[My whole External Hard Drive is infected by a trojan!]

Done

kprm-20240212160244.txt

[My whole External Hard Drive is infected by a trojan!]

I updated all the apps that were on the list and Install all the windows updates.

The only one that had issues installing was the webview2 Runtime, it is said that was already installed. And everything seems to be fine!

[My whole External Hard Drive is infected by a trojan!]

Thank you, here are the logs.

 

 

FSS.txt SecurityCheck.txt Addition.txt FRST.txt

[My whole External Hard Drive is infected by a trojan!]

Thank you so much for yoour help. I ran an scan with Doctor Web app and here is the cureit.log file

cureit.log

[My whole External Hard Drive is infected by a trojan!]

Hello.

Good to know that the scan went good. Just I want to know if there's a chance that I can "clean" or "recover" my files from the E drive. Or just quit the idea to have them back? 

[My whole External Hard Drive is infected by a trojan!]

Sorry replying till now, I was kinda busy.

I followed all your instructions and here is the file for the last scan.

ScanFeb5th.txt

[My whole External Hard Drive is infected by a trojan!]

Well, actually when I plug the external device I hold the shift key on the keyboard, every time. 

Yes it is weird that is the only file on the Drive, but I think you should not worry about it, well at least I know very well SKP archives, I'm very used to them. Just to put you in context this files are created with this program SketchUp, wich is a program to make 3d modeling, it's basically used on architectural modeling. I'm not sure exactly what it is, but I think its a 3d modeling that I did back in 2019. Like a said, I had a lot of work from several years back in this drive and I'm pretty sure that is something that I did, to be honest I don't know exactly what it is 'cuz there were a lot files like this in the drive, and I don't want to open it, but at least I know this kind of files. 

[My whole External Hard Drive is infected by a trojan!]

Well, there nothing on the E drive. 

When I plug the external drive to the computer, it says that it almost full, but when I open it, there's just one file, this file it's from SkechtUp, wich is a program that I use. I have the hidden files option tilled. So there's nothing on the E Drive, all the files that were there are in quarantine. I'm gonna add an screenshot so you can see for yourself. I'ts in Spanish but I think you can figure it out.

And just in case I scanned this file with Malewarebytes and it's clean.

[My whole External Hard Drive is infected by a trojan!]

I have a question.

When i go to the Drive E there's nothing on it but just one file. Everything that was there went to the Malewarebytes quarantine, when you suggest that i should delete the file:

43 minutes ago, Maurice Naggar said:

E:\Descargas\Programas\3ds Max\3dsmax 2021\3ds Max 2021\Autodesk_3ds_Max_2021_1_Win_64bit.iso

You mean delete it from quarantine?

[My whole External Hard Drive is infected by a trojan!]

Hello: I did what you said and run an scan over Drive C and here is the log

msert.log

[My whole External Hard Drive is infected by a trojan!]

Thanks again Maurice.

Here is the log

 

msert.log

[My whole External Hard Drive is infected by a trojan!]

I did everything you ask me to do and here are the files

ScanDriveE.txt ScanDriverC.txt

[My whole External Hard Drive is infected by a trojan!]

Thank you Maurice.

I already downloaded the newest version of malewarebytes, and did a scan on both my computer (Drive C) and on the External Hard Drive (E).

And erased Recycle Bins on both drives as you said using the powershell tool, and then used the malewarebytes support tool, and here are the file.

mbst-grab-results.zip

[My whole External Hard Drive is infected by a trojan!]

Just now, Maurice Naggar said:

Finish all that Porthose suggested about getting tha latest Malwarebytes, doing a Scan, and providing the Scan log report.

After that, I will guide you forward.

Maurice

Ok thank you so much, and replying to your other question, the app that says that I got the trojan (trojan.nymeria.outit) it's Malwarebytes. I'm not home right now but as soon as I get there I'm going to download and run another analysis on my computer. 

Again thank you so much 

[My whole External Hard Drive is infected by a trojan!]

3 minutes ago, Maurice Naggar said:

Hello. Some basic questions before we get started. What is the Drive letter for that "External" drive ?  Is it the  Drive d: with the volume Label

Documentos

Model: WDC WD10EZEX-22MFCA0)

Please advise. Also, on this External drive, when you go to get it seated, I presume it is a USB-type connection.....if USB then be sure to press and Hold the SHIFT key on the keyboard as you are seating the connection.

Hello. The drive letter to this external drive is "E". And yes it is a usb-type.

[My whole External Hard Drive is infected by a trojan!]

Ok I'm going to download the lastest version. I thought I got it already 

6 minutes ago, Porthos said:

Your version of Malwarebytes is extremely OLD.

Please download the following and install over what you have. Restart the computer after the install and please scan again and create a new log with the support tool.

https://downloads.malwarebytes.com/file/mb4_offline

 

 

[My whole External Hard Drive is infected by a trojan!]

Thanks Porthos 

Here are the files 

mbst-grab-results.zip

[My whole External Hard Drive is infected by a trojan!]

Hello.

I recently installed Malewarebytes due to a suspicious activity in my external hard drive.

All the files shown as an executable and i decided to just leave them there and not connect the hard drive on my PC, until, I Install Malewarebytes and ran the analysis on it and all the files are infected with this trojan (trojan.nymeria.outit). I sent all the archives to quarantine, but my actual question is, Is there a chance that i can clean or repair the files, are extremely important because I have all my work, personal things like photos, music, videos are in there, or i just should give up  and forget all the files? BTW I ran an analysis on my computer and everything is ok, no maleware, no virus, no nothing, it's just in this External Hard Drive. Please hope someone can help.

Thanks and regards.