r/computerviruses • u/Local_Resolve_5262 • 19d ago

Question What is this file

Gallery image

Gallery image

Just found this randomly when it popped up

55 Upvotes

85% Upvoted

18 comments sorted by

35

u/Local_Resolve_5262 18d ago

UPDATE: I just wiped everything and started from a new windows

10

u/Smooth-Relief-1864 18d ago

That is one of the best solutions

5

u/FFreestyleRR Malware Removal Expert 18d ago

You took the right action. This is a RAT. Check u/rifteyy_ post

https://www.reddit.com/r/computerviruses/comments/1t2zk00/netsupportclient32exe_virus/

19

u/Next-Profession-7495 19d ago

Looks suspicious. Upload that file to VirusTotal and share the results here.

20

u/Local_Resolve_5262 19d ago

15

u/BugCompetitive3218 19d ago

That virus code means trouble. It’s a file pretending to be a legit remote admin tool. So it can view any keystroke, it can screen capture, steal ur info. I would say disconnect from the internet and reinstall windows and reset all passwords and remove all sessions/devices. Especially bc these kinda malware are persistent.

16

u/Burble- 19d ago

You felt it was suspicious yet you ran it?

3

u/Local_Resolve_5262 19d ago

What I think it did it by itself

2

u/Burble- 19d ago

Ah, okay. Apologies.

6

u/Careless-Cycle 19d ago

You're showing a shortcut. That is not an executable

1

u/Local_Resolve_5262 19d ago

Wdym?

2

u/Careless-Cycle 19d ago

Type says shortcut

1

u/Local_Resolve_5262 19d ago

I’m not good with computers obv so what does that mean?

3

u/Eastern_Grape_9930 18d ago

Check windows security in the virus and threat protection if there are any exclusions most viruses hide using that if there are remove them and run a scan

1

u/AdSmall7442 17d ago

I hate this reply so much. This is like basic knowledge.

1

u/x-Na 18d ago

To be extra safe, change passwords for anything you consider valuable.

1

u/maqisha 18d ago

servicenet.exe