Question UserBenchMark.exe virus/trojan?

Status
Not open for further replies.

TechQuestion1

Great
BANNED
Jan 13, 2020
134
3
85
I just installed the latest userbenchmark, i made a benchmark which took some time, longer than normally, now the bench is finished i opened my windowsexplorer and searched: userbench.
As result i found a list of files all called "critical userbenchmark" i cant find anything about this error anywhere...
Here is the exact file name from one of in the list, Critical_UserBenchMark.ex_(and from here a long number with underscores... what does that mean?
I have tryed to open those files to look whats in there but wordpad and editor both dont work even if it was a txt package.
When i try to delete this files it told me i:

Duo to an unknown error You could not delete this file. Critical_UserBenchMark.ex_(number with underscores)
This error happens when i try to delete the file as "system or trustedinstaller"

If i try to delete it with my normal "user account" i get another error:
You need permissions from (thetrojan) to open this file.
 

TechQuestion1

Great
BANNED
Jan 13, 2020
134
3
85
You don't install the Userbenchmark test. It's a program that start immediately when you open it. There is no folder installation so you cannot uninstall it. It's just a file that you delete.

no access to the file cant be deleted.
also thats not true, userbenchmark.exe is a programm that can be installed, atleast the last time i checked.

search-ms:displayname=Searchresults%20in%20"This%20PC"&crumb=System.Generic.String%3Auserbench&crumb=location:%3A%3A{20H04FE0-3A6A-1069-A2C8-08052B30309D}\Critical_UserBenchMark.ex_97df8198617a5c9e74e8ad2327af60d34c873939_f707dbf3_1c763f93

This is what i found when i opened the file, its like the file has access to my search-ms:displayname=Searchresults, so the whole machine can be infected
 
no access to the file cant be deleted.
also thats not true, userbenchmark.exe is a programm that can be installed, atleast the last time i checked.

search-ms:displayname=Searchresults%20in%20"This%20PC"&crumb=System.Generic.String%3Auserbench&crumb=location:%3A%3A{20H04FE0-3A6A-1069-A2C8-08052B30309D}\Critical_UserBenchMark.ex_97df8198617a5c9e74e8ad2327af60d34c873939_f707dbf3_1c763f93

This is what i found when i opened the file, its like the file has access to my search-ms:displayname=Searchresults, so the whole machine can be infected

When you start Userbenchmark.exe it open a window that look like a program installation but that's not one. It's a menu where you choose the options of the test. For me they are all greyed out. The button on that window to start the test is not named install. It's run. So not a program you install.
 

TechQuestion1

Great
BANNED
Jan 13, 2020
134
3
85
search-ms:displayname=Searchresults%20in%20"This%20PC"&crumb=System.Generic.String%3Auserbench&crumb=location:%3A%3A{20H04FE0-3A6A-1069-A2C8-08052B30309D}\Critical_UserBenchMark.ex_97df8198617a5c9e74e8ad2327af60d34c873939_f707dbf3_1c763f93


Im more worried about this.

This is a "single" search result? whit a specific code, i have no clue what this is supposed to mean: %20in%20"This%20PC"&crumb=System.Generic.String%3A2C8-08052B30309D}
This text obviously must have something to say.




Or this
\Critical_UserBenchMark.ex_97df8198617a5c9e74e8ad2327af60d34c873939_f707dbf3_1c763f93

Why is it "critical" what does the number stand for? what information does it contain that i cannot access whit my knownledge?

The number looks so specific it feels like for tracking
 

TechQuestion1

Great
BANNED
Jan 13, 2020
134
3
85
Scan your system for virus/malware.

Thats the next problem, i DO NOT trust the first result in my webbrowser, 10milion downloads 4/5 stars top virus removal tool

Even if that adversting is true, doesnt mean its not another trojan.

I dont know the diffrence from "anti malware tool" or just malware
Maybe you know some virus removal that is "trustfull" ?
 
Thats the next problem, i DO NOT trust the first result in my webbrowser, 10milion downloads 4/5 stars top virus removal tool

Even if that adversting is true, doesnt mean its not another trojan.

I dont know the diffrence from "anti malware tool" or just malware
Maybe you know some virus removal that is "trustfull" ?

Never had any problems with the free version of Malwarebytes - https://www.malwarebytes.com/
 

DSzymborski

Titan
Moderator
Your whole machine can be infected because you have been hamhandedly and repeatedly altering Windows in bizarre fashion.

Most of your problems will almost certainly be solved by wiping your drives, installing Windows and leaving it alone since you're absolutely 100% unqualified to be doing any of the things you've been posting about. And if you don't like Windows, use Linux, or write your own operating system.
 
  • Like
Reactions: ex_bubblehead
Status
Not open for further replies.