Some extras, it made really loud beeps and boops.
So i dont think its just a graphical thing.
It makes certain things shaky and nearly unusable.
So im resetting my pc to a clean state (hopefully.)
I know some malware can leak even after a reset (its not a full wipe)
So maybe i can do that too if it continues.
right after opening the laptop download everything by voidtools and autoruns. immediatly run autoruns and check if there's something that should'nt be here. after that, open everything and search for the name of that suspicious file and delete it. it is a gdi malware, it usually destroys mbr after the end of these bytebeat "songs"
Reminds me of some private projects I made a long time ago, when I was teaching myself how hackers might attack a computer.
This one was from my Loud and Proud collection.
For the record,to those who give a crap.... this was made before AI could code hardly anything. So uhh.... no vibe code. It got worse with every reboot due to a bug in how I handled persistence. It never checked it was in startup, and when it copied itself into startup, if it ran again, it'd somehow copy the entire system32 folder into startup too. Accidentally made it cooler, cuz in malware(even POC malware)there's rarely such a thingnas a destructive bug....no those usually get called happy accidents.
I nuked like 300 virtual machines with that before I eventually got rid of it, it was so fun.
Inspired by some of Memz virus payloads, but in python.
Oh, I also have somewhere, like 6 lines of python that can just BSOD windows 7 to 10(older versions of win11 as well, latest have been entirely untested)without any prompting....I
Somehow you managed to get a virus that just might not hurt you, but might be annoying to remove by anything other than the nuclear clean install option.
BWAAAHAAAAAAAA, omg you made me actually hit the floor,lmfaoooooo.
Never in my life have I been referred to as a Bruce Lee anything hahahahaha......yeah I'm not a super amazing malware dev, just today alone I've seen 2 that made me second guess myself just a bit.....
I'm currently in the business of analyzing malicious minecraft mods, and building a tool for people to get a decent threat score....for free....no sign ups, no payments, and it'll work if the internet goes out or sum bs.
Now, I rip apart malware, unscramble its guts, and use pieces of it to build a scanner that can detect more malware similar to it, currently, 8 different samples are being used to sanity check the thing.....I've got more work to do, but I'm making progress on detecting a few new ones
Oh, and no data leaves the pc. That's an important feature.
No idea, but searching for dupe mods and macro mods have malware results out the ass, stuff we can't detect reliably or at all yet, but working on it.
So far I've reverse engineered like 4 different obfuscation methods(makes the code unreadable by humans) and built a decoder to handle them, but there's many more methods to find, understand, and design an anti-analysis deafeat method for, cuz I'm not taking no for an answer.
Latest feature, Deep Decode, uses the attackers own decryption instructions for its own encrypted code, in certain cases where it uses a compatible method.
Have managed some detections for WeedHack and Ultimatelogger(flagged in our tool as sbftlogger, after the developer who made it)
Request help with FRST and SecurityCheck from the trusted helper team
Please visit Providing or receiving help with FRST on the subreddit and share your 3 keywords returned from the website along with the details about your infection.
Once a malware removal expert or trainee sees it, they will reply in the thread about further steps. If you suspect an infostealer infection, please change all your passwords from a clean device immediately and do not use any of your accounts from the infected device.
If you need urgent help and cannot wait for one of our Malware Removal Experts:
Please follow these steps:
From a different and clean device, change all your passwords:
Okay!
I have completely wiped my drive and downloaded a new installation of win11 from my dads pc.
Thanks for helping me!
It was a really funny experience dealing with it.
You probably installed an infostealer. You also installed some weird other app that fucks your PC.
If you'd like to wipe here's how.
Warning: I am not responsible for you messing up, or something, and everything you do here is on you. I am not responsible for your computer.
Disconnect from internet via your computer.
Transfer needed files to another usb or hard drive, do NOT transfer these file types:
exe
scr
bat
vbs,
and ANYTHING you don't recognize, don't transfer browsers.
Then, shutdown your PC, and reset all your passwords, on a different device from your PC.
Do NOT boot back into your PC.
Then, on a seperate computer (could be a friend's PC, or something) download the windows 11 iso (https://www.microsoft.com/en-au/software-download/windows11), or use their install media to install it to an external usb. This USB will be wiped. (lookup how to flash an iso if you have to)
Next, plug the usb into your PC and get to your bootloader, depending on your PC it might be a different key you have to click when launching; refer to google, or to your manual if you have one, usually you can just google "[PC Model or motherboard] boot key".
This is a bit foggy now since I don't know your exact bios, you can search for "boot order" and move the usb to the top. Click save or exit, and boot.
Walk through the windows install making sure to delete all the partitons to be safe.
behold: gdi malware.
reset your computer.
HOWEVER: the only active variant that I could find of gdi malware in the modern days are WIPERS with Monoxide.
yah it's time to move to linux bud noke that pc also run a full virus scan regular and offline mode and add some extensions like malware bytes and port authority for your browser plus change your browser to librewolf
What I would do after opening up the laptop and logging in: immediately go to google, type in “tron windows”, download it, execute it and let it work its magic (trons basically malwarebytes and avast if it did a fusion dance and took steroids immediately after)
We do not recommend Tron script because it has several issues.
To name a few of them:
it deletes shadow volume copies and restricts the size for creating new ones; especially if the malware was destructive those might be the last chance to get files back
it deletes Windows event logs and disables the service that creates them, this is a bad idea because many antivirus products use ETW for finding malware, deleting the logs has no advantage other than reducing security
it disables various tasks and services related to gathering diagnostic data in the name of privacy, but these are also necessary for various diagnostic and repair tools to work
although it does a lot of things in the name of privacy, it also takes a screenshot of the desktop
it is overly aggressive when removing and uninstalling software and may get rid of software that you want to keep
it "updates" software like 7zip to an outdated, vulnerable version from 2024
some of the tools that it uses for disinfection and cleaning are outdated and should not be used anymore
for malware removal Tron runs Malwarebytes, McAfee and KVRT; you can do the same manually if you wish to do so, without the added risks
tl;dr The list of issues created by tron and the risk involved is just too high to recommend it to anyone.
26
u/No_Low6177 Aug 05 '26
Some extras, it made really loud beeps and boops. So i dont think its just a graphical thing. It makes certain things shaky and nearly unusable. So im resetting my pc to a clean state (hopefully.) I know some malware can leak even after a reset (its not a full wipe) So maybe i can do that too if it continues.