M_westing

About an hour ago I got the blue screen of death, and when it rebooted it said "Windows must be restarted for this changes to take effect". Could that be a sign of a Trojan?

My computer seems to be running fine, it sometimes seems to take a little while for folders containing lots of images (over 90) to show up (both the thumbnails and the files themselves). I'm not sure if this was different before MSE detected the Trojan. The RAM usage doesn't seem to be much higher than usual (still 30-40% with steam and firefox open). I've never seen any signs of an infection on my computer beyond MSE saying a couple of files were unsafe. Do you think my computer is safe, given what you've seen? Do you think MSE could have given me a false positive? Considering how bad a Win32/Fuery.B!cl can apparently be I'd like to be 99% sure I'm fine before I stop worrying about it.

Some more information: Yesterday I turned off my computer and when I turned it back on checked for the consistency of the E Drive. I've never had that happen before. I don't know if that might be related to the Trojan or not. Fixlog.txt

Some additional information: The Trojan was first detected on my computer on the 17th of March. For some reason I did not delete the other files after the Trojan was detected. Two days ago I tried it again after seeing that my friend had scanned the files and found nothing. I extracted the files several times, sometimes nothing would be found, sometimes I would get Error code 0x80508023, which can mean that its a false positive apparently. Some errors: I didn't put Junkware Removal Tool on the desktop or AdwCleaner. As such when AdwCleaner rebooted the computer I couldn't find jrt.txt I thought it was deleted. I ran jrt.txt again. The first time around 50 items were deleted, this time only 6. I'm fairly certain the original jrt.txt was overwritten. I then ran AdwCleaner again, and it found nothing. AdwCleaner Clean logfile: # AdwCleaner v6.045 - Logfile created 28/03/2017 at 14:06:25 # Updated on 28/03/2017 by Malwarebytes # Database : 2017-03-28.2 [Server] # Operating System : Windows 7 Ultimate Service Pack 1 (X64) # Username : Ryan - RYAN-PC # Running from : E:\downloads\adwcleaner_6.045.exe # Mode: Clean # Support : https://www.malwarebytes.com/support ***** [ Services ] ***** ***** [ Folders ] ***** [-] Folder deleted: C:\Windows\SysNative\Tasks\WiseCleaner [-] Folder deleted: C:\Windows\SysWOW64\C2MP ***** [ Files ] ***** [-] File deleted: E:\Ryan\Desktop\window.bat [-] File deleted: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodecPackTrayMenu.lnk ***** [ DLL ] ***** ***** [ WMI ] ***** ***** [ Shortcuts ] ***** ***** [ Scheduled Tasks ] ***** [-] Task deleted: WiseCleaner\WRCSkipUAC [-] Task deleted: WiseCleaner ***** [ Registry ] ***** [-] Key deleted: HKLM\SOFTWARE\WISECLEANER [-] Value deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Codec Settings UAC Manager] ***** [ Web browsers ] ***** [-] [C:\Users\Ryan\AppData\Local\Chromium\User Data\Default\Web data] [Search Provider] Deleted: aol.com [-] [C:\Users\Ryan\AppData\Local\Chromium\User Data\Default\Web data] [Search Provider] Deleted: ask.com ************************* :: "Tracing" keys deleted :: Winsock settings cleared ************************* C:\AdwCleaner\AdwCleaner[C0].txt - [1438 Bytes] - [28/03/2017 14:06:25] C:\AdwCleaner\AdwCleaner[S0].txt - [1602 Bytes] - [28/03/2017 14:05:36] ########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [1584 Bytes] ########## I didn't find anything with Sophos. Note: Junkware Removal Tool ran quickly and Sophos took hours to complete, does that mean anything? Thank you very much. JRT.txt FRST.txt Addition.txt

Hello, I recently downloaded an executable that extracted several files. When scanning these files with Microsoft Security Essentials it found that one of them was a Win32/Fuery.B!cl Trojan. I believed it was removed by MSE. I have done a full scan with Microsoft Security Essentials (with virus and spyware definition: 1.239.252.0) and a Threat Scan with Malwarebytes (and had it scan for rootkits and within archives). Neither found anything. This was also downloaded on a friend's computer, and nothing was found and when scanned with MSE. Should I assume the Trojan was removed or a false positive? Is there anything else I can do to check for the Trojan? Should I wipe my hard drive to be safe? Thank you very much.