Neshta.Virus.FileInfector.DDS FP

[perrock]

Hello, 

Saw some other posts regarding this and wanted to confirm if mine were false positives as well. Just a little concerned cause there were 15 of them that are listed below. Thanks!

File: 15
Neshta.Virus.FileInfector.DDS, C:\PROGRAMDATA\PACKAGE CACHE\{089493D9-430B-4210-8A47-8F611288F461}V48.27.42327\DOTNET-HOSTFXR-6.0.6-WIN-X64.MSI, Quarantined, 1000002, 0, 1.0.84032, F61A2B0B1680BB26AFF73A5C, dds, 02801550, DD8A1D50BD8B4E1E7389EE43C98A7653, F001381E3AB9A8C8AAC314B04814EB7816923EFE7778063E4F0A950EED6ADA65
Neshta.Virus.FileInfector.DDS, C:\PROGRAMDATA\PACKAGE CACHE\{23782E82-6E71-4613-9631-E8F8DD27D052}V56.39.63170\DOTNET-RUNTIME-7.0.9-WIN-X64.MSI, Quarantined, 1000002, 0, 1.0.84032, F61A2B0B1680BB26AFF73A5C, dds, 02801550, 19F602E5B1837E56F10E309D6EA48C91, 12731D5A5B04FA2C47A2E6E09AD0E0EF9E9957485C8E014A9AA532A167C0F788
Neshta.Virus.FileInfector.DDS, C:\PROGRAMDATA\PACKAGE CACHE\{7A00940A-42B2-46E7-919A-8A8C2F065923}V64.0.2582\DOTNET-HOSTFXR-8.0.0-RC.2.23479.6-WIN-X64.MSI, Quarantined, 1000002, 0, 1.0.84032, F61A2B0B1680BB26AFF73A5C, dds, 02801550, 9EF338414C094CA619F16C80CBF53F7D, 9A7327008F6F4021A08D459E10DA0C003AE1A104D86F448925A258461ED8A9E3
Neshta.Virus.FileInfector.DDS, C:\PROGRAMDATA\PACKAGE CACHE\{2D709657-8E73-4DC2-BDB1-C12701D8A425}V56.56.4026\DOTNET-RUNTIME-7.0.14-WIN-X86.MSI, Quarantined, 1000002, 0, 1.0.84032, F61A2B0B1680BB26AFF73A5C, dds, 02801550, E13AA7BBA5A40522406B0807F02B80E6, 02829B4E5053B0814660B7A28FCB373CCE83C960C4FF8C316628524A298E65BA
Neshta.Virus.FileInfector.DDS, C:\PROGRAMDATA\PACKAGE CACHE\{1D0AC7F1-2B34-44AF-91F6-88757D768DA7}V48.67.58427\DOTNET-HOST-6.0.16-WIN-X64.MSI, Quarantined, 1000002, 0, 1.0.84032, F61A2B0B1680BB26AFF73A5C, dds, 02801550, 3187185AF82A439A50F9EEFEBD4D430A, 7378A203B11B1FE53DEDBF31D58403B74E380C5348B1B087D3729D8503810485
Neshta.Virus.FileInfector.DDS, C:\PROGRAMDATA\PACKAGE CACHE\{00478901-CD97-4A20-8FF3-3276865A2B44}V48.27.42327\DOTNET-RUNTIME-6.0.6-WIN-X64.MSI, Quarantined, 1000002, 0, 1.0.84032, F61A2B0B1680BB26AFF73A5C, dds, 02801550, 4329CB8E956B3525D4143A985A185115, 64256686F84DEEC8DFD69BCFC639B4F3B0145B010B5B4CC0BD138BE4E6FEB338
Neshta.Virus.FileInfector.DDS, C:\PROGRAMDATA\PACKAGE CACHE\{B9E46F95-AC34-4943-AFE2-B72EFD56C6C0}V48.27.42342\WINDOWSDESKTOP-RUNTIME-6.0.6-WIN-X64.MSI, Quarantined, 1000002, 0, 1.0.84032, F61A2B0B1680BB26AFF73A5C, dds, 02801550, 9BA1FC0375C29FED2DA029730202E941, CE3739136DE9B6196055C9D3924BAEDB9A7CC4DC24A6C6E4E9122DD0BEDCFEE3
Neshta.Virus.FileInfector.DDS, C:\PROGRAMDATA\PACKAGE CACHE\{65668C8B-8364-423C-8BD4-E17906EFE5D7}V56.56.4026\DOTNET-HOSTFXR-7.0.14-WIN-X86.MSI, Quarantined, 1000002, 0, 1.0.84032, F61A2B0B1680BB26AFF73A5C, dds, 02801550, F56BEAF8F2A9287B262F43EC89EA9EFB, 37611C03CA16223A0BD8EB87E9F9C9A5358ADF4DB0D1876DFC74A5852061F31E
Neshta.Virus.FileInfector.DDS, C:\PROGRAMDATA\PACKAGE CACHE\{F48FB46C-3334-47AA-98ED-D5A47DED33F1}V48.27.42327\DOTNET-HOST-6.0.6-WIN-X64.MSI, Quarantined, 1000002, 0, 1.0.84032, F61A2B0B1680BB26AFF73A5C, dds, 02801550, C6F68FC41FD1DFBA6BB217204A537379, 75B0AC61AD580B493FF822406E6F4722C45289BD56A1AA2B530BA665FBE04A3C
