Folder asked me for permission to rename (without being prompted)

[Winterwhile]

Well I don't know if this is a virus/malware or not but I was on desktop and I had a notepad file that I wanted to rename so I either clicked it once or right clicked and then clicked 'rename' (I can't remember which) I then entered the new name and then I got a window asking me for permission to rename the 'DVD Architect Studio 5.0' file, it asked me this as soon as I clicked enter to change the other files name and the other file was nowhere near this one on desktop. The window asking for permission has the options 'continue', 'skip' and 'cancel' and 'more details' which I tried to click but was unclickable.

 

So I quickly disconnected from the network, then clicked cancel. Then I found that a whole horizontal row of desktop icons were now changed to the name I had tried to change the first file to, except they had numbers in brackets at the end of each name. Then I found out I couldn't click the windows start menu so I went to task manager and restarted windows explorer and it worked again. But I'm curious as to why this other file asked for permission to be changed. One theory was that before renaming the first folder I could have dragged my mouse and highlighted the other icons (including the DVD studio) which therefore prompted windows to ask me for permission to rename that file in particular. But the only problem with this is that the file I tried to rename was one section row down, and the row that file was on, was unaffected by the name change.

 

One last thing to mention, I voluntarily tried to change the DVD studio just now, and a window asking me for administrator permission popped up, only it was different from the first window that popped up. This one didn't have 'more details' and the DVD icon is bigger. I'm doing a virus scan right now, and after I'll do a malwarebytes scan. Sorry this post dragged on a bit, but I wanted to be detailed, does anyone know if this sound like a virus/malware or not?

 

Thanks very much,

[_argus]

Helllo,

My name is Argus and and I will be helping you with your computer problems.

Before we begin, please note the following:

• I will be working on your Malware issues, this may or may not, solve other issues you have with your machine.
• The logs can take some time to research, so please be patient with me.
• Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
• Instructions that I give are for your system only!
• Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
• Please perform all steps in the order received. If you can't understand something don't hesitate to ask.
• Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not be able to help you if you do not follow my instructions.
  

Rules and policies

We won't support any piracy.
That being told, if any evidence of illegal OS, software, cracks/keygens or any other will be revealed, any further assistance will be suspended. If you are aware that there is this kind of stuff on your machine, remove it before proceeding!
The same applies to any use of P2P software: uTorrent, BitTorrent, Vuze, Kazaa, Ares... We don't provide any help for P2P, except for their removal. All P2P software has to be uninstalled or at least fully disabled before proceeding!

Failure to follow these guidelines will result with closing your topic and withdrawning any assistance.







Scan with Farbar Recovery Scan Tool

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

• Double-click to run it. When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
• The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.
  

[Winterwhile]

Hello, thanks I appreciate the reply. I downloaded farbar and did the scan (froze the first few times but it eventually started) and I got the results and saved them. I only replaced the user name with another name for privacy reasons but the rest is all there, it's a 'very' long list as well.

 

I just want to know if it's safe to post this sort of information publicly on a forum, I don't understand any of the text but would there be any sort of coding etc in it that could make it possibly for someone to easily target me if they read it, I'm a little nervous about that. Could my posts (only the one including the logs) be deleted or edited after the problem is resolved? I know it's silly, but I'm just slightly paranoid.

 

Thanks

[_argus]

These include information about Windows and not your personal data.

 

Could my posts (only the one including the logs) be deleted or edited after the problem is resolved?

 

 

 

 

 

Can.
.

[Winterwhile]

Hi Argo, sorry I was a little late replying, my laptop has been quite bad lately, the sound has been distorting whilst playing videos (like a robot kind of sound), I have been seeing task bar icons pop up for split seconds and disappear before I have a chance to see what they are, I have been getting multiple threats detected and blocked by avast (all called 'Win32:Evo-gen [susp]), and lastly I have been unable to do a system restore, even via safe boot and troubleshoot, when I held shift and clicked restart it just wouldn't work, but it used to work when I did that.

 

I want to post the two logs now but I don't know how to attach the file, I hovered over each icon on this reply but I can't seem to find the one for attaching a file. Could you please tell me how to do this?

 

Thanks

[_argus]

See picture.

 

 

[Winterwhile]

Sorry, I see it now, I was replying at the bottom before which was probably quick reply, it's showing now I've clicked 'Reply to this topic'. Here are the requested logs it created a couple of days ago.

 

Thanks very much!

FRST.txt to use.txt

FRST.txt to use - addition log.txt

[_argus]

Always have one (and no more than one!) AntiVirus program! In this case having more of them will not provide you with better protection - instead they may cause slowness, lock-ups and even mark another ones as harmful, leading to leave your system unstable and even damaged. Please choose only one from the listed below to stay with and uninstall the others:

• Kaspersky PURE
• avast! Antivirus

   

   

Uninstallation procedure:

• Press the + R on your keyboard at the same time. Type appwiz.cpl and click OK.
• Search for each uninstalled entry, right-click it and select Uninstall.

This should be done until any other steps will be taken.

 

 

 

 

 

 

Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

• Right-click on icon and select Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Make sure that Addition option is checked.
• Press Scan button and wait.
• The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please include their content into your next reply.

[Winterwhile]

Okay thanks, I didn't know that, I have uninstalled Avast now (as I have the payed version of Kaspersky, so I'd rather keep that) and I re-ran farbar and here are the new logs since doing so.

 

I didn't know it addition was needed a second time, but I included it just in case.

 

Thanks

New log - FRST.txt

New log - FRST addition.txt

[_argus]

Very good. Download and run Avast uninstall utility.

https://www.avast.com/de-de/uninstall-utility

 

 

How To Boot Into Safe Mode On Windows 8 or 8.1

 

 

 

 

Step 2

 

 

 

 

Scan with ZOEK

Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.
 

• Right-click on icon and select Run as Administrator to start the tool.
• Wait patiently until the main console will appear, it may take a minute or two.
• In the main box please paste in the following script:
  

  createsrpoint;autoclean;emptyalltemp;bitsadmin /reset /allusers;bipconfig /flushdns;b

• Make sure that Scan All Users option is checked.
• Push Run Script and wait patiently. The scan may take a couple of minutes.
• When the scan completes, a zoek-results logfile should open in notepad.
• If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)

Post its content into your next reply.

 

[Winterwhile]

Thanks, I uninstalled Avast again using the uninstall utility in safe mode, then I paused Kaspersky protection and turned malware protection off with Malwarebytes. I then did the scan, (which took around 40-60 minutes to complete). Then after the scan it rebooted and then I re-enabled protection once again, and these are results I got from the scan.

 

 

 

 

zoek-results.txt

[_argus]

Fix with Farbar Recovery Scan Tool
 

This fix was created for this user for use on that particular machine.
Running it on another one may cause damage and render the system unstable.

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!
 

• Right-click on icon and select Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Press the Fix button just once and wait.
• If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
• When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

 

fixlist.txt

[Winterwhile]

I hope it doesn't effect results, but I accidentally ran the FRST tool normally before doing fix. But then I created a folder on desktop to put both the 'FRST' and 'fixlist.txt' into. Then I opened FRST and pressed 'fix' like you said. The system then restarted and I got the new log.

 

 

Fixlog.txt

[Winterwhile]

Hello, it's been quite a long time since the last reply. I sent the file you asked for, is there anything wrong with it?

[_argus]

Tell me is everything okay.

[Winterwhile]

I think it's actually been faster lately, I really appreciate the fix. I was just wondering if it looked like I did have a virus/malware from the logs I sent?

[_argus]

You had malware/driver, PC is clean now.

 

 

The following will implement some post-cleanup procedures:


Download DelFix by Xplode and save it to your desktop.

• Run the tool by right click on the icon and Run as administrator option.
• Make sure that these ones are checked:
  
  • Remove disinfection tools
  • Purge system restore
  • Reset system settings
    

  [*]Push Run and wait until the tool completes his work. [*]All tools we used should be gone. Tool will create an report for you (C:\DelFix.txt)
  

The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix
Tool deletes old system restore points and create a fresh system restore point after cleaning.

[Winterwhile]

I did that and now have the new report, thank you so much for the help, I really appreciate it!

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!