SVC:TeamViewer>C:\Program Files Rootkit:Hidden Service

Viruses and worms
1

Today when I switched my laptop on, it pops up a warning as above.

TeamViewer obviously needs to start up early so that remote connections work from other PCs. I don’t want to remove something that is vital for the operation of TeamViewer.

Is this a false positive? If not what can I do to check which file it is that is causing the warning, and how can I double check?

2

report it here https://support.avast.com > avast virus lab

you may check the file here www.virustotal.com / www.metascan-online.com

3

Thanks. How can I tell which file it is that needs to be sent for checking?

4

Stranger and stranger. There is no file called TeamViewer in Program Files. The TeamViewer folder is in Program Files (X86).

5

follow instructions here https://forum.avast.com/index.php?topic=53253.0
attach Malwarebytes and Farbar Recovery Scan Tool logs … 3 logs total

6

Thanks. Sounds complicated. At present my laptop is doing a boot time scan, having given a clear result from a full scan for viruses and malware, but saying it is “dirty”. I’ve had a friend send this on my behalf.

7
Sounds complicated.
it is not... you download and install Malwarebytes, scan and attach the log

then download FRST (no install) scan as instructed and attach the two diagnostic logs

8

Not hard at all. Takes me about 30seconds to do a FRST scan inside a virtual machine fresh install. Should take a matter of minutes for you.