dbrisen
Malware Removalists
Posts: 3,688
|
Post by dbrisen on May 26, 2017 7:14:06 GMT -8
Still best to have the files looked at by VirusTotal. [/u][/font][/a] [*]Click on the "Choose file" box in the middle of the page [*]Using the File Upload window that opens, navigate to the file(s) that Malware Hunter indicates [you will have to do this one file at a time] [*]Click on the Upload button and then the Scan It! button on the main VirusTotal web page. [*]If a pop-up appears saying the file has been scanned already, please select the ReScan button. [*]Once the Scan is completed, left click on the Address bar of your browser (this should select the entire address of the web page with the scan results), right click on the highlighted address and select Copy. [*]Paste the copied address in your next reply. [/ul] Thank you.
|
|
jjjoe
New Helpee
Posts: 9
|
Post by jjjoe on May 27, 2017 18:39:44 GMT -8
Hi again, I did a copy and paste from the scan log. The first one came back as "trusted Microsoft file." The second file comes back as being the same file as the first one that was scanned. Below are the results from the first scan from VirusTotal. The 2nd and 3rd are the two files along with a "trust" notation at the end from the Malware Hunter scan log. I will be curious to hear your thoughts as to what it all means. Thanks. Joe file #1. www.virustotal.com/en/file/edd0f3ee80920bb72e81432c651a9f320e9cb857607b8383cbd732af40709b41/analysis/1495937932/2017-05-27 08:09:42 C:\Windows\System32\DriverStore\FileRepository\prnms005.inf_amd64_f9239fa24dfa8848\Amd64\MSxpsPS-pipelineconfig.xml DR/FakePic.Gen Trust 2017-05-27 08:09:42 C:\Windows\WinSxS\amd64_prnms005.inf_31bf3856ad364e35_10.0.14393.0_none_815608841ccf22d5\Amd64\MSxpsPS-pipelineconfig.xml DR/FakePic.Gen Trust
|
|
dbrisen
Malware Removalists
Posts: 3,688
|
Post by dbrisen on May 28, 2017 11:24:24 GMT -8
Malware Hunter is saying to Trust the files for the same reasons VT trusts them; they are signed, core OS files from Microsoft. The files may have certain characteristics that (when filtered only for those traits) trigger a detection.
I would in this case trust the decision of Malware Hunter but if in any doubt, check with second sources. VirusTotal is a good check to use.
|
|
jjjoe
New Helpee
Posts: 9
|
Post by jjjoe on May 29, 2017 8:38:13 GMT -8
Great. Thanks. When I finally got to those results, I felt much relieved. Is there anything else that I should do? I really appreciate all of your help and patience.. Joe
|
|
dbrisen
Malware Removalists
Posts: 3,688
|
Post by dbrisen on May 30, 2017 21:42:20 GMT -8
It looks like your system is clean and the issues are only with Malware Hunter itself. This being a new program, there is bound to be some adjustment to the scanning code in the beginning and you should see better results in the future. If not, you are more than welcome to come back and we will explore other options. We need to remove the tools we've used during the cleaning of your machine. [/a] Ensure the following is ticked: - Remove disinfection tools
- Create registry backup
- Purge system restore
[/ul] Then click Run. The program will run for a few moments and then notepad will open with a log. Please paste the log in your next reply. Once you have the log file saved, please reboot your system to complete the clean up process. Your system looks clean and your logs are fine. Unless you want something else done, you are done and free to go.Final words from me: Surf safely, and watch when installing or letting anything add itself to your system. Remember, the best security is not on your system but in the chair in front of it. Take care and thanks for sticking with us in this rushed time. === options ====Unchecky is a small service that runs in the background to help keep those "extra toolbars" and tag along search engines from automatically installing. By automatically directing you to a custom install with all the options unchecked, only what you manually choose and confirm gets installed. CryptoPrevent is a free program that prevents CryptoLocker / ransomware from infecting your PC by locking down the OS so the malware can not get a grip on your system. You can read the details about this program here. Also, consider adding MalwareBytes Antimalware to your arsenal of safe keeping programs. Use the free version (not the paid or trial version) and you won't have a problem with your antivirus scanner program. Keep it updated and run a scan with it once a week. Lastly, if you use Firefox as your main web browser, consider adding the NoScript and uBlock Origin add-ons to the browser to block scripting hijacks and remove unwanted ads from the pages you view. You may also find some information and tips at this thread: How did I get infected in the first place?and COMPUTER SECURITY - a short quide to staying safer online
I'll leave this topic open for a few days so that if you have any questions you can come back here. Surf safe, my friend!!
|
|
jjjoe
New Helpee
Posts: 9
|
Post by jjjoe on Jun 2, 2017 12:44:53 GMT -8
Thanks again. Norton didn't want to allow DelFix onto my pc. Got it in and ran it as instructed. Please see attached log file. I'm sleeping better these days due to your help. Joe DelFix 6-2-17.txt (819 B)
|
|