Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Ran a installer from Fosshub just now.


  • Please log in to reply
6 replies to this topic

#1 Lumine0n

Lumine0n

  • Members
  • 3 posts
  • OFFLINE
  •  

Posted 03 August 2016 - 12:47 AM

When I ran a installer from fosshub, I seen a black console window flash and that was it. I googled "fosshub hacked" and it turns out I downloaded a MBR-destroying "classicshell installer". I'm still on my computer, do I just run "bootrec /fixmbr" in an elevated command prompt or is there more to this piece of malware?

 

Here's a Malwr scan (if it means anything) https://malwr.com/analysis/NWE4ODA5ZWYzYTI4NDU5ODg4NWI0NWFjM2U2YzRkYjg/



BC AdBot (Login to Remove)

 


#2 Condobloke

Condobloke

    Outback Aussie @ 54.2101 N, 0.2906 W


  • Members
  • 5,813 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:01 AM

Posted 03 August 2016 - 12:52 AM

G'day LumineOn, and Welcome to BC

 

What was the installer for ?


Condobloke ...Outback Australian  

 

fed up with Windows antics...??....LINUX IS THE ANSWER....I USE LINUX MINT 18.3  EXCLUSIVELY.

 

Microsoft gives you Windows, Linux gives you the whole house...

It has been said that time heals all wounds. I don't agree. The wounds remain. Time - the mind, protecting its sanity - covers them with some scar tissue and the pain lessens, but it is never gone. Rose Kennedy

#3 Lumine0n

Lumine0n
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  

Posted 03 August 2016 - 12:54 AM

G'day LumineOn, and Welcome to BC

 

What was the installer for ?

qBittorrent, but idiot me ignored the file size and product name (it's normally supposed to be 18mb)

 

ehP6AWR.png



#4 Condobloke

Condobloke

    Outback Aussie @ 54.2101 N, 0.2906 W


  • Members
  • 5,813 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:01 AM

Posted 03 August 2016 - 12:56 AM

Already reported on BC....thanks Aura...

 

http://www.bleepingcomputer.com/forums/t/622002/fosshub-apparently-hacked-classicshell-installer-kills-the-mbr/


Condobloke ...Outback Australian  

 

fed up with Windows antics...??....LINUX IS THE ANSWER....I USE LINUX MINT 18.3  EXCLUSIVELY.

 

Microsoft gives you Windows, Linux gives you the whole house...

It has been said that time heals all wounds. I don't agree. The wounds remain. Time - the mind, protecting its sanity - covers them with some scar tissue and the pain lessens, but it is never gone. Rose Kennedy

#5 Condobloke

Condobloke

    Outback Aussie @ 54.2101 N, 0.2906 W


  • Members
  • 5,813 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:01 AM

Posted 03 August 2016 - 12:57 AM

Which os etc are you running ?


Edited by Condobloke, 03 August 2016 - 01:16 AM.

Condobloke ...Outback Australian  

 

fed up with Windows antics...??....LINUX IS THE ANSWER....I USE LINUX MINT 18.3  EXCLUSIVELY.

 

Microsoft gives you Windows, Linux gives you the whole house...

It has been said that time heals all wounds. I don't agree. The wounds remain. Time - the mind, protecting its sanity - covers them with some scar tissue and the pain lessens, but it is never gone. Rose Kennedy

#6 Lumine0n

Lumine0n
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  

Posted 03 August 2016 - 12:58 AM

Which linux os etc are you running ?

 

Windows 7 Ultimate 64-bit



#7 Condobloke

Condobloke

    Outback Aussie @ 54.2101 N, 0.2906 W


  • Members
  • 5,813 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:01 AM

Posted 03 August 2016 - 01:20 AM

Read at both of these links

 

http://www.cgsecurity.org/wiki/TestDisk

 

and to repair your MBR

 

http://www.thewindowsclub.com/repair-master-boot-record-mbr-windows

 

I have no experience with instructions from either page....but at first glance the bolded link would appear easier to follow

 

So.....when you reboot....you may be unable to restart. I am not sure of this, but does appear to be the case.

 

Get prepared before you reboot


Condobloke ...Outback Australian  

 

fed up with Windows antics...??....LINUX IS THE ANSWER....I USE LINUX MINT 18.3  EXCLUSIVELY.

 

Microsoft gives you Windows, Linux gives you the whole house...

It has been said that time heals all wounds. I don't agree. The wounds remain. Time - the mind, protecting its sanity - covers them with some scar tissue and the pain lessens, but it is never gone. Rose Kennedy




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users