the other file's name for some reason, however. Perhaps it is a default file as it keeps on recreating itself every time I restart my computer upon deleting it. Maybe it was just damaged by the malware, hence why it's still named that? I don't know, but if no more stolen.data is showing up, then hopefully that's a good thing. Will run one final full scan tonight to confirm this. Various passwords have also been changed just in case.

Hi all, I'm sorry if this is in the wrong section or whatever - I just made an account here because I'm having a bit of trouble with this problem and I was hoping I could sort it out here. But something weird is happening on my computer. It's probably familiar to some of you, but this is my first encounter with this alleged malware, so if you can help that would be great. It all started on Tuesday when I was browsing the Internet, and then all of the sudden my computer started jerking around a bit. So I checked my task manager (which I normally do when my computer behaves weirdly, in case an unnecessary program is using up a ton of CPU) and came across an unfamiliar program (I can't remember the name of the file, surprisingly... There's been a lot thats happened in-between now and Tuesday...). I tried to end it, but it said access was denied. I then went to the file location and tried to delete it, but instead it said it was in use (obviously, since it was still running in task manager... Also, bear in mind that this was the only file in said folder that I looked in, so it couldn't have been an important file). In a haste to figure out this problem, I quickly attempted to memorise the file location, and restarted the computer in an attempt to end the program. Upon restarting, the program didn't seem to be running, but I could not determine the location of the file upon much searching. Nevertheless, I ran a full scan using MalwareBytes all the same in case the file was indeed hostile and it would be found on the scanner (I also normally disconnect my Internet whenever something like this happens, in case unwanted data is being transferred, or something else similar) Upon returning to the finished scan the next morning, MalwareBytes found but only two of the same files: stolen.data Good thing I disconnected the Internet, if this is indeed what I think it is. I had the option to open the file location, so I did so and it was located in a complex directory in a folder called imlgs or some gubbins. Not sure what that exactly is... But one of the files was 18 KB and the timestamp (the date it was last modified) was earlier the previous day. The other one was 1 KB, and the timestamp was mysteriously the exact time that the scan ended. These files were both found by the scanner and quarantined before removal. Worried that nothing else came up that possibly explained the conjuration of these files, I ran another one that morning. Upon returning to the finished scan when I got home after school, it had the same results. One stolen.data from earlier that day, and one from when the scan ended. Both files, however, were around 1 KB this time. Still no trace of the host, so I ran one more scan using MalwareBytes. Exact same results, except the second file's timestamp was the exact time that I opened the folder it was in. O.o Confused and somewhat worried, I ran another scan using the default windows scanner that came with the computer: Microsoft Security Essentials. No results came up, therefore I'm not sure if that's a good thing or a bad thing - like whether the files have stopped showing up and are gone or MSE just doesn't have said "essentials" to find them like MalwareBytes does. So, in a nutshell, I'm a bit kerfluzzled over the whole thing and I'm not quite sure what to do. I've done everything in my knowledge that I can but it hasn't seemed to have proven much effect, so I'm posting here in the hope that somebody knows what's going on. I still haven't and won't reconnect my Internet in case said "stolen.data" still exists and gets "sent" back to its sender. I'm yet to change various passwords and info (there's been a bit going on recently - plus it's not easy to change personal website passwords on a handheld device...), but I will do ASAP just in case. But in the meantime, any help is appreciated. Also, if you need any more information (like computer details), please let me know. Additional info: I don't have a credit card or anything as of yet, so that is probably a good thing - unless the sender wants to wipe my videos off YouTube or troll my friends in my forum or something... *rolleyes* Cheers, Lachlan Ruhr