Hot answers tagged

131

Viruses and malwares are not dangerous if not executed. A file in quarantine cannot be executed by the user and the malicious code (virus or malware) has no possibility to act. If the virus/malware is removable it will be removed immediately. If not the file will be moved to quarantine. There are different reasons for this: False positive (as stressed ...


88

Anti-malware applications provide a quarantine option, which is often on by default in order for two reasons: Keep a backup of the items identified as threatening in case of a false positive. Although not very common, I have seen cases of false positive on many different legitimate application files and drivers. Having the item in quarantine may allow it ...


71

For the same reason that (most) governments arrest suspected criminals instead of shooting them on the street at the slightest provocation: You want to give the suspect a chance to defend themselves, in case they actually did not commit any crime at all. And, even if they did commit a crime, you probably want to find out all about it.


5

There seems to be a new strand of the virus that places itself in a slightly different location and uses different registry keys. You should be able to find the virus under %AppData%\{7DD25B43-EDEC-C6A2-4E97-EB6E11BD11CD3}. Especially interesting: The virus can only access the registry of it's current user. It accordingly has nested into the HKEY_USERS/[.....


3

Despite the fact there is not enough information to identify, what the file your asking about, actually is I can identify the actual Hidden Start application which is likely the file your asking about.. The trial version of Hidden Start was created on March 14 2013. It is signed by its developer, Alexander Avdonin, on March 18th 2013. The copyright is ...


3

Okay, I seem to have fixed this and here are the instructions: The first step was to remove the Edge icon from the Windows taskbar and close any running instances. Open up the registry and delete the following key: HKEY_CURRENT_USER\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft....


3

Well, possibly, but it would extremely unlikely... like getting struck by lightning while being eaten by shark unlikely. First off, the virus is most likely intended for a Windows machine, putting it on an Android device would likely have no effect even if it would executed. Second, Android sandboxes applications, essentially putting up security walls to ...


1

Ok, so I fixed my own problem. The problem was not found in the registry. There was no need to reinstall neither Chrome nor Firefox either. The solution turned out to be way easier than I expected. The malware basically modified the shortcuts of Firefox and Chrome to make them point to a malicious launcher called SalterLauncher.exe with arguments 1 0 and ...


1

Certainly much of the code of unified windows is common, but a lot will be machine specific such as code to control desktop CPUs is much different than code to control the processors in a smartphone. These newer systems starting with windows 10 make it much more difficult for viruses. That's one of the benefits of having a store, microsoft can scan all store ...


1

%windir%\system32\taskkill.exe /f /t /im "winlogon.exe" is useless because it also closes the real winlogon.exe process and shutdown my PC. Use pskill from Windows Sysinternals: pskill process_id Set process_id to the correct PID for the instance of winlogon you need to kill. Usage pskill [- ] [-t] [\\computer [-u username] [-p password]] <...


1

Start Windows in Safe Mode; delete %HOMEPATH%\F6962716573755\ folder; run msconfig and make necessary changes in both Services and Startup tabs. If problems return then repeat above procedure and disable creating System Restore Points and delete all of them (still being in safe mode); a tutorial here .



Only top voted, non community-wiki answers of a minimum length are eligible