Jump to content

Possible corrupt .mp4 played in VLC


Recommended Posts

I am a Malwarebytes Premium customer with all options enabled (browser guard in Edge and Firefox, and all the real-time protections enabled).

Two days ago, I downloaded a .mp4 which I did not notice did not have a thumbnail like other video files, until after I had double-clicked it to open in VLC. VLC seemed to very rapidly continue to try to open the file (the title bar kept oscillating a few times a second), and before I could even get into Task Manager to kill it, VLC crashed/stopped on its own. The whole thing took maybe 10 seconds from the time I double-clicked until the VLC process ended.

(I have had a case previously where somehow my password to my web browser-based frontier email account was discovered causing untold grief, so I am overly paranoid about something installing itself to intercept passwords and sensitive info in the clear. I have TFA on all accounts everywhere I can get it set up, and I only admin my ASUS router only via :8443 and use 1.1.1.1 and 1.0.0.1 for DNS on it.)

In an abundance of caution, I did the following steps already:

Immediately uninstalled VLC

  • I don't know if it was the current 3.0.17.4 or older 3.0.16.x version.

Rebooted via F8 into Safe mode w/ networking (I have my bootmenupolicy set to 'legacy')

  • dism /Online /Cleanup-image /RestoreHealth
    sfc/scan now
    image.png.cb504422f823dd41764dc70406fa64d9.png
     
  • downloaded and ran AdwCleaner.
    Quarantined 2 Preinstalled items (the Dell support stuff on my Alienware r14 - idc if you want to remove this up to you. if its remotely questionable in nature)
    image.png.76299a730cce92fc5c099f109c56fb3d.png
     
  • downloaded and ran Eset.
    'No threats found' after a full scan.
     
  • downloaded Farbar.
     
  • uninstalled and re-downloaded/installed Malwarebytes, same set up as I had before (all real-time options enabled).

Rebooted into normal mode so Malwarebytes real-time could run and I could get the logs you need

Link to post
Share on other sites

Hello @Redgiant  and  :welcome:

 

My name is MKDB and I will assist you.

 

  • Please follow the steps in the given order and post back the logs as an attachment when ready. Thank you very much for your cooperation.
  • Temporarily disable your antivirus or other security software first. Make sure to turn it back on once the scans are completed.
  • Temporarily disable Microsoft SmartScreen to download software below if needed. Make sure to turn it back on once the scans are completed.
  • As English is not my native language, please do not use slang or idoms. It may be hard for me to understand.

 

I will guide you along on looking for potential malware. Lets keep these principles as we go along.

  • Searching, detecting and removing malware isn't instantaneous, please be patient. Please stick with me until I give you the "all clear".
  • Only run the tools I guide you to.
  • Please don't run any other scans, download, install or uninstall any programs while I'm working with you.
  • Cracked or hacked or pirated programs are not only illegal, but also will make a computer a malware victim. Having such programs installed, is the easiest way to get infected. It is the leading cause of ransomware encryptions. It is at times also big source of current trojan infections. Please uninstall them now, if any are here, before we start the cleaning procedure.

 

Please calm down, panic is never good. 😉

Let's remove some orphans and  copies of multiple "panic-downloads" with FRST and do a scan with MSS first.

 

 

Step 1

  • Please download the attached fixlist.txt file and save it to the location where you ran FRST from ( C:\Users\xxx\Downloads\ ).

Note: It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

  • Close all open programs and save your work.
  • Run FRST again.
  • Press the Fix button only once and wait. Please be patient.
  • If the tool needs a restart, please make sure you let the system restart normally and let the tool complete its run after restart.
  • FRST will create one log now (Fixlog.txt) in the same directory the tool is run.
  • Please attach this logfile to your next reply.

 

 

Step 2

The Microsoft Safety Scanner (MSS) is a free Microsoft stand-alone virus scanner that can be used to scan for & remove malware or potentially unwanted software from a system.

  • The download links & the how-to-run-the tool are at this link at Microsoft.
  • Please let me know the results of this scan.
  • Run a Quick Scan.
  • The log is named MSERT.log.
  • The log will be at%SYSTEMROOT%\debug\msert.log which in most cases is

C:\Windows\debug\msert.log

  • Please attach that log with your next reply.

 

 

 

fixlist.txt

Edited by MKDB
Link to post
Share on other sites

Thank you for those logfiles @Redgiant.

You did fine. 🙂

Please run another scan with FRST for me.

 

Step 1

  • Run FRST again.
  • Do not change any settings.
  • Press the Scan button.
  • FRST will create two logs now (FRST.txt + Addition.txt) in the same directory the tool is run.
  • Please attach these logfiles to your next reply.

 

 

 

Link to post
Share on other sites

Thanks again @Redgiant.

FRST has an auto-update feature on every new start of the tool, so there is no need to download it again.

Thank you for your cooperation, we're done. 👍

 

Final Step

  • Right-Click on FRST64 and choose Rename.
  • Rename FRST64 into Uninstall.
  • Run Uninstall.
  • FRST and it’s files/folders will be deleted.
  • If the tool needs a restart, please make sure you let the system restarts normally.

 

 

 

A few final recommendations:

  1. Recommend using a Password Manager for all websites, etc. that require a password. Never use the same password on more than one site.
    https://www.howtogeek.com/240255/password-managers-compared-lastpass-vs-keepass-vs-dashlane-vs-1password/
  2. Make sure you're backing up your files https://forums.malwarebytes.com/topic/136226-backup-software/
  3. Keep all software up to date - PatchMyPC - https://patchmypc.com/home-updater#download
  4. Keep your Operating System up to date and current at all times - https://support.microsoft.com/en-us/windows/windows-update-faq-8a903416-6f45-0718-f5c7-375e92dddeb2
  5. Further tips to help protect your computer data and improve your privacy: https://forums.malwarebytes.com/topic/258363-tips-to-help-protect-from-infection/ 
  6. Please consider installing the following Content Blockers for your Web browsers if you haven't done so already. This will help improve overall security

Malwarebytes Browser Guard

uBlock Origin

 

Further reading if you like to keep up on the malware threat scene: Malwarebytes Blog  https://blog.malwarebytes.com/

Hopefully, we've been able to assist you with correcting your system issues.

Thank you for using Malwarebytes.

 

 

Link to post
Share on other sites

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Please review the following for Tips to help protect from infection.

Thank you.

 

As this topic seems to be solved, I do not follow it any longer.

Take care!

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.