[HELP] I think I'm infected with UNKNOWN malware/virus

Page 2 of 4 FirstFirst 1234 LastLast

  1. Posts : 41,474
    windows 10 professional version 1607 build 14393.969 64 bit
       #11

    In the opening post you had a problem with Windows updates.
    Windows updates are going to happen latter this month with a major Windows upgrade starting on April 10, 2018.
    An option may be to create a bootable windows 10 iso after April 10, 2018 and use it to perform a clean install followed by a Windows update to complete the Windows 1803 installation.

    Windows 10 Redstone 4 (version 1803): All the new features and changes Pureinfotech
      My Computer


  2. Posts : 31,674
    10 Home x64 (22H2) (10 Pro on 2nd pc)
       #12

    zbook said:
    ...starting on April 10, 2018.
    Sensible suggestion, but a minor note. That's 'Patch Tuesday'. Normal practice in the past has been to release the next Features Update about a week later. Brink expects 1803 to appear around the 18th April.
      My Computers


  3. Posts : 16,325
    W10Prox64
       #13

    Shnxxx said:
    @simrick the unsigned one was detected by Windows defender as a Trojan
    Attachment 183099
    Here's the results.
    RKill
    AdwCleaner
    RKill (2nd)

    What's Norton Tool?
    Yes, the unsigned will, of course, be flagged, because it is unsigned. It's okay.

    The first log from RKILL shows a ton of reparse points - that is not normal, and it could be the reason for all these files showing up. But ADWCleaner found nothing and the second run of RKILL did not show anything malicious.

    Shnxxx said:
    I found the Norton Tool that @simrick talking about, it's the Norton Power Eraser. And it says no threats found.

    I run as admin the AVG tool and It just opened and somewhat scanned so fast and close itself too. So I don't know what really happened.

    Right now I'm scanning using the Kaspersky tool. I will update again ASAP when it finished.
    Norton found nothing - good!

    Shnxxx said:
    Kaspersky Tool somewhat stuck for already 30 mins. and looks like it doesn't do anythings else, no success or fail messages appears. So decided to close it and will start it again later on. I'll update again here ASAP.
    Not sure why that one is not working for you.

    You can try their offline rescue disk - you boot the system to it, and it cleans outside the operating system:
    Kaspersky Rescue Disk 10


    Or, you can try the ESET Online Scanner:
    Free Virus Scan | Online Virus Scan from ESET ESET
    Click on the SCAN NOW button. It will take a while.
    Let us know if it finds anything - there is an option to save the scan results to a text file.
    If it doesn't find anything, I'd be pretty confident that your system is clean, it just has problems.

    I would then work on the DISM commands to get your operating system back in shape:

    Open an Administrative Command Prompt and enter these commands:
    Dism /Online /Cleanup-Image /checkhealth (enter)

    Dism /Online /Cleanup-Image /scanhealth (enter)

    Dism /Online /Cleanup-Image /restorehealth (enter)

    sfc /scannow (enter)

    You can post screenshots of the results of each command if there are any problems.

    Alternatively, you can wait and perform a clean install in a couple weeks as suggested. A clean install will wipe everything, so be sure your data and software keys are backed up to another location.

    Here's some very detailed information on Sality:
    Sality - Wikipedia


    Sorry I was not available yesterday.
      My Computer


  4. Posts : 53
    Windows 10 Pro 10586.494 v1511
    Thread Starter
       #14

    simrick said:
    Yes, the unsigned will, of course, be flagged, because it is unsigned. It's okay.

    The first log from RKILL shows a ton of reparse points - that is not normal, and it could be the reason for all these files showing up. But ADWCleaner found nothing and the second run of RKILL did not show anything malicious.


    Norton found nothing - good!


    Not sure why that one is not working for you.

    You can try their offline rescue disk - you boot the system to it, and it cleans outside the operating system:
    Kaspersky Rescue Disk 10


    Or, you can try the ESET Online Scanner:
    Free Virus Scan | Online Virus Scan from ESET ESET
    Click on the SCAN NOW button. It will take a while.
    Let us know if it finds anything - there is an option to save the scan results to a text file.
    If it doesn't find anything, I'd be pretty confident that your system is clean, it just has problems.

    I would then work on the DISM commands to get your operating system back in shape:

    Open an Administrative Command Prompt and enter these commands:
    Dism /Online /Cleanup-Image /checkhealth (enter)

    Dism /Online /Cleanup-Image /scanhealth (enter)

    Dism /Online /Cleanup-Image /restorehealth (enter)

    sfc /scannow (enter)

    You can post screenshots of the results of each command if there are any problems.

    Alternatively, you can wait and perform a clean install in a couple weeks as suggested. A clean install will wipe everything, so be sure your data and software keys are backed up to another location.

    Here's some very detailed information on Sality:
    Sality - Wikipedia


    Sorry I was not available yesterday.
    THANK YOU FOR YOUR PATIENCE AND EFFORT!

