Zom

Should I be concerned here? Possible malware from a link Malwarebytes tech support gave me.

5 posts in this topic

Okay, so I've been having the same problem the person in this thread is having:  https://forums.malwarebytes.org/index.php?showtopic=145752


 


So I've contacted Malwarebytes tech support, and after being unable to solve the problem after some basic troubleshooting they sent me this:


 


"Lets collect additional information off the system to see if we can spot any issues. DDS will provide me a list of programs installed and system drivers, to check for any conflicts and as well threats in the system.


Step 1- Please download DDS from the link below and save it to your desktop:


http://download.bleepingcomputer.com/sUBs/dds.scr


http://download.bleepingcomputer.com/sUBs/dds.com


Step 2- Disable any security software before running


Step 3- Double click dds.scr to run the tool.


Step 4- It should run and produce 2 logs for you, DDS.txt and Attach.txt


Step 5- Please attach the following file in your next reply:


DDS.txt


Attach.txt"


End of what they said


This seemed sketchy to me considering he asked me to disable any security software. So I downloaded the files, and uploaded them to virustotal.com.


Here's a link to the scan of the file dds.scr


 https://www.virustotal.com/en/file/be045ae0deaae4656cff8810e466f90ab75f575587fe83f4873d812465bac068/analysis/1396640573/


Here's a link to the scan of the file dds.com


https://www.virustotal.com/en/file/be045ae0deaae4656cff8810e466f90ab75f575587fe83f4873d812465bac068/analysis/1396640488/


The fact that virustotal even had anything come up concerns me... Also windows says the first file is a screen saver which is kinda weird considering what he says it will do. Does anyone know what's going on?  I'm pretty sure i'm just being paranoid, but it's better to be safe than sorry.


 


Thanks :)


Share this post


Link to post
Share on other sites

Hi, Zom:

 

DDS is a perfectly safe, non-invasive scanning tool used 100s (1000s) of times a day here and at other computer help forums.

See here: https://forums.malwarebytes.org/index.php?showtopic=9573

 

It's safe, assuming you download it from the correct links that your helper gave you.

It will just provide your support team member at the help desk with a bit of basic system info to assist with troubleshooting your issue.

 

Cheers,

 

daledoc1

Share this post


Link to post
Share on other sites

Both the files you refer to are legitimate and trustworthy. They are an essential part in assisting you with the identification and removal of any infection. The Virus Total reports can be explained as False Positives, that is to say they are being incorrectly identified as malicious due to similarities in their behavior. 

Share this post


Link to post
Share on other sites

Okay, cool.  I was hoping they were false positives, but I was just making sure.  Thanks guys.

Share this post


Link to post
Share on other sites

Hey Zom,

 

I just downloaded those same links and ran them this week to provide info for my own issues, it's all good!

 

Of course I also "Virus Totalled" them just like you did.

 

I have seen them used repeatedly here and at bleepingcomputer, so I trusted them.

 

btw, "paranoid" is good, that's why were all here!

 

brino

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.