HitmanPro found two traces, said no infection but traces, Unhackme found no threats. How do I remove the traces?

Question

Windows 8.1 machine. I downloaded firefox. I deleted the download file. It says it's still there in a file, says its hidden and likely rootkit. But Hitmanpro doesnt do anything about it. Says entropy idicates it encrypted compressed,or obfuscated. Gives a scoring of 30. It also finds a completely hidden Geek.exe file from setting up their uninstaller. But I deleted that file from the folder too. If I delete or quarantine via HMP it is back again when rebooted. Yes I could/should ask on a HMP forum but I ask you about this as I have respect for your experience and knowledge.

Your program found no threats. Nor did Eset Internet Security or Malwarebytes rootkit finder. It makes me nervous to use now. I tried your investigate the problem method but saw nothing.

I have a Win 8.1 disk but if I reinstall and keep files and settings would the problem remain? I'm old and tired of all this.

Any genuine help appreciated. Thanks, DJ

Answer 1

Hi,

I need more information from you to help you.

1. Open UnHackMe,
2. Click the "Help in Removal" button on the main screen.
3. Choose "Send us RegRunLog".
4. Enter your e-mail, name, or nick.
5. Describe your problem.
6. Accept our Privacy Policy.
7. Click the "Upload" button.
   If you have any trouble with it, you can manually attach "regrunlog.txt" from your desktop and send us by e-mail to support@greatis.com.
   I will check your log and send you a solution as soon as possible.

https://greatis.com/unhackme/help/kb/removal/what-is-the-help-in-removal-service.htm

Comments

Hello, Thanks for the reply. Odd thing, I deleted the file the two items had been in and ran the HMP again and it came back clean, no traces. Could this be some sort of flaw in the program? That it still sees the deleted items, I don't know it was odd.

This is a newly installed win 8.1 machine. On my 7 machine I made the mistake of checking out RT News after the war broke out in Ukraine and was hit by a rootkit that HMP identified but kept reinstalling itself upon restart. Kaspersky Total Security was infiltrated by it too and showed nothing at all as did every other rootkit removal product I tried. Had to reinstall 7. But find it odd KTS didn't pick it up at all. I appreciate your getting back to me, best regards. DJ