Upgrading Build 9879 to 9888

Discussion in 'Windows 10' started by ajitem, Dec 2, 2014.

  1. hanschke

    hanschke MDL Senior Member

    Jan 8, 2008
    425
    33
    10
    I got from the ms defenter a virus warning :mad::confused:
     
  2. pisthai

    pisthai Imperfect Human

    Jul 29, 2009
    7,202
    2,269
    240
    I just scanned the ISO after extracting to an USB Stick again with CureIt and that didn't found anything suspicious. But I believe that apps, so as most (if not all) of the others, are not able to scan the install.wim file because of compression etc.! That file radardt.dll which were found infected on all of my installs (4!) could not be find as single file on the USB Stick.

    That said, it still could be that the ISO itself is infected. So, I'll look to extract the install.wim file and scan that content. Will do that on the Laptop with build 9879 which has an different internet connection and isn't connected to my network, just for safety reasons.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. MS_User

    MS_User MDL Guru

    Nov 30, 2014
    4,656
    1,361
    150

    their could something else u mite have over look.....your hardware is infected.
     
  4. pisthai

    pisthai Imperfect Human

    Jul 29, 2009
    7,202
    2,269
    240
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  5. Tito

    Tito Super Mod / Adviser
    Staff Member

    Nov 30, 2009
    18,804
    18,985
    340
    #85 Tito, Dec 4, 2014
    Last edited by a moderator: Apr 20, 2017
  6. pisthai

    pisthai Imperfect Human

    Jul 29, 2009
    7,202
    2,269
    240
    #86 pisthai, Dec 4, 2014
    Last edited by a moderator: Apr 20, 2017
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  7. pisthai

    pisthai Imperfect Human

    Jul 29, 2009
    7,202
    2,269
    240
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  8. abbodi1406

    abbodi1406 MDL KB0000001

    Feb 19, 2011
    17,190
    90,665
    340
    It's not infected
     
  9. s1ave77

    s1ave77 Has left at his own request

    Aug 15, 2012
    16,093
    24,397
    340
    Might be a good idea to check 'infected' files at virustotal.com. Mostly gives a clue whether it's a virus or a false/positive. I personally never trust one AV solution alone.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  10. Tito

    Tito Super Mod / Adviser
    Staff Member

    Nov 30, 2009
    18,804
    18,985
    340
    #90 Tito, Dec 4, 2014
    Last edited: Dec 4, 2014
    Welcome :hug2:
    Actually that was not the error; you forgot to put the '/' before 'mountdir' argument.
    Can you please show me the error screen or post the error message?
     
  11. MS_User

    MS_User MDL Guru

    Nov 30, 2014
    4,656
    1,361
    150
    thats what i been trying to tell him. sounds like he has a bunch corrupted software in their.
     
  12. maddog0266

    maddog0266 MDL Expert

    Apr 26, 2011
    1,247
    161
    60
    There is no virus in 9888
    Been running it for the last 4 or 5 days and I have checked it all the time for virus and nothing except for the day of install.
    When it came up saying that "C:\windows\SysWOW64\Wpc.dll" was a virus. I put it on the white list.
    Checked online with MS and few other places NOT A VIRUS.
    Told to update my virus program which I did, took it off the white list, then checked the file again and it did not detect it as a virus.
     
  13. pisthai

    pisthai Imperfect Human

    Jul 29, 2009
    7,202
    2,269
    240
    #93 pisthai, Dec 5, 2014
    Last edited: Dec 5, 2014
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  14. EFA11

    EFA11 Avatar Guru

    Oct 7, 2010
    8,710
    6,739
    270
    retarded.dll?
     
  15. pisthai

    pisthai Imperfect Human

    Jul 29, 2009
    7,202
    2,269
    240
    And I told you to be carefully with your assumptions!

    Before was using to extract and scan the install.wim, I done a whole scan with the same CureIt on the Laptop with not a single infection!

    Fact is:

    1. I was get that infection to see on 4 clean 9888 install, which were installed on freshly low level formatted HDD's, with no any extra software installed;
    2. used to scan with CureIt the laptop running 9879 upfront of copy the install.wim to the newly created folder Test and used the internal DISM for to extract that wim file;
    3. scanned with CureIt the whole files in folder Test with the result posted, for both the CureIt scan as the scan with Virustotal, in post #93 of this thread

    So and please again: stop to assume something which were already explained NOT to be happen
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  16. pisthai

    pisthai Imperfect Human

    Jul 29, 2009
    7,202
    2,269
    240
    radardt.dll
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  17. MS_User

    MS_User MDL Guru

    Nov 30, 2014
    4,656
    1,361
    150



    dude your going drive yourself crazy with this.....maybe your hardware is infected..... im not assuming anything we all trying to help each other and learn form each other. but keep all options open.
     
  18. pisthai

    pisthai Imperfect Human

    Jul 29, 2009
    7,202
    2,269
    240
    Maybe the whole is just a False Positive, maybe not?!

    The first question would be: The ISO came from WHERE?

    And the answer would be: (not MS) .....................?

    That said, the next Question, if not from MS: with whom hand that ISO were first and what were done with it?

    And the answer would be: (if any!!) ...................................?

    The real possibilities are various! If that ISO were coming from China, I would be very careful! Same applies to Russia, India, Israel and some other countries which are well known for their notorious trying of hacking inside other systems.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  19. MS_User

    MS_User MDL Guru

    Nov 30, 2014
    4,656
    1,361
    150
    [h=2]What is radardt.dll[/h]
    The radardt.dll is one of the core system files.
    If radardt.dll has error, our PC may get a lot of problem like blue screen of death, radardt.dll was not found. The reasons could be various. But mostly it’s because of virus. It can be easily infected by TrojanSpy:Win32/Bancos.DT.
    And this virus will download malware like PC Speed ??Maximizer - Fran?ais ais from unknown website automatically.
    Then TrojanSpy:Win32/Bancos.DT would modify the properties of radardt.dll, because of which your PC will appear relevant errors.
     
  20. EFA11

    EFA11 Avatar Guru

    Oct 7, 2010
    8,710
    6,739
    270
    OH! I guess I should use my glasses lol ;)