GPT Drive infections?

system · 2015-11-10T16:35:37.000Z

I’ll post the FRST.txt as soon as the scan is done. Anything else I will need to do?

system · 2015-11-10T16:37:34.000Z

Got the files, FRST.txt and Addition.txt, posting them as a attachment and will get the bootmgr up on dropbox ASAP.

Pondus · 2015-11-10T16:41:27.000Z

MCShield logs must be copy and paste, or we cant read it

For Essexboy … opened with Android

>>> MCShield AllScans.txt <<<

MCShield ::Anti-Malware Tool:: http://www.mcshield.net/

v 3.0.5.28 / DB: 2015.11.5.1 / Windows 8.1 <<<

09/11/2015 19:52:40 > Drive C: - scan started (no label ~698 GB, NTFS HDD )…

=> The drive is clean.

MCShield ::Anti-Malware Tool:: http://www.mcshield.net/

v 3.0.5.28 / DB: 2015.11.5.1 / Windows 8.1 <<<

09/11/2015 19:53:05 > Drive E: - scan started (KASPERSKY ~7486 MB, FAT32 flash drive )…

=> The drive is clean.

MCShield ::Anti-Malware Tool:: http://www.mcshield.net/

v 3.0.5.28 / DB: 2015.11.5.1 / Windows 8.1 <<<

09/11/2015 19:53:27 > Drive E: - scan started (ESD-ISO ~7500 MB, NTFS flash drive )…

E:\autorun.inf > Legitimate file.

=> The drive is clean.

MCShield ::Anti-Malware Tool:: http://www.mcshield.net/

v 3.0.5.28 / DB: 2015.11.5.1 / Windows 8.1 <<<

09/11/2015 19:56:02 > Drive E: - scan started (ESD-ISO ~7500 MB, NTFS flash drive )…

E:\autorun.inf > Legitimate file.

—> Note: paranoid mode is enabled.

E:\autorun.inf - Malware > Deleted. (15.11.09. 19.56 autorun.inf.825543; MD5: 1ee3bd713baf8da75ecd537f7e086eb8)

E:\bootmgr - Malware > Deleted. (15.11.09. 19.56 bootmgr.273842; MD5: cdf075b70e5f612b4399a54b25d55192)

=> Malicious files : 2/2 deleted.

::::: Scan duration: 29sec :::::::::::::::::

MCShield ::Anti-Malware Tool:: http://www.mcshield.net/

v 3.0.5.28 / DB: 2015.11.5.1 / Windows 8.1 <<<

09/11/2015 20:55:47 > Drive E: - scan started (ESD-ISO ~7500 MB, NTFS flash drive )…

—> Note: paranoid mode is enabled.

E:\FRST64.exe - Malware > Deleted. (15.11.09. 20.56 FRST64.exe.165875; MD5: e692e216b6fb1c1e9deafd1b6e895a94)

=> Malicious files : 1/1 deleted.

::::: Scan duration: 33sec :::::::::::::::::

MCShield ::Anti-Malware Tool:: http://www.mcshield.net/

v 3.0.5.28 / DB: 2015.11.5.1 / Windows 8.1 <<<

10/11/2015 16:18:11 > Drive C: - scan started (no label ~698 GB, NTFS HDD )…

=> The drive is clean.

system · 2015-11-10T16:50:38.000Z

Thanks Pondus, didn’t know that. Helped out essexboy, so he does his avast work on his phone. Ehh.

system · 2015-11-10T16:56:22.000Z

Btw, the log includes Windows 8.1, I have upgraded to Windows 10 and deleted the Windows.old folder on the C: Is it legit, it is legit. The bootmgr file is coming in a bit. Btw the bootmgr file is the one that MCShield detects as malware on ESD-ISO

system · 2015-11-10T17:07:00.000Z

Got the link
https://www.dropbox.com/s/led6krmswvogcej/bootmgr?dl=0
And btw, can a Virus be sent over Dropbox, if so, how can I prevent it?
One thing is making a new account, probably going to make a separate one for my Laptop’s necessary files such as my Minecraft texture packs and my work.
Thanks for all your support guys.

