Tech Support Guy banner
  • IMPORTANT: Only authorized members may reply to threads in this forum due to the complexity of the malware removal process. Authorized members include Malware Specialists and Trainees, Administrators, Moderators, and Trusted Advisors. Regular members are not permitted to reply, and any such posts will be deleted without notice or further explanation. Notice
Status
Not open for further replies.

Is this a virus?

In Progress 
6K views 32 replies 3 participants last post by  Cookiegal 
#1 ·
RtCRU64.exe C:\WINDOWS\RtCRU64.exe < is that a virus and if it is how do I remove this thanks I appreciate the help.
 
#6 ·
So I guess you're checking runnng processes to see the files?

Most keyloggers are installed stealth and are not going to be that easy to find. If you want, I can leave this open here for a Malware Specialist to do a thorough dive into the system to see if they come up with anything suspicious but even then there are no guarantees.
 
#8 ·
It's likely a temporary file for installation of a program such as Mozilla Firefox but you have to check the location of the file and then right-click on it and select properties to see if it's signed by Mozilla or some other company. You can do that for every file you want to check.
 
#29 ·
Farbar Recovery Scan Tool (FRST)

  • Download FRST to your Desktop. (for 32 bit systems)
  • Download FRST64 to your Desktop. (for 64 bit systems)
  • Double click Frst.exe/Frst64.exe to launch it.
  • FRST will start to run.
    • When the tool opens click Yes to disclaimer.
    • Press the Scan button.
    • When finished scanning 2 logs will open on your Desktop, FRST.txt and Addition.txt
    • Please post them in your next reply.
 
#30 ·
Farbar Recovery Scan Tool (FRST)

  • Download FRST to your Desktop. (for 32 bit systems)
  • Download FRST64 to your Desktop. (for 64 bit systems)
  • Double click Frst.exe/Frst64.exe to launch it.
  • FRST will start to run.
    • When the tool opens click Yes to disclaimer.
    • Press the Scan button.
    • When finished scanning 2 logs will open on your Desktop, FRST.txt and Addition.txt
    • Please post them in your next reply.
is this a virus though?
 
#33 ·
Listen Derek, we've done our best to respond to your queries and have been very patient with you. One of our Malware Specialists has now agreed to help you and has asked you to run some tools to that end. Nothing we ask you to run will contain a virus. Either you want the help or you don't. If you do then don't be questioning everything we ask you to download. Many of the tools used will show as potentially harmful by those scanners only because they dive deep into the system to retrieve information which is necessary to clean out any malware hiding there. Please do not run any of the tools through those scanners or we will have no choice but to close this thread. If you look at all of the other cases here you will see how malware is handled.
 
Status
Not open for further replies.
You have insufficient privileges to reply here.
Top