Avast WEBforum

Other => Viruses and worms => Topic started by: Pako7 on October 19, 2019, 05:35:21 PM

Title: Exe turning to zero bytes
Post by: Pako7 on October 19, 2019, 05:35:21 PM
Hello guys iv noticed that computers on my area have application turning to zero bytes .. so i wanted to know how i could avoid this malware
Title: Re: Exe turning to zero bytes
Post by: Michael (alan1998) on October 19, 2019, 10:00:36 PM
This sounds extremely intriguing, I've never heard of anything doing that.

Please follow the guide here (and attach those logs) >> https://forum.avast.com/index.php?topic=194892.0
Title: Re: Exe turning to zero bytes
Post by: Pako7 on October 20, 2019, 08:09:08 AM
Its undected Sir .... it once hit me sometime last year and i Friend on this Forum advised me to use a particular usb scanner for future protection ..i never managed to hit me after that ..

 but i never really found a solution to the application that has been hit ... even when i scan my computer its not traceable ...

but here is a sample on virus total : https://www.virustotal.com/gui/file/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855/detection
Title: Re: Exe turning to zero bytes
Post by: Michael (alan1998) on October 20, 2019, 01:53:54 PM
Quote from: Pako7 on October 20, 2019, 08:09:08 AM
Its undected Sir .... it once hit me sometime last year and i Friend on this Forum advised me to use a particular usb scanner for future protection ..i never managed to hit me after that ..

 but i never really found a solution to the application that has been hit ... even when i scan my computer its not traceable ...

but here is a sample on virus total : https://www.virustotal.com/gui/file/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855/detection

The above programs aren't typical scanners. They won't remove anything unless directed to do so. However, it may give us an idea of what's modifying your files, that way we can grab a sample and remove it from your system.

Regards,
Michael.

Edit: I should specify, MBAM is a typical scanner. FRST is not. But please run both...
Title: Re: Exe turning to zero bytes
Post by: Pako7 on October 20, 2019, 04:43:32 PM
Here are the logs  Sir
Title: Re: Exe turning to zero bytes
Post by: Michael (alan1998) on October 20, 2019, 05:00:38 PM
Quote from: Pako7 on October 20, 2019, 04:43:32 PM
Here are the logs  Sir

Hello Pako,

I certinaly see a lot of empty directories (temp folders, MBAM's directory is empty etc). I'll reach out to Sass Drake and see if they have any ideas. May take a day or so for them to swing around so please be patient.
Title: Re: Exe turning to zero bytes
Post by: Pako7 on October 20, 2019, 05:27:51 PM
Ok Thank You no problem
Title: Re: Exe turning to zero bytes
Post by: Sass Drake on October 20, 2019, 10:53:54 PM
Can you post screenshot (or explain it more detailed) of application reduced to zero bytes please?
Title: Re: Exe turning to zero bytes
Post by: Pako7 on October 21, 2019, 08:08:03 AM
if you want more screenshot you want more screenshots you can Tell me..


But this is what is happening .. application memory (May it be Exe Files , Music , Pictures) their size change from a particular size to zero bytes .. and once they change to zero bytes the computer wont be capable of opening them ...
Title: Re: Exe turning to zero bytes
Post by: Michael (alan1998) on October 21, 2019, 02:36:59 PM
What directory was that in?
Title: Re: Exe turning to zero bytes
Post by: Pako7 on October 21, 2019, 02:39:42 PM
it hs always been at Documents but i moved it to desktop yesterday
Title: Re: Exe turning to zero bytes
Post by: Sass Drake on October 21, 2019, 07:10:11 PM
Is it only exe file which turns to zero bytes?
Title: Re: Exe turning to zero bytes
Post by: Pako7 on October 21, 2019, 07:52:00 PM
Not really even music , Pictures , but at the moment i have samples for exes ....

Kind of deleted the Pictures and Music
Title: Re: Exe turning to zero bytes
Post by: Sass Drake on October 22, 2019, 11:50:16 PM
Please post new FRST.txt and Addition.txt.
Title: Re: Exe turning to zero bytes
Post by: Pako7 on October 24, 2019, 12:34:08 PM
Quote from: Sass Drake on October 22, 2019, 11:50:16 PM
Please post new FRST.txt and Addition.txt.

Check replay #4
Title: Re: Exe turning to zero bytes
Post by: Sass Drake on October 24, 2019, 06:43:32 PM
Problem is that I don't see anything malicious in logs. Since you are using Education edition do you know wheter is your PC part of Active Directory in your school/college? Also please uninstall CCleaner for short time just to eliminate it from list of possible culprits.
Title: Re: Exe turning to zero bytes
Post by: Pako7 on October 25, 2019, 07:26:06 AM
iv Finished School Sir ...

thats the thing ...this file tdoesnt seem to be detectable .......ok il uninstall it