Windows 10: The Malware Remover tells me a Microsoft Time-Stamp Service file is suspicious, what do I do?

RJ4N0CV10P657179 · Mar 10, 2021

My laptop was slow of late so i ran a malware scanner and removal tool. It found an object with a .tmp extension and said that

"the digital signature on this file is invalid.

Program is altered or corrupted since it was code signed by its author. This is typical for malware and pirated software."

I checked the properties of this file. In Digital Signature and it says

"the digital signature of the object did not verify"

the issuer is "microsoft code-signing PCA 2011" and its issued to "microsoft corporation"

There's a 'counter signature' to this, the issuer is "microsoft time-stamp PCA 2011" and its issued to "microsoft time-stamp service"

I do not understand any of this. I only know from another forum post that microsoft time-stamp service is generally used by things like adobe and vscode. Right? Both of which I have but I don't know what do with the message I've got. Do i delete or quarantine this file? Can you explain what it does?

thanks. freaking out here.

:)

radioraheem · Mar 10, 2021

Best way to remove problem Malware

Hi There,

I am trying to remove a bundle of Malware without success.

There is a bundle of listed programs which I try to uninstall through the typical Control Panel effort, but they remain listed there:

Buenosearch Toolbar
MyPC Backup
PC Performer
Speed Test 127
UnknownFile

I was looking at this weblink which provides a 5 step process for Buenosearch alone:
Remove Bueno Search (Removal Guide)

Not sure how much certain guides can be trusted. One of the first things I read was to download Revo Uninstaller, and I've not heard of it so I'm not sure if it's trustworthy..........

hput3 · Mar 10, 2021

How to remove en.softonic malware that appears on desktop periodically

A kind of malware has somehow gotten onto my win 10 PC. What I get is a small advertisment that pops up in the bottom right on my desktop... When I turn it off (clicking the corner X). It comes back again some time later but with different content.

I haven't timed it but seems lake maybe a 1/2 hr.

I've googled extensively but all the instructions I've found, tell you to use the windows uninstaller to uninstall softonic. And maybe some manual clean up after the uninstall. But there is nothing installed with `softonic' in its name and even when the ad is running there is no process running with softonic in its name.

All the google hits appear to assume the windows uninstaller will know about softonic. Even the manual parts of some of the hits appear to assume you have been successful in unintalling it.

The instructions also suggest several free malware removal products and claim any of them will remove it.
`Zema Anti-malware', `MalwareBytes' and `AdwCleaner'

I tried all those listed in one of the instruction sets, ran the scan but none of them found whatever is running the little softonic pop up ad.

This type of malware apparently falls into a category called a `PUP'.

I never found in the google hits what expected would be there somewhere. A list of steps to remove something like this by hand.

Can anyone here advise me?

slozomby · Mar 10, 2021

Recent File List

Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file1

Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file2
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file3
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file4
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file5
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file6
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file7
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file8
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file9
...

you get the idea. ( too lazy to put it in a for loop and test it.

or just open regedit and remove all the fileX from that key.

Windows 10: The Malware Remover tells me a Microsoft Time-Stamp Service file is suspicious, what do I do?

The Malware Remover tells me a Microsoft Time-Stamp Service file is suspicious, what do I do?

The Malware Remover tells me a Microsoft Time-Stamp Service file is suspicious, what do I do?

The Malware Remover tells me a Microsoft Time-Stamp Service file is suspicious, what do I do?

The Malware Remover tells me a Microsoft Time-Stamp Service file is suspicious, what do I do? - Similar Threads - Malware Remover tells

How do I remove Microsoft's latest malware?

How do I remove Microsoft's latest malware?

Plz tell me what to do

Plz tell me what to do

Plz tell me what to do

please tell me what to do

please tell me what to do

Virus and Malware - Suspicious email and what to do about it

What to do after removing malware?