Trojan Virus

[terse light]

"Altruist"

So guys, I randomly got a trojan virus called "Altruist" in my program files (x86)
and im thinking about reinstalling my windows
will the trojan virus be removed if i do that?

[frail bluff]

Are you just assuming it’s a trojan or do you just not know where it came from?

[terse light]

its a trojan

[terse light]

i searched it

[frail bluff]

Altruist or Altruistics?

[terse light]

both

[cyan roost]

Sure, as long as you FORMAT the drive it will remove the trojan and OS as well.

[terse light]

yeah that was the thing i was doing

im installing the windows rn

[cyan roost]

will mark as resolved 🙂

[terse light]

wait

so

uninstalling os will remove any types of virus?

[cyan roost]

well formatting a drive clears out the Virus currently on your OS.

completely formatting

[terse light]

any type of virus?

so im using two drives

hdd has files

and the ssd is os

that is good news

cuz if one

then

my files is gone too

so im ONLY formatting the os drive

[cyan roost]

Yeah, just need to clear out the partition your OS is on.

Foot note, if you are installing files from the other drive, you could get the virus back , if its sitting in some files you downloaded.

because the virus could be embedded in some installer from a malicious website

[terse light]

how do i

get rid of it

btw i have one drive

[cyan roost]

Drives can have multiple partitions

[terse light]

so heres i am going to do

im placing my files on the one drive

and format two drives

[cyan roost]

🤔 ?

[terse light]

the one drive

[cyan roost]

so you got 3 drives in total?

[terse light]

microsoft

im placing my files in here

and then format two drives?

[cyan roost]

Do you know what you downloaded which had the virus in it?

[terse light]

only c:drive

not D:drive

[cyan roost]

Like some illegal crack , torrent or other game crack you may have downloaded

[terse light]

yeah thats right

i crack games

but i didnt continue it

cuz i noticed many applications automatically installed in

busy on uninstalling them

but there is one thing i cant uninstall

which is the trojan

"Altruist" or "Altruistic"

[cyan roost]

https://www.makeuseof.com/windows-remove-altruistics-virus/

[terse light]

c:drive

[terse light]

done that

already

but i still not deleted

[cyan roost]

noted, just read the website anyway

[cyan roost]

shift delete?

as in shift before you click second mouse button

[terse light]

nope still cant

also i tried doing deleting them in resource monitor

but still comes back

and there is not altruist in control panel

in task manager

[cyan roost]

ah ... check if its in the services

[terse light]

where

[cyan roost]

could be its embedded as a service

in services on task mgr

if you dont have services on taskmgr , on windows there should be separate services part as well when you type it in

[cyan roost]

yeah stop it

and second mouse button on it , and tell it to manual start up

or even better "Disabled"

[cyan roost]

do you got admin rights on that PC?

[terse light]

im currently using admin account rn

[cyan roost]

hmm... restart in safe mode

and try again?

[terse light]

how

[cyan roost]

open cmd prompt

bcdedit /set {current} safeboot network

this will set your PC to boot up in safe mode.

[terse light]

ok after that

[cyan roost]

bcdedit /deletevalue {current} safeboot
this will undo it

[terse light]

what should i do

after i boot to safeboot

what should i do

[cyan roost]

1. go to services and try to disable it from there. You still have internet because of network part.
2. msconfig (in run field) go to " Services" and disable altruistic (uncheck it) .
   After that you could try to remove the folder again.

[terse light]

do i need to turn off the internet

[cyan roost]

not needed

[terse light]

how do i communicate you

in safe mode

[cyan roost]

still have internet.

[terse light]

oh it has google?

[cyan roost]

it still has a chrome browser

just boots up as minimum as possible

[terse light]

ok

see ya im booting safe mode

https://tenor.com/view/vecca-bye-leave-bye-now-leaving-gif-16845564

@cyan roost

im in safe mode

[cyan roost]

1. go to services and try to disable it from there. You still have internet because of network part.
2. msconfig (in run field) go to " Services" and disable altruistic (uncheck it) .
   After that you could try to remove the folder again.

bcdedit /deletevalue {current} safeboot
after you are done.

[terse light]

dang it

i cant screenshot

[cyan roost]

you got words, to talk

[terse light]

if i right click the AltruisticsService

its just

start button

but yeah its stopeed

all

was stopped

[cyan roost]

and disabled?

should be disabled

[terse light]

i dont see a disabled button

[cyan roost]

just for example, should have a screen like this

startup type should be Disabled

not automatic

[terse light]

you mean stopped - "disabled"

[cyan roost]

Startup type: "Automatic"

is on the screenshot?

found that one?

find it on your part, and put it as
Startup type: " disabled"

[terse light]

i have phone

[cyan roost]

I have banana

this is what it should be .

