1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

In Progress "TV NOW" Maleware/Virus?

Discussion in 'Virus & Other Malware Removal' started by PhaDe, Aug 14, 2019.

  1. PhaDe

    PhaDe Thread Starter

    Joined:
    Aug 14, 2019
    Messages:
    1
    Okay, never seen anything like this. Done some research across numerous platforms and am not finding much more than a browser hijacker that changes your homepage to TV Now's streaming platform. My issue is different...

    When opening my HP ProBook 650 G2 machine this morning from sleep mode, any time I would input a keystroke, it would instead insert the text "TV NOW" and then automatically press enter to return to the next line.

    I tried inputting text in different programs (word, xcel, outlook, chrome, etc.), but always the same result.

    Here is where I made a mistake because I instinctively decided to reboot the machine. Problem is this is a work machine w/ a BitLocker encryption tool. When I try to input my BitLocker PIN the machine is replacing it with the text and pressing return so I get an invalid PIN and am locked out of the machine.

    So I can't troubleshoot anymore until I can get the machine unlocked which I'm working on and will update with any info.
     
  2. kevinf80

    kevinf80 Malware Specialist

    Joined:
    Mar 21, 2006
    Messages:
    11,383
    First Name:
    Kevin
    Hello PHaDe and welcome to Tech Support Guy,

    Continue with the following;

    Step 1: Disconnect the encrypted drive from sick PC
    Step 2: Connect Bitlocker encrypted drive via USB to a Windows computer with same OS.
    Step 3: Double click Bitlocker encrypted drive in My Computer (This PC) or Disk Management.
    Step 4: Enter the password or Bitlocker recovery key to unlock Bitlocker encrypted drive.
    Step 5: Turn OFF Bitlocker

    Next,

    Reconnect HD to sick PC.

    Next,

    Please download Farbar Recovery Scan Tool from here:

    http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/

    save it to a USB flash drive. Ensure to get the correct version for your system, 32 bit or 64 bit

    Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

    Plug the flash drive into the infected PC.

    If you are using Windows 8 or 10 consult How to use the Windows 8 or 10 System Recovery Environment Command Prompt Here: http://www.howtogeek.com/126016/three-ways-to-access-the-windows-8-boot-options-menu/ to enter System Recovery Command prompt.

    If you are using Vista or Windows 7 enter System Recovery Options.

    Plug the flashdrive into the infected PC.

    Enter System Recovery Options I give two methods, use whichever is convenient for you.

    To enter System Recovery Options from the Advanced Boot Options:
    • Restart the computer.
    • As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
    • Use the arrow keys to select the Repair your computer menu item.
    • Select Your Country as the keyboard language settings, and then click Next.
    • Select the operating system you want to repair, and then click Next.
    • Select your user account an click Next.

    To enter System Recovery Options by using Windows installation disc:
    • Insert the installation disc.
    • Restart your computer.
    • If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
    • Click Repair your computer.
    • Select Your Country as the keyboard language settings, and then click Next.
    • Select the operating system you want to repair, and then click Next.
    • Select your user account and click Next.

    On the System Recovery Options menu you may get the following options:
    Startup Repair
    System Restore
    Windows Complete PC Restore
    Windows Memory Diagnostic Tool
    Command Prompt


    • Select Command Prompt
    • In the command window type in notepad and press Enter.
    • The notepad opens. Under File menu select Open.
    • Select "Computer" and find your flash drive letter and close the notepad.
    • In the command window type e:\frst64 or e:\frst depending on your version. Press Enter
      Note:
      Replace letter e with the drive letter of your flash drive.
    • The tool will start to run.
    • When the tool opens click Yes to disclaimer.
    • Press Scan button.
    • It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.

    Thank you,

    Kevin..
     
  3. kevinf80

    kevinf80 Malware Specialist

    Joined:
    Mar 21, 2006
    Messages:
    11,383
    First Name:
    Kevin
    Any progress...?
     
As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...

Short URL to this thread: https://techguy.org/1231493

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice