Windows Defender didn't pick anything up, I only became suspicious after running the application and getting my stuff messed up. Ran a MBAM scan on it after that, but it was a bit too late. Also I did check the previous posts, but the replies seemed mixed. Just my luck for being the trial rabbit, I suppose.
I appreciate that. Unfortunately that "very sloppy malware" still seems to be running even after a nuke of my boot drive and a fresh Windows installation.
Below is the Speed Dial 2 extension I was trying to set up:
View attachment 2741858
Whatever's running in the background turned every radio button clicked or mouse-over'd to be re-centered it in the middle of the screen. The buttons are also all unusable.
View attachment 2741864
I know the Wiki's been updated, but if you still have the exe running around, could you poke open the hood and tell me what other mischief the author wrote in? MBAM and Defender scans are turning up empty, but I'm still having this problem, so I wanna know if I'm dealing with a rootkit or it's just their idea of a prank.
Or if there's a hash of that file, that would be great, too.
Honestly, this is quite a bummer. Saw this mod and thought "Hey, that seems cool", but ended up with this shit. If that malware got its hooks anywhere other than the boot drive (which seems likely, given its persistence), the rebuild time is going to be insane.
Edit: Problem persists even when all non-boot drives have been disconnected. Problem persists even when using a freshly-installed boot drive.
On a separate system without logging to the browser, it worked fine. But when logged in on the browser, the problem recurred.
Anyone got any ideas?