Tell me. ..
A. did you find this screen? ( yes great! , No tell me! )

[terse light]

are you using windows 11

badda bim badda bom

[cyan roost]

aaaah

they removed the option 😦

on purpose

-s is probably added to boot it silently

[terse light]

are we really doing the plan A

moving files on OneDrive

[cyan roost]

https://malwaretips.com/blogs/remove-altruistics-malware/#rkill

[terse light]

and then format two drives

[cyan roost]

not yet 😄

this is something you could do , or unless you think its too much, just do plan A

[terse light]

ok im with plan A

so

you said

[cyan roost]

open cmd prompt again:

bcdedit /deletevalue {current} safeboot 

to get out of safeboot 😄

[terse light]

if i install files

wait

wait

so my os is

C:drive

and my files is

D:drive

im only formatting the C:drive right?

[cyan roost]

yes

[terse light]

ok

[cyan roost]

remember the Size of the partition* C:\ 😮

to distinguish them 🙂

[terse light]

my C:drive is 256gb and D:drive is 500gb

[cyan roost]

great , now lets get out of safeboot

[terse light]

ssd is c:drive and hdd is d:drive

[cyan roost]

bcdedit /deletevalue {current} safeboot

[terse light]

ok

done

[cyan roost]

so backup your files 🙂

[terse light]

so what does this

message

means

[cyan roost]

Well if the virus comes from an installer, it can reinstall itself again

[terse light]

kinda thinks me of affecting the d:drive

[cyan roost]

from cracked games/ or unreliable resources

[terse light]

well

i deleted the crack games

[cyan roost]

it won't happen

and thats what we want

[terse light]

y'know how my adrenaline rush fast is

and how im strict

in my pc

[cyan roost]

so lets continue, backup only whats needed to the D:\ drive

[terse light]

accept my friend req i dont think you're stranger to me

[terse light]

we're only doing c:drive

format it

and install new windows

[cyan roost]

yeah but you got documents , on your C:\ drive

like downloads / pictures

[terse light]

nah

[cyan roost]

desktop

[terse light]

nah

[cyan roost]

If those dont matter , you can straight up make a Boot ISO using creation media tool.

[terse light]

my files keep deleting on c:drive and i need to place it on d:drive

so yeah

i dont have files

or anything

on c:drive

[cyan roost]

do you got a USB size of around 8 GB?

[terse light]

bro

windows said

i can reinstall

without usb

[cyan roost]

dont

[terse light]

just download here

what?

[cyan roost]

well maybe in this instance you could 🤔

but some instances it would just lead to more weird stuff

[terse light]

why not?

[cyan roost]

because its overwriting over the old OS and in some broken OS cases it will lead to weird behaviour

in this case it probably cleans up whats needed.

[terse light]

i trust ya im pulling up my usb 3.0

[cyan roost]

would be okay to do a in windows cleanup 🙂

[terse light]

this usb has been used in windows many many times

when my pc broke

[cyan roost]

yeah I have the same 😄

those were ondiscount on amazon a few months ago

[terse light]

well i got the usb

in freebies in my brother's new laptop

asus a15 tuf gaming

[cyan roost]

usb creation media tool 😄

[terse light]

nah it doesnt have windows installation on it

[cyan roost]

so create it? 😄

[terse light]

oh shi how lucky am i

it already has windows 10 on it

ok heres i am going to do

im communicating you

using my phone

while reinstalling windows

[cyan roost]

you can do it 😄

[terse light]

im going to bios and switch to usb

[cyan roost]

just use "US" as keyboard layout

and all is fine

[terse light]

btw

accept my friend req

[cyan roost]

nope, too many people on here xD.

[terse light]

why?

[terse light]

i'll be in your list

im active

i can talk with ya

[cyan roost]

Only thing I do is play factorio and help people with computer issues.

[terse light]

i can talk with ya

cuz

im finding parts

ok im switching to usb

[cyan roost]

great for that part can I recommend #build-a-pc

[terse light]

no i want someone to comment my builds

[cyan roost]

build a PC can do that as well

[terse light]

Some people here are shit

Including aldonist

[cyan roost]

Allot of people in the world are s***

[terse light]

thought i was shitposting and got warned

Ok i literally format the

Ssd

250gb

But it says 230gb

[fringe quartz]

disconnect ethernet or wifi and select personal use

[terse light]

@cyan roost