system · 2015-11-10T17:30:23.000Z

Please help, which things steal my login details for games and websites such as Minecraft, I want to play some Minecraft with a bunch of friends tommorow, but I don’t know what type of infection steals my details and which software to use to prevent it.

system · 2015-11-10T17:35:16.000Z

Also, when you use GMER, why is the publisher unknown and have you found a reason why it causes my Blue Screen Of Death with the error
“ATTEMPTED_WRITE_TO_READONLY_MEMORY” Windows 10, thanks but this is the only place where I’m going to post as informed by essexboy. Would really appreciate the answer for the Dropbox infection somewhere above of this reply. I actually think I am paranoid because of this, and it has affected me in other places such as School or in a Resturant and other public places. :-[ Sad times.

system · 2015-11-10T17:36:56.000Z

Can’t get into contact with GMER, they don’t update or help anymore. Thats why I am asking here, if you don’t want me to ask that question here, please tell me a Forum that I can. Thanks!

essexboy · 2015-11-10T17:41:42.000Z

Looking at the logs I can see no malware traces… What are your problems/symptoms

https://www.virustotal.com/en/file/a0e54d6b2503139355488bc2fd3204a1ecbe228419e8a5ab234efe5be6fc0289/analysis/1447177217/

system · 2015-11-10T17:44:16.000Z

Last question before I go do some revision, how do I scan the Boot Sector (The only place where infections can hide to survive a re-installation). Recommend any tools that have the ability to scan Boot Sector for infections and how do I scan for Rootkits too as I heard some of them could also survive a re-installation. Thanks for the recommended software (when I receive them)!

system · 2015-11-10T17:45:14.000Z

Yay, essexboy is on, I have loads of problems.

essexboy · 2015-11-10T17:47:04.000Z

Your GPT looks unaffected so there is nothing hiding there. What are your symptoms

system · 2015-11-10T17:56:03.000Z

Sometimes, my system fails booting.

system · 2015-11-10T17:57:12.000Z

Can you still recommend the tools to scan the Boot Sector and to scan for Rootkits, and try out GMER and tell me the file name and if it is a unknown file publisher for you and if it causes BSOD.

system · 2015-11-10T18:06:35.000Z

Ok essexboy, going to perform a full Malwarebytes scan, see you.

essexboy · 2015-11-10T18:26:09.000Z

OK lets run them I do not believe they will find anything … You will need to remove kaspersky

Download the latest version of TDSSKiller from here and save it to your Desktop.

[*]Doubleclick on TDSSKiller.exe to run the application

https://dl.dropbox.com/u/73555776/tdss%20start.JPG

[*]Then click on Change parameters.

https://dl.dropbox.com/u/73555776/tdss%20Change%20param.JPG

[*]Check the boxes beside Verify Driver Digital Signature, Detect TDLFS file system and Use KSN to scan objects , then click OK.

[*]Click the Start Scan button.

[*]If a suspicious object is detected, the default action will be Skip, click on Continue.

https://dl.dropbox.com/u/73555776/tdss%20threat.JPG

[*]If malicious objects are found, they will show in the Scan results and offer three (3) options.
[*]Ensure Cure is selected, then click Continue => Reboot now to finish the cleaning process.

[*]Get the report by selecting Reports

https://dl.dropbox.com/u/73555776/tdss%20report.JPG

[*]Note: If Cure is not available, please choose Skip instead, do not choose Delete unless instructed.

Please copy and paste its contents on your next reply.

system · 2015-11-10T21:10:05.000Z

Ok thanks, let me do my shower then I’ll come to do the TDSSKiller thing. essexboy is the best! I’ll reply when the scanning is done.

system · 2015-11-10T21:43:37.000Z

Ok, I’ve scanned my Laptop with TDSSKiller and your preferences. Perfectly fine, nothing is detected as a threat or anything bad. Anything else I should do essexboy? Thanks mate. And am I safe to login to online services? I want to login to Office 365 Online, G-Mail and Minecraft, is it safe to login?

avastuser3796 · 2015-11-10T22:16:09.000Z

Minecraft, definitely. Gmail, more then likely. Office 365, I doubt a hacker would care to be honest.

Announcements