Jump to content
longbeachlouise

Malware in Red found on hard drive

Recommended Posts

A malware was found when I ran a scan on a Toshiba hard drive that I shared with a family member. After I got it back, I started a scan, because he backed up his files as he is taking care of his glitching computer, because his fan isn't working.

The last time I ran a malware bytes scan before just now is July 14th, which showed the additional hard drive is clean.

Here is the Custom Scan Results, attached, and the view of the top level folders iThreatIdentified07222019f.jpg.53aa797bbc9e172ada0f2ec9057f3dd3.jpgn the storage.

Why does

Quote

F:\$RECYCLE.BINS

not show up in the folder view?

ThreatIdentified07222019e.thumb.jpg.59472f4bf9881cbba6ab99b1859dd900.jpg

Should I quarantine the thing? I am waiting to hear from you.

Edited by longbeachlouise

Share this post


Link to post
Share on other sites

It is not active, it is a file in the Recycle Bin.
Empty the Recycle Bin and its gone.

Share this post


Link to post
Share on other sites

Hi David. Thanx for replying. My recycle bin shows empty. His 2nd laptop had games and things in the recyle bin. Even though the SCAN was just on the F drive, are you saying it showed a threat in my Recycle Bin?

Share this post


Link to post
Share on other sites

Connect Drive "F:"  and yes, you can quarantine it or you can empty the "F:" recycle bin.

Share this post


Link to post
Share on other sites

Yes.  The Recycle Bin is not a folder that is viewable in Windows Explorer.  It is a "Special" OS Construct.

 

Share this post


Link to post
Share on other sites

Okay. Just got your reply . . . May I ask - I must appear dumb to you! - how do I empty the Recycle Bin, when it doesn't show up on Windows Explorer folders? ThreatIdentified07222019h.thumb.jpg.531ab8777663b0292b2e5f97f95548f4.jpg

Share this post


Link to post
Share on other sites
13 minutes ago, David H. Lipman said:

Connect Drive "F:"  and yes, you can quarantine it or you can empty the "F:" recycle bin.

Sorry if I do not understand. How do I empty the "F:" recycle bin?

Share this post


Link to post
Share on other sites

It is plugged in, the storage hard drive into the, "F:" drive. You see the top level files from the screen image I uploaded. I am waiting for your instructions.

Share this post


Link to post
Share on other sites

The "F:" drive is the " Toshiba hard drive " you indicated you scanned.

The Recycle Bin will be an Icon on your Desktop  Image.jpg.f19febb4378c4ffba472acb71bd453f7.jpg  <=== This shows it has items in the Recycle Bin. 

This shows I have emptied it ==> Image.jpg.4b42e6feac64201b3c9984cc525b9b9c.jpg

https://support.microsoft.com/en-us/help/15057/windows-show-hide-recycle-bin

Once it is on the Windows Desktop, Right-Click on the Recycle Bin icon and choose "Empty Recycle Bin"

 

Edited by David H. Lipman
Edited for content, clarity, spelling and grammar

Share this post


Link to post
Share on other sites

Okay, I will do that. Already have the recycle Bin icon on my desktop, and it showed empty before and after the SCAN. Here is a desktop view, and the recycle bin is on the upper left.

ThreatIdentified07222019i.thumb.jpg.cb20d6afcf3bf6a343f60f662be97fb2.jpg

Edited by longbeachlouise
fixed uploaded image.

Share this post


Link to post
Share on other sites

I just tried the command, Empty Recycle Bin from the pull-down menu on my desktop, and it is not clickable. I try to click it, and nothing.ThreatIdentified07222019j.thumb.jpg.415ed2e4f98289999f6e2245aed1af44.jpg

Share this post


Link to post
Share on other sites

Just to recap, I did a custom scan on ONLY the "F:" drive.

The malware showed up as an "F:\$RECYCLE.BIN" file in the results of the scan.

The Toshiba storage device is plugged into the "F:" drive right now, and clicking Empty Recycle Bin on my desktop doesn't generate a click. The option is not clickable!

Share this post


Link to post
Share on other sites

No.  It is best to leave as-is. As noted it is a special OS construct.  If the Recycle Bin shows empty, perhaps MBAM has already moved the item into Quarantine.  If you still have that report, go ahead and choose "Quarantine Selected".

 

Share this post


Link to post
Share on other sites

Now, it says this, attached.

ThreatIdentified07222019l.thumb.jpg.c1cb68f753e102e667b0668c18ccb167.jpg

 

I can't believe it! I have to restart MY computer for this item to finish deleting? It was never ON my computer.

Please reply before I reboot my computer. This doesn't make sense to me.

Share this post


Link to post
Share on other sites

You don't have to reboot.  Not for this.  Like I said, it is not active.

Share this post


Link to post
Share on other sites

Okay, this is what it is saying.

ThreatIdentified07222019m.thumb.jpg.af588e53ea44034484e7cd928c788a44.jpg

You said it is not active. As long as it isn't a replicating thing designed to thwart Malwarebytes, which could be activated later, it is okay . . .

Share this post


Link to post
Share on other sites

Malwarebytes will continue to bug you about restarting if you dont restart either now or later.

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.