Neshta.Virus.FileInfector.DDS, C:\PROGRAMDATA\PACKAGE CACHE\{9CA76D70-7627-49EF-8936-D26BB886F819}V64.0.2582\DOTNET-HOST-8.0.0-RC.2.23479.6-WIN-X64.MSI, Quarantined, 1000002, 0, 1.0.84032, F61A2B0B1680BB26AFF73A5C, dds, 02801550, E3E616D65F3C35A726F88271E26126B2, 112E0A880017F192CD1AF63E579861D023A32AA83691EFCA510B7345D100D2AE
Neshta.Virus.FileInfector.DDS, C:\PROGRAMDATA\PACKAGE CACHE\{A05839A5-A748-499E-9441-19CF96CD133A}V64.0.2582\DOTNET-RUNTIME-8.0.0-RC.2.23479.6-WIN-X64.MSI, Quarantined, 1000002, 0, 1.0.84032, F61A2B0B1680BB26AFF73A5C, dds, 02801550, 6DCB127402B580FF6CBD825705417E5A, 065651C93DDA1614F2D81BBC538FF917C862A585782A066445541B1887C02CB1
Neshta.Virus.FileInfector.DDS, C:\PROGRAMDATA\PACKAGE CACHE\{B8537ACA-B210-4DF5-B928-E41CEB76723D}V48.67.58427\DOTNET-HOSTFXR-6.0.16-WIN-X64.MSI, Quarantined, 1000002, 0, 1.0.84032, F61A2B0B1680BB26AFF73A5C, dds, 02801550, 1BCAE1F2EF5E32B7C81A1E986F1B478D, AD2092B5C89CF336388CFAB9B8E7F8D9585E6BDF0545F6CBF124256EAADCE1CE
Neshta.Virus.FileInfector.DDS, C:\PROGRAMDATA\PACKAGE CACHE\{C71E93D2-B8B4-4858-B2A1-4C967DBC1C5F}V48.67.58427\DOTNET-RUNTIME-6.0.16-WIN-X64.MSI, Quarantined, 1000002, 0, 1.0.84032, F61A2B0B1680BB26AFF73A5C, dds, 02801550, B6F9471C1AB4FD07C986A91BC65A0329, 49CE2934548DCEE0A3F149D0DB727930B0A66DD9BC02279D73DB201BF6405B3D
Neshta.Virus.FileInfector.DDS, C:\PROGRAMDATA\PACKAGE CACHE\{D72B8119-07D4-4DE3-9FDA-88FC3D0013AE}V64.0.2586\WINDOWSDESKTOP-RUNTIME-8.0.0-RC.2.23479.10-WIN-X64.MSI, Quarantined, 1000002, 0, 1.0.84032, F61A2B0B1680BB26AFF73A5C, dds, 02801550, 1083177D7AA0B72BA3E1FA1418D27DF0, E61C65E246F4A7AE29A62D0DA68D778B0A3F61003EB32AA2762EA3E3D55B233F
Neshta.Virus.FileInfector.DDS, C:\PROGRAMDATA\PACKAGE CACHE\{E0C694BD-B643-43FA-840F-DECA17E60895}V56.39.63170\DOTNET-HOSTFXR-7.0.9-WIN-X64.MSI, Quarantined, 1000002, 0, 1.0.84032, F61A2B0B1680BB26AFF73A5C, dds, 02801550, A842D1955FB25AE4F3A12DD68CF5E1BE, CEAC6A2E356B58AE8292264C61FD8D500F5AA47FC5BF0726F4A02EEC4D748380

 

[Porthos]

1 minute ago, perrock said:

Saw some other posts regarding this and wanted to confirm if mine were false positives as well

Restore them and update Malwarebytes and scan again. IF FP they will not be detected this time.

[perrock]

I already deleted them out of paranoia before checking the forums about it. I'm guessing I'll have no way knowing since I can't restore them.

[Porthos]

Just now, perrock said:

I already deleted them out of paranoia before checking the forums about it.

Never delete the quarantine until you are positive they are bad  They can never harm the computer from quarantine.

Sometimes important files can be detected due to a false positive and you can't get them back.

[perrock]

Yeah I realized the mistake immediately after doing it. I'm running a full scan now but would it be a good idea to do a clean install of windows? Reading up on this virus type and it sounds like a nasty one that you might not be able to fully get rid of if you do have it.

[cli]

I checked all the hashes from your log and it looks like they were all FPs. 

[perrock]

1 hour ago, cli said:

I checked all the hashes from your log and it looks like they were all FPs. 

Thank you so much for taking the time and check them, I really appreciate it. Hopefully I didn't accidentally delete something important to break Windows.