Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Generic User Avatar

Persistent files. Stay even after I reinstall Windows. Is it malware?


  • This topic is locked This topic is locked
21 replies to this topic

#16 Madmatt85

Madmatt85
  • Topic Starter

  •  Avatar image
  • Members
  • 24 posts
  • OFFLINE
  •  

Posted 28 October 2023 - 10:51 PM

i made a usb windows 10 installation thimg on another comp a while back 



BC AdBot (Login to Remove)

 


#17 Madmatt85

Madmatt85
  • Topic Starter

  •  Avatar image
  • Members
  • 24 posts
  • OFFLINE
  •  

Posted 28 October 2023 - 11:03 PM

23474r7  pb-gk74w thats what it says on the bottom.



#18 MoxieMomma

MoxieMomma

  •  Avatar image
  • BC Advisor
  • 2,346 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:10:52 PM

Posted 29 October 2023 - 10:06 AM

Hi, again:

 

You asked in your topic title about “malware”.

There are several things going on with this system.

But, given that MS Defender has picked up evidence of malware, that should be your first priority.

I suggest following the advice in replies # 10 and #15 to start a new topic in the Malware Removal section so that a trained expert can assist with diagnosis and cleanup.

(Having said that, if you continue to use torrents, it’s likely that the system will be infected again, even after cleanup.)

 

Respectfully submitted



#19 pseymour

pseymour

  •  Avatar image
  • Members
  • 264 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Ohio, USA
  • Local time:11:52 PM

Posted 29 October 2023 - 01:56 PM

Separate from the malware issue which should definitely be investigated...

 

Back to one of the original questions about timestamps on files and folders... what you're seeing is perfectly normal. The files come from the original Windows media this way. The dates could be the last time the files were modified by Microsoft, but they could also be arbitrarily stamped with a certain date. Any file or folder's date modified, accessed or created can be easily modified.

 

See the attached screenshot. This is from ISO I downloaded from Microsoft today and for which I verified the hash. Installing Windows from this ISO yields something pretty similar to what you see.

 

Edit: Forgot to hit the attach button. :)

Attached Files


Edited by pseymour, 29 October 2023 - 01:56 PM.

-- Patrick


#20 Madmatt85

Madmatt85
  • Topic Starter

  •  Avatar image
  • Members
  • 24 posts
  • OFFLINE
  •  

Posted 29 October 2023 - 07:17 PM

ok thank you for your time.



#21 Mike_Walsh

Mike_Walsh

    Bleepin' "Puppy" fanatic...


  •  Avatar image
  • Moderator
  • 4,720 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:King's Lynn, UK
  • Local time:04:52 AM

Posted 29 October 2023 - 08:53 PM

Topic locked, as the OP has started a separate, yet related thread in the Malware Removal Forum. This should help to reduce confusion between similar threads, and lessen the chance of members replying to the same thing in more than one place.

 

MW.


Edited by Mike_Walsh, 29 October 2023 - 08:56 PM.

Distros:- Nowt but Puppies.....
My Puppy Packages ~~~ MORE Packages ~~~ ....and STILL more!
HP Pavilion mid-size tower - 590-p0024na; Pentium 'Gold' G5400 dual-core with H/T @ 3.7 GHz; 32 GB DDR4 RAM; Nvidia GeForce GT710 graphics (2 GB GDDR5) with 'passive' cooler; 1 TB Crucial MX500 SSD primary;  3 TB Seagate Barracuda HDD secondary; 1920x1080 HP 22w LED monitor; 7-port powered USB 2.0 hub; Logitech c920 HD 'Pro' webcam

 

forum-siggy-small.png
 
 


#22 Orange Blossom

Orange Blossom

    OBleepin Investigator


  •  Avatar image
  • Moderator
  • 41,081 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:11:52 PM

Posted 29 October 2023 - 08:56 PM

Hello Madmatt85,

Now that you have posted a log here: https://www.bleepingcomputer.com/forums/t/790956/i-have-a-trojan-and-was-told-that-have-several-other-issues-that-need-adressed/ you should NOT make further changes to your computer (install/uninstall programs, use special fix tools, delete files, edit the registry, etc) unless advised by a MRT Team member, nor should you ask for help elsewhere. Doing so can result in system changes which may not show in the log you already posted. Further, any modifications you make on your own may cause confusion for the helper assisting you and could complicate the malware removal process which would extend the time it takes to clean your computer.

From this point on the MRT Team should be the only members that you take advice from, until they have verified your log as clean.

Please be patient. It may take several days to get a response but your log will be reviewed and answered as soon as possibleI advise checking your topic once a day for responses as the e-mail notification system is unreliable.

If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.

To avoid confusion, I am closing this topic.  Good luck with your log.

Orange Blossom :cherry:

Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.



Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, ESET Internet Security, NoScript Firefox ext.


animinionsmalltext.gif





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users