Should I be concerned here? Possible malware from a link Malwarebytes tech support gave me.

[Zom]

Okay, so I've been having the same problem the person in this thread is having:  https://forums.malwarebytes.org/index.php?showtopic=145752

 

So I've contacted Malwarebytes tech support, and after being unable to solve the problem after some basic troubleshooting they sent me this:

 

"Lets collect additional information off the system to see if we can spot any issues. DDS will provide me a list of programs installed and system drivers, to check for any conflicts and as well threats in the system.

Step 1- Please download DDS from the link below and save it to your desktop:

http://download.bleepingcomputer.com/sUBs/dds.scr

http://download.bleepingcomputer.com/sUBs/dds.com

Step 2- Disable any security software before running

Step 3- Double click dds.scr to run the tool.

Step 4- It should run and produce 2 logs for you, DDS.txt and Attach.txt

Step 5- Please attach the following file in your next reply:

DDS.txt

Attach.txt"

End of what they said

This seemed sketchy to me considering he asked me to disable any security software. So I downloaded the files, and uploaded them to virustotal.com.

Here's a link to the scan of the file dds.scr

 https://www.virustotal.com/en/file/be045ae0deaae4656cff8810e466f90ab75f575587fe83f4873d812465bac068/analysis/1396640573/

Here's a link to the scan of the file dds.com

https://www.virustotal.com/en/file/be045ae0deaae4656cff8810e466f90ab75f575587fe83f4873d812465bac068/analysis/1396640488/

The fact that virustotal even had anything come up concerns me... Also windows says the first file is a screen saver which is kinda weird considering what he says it will do. Does anyone know what's going on?  I'm pretty sure i'm just being paranoid, but it's better to be safe than sorry.

 

Thanks

[daledoc1]

Hi, Zom:

 

DDS is a perfectly safe, non-invasive scanning tool used 100s (1000s) of times a day here and at other computer help forums.

See here: https://forums.malwarebytes.org/index.php?showtopic=9573

 

It's safe, assuming you download it from the correct links that your helper gave you.

It will just provide your support team member at the help desk with a bit of basic system info to assist with troubleshooting your issue.

 

Cheers,

 

daledoc1

[BornSlippy]

Both the files you refer to are legitimate and trustworthy. They are an essential part in assisting you with the identification and removal of any infection. The Virus Total reports can be explained as False Positives, that is to say they are being incorrectly identified as malicious due to similarities in their behavior. 

[Zom]

Okay, cool.  I was hoping they were false positives, but I was just making sure.  Thanks guys.

[brino]

Hey Zom,

 

I just downloaded those same links and ran them this week to provide info for my own issues, it's all good!

 

Of course I also "Virus Totalled" them just like you did.

 

I have seen them used repeatedly here and at bleepingcomputer, so I trusted them.

 

btw, "paranoid" is good, that's why were all here!

 

brino