Author Topic: Is this any thing to worry about  (Read 10846 times)

0 Members and 1 Guest are viewing this topic.

Diddy

  • Guest
Is this any thing to worry about
« on: August 01, 2013, 09:44:46 PM »
HI how is it going today.  I have a Windows 7 home premium computer and recently  the person who uses it said that it seemed slow to him so today I download the lasted version of Hitman pro.  I then scanned the following computer and something came up in the results here is the information below:

name of file: nisdt.dll

Location of file:
c:\users\gary\AppData\local\temp according to hitman pro this file is Suspicious

What I would like to now if this is a sign of an infection.

Thanks very much

 

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37527
  • Not a avast user
Re: Is this any thing to worry about
« Reply #1 on: August 01, 2013, 09:49:32 PM »
the way to find out.... upload to www.virustotal.com

Diddy

  • Guest
Re: Is this any thing to worry about
« Reply #2 on: August 01, 2013, 10:30:16 PM »
I am sorry I do not now how to do this type of thing could please give me more details on how I am suppose to do this.

Thanks


Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37527
  • Not a avast user

Diddy

  • Guest
Re: Is this any thing to worry about
« Reply #4 on: August 01, 2013, 10:51:17 PM »
HI The issue I am having is when hitman pro got done scanning and the above file came up suspious I had trouble finding the file on the computer.  I was also wondering would it just be easier to put the logs to clean this computer in this topic.

Thanks


Offline Secondmineboy

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3645
Re: Is this any thing to worry about
« Reply #5 on: August 01, 2013, 11:02:30 PM »
You can click on the right in hitman pro where stands quarantine, deleteor ignore, click on that and you can go
in the dropdown menu directly to the file. Then you can move or copy it to your desktop so you find it later.
And then you can upload it to Virustotal.com. ;)

If you want you can post the link of the scan here. (In Adress bar)
« Last Edit: August 01, 2013, 11:06:38 PM by Steven Winderlich »
Windows 10 1909, 4 GB DDR3 RAM, 500 GB 5400 RPM HDD, 1366 by 768 LCD Screen, Intel Core i3 5010U Dual Core, Intel HD Graphics 5500
HUAWEI P30 Pro. Android 10

Diddy

  • Guest
Re: Is this any thing to worry about
« Reply #6 on: August 02, 2013, 12:44:45 AM »
HI Tried to run Hitman pro twice it froze the first time before it even got done it was stuck on 32% and it would not go any where so I did a hard shut down and restarted the computer once again then I re started Hit man pro again this time it got to 66% and then it froze again so I tried to exit hitman pro and it said cancelling but nothing happened.  Then here is the strange part the fans on the computer started to go and the motor or what ever stated to go faster and faster.  I was just wondering can this also be a sighn of a virus.  The only way I could exit out of hitman pro because it did freeze a second time was to do a nother hard shutdown.  What should I do should I be concerned that this computer could have an infection on it especially when the motor starts going faster this is an inclosed tower everything is in the tower itself.

Windows home Premium 32 Bit system


Offline Secondmineboy

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3645
Re: Is this any thing to worry about
« Reply #7 on: August 02, 2013, 12:57:30 AM »
Then go to the Location: c:\users\gary\AppData\local\temp

To see the folder go on the botten left to organize and choose Folder and search options.
There should be a list in one of the tabs, somewhere at the end of that list tick show hidden files and folders, now you should see the folder.
Windows 10 1909, 4 GB DDR3 RAM, 500 GB 5400 RPM HDD, 1366 by 768 LCD Screen, Intel Core i3 5010U Dual Core, Intel HD Graphics 5500
HUAWEI P30 Pro. Android 10

Diddy

  • Guest
Re: Is this any thing to worry about
« Reply #8 on: August 02, 2013, 01:20:51 AM »
HI then what do I do with the folder if I take it off the computer will it do anything to the computer at all.
thanks.


Offline Secondmineboy

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3645
Re: Is this any thing to worry about
« Reply #9 on: August 02, 2013, 01:25:44 AM »
Just take the detected File out of the folder to your desktop.
Then go to virustotal and scan it.4

name of file: nisdt.dll

You can search on the top right.
Windows 10 1909, 4 GB DDR3 RAM, 500 GB 5400 RPM HDD, 1366 by 768 LCD Screen, Intel Core i3 5010U Dual Core, Intel HD Graphics 5500
HUAWEI P30 Pro. Android 10

Diddy

  • Guest
Re: Is this any thing to worry about
« Reply #10 on: August 02, 2013, 01:35:56 AM »
HI I did what you said in your last reply but I am having trouble finding the folder name it is a lot of files and I am not sure of the folder to get.  Is their a simper way to find this folder.

thanks

Diddy

  • Guest
Re: Is this any thing to worry about
« Reply #11 on: August 02, 2013, 02:25:15 AM »
HI I was wondering can I just submit the logs for malware cleaning and would any of those logs show the file folder or file that is suspious.

thanks

I must say that I do not understand what folder to go into and what name I am looking for


Offline Secondmineboy

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3645
Re: Is this any thing to worry about
« Reply #12 on: August 02, 2013, 04:22:40 PM »
1. Open Start menu
2.Click on computer
3.Double click on the hard drive that is named with (C:) at the end
4. Double click on users
5.Double click on gary
6.Double click on AppData
7.Double click on local
8.Double click on temp(folder)
9.Write or copy and paste file name in the search box in the top right.
   The file name is nisdt.dll
10.Copy the file to your desktop (right click on the file and copy, go to your desktop right click and paste.
11. Go to Virustotal.com in your browser
12.In the middle is a bar with says no file selected, at the right of the bar is a button "choose file", click on it.
13.Select desktop on the left
14.Choose the file and click open on the bottom left
15. Click on the big blue button below that says scan it!
16. If a window opens up that the file already has been analysed, click on reanalyse.
17. Wait till the file has been analysed.
18.Copy the link in the address bar to your next post, the link looks like this:

https://www.virustotal.com/it/file/8245c3b228da33ff60afc9c94e2daa1b7c080da73c8484c6805ae05c8148f2b7/analysis/

19. For some reason Virustotal is in Italian for me right now, i dont know why. :o
Windows 10 1909, 4 GB DDR3 RAM, 500 GB 5400 RPM HDD, 1366 by 768 LCD Screen, Intel Core i3 5010U Dual Core, Intel HD Graphics 5500
HUAWEI P30 Pro. Android 10

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37527
  • Not a avast user
Re: Is this any thing to worry about
« Reply #13 on: August 02, 2013, 04:31:22 PM »
Quote
19. For some reason Virustotal is in Italian for me right now, i dont know why.
you can change language in top right corner of VT site....where you see the flag

Diddy

  • Guest
Re: Is this any thing to worry about
« Reply #14 on: August 09, 2013, 08:56:00 AM »
HI if I download otl and submit the logs in this thread would the otl logs be  able to tell the malware expert anything like if their is a virus on this computer at all.

Thanks

« Last Edit: August 09, 2013, 08:58:31 AM by Diddy »