1. Welcome Guest! In order to create a new topic or reply to an existing one, you must register first. It is easy and free. Click here to sign up now!.
    Dismiss Notice

ScreenConnect Removal

Discussion in 'Malware Removal Help' started by John Stenger, Jan 30, 2026.

  1. John Stenger

    John Stenger Registered Members

    Joined:
    Apr 2, 2013
    Messages:
    429
    Operating System:
    Windows XP Home
    One last question, no matter where it's hidden on the computer, if it's being utilized by the hackers, it shows up as running in task manager. ...is that correct?
     
  2. IJAC

    IJAC Super-Moderator Super Moderators

    Joined:
    May 8, 2017
    Messages:
    934
    Location:
    Here
    Operating System:
    Linux Based
    Computer Brand or Motherboard:
    I have a Asus prime Z270A MB
    CPU:
    Intel i5 Quad core
    Memory:
    Rip Jaw 32 GB
    Hard Drive:
    Samsung Evo 500 GB SS
    Graphics Card:
    On Board
    Power Supply:
    750 Watt Corsair
    If a program is running then yes it should show up in the task manager as far as I know.
     
  3. John Stenger

    John Stenger Registered Members

    Joined:
    Apr 2, 2013
    Messages:
    429
    Operating System:
    Windows XP Home
    I am going to do a clean reinstall of Windows 10. After running MALWAREBYTES Several times plus the Cleanup software, I looked at Task manager last evening, and there were 3 separate versions of Screen Connect still running! So It's hiding somewhere! Thank You For your help!
     
  4. allheart55 (Cindy E)

    allheart55 (Cindy E) Administrator Administrator

    Joined:
    Jun 11, 2009
    Messages:
    10,625
    Location:
    Pennsylvania
    Operating System:
    Windows 10
    Computer Brand or Motherboard:
    ASUS M4A77TD AM3 AMD 770 ATX AMD
    CPU:
    AMD Phenom II X6 1090T-Thuban 3.2GHz
    Memory:
    Crucial-DDR3 SDRAM 1333-8GB
    Hard Drive:
    WD Caviar Black SE HDD 640 GB - WD Caviar Black SE HDD 500 GB
    Graphics Card:
    Sapphire Radeon HD-7870 2GB
    Power Supply:
    CORSAIR CMPSU-750W
    I think a clean install of Windows 10 is your safest option.
     
    IJAC likes this.
  5. John Stenger

    John Stenger Registered Members

    Joined:
    Apr 2, 2013
    Messages:
    429
    Operating System:
    Windows XP Home
    Yes because I am running Malwarebytes everyplace and it is still in the machine! I even scanned a file I know contained the screen connect, and Malwarebytes said it was clean?
     
  6. allheart55 (Cindy E)

    allheart55 (Cindy E) Administrator Administrator

    Joined:
    Jun 11, 2009
    Messages:
    10,625
    Location:
    Pennsylvania
    Operating System:
    Windows 10
    Computer Brand or Motherboard:
    ASUS M4A77TD AM3 AMD 770 ATX AMD
    CPU:
    AMD Phenom II X6 1090T-Thuban 3.2GHz
    Memory:
    Crucial-DDR3 SDRAM 1333-8GB
    Hard Drive:
    WD Caviar Black SE HDD 640 GB - WD Caviar Black SE HDD 500 GB
    Graphics Card:
    Sapphire Radeon HD-7870 2GB
    Power Supply:
    CORSAIR CMPSU-750W
    That's probably because Screen Connect is an actual digitally signed program that ( when used as intended) helps you get tech support.
    Hackers have been altering it and using it as malware to steal information.
    Some malware apps are only seeing is as the intended use program and not recognizing the reprogramming of it.
     
    IJAC likes this.
  7. allheart55 (Cindy E)

    allheart55 (Cindy E) Administrator Administrator

    Joined:
    Jun 11, 2009
    Messages:
    10,625
    Location:
    Pennsylvania
    Operating System:
    Windows 10
    Computer Brand or Motherboard:
    ASUS M4A77TD AM3 AMD 770 ATX AMD
    CPU:
    AMD Phenom II X6 1090T-Thuban 3.2GHz
    Memory:
    Crucial-DDR3 SDRAM 1333-8GB
    Hard Drive:
    WD Caviar Black SE HDD 640 GB - WD Caviar Black SE HDD 500 GB
    Graphics Card:
    Sapphire Radeon HD-7870 2GB
    Power Supply:
    CORSAIR CMPSU-750W
    You can do a FULL FACTORY RESET using Windows 10 reset option much easier than a install from DVD.
    Screenshot_20260206_091504_Google.jpg Screenshot_20260206_091514_Google.jpg Screenshot_20260206_091525_Google.jpg
     
    IJAC likes this.

Share This Page