Microsoft Edge Malware version persistent versions 4x.xx.

Question

Hello dear people,

I am contacting you because I have found an annoying malware that counterfeits a Microsoft application, in this case edge, can vary a little version, I have encountered with alleged versions 44, 4x.xx.xx and so on, I have not managed to fully mitigate this, due to personal reasons, what I can indicate is that the error of this false versioning, prevents the removal of certain applications as it stealthily takes a Microsoft application to subsequently pack microcode in these and maintain a remote session to the device or devices. I would like to see the possibility that some agents can help me, as apparently I found with even the use of BPFDoor code among others, reviewing the operation of this. Apparently, users with 2xhx are vulnerable, because the packaging and versioning was infested, something the attackers took advantage of. If I am correct the packaging of the applications and updates was affected.

The malware could not be removed and the following private and Microsoft security solutions have been tested:

-Bitdefender, Kaspersky, Eset, Gdata, Avira, MAPS, Microsoft Security, Others.

This malware afected IoT and devices Microsoft, Linux, Android and Apple devices. but the malware affected microsoft devices, specific Windows, and change versions with Windows Pro/Home/Any to Windows NT or RT, in your case you need research.

One additional thing, the malware later becomes persistent, apparently once it gains access to the device it infests the controller chips of disks and motherboards, whether they are laptops, desktops, hdd, ssd or nvme or m.2 versions.

Answer 1

Hello Jesus -

You left out the most important scan by far which is the industry's leading on-demand scanner Malwarebytes.

To check most thoroughly for infection and any resulting System damage, Download, install and run a full scan with the most powerful on-demand free scanner Malwarebytes:

https://www.malwarebytes.com/mwb-download/ Make sure to only choose the Free version.

In the Malwarebytes Settings (gear icon) > Security tab set it to include scanning for Rootkits.

If necessary run it in Safe Mode with Networking (to have internet), or Safe Mode accessed by one of these methods: https://www.digitalcitizen.life/4-ways-boot-saf.... These require a password and not PIN to access.

Clean up anything found, restart PC and then run again until it comes up clean.

Then download, install and run a full scan with AdwCleaner:

http://www.bleepingcomputer.com/download/adwcle...

Remove whatever it finds.

Check for anything found but is still left over in Settings > Apps > Apps & Features, and C:\Program Files and C:\Program Files(86) to uninstall or delete them. I can guide you how to do this if there are problems.

Also in each of your browser's Extensions, Home Page settings, Search service or Add-On's as shown here: https://www.computerhope.com/issues/ch001411.htm

to disable anything you didn't add yourself and are sure you need. Ask back if in doubt.

Then check for damaged System files by running System File Checker and DISM from Step 10 in this checklist:

https://answers.microsoft.com/en-us/windows/for...

If completing all of Step 10 in above Checklist doesn't fix it then run a Repair Install which reinstalls WIndows while keeping your files, programs and most settings in place, by installing the Media Creation Tool from this link: https://www.microsoft.com/en-US/software-downlo..., open the tool and choose Upgrade This PC Now. This will solve most problems and also bring it up to the latest version which you need anyway and by the most stable method.

If you want to keep Malwarebytes as an on-demand scanner then you can turn off its Real Time trial version using the slider buttons on it's front panel. I recommend it as the #1 tool for your toolbox. For best WIndows performance, use built-in Defender which gives adequate real-time protection.

If this is not enough then I'd post this up at the best security forums for consumers Bleeping Computer: https://www.bleepingcomputer.com/tutorials/blee.... They would be more likely to have contacts with Microsoft Security professionals than we have here in this general forums which Microsoft doesn't even see. With 1.5 billion Windows users it makes it even more unlikely to contact a human about this. Best to use the resources that count the most for the subject, which I've given you here and referred you to the next step.

Feel free to ask back any questions. Report back results for more steps if necessary.

______________________________________________

Standard Disclaimer: There are links to non-Microsoft websites. The pages appear to be providing accurate, safe information. Watch out for ads on the sites that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the sites before you decide to download and install it.