    I will try now ESET to scan my PC and by the way I just realized a little while ago that what if I upload some of those weird files to VirusTotal.com and I was shocked that even VirusTotal cannot detect it. I really don't why it is like that. I pretty much convinced that it is a virus because I checked my classmate's laptop and he has no kind of weird files names on his windows directory. I'm still hoping that it can be removed
      My Computers


  5. Posts : 53
    Windows 10 Pro 10586.494 v1511
    Thread Starter
       #15

    zbook said:
    In the opening post you had a problem with Windows updates.
    >>>> Yes and a lot. I don't know what to fix first, this random weird file names or windows update. I can't update anything now, it download updates but won't install, I already done stopping BITS and wuauserv services and deleted SoftwareDistribution contents and restart BITS and wuauserv services but still no success, I can't update even I restart.

    zbook said:
    Windows updates are going to happen latter this month with a major Windows upgrade starting on April 10, 2018.
    An option may be to create a bootable windows 10 iso after April 10, 2018 and use it to perform a clean install followed by a Windows update to complete the Windows 1803 installation.
    >>>> So does it mean that I really need to update my windows to its latest and create a bootable windows 10 after the said date? Sorry but can you please elaborate what should I do? I'm still learning from this kind of 'technicality',

    Windows 10 Redstone 4 (version 1803): All the new features and changes Pureinfotech
      My Computers


  6. Posts : 53
    Windows 10 Pro 10586.494 v1511
    Thread Starter
       #16

    I'm scanning using ESET now, and update here ASAP Thank you again guys for helping me out.

    BTW, I already used all of these but I will still post it for future reference (I think):
    [HELP] I think I'm infected with UNKNOWN malware/virus-capture-4.png
      My Computers


  7. Posts : 41,474
    windows 10 professional version 1607 build 14393.969 64 bit
       #17

    When a Windows 10 iso is used as a clean install you will be installing a brand new copy of windows from the iso and will not be depending on internet download speed. Once the Windows iso installation has completed there will be Windows updates.
    The timing though is related to the duration of time it takes for updates.
    It is likely that there will be fewer updates with the new iso when the install is done within a week of the release. In contrast if the updates are performed 1 - 2 months after the iso there may be several cumulative updates, etc. that were not included with the iso and the greater the number of files that are not on the iso the longer it may take for updates.
    It is unclear how often the Microsoft iso website is updated to change what is included on the iso.

    So if you can perform a clean install within a week after the upgrade you will have installed most of the folders and files using the iso without the internet and then have a smaller amount of time for the internet upgrades.

    Clean Install Windows 10 Windows 10 Tutorials

    For the Windows 10 iso find a flash drive that you can format ( > or = 8 GB )
    Download Windows 10
      My Computer


  8. Posts : 31,674
    10 Home x64 (22H2) (10 Pro on 2nd pc)
       #18

    zbook said:
    It is unclear how often the Microsoft iso website is updated to change what is included on the iso
    To my knowledge that has only happened once. The MCT iso for 1607 had been updated by February 2017, some six months after the initial release.
      My Computers


  9. Posts : 41,474
    windows 10 professional version 1607 build 14393.969 64 bit
       #19

    Bree doesnt the iso on the Microsoft website change for each build so that there is only one build offered at anytime? So the only iso offered now is 1709 and to get 1703 or 1607 you would have to go to other websites? So sometime in April the 1709 iso will change to 1803? Then there will be few updates and updates will grow over time until the iso website is again updated?
      My Computer


  10. Posts : 53
    Windows 10 Pro 10586.494 v1511
    Thread Starter
       #20

    zbook said:
    When a Windows 10 iso is used as a clean install you will be installing a brand new copy of windows from the iso and will not be depending on internet download speed. Once the Windows iso installation has completed there will be Windows updates.
    The timing though is related to the duration of time it takes for updates.
    It is likely that there will be fewer updates with the new iso when the install is done within a week of the release. In contrast if the updates are performed 1 - 2 months after the iso there may be several cumulative updates, etc. that were not included with the iso and the greater the number of files that are not on the iso the longer it may take for updates.
    It is unclear how often the Microsoft iso website is updated to change what is included on the iso.

    So if you can perform a clean install within a week after the upgrade you will have installed most of the folders and files using the iso without the internet and then have a smaller amount of time for the internet upgrades.

    Clean Install Windows 10 Windows 10 Tutorials

    For the Windows 10 iso find a flash drive that you can format ( > or = 8 GB )
    Download Windows 10
    So, should I install a fresh copy of windows 10 iso so I can get rid these weird file names and to fix windows update?

    Should I wait for april 10 to install a fresh copy because @zbook said that he recommends to create a bootable windows 10 iso after april 10 so I can get fewer updates, right?

    Anw, Here's ESET's results.

    and also btw, DISM.exe /Online /Cleanup-image /Restorehealth already took 5 hours and still nothing happens, it looks like stucked.
      My Computers


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 15:47.
Find Us




Windows 10 Forums