Scans 1 and 2: Rootkit positive; Scan 3: no issues found

Viruses and worms
1

Please be gentle, I am not computer savvy and I don’t know how to create a scan log. :smiley:
But I ran a full scan today and got THREE infected files detected (although two of them seem identical?):

C:\Windows\Temp\inv7EE6_tmp\Executables\DRVUpdate.exe
Rootkit: hidden process
C:\Windows\Temp\inv7EE6_tmp\Executables\DRVUpdate.exe
Rootkit: hidden process
C:\Windows\Temp\inv7EE6_tmp\Executables\APPUpdate.exe
Rootkit: hidden process

I tried to resolve them but kept getting the result: “Error: Access is denied (5)”

Frantic, I ran the full scan again. But interestingly, I only got one infected file result instead of three:

C:\Windows\Temp\inv7EE6_tmp\Executables\DRVUpdate.exe
Rootkit: hidden process

Again, I was unable to resolve the issue and got error (5) again.

So I said to myself, hmm, this is getting better all by itself, so I did a full scan again and came up with NO infected files detected. Were the first two false positives? Or is there something lurking? I am afraid to use my computer at all. PLEASE HELP ME!!

2

Argh, so 3 hours later i do a scan full scan again. And this time now there are two infected files reported:

C:\Windows\Temp\inv7EE6_tmp\Executables\DRVUpdate.exe
Rootkit: hidden process
C:\Windows\Temp\inv7EE6_tmp\SCSI_ODD\SCSIUpdate.exe
Rootkit: hidden process

And again, I get “Error: Access is denied (5)”

Please some kind soul let me know what I should do or what I should post so you can tell what is wrong.

Thanks!

3

So I ran a full virus scan one more time, only 10 minutes after the scan that said 2 infections. And this time it said no infected files. So this is very frustrating.

4

Attach your basic diagnostic logs. (MBAM and FRST)
Instructions: https://forum.avast.com/index.php?topic=194892

5

Thanks Asyn. I downloaded the two programs and ran the logs. I wanted to turn off the virus software before running them but could not figure out how – so Avast and Windows defender were both running while I ran these logs (in case that is relevant).

6

I attached the three logs as attachments to my prior posting. So if anyone could please =review them and let me know?
Late last night when I did a full scan again, Avast identified two infected file results and was unable to delete them. But today another scan shows not issues. I expect that if I scan again there will be more infected files. It keeps going back and forth. Thanks for your help!

7

Please if some kind soul could review my logs and let me know any information. I am not using my computer and am considering doing a factory reset. Any thoughts would be appreciated.

8

A malware expert has been notified. Please be patient. You’ve done what you could, now you’ve to wait a bit.

9

Thanks mchain. I am still getting alternating Avast results of no issues and then later results with infected files and then later results with no issues. So here are a new battery of scan logs from malware bytes and frst attached . . .

10
  • Open Notepad (click Start button → type notepad.exe → press Enter)
  • Copy text from code block below and paste it into Notepad
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {374A62B8-8736-4756-969E-4FB6922E76A8} - System32\Tasks\UninstallDDS-C960901F-CE14-4DE1-9729-1305F719A337 => C:\WINDOWS\TEMP\DeleteFolderTask.exe <==== ATTENTION
  • Go to File → Save As
  • Make sure that UTF-8 is selected as Encoding (left side of Save button)
  • Save it as fixlist.txt on Desktop
  • Open again FRST and click on button Fix
  • Wait until FRST finishes
  • fixlog.txt should be genereted and opened. Attach it your post and wait further instructions.
11

Thanks for all your help, but I couldn’t wait, and so I wiped my computer, rebooting form a USB and removed all partitions, and reinstalled Win 10. Seemed the only safe thing to do.