1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

In Progress Folder desktop new "I was on your pc" Checking netstat

Discussion in 'Virus & Other Malware Removal' started by agurl333, Jun 11, 2019.

Thread Status:
Not open for further replies.
  1. agurl333

    agurl333 Thread Starter

    Jun 11, 2019

    I am stumped. I now have a desktop Icon labeled "I was on your PC". Inside the folder there are 2 pdf files (which I did not open) labeled 1943 and a bunch of letters and numbers. It says it was created April 26th, but I really believe I would have noticed it by now as I get on my computer 2xs a week.

    Is there anyway I can go back to see if in fact it was hacked? At this point it's pretty obvious I was right? Especially since the file was created at a time I was definitely at work.

    I was watching videos, and as suggested went to netstat -ano and compared it with my Task manager pid's.
    Well, now I'm even more stumped because almost half of the PID's listed on Command Prompt are not on my Task Manager.

    Should anyone have any advice let me know! I genuinely appreciate anyone taking the time to give me advice. Thanks!

    Oh, and I have Windows 10. Most of what I find on the PID's are NVIDIA and Microsoft tasks so I don't stop running them. Anything that said csv.host that matched both the established pid and tasks pid I ended tasks.
  2. iMacg3

    iMacg3 Malware Specialist

    Nov 3, 2018
    Hi agurl333, Welcome to the Tech Support Guy malware removal forum.

    I am iMacg3 and will be helping you with your computer problems.

    Please keep the following information in mind before we begin:
    • Back up any important data before we continue.
      • Back up any important data on your computer to external media. I will not knowingly suggest any steps that will damage your computer; however, malware infections are often unpredictable and it may be necessary to reformat and reinstall your operating system depending on the infection.
    • Do not run any fixes or tools on your system unless I request that you do so.
      • Running additional tools on your system can interfere with the clean-up process, or cause issues such as false positives.
    • Please read all instructions carefully, and complete them in the order listed.
      • Items that are especially important will be highlighted in bold or red.
    • If your computer seems to start working normally, please don't abandon the topic.
      • Even if your system is behaving normally, there may still be some malware remnants left over. Additionally, malware can re-infect the computer if some remnants are left. Therefore, please complete all requested steps to make sure any malware is successfully eradicated from your PC.
    • If you have pirated or illegal software on your computer, uninstall it now before proceeding.
      • Using pirated/cracked software is an easy way to infect your computer - almost as easy as intentionally downloading malware. Therefore, please remove any, if present, before we begin the clean-up.
    • If you have questions at any time during the cleanup, feel free to ask.

    Farbar Recovery Scan Tool (FRST)
    • Download FRST to your Desktop. (for 32 bit systems)
    • Download FRST64 to your Desktop. (for 64 bit systems)
    • Double click Frst.exe/Frst64.exe to launch it.
    • FRST will start to run.
      • When the tool opens click Yes to the disclaimer.
      • Press the Scan button.
      • When finished scanning 2 logs will open on your Desktop, FRST.txt and Addition.txt
      • Please post them in your next reply.
As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/1228439

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice