Trojans and Security Hijacks Not Detected

[DrL]

My computer was infected with DNS Unlocker. The Kaspersky software didn't find any issues. I took the computer to OfficeMax for a scan which showed 2 trojans and 4 security hijacks. The tech was nice enough to tell me he used MalwareBytes and provided me with a text file of the results (see attached). Through Kaspersky tech support I was able to resolve the DNS Unlocker issue but they could not find the trojans and security hijacks. I downloaded Malwarbytes Premium and ran a full scan. It detected 151 PUPs but didn't find the trojans or security hacks. I took the computer back to OfficeMax and had the tech run the scan again. It found the same 6 Malware issue but no PUPs. I am confused as to why the two Malwarebytes programs are picking up different things and I am concerned that I still have 6 malware issues that the installed Malwarebytes Premium program isn't finding. I appreciate any guidance you can give me.

OfficeMax Scan Results.txt

My Computer Scan Results 2015-09-07.txt

[TwinHeadedEagle]

Hello,

    

 

They call me TwinHeadedEagle around here, and I'll try to help your with your issue.

 

     

    

Before we start please read and note the following:

• We're primarily oriented on malware removal here, so you must know that some issues just cannot be solved and you must be prepared for this. Some tools we use here will remove your browser search history, so backup your important links and all the files whose loss is unacceptable.
• Limit your internet access to posting here, some infections just wait to steal typed-in passwords.
• Please be patient. I know it is frustrating when your PC isn't working properly, but malware removal takes time. Keep in mind that private life gets in the way too. Note that we may live in totally different time zones, what may cause some delays between answers.
• Don't run any scripts or tools on your own, unsupervised usage may cause more harm than good.
• Do not paste the logs in your posts, attachments make my work easier. There is a More reply options button, that gives you Upload Files option below which you can use to attach your reports. Always attach reports from all tools.
• Always execute my instructions in given order. If for some reason you cannot completely follow one instruction, inform me about that.
• Do not ask for help for your business PC. Companies are making revenue via computers, so it is good thing to pay someone to repair it.
• If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed.

I can't foresee everything, so if anything not covered in my instructions happens, please stop and inform me!

There are no silly questions. Never be afraid to ask if in doubt!

 

 

 

  Rules and policies

 

We won't support any piracy.

That being told, if any evidence of illegal OS, software, cracks/keygens or any other will be revealed, any further assistance will be suspended. If you are aware that there is this kind of stuff on your machine, remove it before proceeding!

The same applies to any use of P2P software: uTorrent, BitTorrent, Vuze, Kazaa, Ares... We don't provide any help for P2P, except for their removal. All P2P software has to be uninstalled or at least fully disabled before proceeding!

 

Failure to follow these guidelines will result with closing your topic and withdrawning any assistance.

 

 

---

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.

Only one of them will run on your system, that will be the right version.

• Double-click to run it. When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
• The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

[DrL]

Thank you for your help. I ran the program and attached the files as you requested. I have a second laptop that shows the identical list of trojans and security hijacks I sent in the original OfficeMax Scan Results file. Should I do the Farbar Recovery Scan on that one as well?

Addition.txt

FRST.txt

[TwinHeadedEagle]

What happens if you remove them?

[DrL]

I can't. They were found on the Malwarebytes scan done at OfficeMax but they didn't show up on the scan I ran with Malwarebytes Premium installed on my computer. So I don't have any way to access and delete them.

[TwinHeadedEagle]

Then it means they are gone.

[DrL]

I did the scan with the installed version first. When they didn't show up I took it back to OfficeMax and had them run the scan again just to make sure. The same list of 6 showed up. That is why I am confused. The two different versions of Malwarebytes are showing different scan results. Since they are still showing up on one of the scans, the one not installed on my computer, are they really gone?

[TwinHeadedEagle]

I don't know what version and database they are using, but I can tell you that this is official MalwareBytes support forum and you can get all needed help here.

[DrL]

I looked at the information from the text files generated by both scans. It looks like their databases have not been updated since March 2014.

 

Installed On My Computer:

Version: 2.1.8.1057

Malware Database: v2015.09.07.03

Rootkit Database: v2015.08.16.01

 

OfficeMax:

Version: 2.00.2.1012

Malware Database: v2014.03.04.09

Rootkit Database: v2014.02.20.01

[TwinHeadedEagle]

You see

They are using outdated MalwareBytes version. This is a big mistake on their side. Is OfficeMax some kind of repair shop?

[DrL]

They are an office supply store that sells everything from paper to computers. They have a basic in-store tech department. They offer a free scan to see if there are any issues with your computer. If there are, you can purchase a service to clean it up. Fortunately I came to the forum first. I am going to tell them about the outdated version. If they do the update, I will have them scan my computer again to see if these problems still exist. I'll keep you posted.

[TwinHeadedEagle]

I think you should not trust their services anymore. Obviously they have have bad support.

[DrL]

I did a little more research and found the files flagged as trojans and security hijacks are legitimate Windows 10 files. The current version of Malwarebytes recognizes them as not harmful so they don't show up on the scan. You are correct that the problem is with the outdated version of the software not the one installed in my system.

 

Thank you for your help in solving the mystery. I apprecatiate you taking the time to work with.

[DrL]

I attempted to make a donation to you but Paypal is not accepting that I am from the US and asking me to enter a "County" in the United Kingdom and gives me an error message when I leave it blank.

[TwinHeadedEagle]

I sent you a private message. Thank you!

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!