[HELP] I think I'm infected with UNKNOWN malware/virus

zbook said:

Bree doesnt the iso on the Microsoft website change for each build so that there is only one build offered at anytime? So the only iso offered now is 1709 and to get 1703 or 1607 you would have to go to other websites? So sometime in April the 1709 iso will change to 1803? Then there will be few updates and updates will grow over time until the iso website is again updated?

The current 1709 ISO is for build 16299.15, the first public release of 1709. Microsoft do not update the ISO for each month's cumulative update. You install the base build from the ISO then just one cumulative update is all that's needed to bring it up to the latest build. The same has applied to the releases of 1507, 1511 and 1703. There has only been one ISO available throughout their life, the one for their initial release build.

1607 was the only exception as far as I know. There was quite a long gap until the next release and some five or six months into its eight months life the ISO was updated. With a planned six month release schedule for future releases its now unlikely that any ISO will be updated before the next version is released.

ESET flags:

sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="a variant of Win32/GameHack.ANF potentially unsafe application (cleaned by deleting)" ac=C fn="X:\GAMES\Counter-Strike 1.6\steamclient.dll"

sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="Win32/RiskWare.GameHack.AL application (cleaned by deleting)" ac=C fn="X:\GAMES\CSGO\steamclient.dll"
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="Win32/GameHack.QJ potentially unsafe application (cleaned by deleting)" ac=C fn="X:\GAMES\Warcraft III\w3l.exe"
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="a variant of Win32/Toolbar.Babylon.E potentially unwanted application (cleaned by deleting)" ac=C fn="X:\UTILITIES\Unlocker1.9.2.exe"
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="a variant of Win32/FusionCore.W potentially unwanted application (cleaned by deleting)" ac=C fn="X:\UTILITIES\INSTALLERS\pw102-free.exe"

Steam Client for Warcraft III and CounterStrike and CSGO
GameHack
Babylon Toolbar
FusionCore in Minitool Partition Wizard***

All 5 items have been cleaned by ESET.

*** MiniTool Partition Wizard have a free version and it is completely free of malware, so not sure where you got this from, but that appears to be part of your problem. That, and GameHack, which either gives you unauthorized access to gaming platforms, or an unfair advantage in them.
Riskware.GameHack - Malwarebytes Labs | Malwarebytes Labs | Detections

I agree with Bree and zbook - get yourself a Windows ISO (be sure to download the correct one!), back up your important data, and perform a clean install now - don't wait for the next release. Be sure to delete all partition and install to a completely unallocated drive. See step 10 in the tut zbook posted for you.



And remember, only ONE active AV and only ONE active anti-malware.

Shnxxx said:

I just have some few questions.

• So I need to back up all my files in other partition because I should delete all partitions and make it as one?

I would back up all your files to another disk to be safe. But, if you don't have one (and you should - so think seriously about getting one), then you could back them up to another partition. Just be sure you don't delete the partition they are on, when installing W10.

Shnxxx said:

• Is it good if I back them up on a cloud so I can assure that there will be no virus? (If you guys know some free and good cloud services what is it? I prefer huge capacity cloud )

Using a cloud service has some disadvantages: usually not encrypted, takes a long time to upload/download if you have a lot of data, not accessible if your internet goes down. It has some advantages too - just stating the obvious.

Shnxxx said:

• Does my pre-installed Norton will be retrieved? because this is PC is bundled with licensed norton.

No, if you download an ISO from Microsoft, it will only be W10 operating system, and not any other software. So you will lose Norton, unless you have a subscription and an account with them, and can reinstall it that way. Otherwise, Avast free is very good.

Shnxxx said:

• And lastly, what if the installation asks for Product license key? I bought this PC in a huge flat box package with charge inside some manuals with free bag, and I don't seem to see a license key of it. They said it is already a lifetime license. :3

Once a system has had W10 installed and activated on it, it has a digital license stored on the Microsoft servers. You can reinstall any time, skip inputting a key, and MS will see it and activate it once you go online. You just need to put the same version of the OS on as is already activated. In other words, if you have W10Home activated on it, and you try to install W10Pro, or W10 Single Language, or W10 Education, etc., it will not activate.

Shnxxx said:

Sorry for the late reply, become busy in school, anw, Thank you so much for answering all of my questions, I decided to reformat it later, and also I already backed up my file on a cloud because I don't really have any external drives, because I decided too to reformat the whole partition just to be safe because I was wondering maybe the virus is hiding on the other partition or so.

What happen if after having a fresh installed windows 10 comes infected again with that kind of virus/malware?
Is it already on my files?

Hi.
Once you've clean-installed W10, and have ONE good anti-virus working on it, scan your files as you put them back on the machine. I think you should be okay. You need to be careful what you install on there, and where you get stuff from. For example, that MiniTool Partition program showed as being infected. I suspect you did not download it from the MiniTool website, because their download is clean.
Good luck with the clean install and with school.