And have also left it there for a couple of days there and hasn't deleted itself *yet*.so it does appear to be targeting this specific file at this specific location.maybe I could try rename the file? But then I won't be able to play or do any of my work on it as steam would think it's still not there and redownload the file again which will result(unless cleaned up 100%) in the above actions as described.and no, I can't really work on if I were to just execute the file itself without steam as you *need* steam for the perk and achievements.ĮDIT3: Hmmmm.I did a test by making a blank exe file of the same name (so zero bytes) and that got deleted upon next turn on today which I did yesterday. I guess I'll have to postpone my work on that game then until this is solved.ĮDIT2: I've move the exe file one folder above so I don't have to verify the entire game if all it's missing is just the executable file for the game(I can just copy it from there and paste it into the System directory whenever it gets deleted.though a more ideal solution would be to stop this auto delete issue whether it be from KIS or left over *trojan*.)(I've also modded the game a fair bit so I don't want the verification to override them with the stock files.) so far nothing's happened to that file that got moved up.exact same file, just not in the System folder anymore, one folder up, so in the game root directory folder. I was just in a game too.and then suddenly I crashed to the desktop thinking "What the hell?" hahahaha, then a popup from KIS stated the game executable did something suspicious that warranted it force deleting and crashing the game I was having.and if you want, here's a more recent(as it just happened a few minutes ago.) screenshot of reports: Otherwise, I'm sure if I scanned the exe file with all my suites (KIS, Malwarebytes, SuperAntiSpyware, Spybot and even virustotal) BEFORE executing it, it would have at least flagged up as such.or it could also be a false positive and KIS 2016 being too overprotective.but then again.that Trojan:Win32/Dynamer!dtc that Microsoft's scanner picked up and *partially removed* doesn't sound promising.would have been nice if it stated the location of said infected file.and perhaps a log of what it did.but nope no log files provided. Even uploaded the file to and that says it's clean.the program must be injecting to the exe file *upon* launch or during execution as that's when KIS 2016 detects the changes and deletes the file. ![]() So yeah, it started basically a few days ago.if there's anything I missed out that you would like to know, ask and you shall be given!ĮDIT: Nope, KIS 2016 still deletes it on the account of *suspicious* activity. And have ran Ccleaner, got KeyScambler for a while now, so should be good without needing to re-changing passwords again and I don't have any restore points as the service itself is disabled. Didn't need to do step 3 because it says I don't need to if the above programs ran fine. So yeah, I've re-scanned with KIS 2016, Malwarebytes Anti-Malware, SUPERAntiSpyware and even Spybot Search and Destroy.and followed this guide here: means I've done TDSSKiller, another but quicker scan of Malwarebytes(as before I ran a *complete* scan over a threat scan and this guide points to a threat scan on the newer malwarebytes version) and Hitman Pro. ![]() So must have been a file I downloaded recently or something or maybe from a previous session that is has become dormant until now(not that I doubt the help of the malware removal specialist that helped me - you did great! Perhaps it was just being dormant and hiding itself? idk.maybe I shouldn't have pointed back to this.).and no this time I haven't been looking at trainers. ![]() which might explain why KillingFloor.exe is deleting itself presumably because it *failed* to do its job so it deletes itself to make sure I won't notice.but obviously will since I go on that often.and the fact that KIS 2016 popped up many times regarding this fact but will only pop up if it themselves deleted/quarantined it and NOT the file delete itself or from some other means: ![]() It would appear I have somehow got infected with Trojan Win32 Dynamer!dtc according to this program's scan(though the program itself doesn't tell me WHICH file it is that's infected with this malware.silly Microsoft scanner.):
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |