I believe my pc is being "hacked" and controlled by another (VIRUS)?

MikMaster

Reputable
Jul 8, 2015
6
0
4,510
Forgive me if I am in the incorrect category but I have a serious matter on my hands. Lately random youtube videos have been popping up when chrome was closed. Then, I was playing a game (CoD world at war) and the videos were popping up in game. Then I was logged out of my computer while in game. I was easily able to log back but all my applications were closed out.

Later that night, I was surfing the net. I got another pop up of this random youtuber I have never seen. Shortly after, his twitter popped up in a new tab. I then got a message in the middle of my screen: " This is your Twitter (OK button below)." I clicked ok and then another message " I gave you the virus (OK button below)".

Today, I got this very strange pop up in a new tab. It was a completely white page and some text in the middle. It stated a number: "Text 248-xxx-xxxx -NightCrawler". I have been attempting to do full scans on my pc but every time I try I get logged out and all applications close and I lose 2 hrs. I was logged out once the other day. Today, I tried the scan 4 times and everytime I left my pc alone for a bit to do its thing It logged me out. Then twice I was active while scanning and lost a total of 5 hrs because I was eventually logged out hrs later during the scan.

Before being logged out, I saw a small black window (I assume its cmd prompt) flash and boom logged off. I haven't downloaded anything sketchy for a couple months. Please help me before whoever is doing this does some real damage! Thank you so much!

http://i.imgur.com/JuR93K0.jpg?2 Virus window and pop up #

http://i.imgur.com/IdHrGw6.jpg?2

JuR93K0.jpg
 
Solution
I wouldn't expect this to show up on a virus scan. It sounds more like a prank a friend would pull on you than a virus.

You could download Process Explorer: https://technet.microsoft.com/en-us/sysinternals/bb896653.aspx and attempt to find valuable information like where the executable resides. It's pretty simple, once downloaded, run Process Explorer as administrator, locate the process that is associated with your weird pop ups and do Right Click -> Properties to get a whole barrage of information. The Image tab on this page should contain the path to the executable.


EDIT:
To avoid being flamed, I'll include why I said this appears to be a prank a friend would pull.
1. It's not being covert at all. It's pulling up twitter channels...

Skyl3r

Honorable
Nov 23, 2012
92
0
10,660
I wouldn't expect this to show up on a virus scan. It sounds more like a prank a friend would pull on you than a virus.

You could download Process Explorer: https://technet.microsoft.com/en-us/sysinternals/bb896653.aspx and attempt to find valuable information like where the executable resides. It's pretty simple, once downloaded, run Process Explorer as administrator, locate the process that is associated with your weird pop ups and do Right Click -> Properties to get a whole barrage of information. The Image tab on this page should contain the path to the executable.


EDIT:
To avoid being flamed, I'll include why I said this appears to be a prank a friend would pull.
1. It's not being covert at all. It's pulling up twitter channels and youtube videos. The majority of the time, malware is written to give some benefit to the author. For instance, stealing passwords, injecting ads into websites, etc. Not only that, but if it was being this overt then why has nobody else mentioned this malware?
2. It appears to be written in Java. Not to bash Java or anything, but this provides two clues. First clue is that Java is a real pain to do anything too windows specific (modifying registry keys or accessing group policy to name a few.) This is because Java is run in a VM to improve cross platform capabilities. This means that all the permissions it needs to run are visible which would not be very suitable for creating malware. The second thing is that Java is a very simple language and the things it's doing on your desktop are very simple things to do. Popping up message boxes and opening web pages are not very big challenges. If someone actually had any malicious intent and wasn't just getting a kick out of messing with you, then they would not have used Java.
 
Solution