lhenry74 Posted August 3, 2022 ID:1527450 Share Posted August 3, 2022 Malwarebytes reported a trojan.meterpreter today on my Surface. Could you verify that this is a bad file? If it is bad, do I need to do anything else to remove the trojan from my computer? The log file is attached. malwarebytes trojan log.txt Link to post Share on other sites More sharing options...
Staff Atribune Posted August 3, 2022 Staff ID:1527451 Share Posted August 3, 2022 Thank you for reporting this was indeed a false positive and has been fixed. Link to post Share on other sites More sharing options...
lhenry74 Posted August 3, 2022 Author ID:1527452 Share Posted August 3, 2022 Thank you for checking this. When I try to restore the file from quarantine, I get an error "Unable to restore... Access is Denied". Where is the file located? I can manually move it if I know where it is. I tried running Malwarebytes as administrator, but I still got the same message. Link to post Share on other sites More sharing options...
Porthos Posted August 3, 2022 ID:1527453 Share Posted August 3, 2022 9 minutes ago, lhenry74 said: When I try to restore the file from quarantine, I get an error "Unable to restore... Access is Denied". Have you restarted the computer before trying to restore? Link to post Share on other sites More sharing options...
tjao Posted August 3, 2022 ID:1527455 Share Posted August 3, 2022 I also received this false positive and quarantined the file. Should I attempt to restore? Link to post Share on other sites More sharing options...
Porthos Posted August 3, 2022 ID:1527456 Share Posted August 3, 2022 Just now, tjao said: I also received this false positive and quarantined the file. Should I attempt to restore? Yes 1 Link to post Share on other sites More sharing options...
lhenry74 Posted August 3, 2022 Author ID:1527457 Share Posted August 3, 2022 Yes, I have restarted more than once and it will still mot restore the file. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted August 3, 2022 Root Admin ID:1527463 Share Posted August 3, 2022 Can we please get a full set of logs To begin, please do the following so that we may take a closer look NOTE: The tools and the information obtained are safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system. Download the Malwarebytes Support Tool In your Downloads folder, open the mb-support-x.x.x.xxx.exe file In the User Account Control pop-up window, click Yes to continue the installation Run the MBST Support Tool In the left navigation pane of the Malwarebytes Support Tool, click Advanced In the Advanced Options, click Gather Logs. A status diagram displays the tool is Getting logs from your machine A zip file named mbst-grab-results.zip will be saved to your desktop, please upload that file on your next reply Thank you Link to post Share on other sites More sharing options...
lhenry74 Posted August 3, 2022 Author ID:1527498 Share Posted August 3, 2022 I have attached the zip file that was created by the support tool. mbst-grab-results.zip 1 Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted August 3, 2022 Root Admin ID:1527506 Share Posted August 3, 2022 Thank you @lhenry74 Please create a NEW System Restore Point before anything else. Create System Restore Point in Windows 11https://www.elevenforum.com/t/create-system-restore-point-in-windows-11.3602/Then Use System Restore on Windows 11 to recover to this previously saved Restore Point: 02-08-2022 22:49:38 Windows Modules Installerhttps://www.elevenforum.com/t/use-system-restore-on-windows-11.3604/ Link to post Share on other sites More sharing options...
lhenry74 Posted August 3, 2022 Author ID:1527525 Share Posted August 3, 2022 Unfortunately, I have a tiny hard drive in my Surface and when I created the new restore point, apparently the old one was deleted. The only option when I try to restore is the one that I just created. Any other suggestions? Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted August 3, 2022 Root Admin ID:1527537 Share Posted August 3, 2022 Click on Start and type in CMD.EXE and when it shows on the menu, right-click and select "Run as administrator" Then type in or copy and paste the following and press the Enter key SFC /SCANNOW Let me know what that says Link to post Share on other sites More sharing options...
lhenry74 Posted August 4, 2022 Author ID:1527540 Share Posted August 4, 2022 Beginning system scan. This process will take some time. Beginning verification phase of system scan. Verification 100% complete. Windows Resource Protection did not find any integrity violations. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted August 4, 2022 Root Admin ID:1527552 Share Posted August 4, 2022 Please follow the advice from the following link https://support.microsoft.com/en-in/help/4027498/windows-10-run-the-troubleshooter-for-apps Further steps you can take: Start by running the Windows Store Apps troubleshooter. Open Start > Settings > Update & security > Troubleshoot Scroll down to the bottom Click Windows Store Apps Click Run the troubleshooter Link to post Share on other sites More sharing options...
lhenry74 Posted August 4, 2022 Author ID:1527604 Share Posted August 4, 2022 Thanks for the help! I haven't actually noticed anything that isn't working, so I will wait until an app does not work and fix it then. I reset several apps, but I don't know which one needs the file that is missing. It seems like this solution will work. 1 Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted August 4, 2022 Root Admin ID:1527625 Share Posted August 4, 2022 Thanks for the feedback. Take care Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted August 4, 2022 Root Admin ID:1527626 Share Posted August 4, 2022 I would recommend you check on the free space you have now, and the amount of space provided to System Restores and if possible increase the space. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now