Rootkit.ADS, c:\Windows\syswow64:win32app?

[StephenCWLL]

I'm on Windows 10 Build 10166, and just ran a malwarebytes scan and it popped up with this:

 

 

I can't work out which file it's referring to. Is this a false positive or how else can I track down the offending file?

 

Thanks!

[1PW]

Hello StephenCWLL and
 
In as much as this involves W10, the Experts/Staffers may wish to analyze your diagnostic reports:

• Please read the topic Diagnostic Logs and then individually ATTACH the 3 requested logs in your next reply to this thread only.
• The 3 files, from Step 1, to be individually ATTACHED from your desktop are CheckResults.txt, FRST.txt and Addition.txt. Please do not Zip or Copy and Paste them into a reply. Please do not alter, any FRST categories as they are pre-configured for this forum.

Thank You.

[David H. Lipman]

The file is an Alternate Data Stream.

 

It is not the normal disk file that we deal with on a day to day basis.  While there are legitimate uses of ADS, such as working with other Operating Systems, it is also a way to mask malicious activity.

 

Based upon this detection, the chances you are infected are high enough to warrant seeking one-on-one assistance from a trained Malware Removal Helper in;  Malware Removal Help

 

Malware Removal assistance can't be provided in this sub-forum.

[StephenCWLL]

The file is an Alternate Data Stream.

 

It is not the normal disk file that we deal with on a day to day basis.  While there are legitimate uses of ADS, such as working with other Operating Systems, it is also a way to mask malicious activity.

 

Based upon this detection, the chances you are infected are high enough to warrant seeking one-on-one assistance from a trained Malware Removal Helper in;  Malware Removal Help

 

Malware Removal assistance can't be provided in this sub-forum.

 

Jeez, don't scare me now I'm still leaning towards it not being anything too bad, but I'm curious as to what it is.

[StephenCWLL]

Hello StephenCWLL and

 

In as much as this involves W10, the Experts/Staffers may wish to analyze your diagnostic reports:

• Please read the topic Diagnostic Logs and then individually ATTACH the 3 requested logs in your next reply to this thread only.
• The 3 files, from Step 1, to be individually ATTACHED from your desktop are CheckResults.txt, FRST.txt and Addition.txt. Please do not Zip or Copy and Paste them into a reply. Please do not alter, any FRST categories as they are pre-configured for this forum.

Thank You.

 

Here's the MBAM one for a mo. The other file creates a shed load of stuff that I'm not fully happy putting online as some of the files it lists are named with personal titles. I might have to tweak that file before posting!

CheckResults.txt

[David H. Lipman]

I'm sorry but because there is a possibility that you are infected we can not do anything more for you in >>this<< sub-forum. 

 

The best advice is for you to proceed to  Malware Removal Help.

[StephenCWLL]

Problem has gone away as I've just upgraded to the latest Windows 10 build, 10240, and done a full scan, plus specifically that folder, and it's as clean as a whistle.

 

Thanks