Over 1000 files infected? Rootkit? Please help.

Viruses and worms
1

Hi, I got a pop up from advast today saying it detected some unknown virus… I ran a scan and it found over 1000 files infected. This has never happened to me ever. I searched online about it and not sure how to handle it. I will attach a picture of the scan… I am not sure if it is safe to delete or what the virus even is? If someone could please help me and tell me what I should do? Thank you.
https://gyazo.com/b024a9c3dfd515d1451640ba33715a71

Also, I ran malawarebytes and it detected nothing.

2

Reboot your system, update Avast definitions and rescan your system. This looks like a False Positive but we should wait to see if Avast personnel respond here.

3

I just installed Malawarebytes anti rootkit beta and running it right now to see if it picks up anything. I honestly don’t know what I am doing but found some website with a bunch of other scanning programs to detect them. I will wait for Avast to reply before I do anything. Thank you for replying!

4

IndicatorOSD.exe
The process known as OSD Tool belongs to software Dell KM632 Wireless Keyboard Caps Lock or OSD Tool by DELL

I would say this is a False positive from avast, probably on a dell update

[b]I honestly don't know what I am doing[/b] but found some website with a bunch of other scanning programs to detect them.
follow instructions given by malware expert @dbrisendin dont play on your own
5

Yes, I am just running the scan to see. I am not doing anything and I will be following dbrisendin’s advice and wait for Avast to reply. Thank you.

6

Then reboot / update and do a new avast scan, not any other tool unless instructed

7

OMG… I forget to check do nothing when it was set to automatic fix when I closed it. But never clicked apply to fix automatically… and it said it would fix it with a reboot. Any way I can prevent it from doing that now? I am not familar with Avast that much… :-\

8

I updated and ran another scan and everything is good!!! Thank you both very much!! Have a great day! :slight_smile:

9

Hello,
send us detected files using https://www.avast.com/false-positive-file-form.php and mention link to this forum thread.

Thanks.
Milos