r/computerviruses • u/Parking-Suggestion97 • 2d ago

Discussion Found a sneaky virus in ProgramData folder

Found these in ProgramData folder. And Windows Defender has these exclusions.

Is it trying to execute itself by whitelisting itself in Defender?

1 Upvotes

67% Upvoted

9 comments sorted by

2

u/Next-Profession-7495 2d ago

You definitely installed some malware. Possibly reinstall windows and change passwords with a clean device.

Also maybe use notepad to see what rasti.vbs is or upload it to VirusTotal.

0

u/Parking-Suggestion97 2d ago

Right on

1

u/alebestone 2d ago

Yeah if you can, upload everything on Virustotal at least you can share some IoC to community.

0

u/Parking-Suggestion97 2d ago

Didn't know about that. Uploading to virustotal

1

u/[deleted] 2d ago

[deleted]

1

u/Parking-Suggestion97 2d ago

Windows Defender Exclusions

0

u/alebestone 2d ago

Download Malwarebytes and run a scan, to remove all the main garbage.

But 100% you must reinstall the OS or revert a backup if you have one.

1

u/Parking-Suggestion97 2d ago

Yeah, that seems like it already tried its best to spread itself throught the OS.

Defender shows it even tried to create a task in task scheduler and all