kingpin11 Posted November 11, 2013 ID:752171 Share Posted November 11, 2013 So I've been removing this same threat for five times now. Also tried adding it to quarantine, makes no difference. TDSSKiller won't offer me a cure only delete, skip, or quarantine. And it keeps coming back every reboot. After I ran TDSSKiller these two "threats" came up. So my question is am I infected? and what do I need to do about it. Is it just harmless? Also might be worth mentioning that my pc is only 2 weeks old and it works perfectly fine. Only TDSSKiller finds anything, Malwarebytes antirootkit doesn't find anything. I also did full scan on safe mode with Malwarebytes Anti-Malware and it didn't find anything.File type: SuspiciousHKLM/SYSTEM/ControlSet001/services/60647731C:/WINDOWS/system32/90695488.sysI attached a log for it too. TDSSKiller.2.8.16.0_11.11.2013_09.19.49_log.txt Link to post Share on other sites More sharing options...
kingpin11 Posted November 11, 2013 Author ID:752178 Share Posted November 11, 2013 I just noticed that the file keeps coming back under different name but same location. This time it was: 09:59:06.0524 2728 Suspicious service (Hidden): 1071483709:59:06.0727 2728 10714837 ( HiddenService.Multi.Generic ) - warning09:59:06.0727 2728 10714837 - detected HiddenService.Multi.Generic (1) Link to post Share on other sites More sharing options...
kingpin11 Posted November 11, 2013 Author ID:752186 Share Posted November 11, 2013 Updated my TDSSKiller. Old version found the same threat, new version didn't. Rebooted and new version found it again so I moved it to quarantine and scanned again. Nothing was found. Combofix, Malwarebytes Antirootkit, adwcleaner, OTL or Rogue Killer didn't find anything either. Please tell me I'm worrying over nothing.TDSSKiller.3.0.0.16_11.11.2013_10.34.51_log.txt Link to post Share on other sites More sharing options...
kingpin11 Posted November 11, 2013 Author ID:752203 Share Posted November 11, 2013 I solved the problem now. This thread can be locked. TDSSKiller doesn't find anything anymore which is good. I also uploaded the quarantined files to virustotal.com and nothing malicious was found. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted November 12, 2013 Root Admin ID:752543 Share Posted November 12, 2013 Since this issue is resolved I will close the thread to prevent others from posting here. If you need assistance please start your own topic and someone will be happy to assist you. Link to post Share on other sites More sharing options...
Recommended Posts