Not really sure what action/software(?) may have caused the actual problem to occur. but two days ago I began receiving a a dialogue box that keeps popping up while working on my laptop: "Windows Detected a Hard Disk Problem", in addition to "back up my files immediately"... with the option to "Start the back up process".
This is a lightly used, second hand Samsung PC Pro covertable pc/tablet, previously wiped and fresh install (1 year ago) running windows 8.1 that has worked flawlessly since I've owned it. The first indication that I noticed something was wrong was the Intel Rapid Storage icon in the system tray pops up a yellow caution marker. Then a few moments later the Window dialogue indicating a hard drive issue popped up.
Thinking my SSD was about to go belly up, I did a Systems Image backup and began to download/backup all necessary drivers via Samsung's SW update utility (Samsungs OEM utility app). During the driver backup process, Avg detected the threat "Luhe.Fiha.A" in [ C:\Program\Data\Samsung\SWUpdate\Temp\Packages\231e2885-c0ab-4234-986a-72fc8a8f9a5c\delay.exe ]. Causing the SW utility to freeze. After selecting the "protect me button", Avg reports that the virus had been contained. However upon subsequent use and attempts (at least 15), to back up drivers with SWUpdate I continue to get the same cycle of warnings as previously described.
A search for the virus name and "affected files / folders" turns up nothing in file manager searches.
Running CCleaner, RKill, AVG, Malwarebytes, SAS, Mbar, Eset online scan in Normal & SafeMode - all report No infection. I tried System Restore but all of the previous months restore points seem to be missing. The current restore points earlier this month are there but fail to successfully restore. After several Google queries It is my understanding that this is indeed how the Luhe.Fiha.A is known to behave; by hiding itself from AV and projecting these kinds of hardware/memory failure warnings(?) in some cases.
The machine continues to work wonderful without any indication of infection. But i do get the intermittent warnings and I'm not so convinced that I'm not infected.
Can anyone please assist me in making sure that my machine has not been compromised?
Thank you for your kind attention!
Edit: I neglected to add that I am unable to run Rkill in Safe Mode w/ Networking. I receive an error stating to the effect that "Rkill cannot run on this version of my operating system". But Rkill runs with no problem in Normal Mode. I'm using windows 64 bit. - Thanks!
Edited by alittlehelp, 07 June 2016 - 10:47 AM.