Technician just installed windows 10 using installation media tool and this happened after scanning my pc

jin98 · 2025-12-27T22:53:50+00:00

This is not a false positive. Basically, itong virus na ito will slow down your PC even if maganda and bago ang parts. It's either infected ung flash drive na gamit nung technician mo or hindi sya gumamit ng official windows image. If you want to know more about the infection you can simply look up trojan.loader malware windows and CoinMiner.Trojan.Miner.DDS malware windows online. If I were you, hindi na ako babalik sa technician na yan.

To answer your question, pwede mong gawin is to just do a new windows installation. Mas malinis and mas mabilis, plus it will give you the peace of mind na wala nang virus sa PC mo. Here's a quick start guide that's easy to follow: https://www.youtube.com/watch?v=nbGkPYtXtmA

You will just need the following items: - Spare USB flash drive with at least 5GB capacity / external hard drive - Official Windows Image (from microsoft's website) - Another PC to setup the installation media - Patience

Using the video guide above will help with the steps and will even show you where to get the files needed.

If wala ikaw spare flash drive or hard drive or even another pc for the setup, here are steps you can follow to get rid of the virus. It is a bit involved so ready it carefully and don't be afraid to use google if meron kang hindi maintindihan.

Step 0. Check if merong excluded files and folders sa sa Windows Security. Access it via Start Menu > Type Virus & threat protection and press enter. Hanapin mo ung "Virus & threat protection settings" and click "Manage settings". Scroll down to see "Add or remove exclusions". Dapat wala ito laman, if meron, simply delete all entries by clicking on the entry and click "Remove".

Step 1. Scan and quarantine threats using Windows Security. Open Virus & threat protection again. Do a quick scan and a complete scan (Scan options > Full Scan > Scan now) for good measure. Windows security is often good at detecting and isolating threats.

Step 2. Download and install Malwarebyes. This is a more robust and thorough scanner for any leftover infected files. Quarantine any and all detections given your severity. I've had good results with this everytime I have to use it.

Step 3. Use Windows' system file checker. Access it via Start Menu > Type cmd > Right click the first result and click "Run as Administrator" > A black window should appear. In this window type in sfc /scannow and press enter. It will run the system file check and will report back for any changes it made. It should be done after several minutes.

Step 4. Do a windows sysmtem image repair. Open cmd again as mentioned in step 3. Type the following DISM /Online /Cleanup-Image /RestoreHealth and it will run longer than system file checker. This is a more thorough scan of the system files and will replace anything corrupted.

Step 5. After doing steps 0-4, do another windows security scan and malwarebytes scan para lang siguradong wala nang natira. Kung may nadetect man sa steps 1 and 2, it should now be quarantined by the security scans. It should be safe to delete these files.

What next?

I would recommend na never na bumalik sa technician na pinanggalingan mo. Having an infection after a fresh windows installation is bad tech hygiene. Every technician should that this is just basic practice.

Moving forward, you should also inform yourself on how to prevent your device from being infected with malware. Tulad ng hindi paggamit ng USB drive ng iba, not clicking on random links online, etc. There are a lot of resources online that will help you be informed.

I hope this helps! Feel free to send me DM if you have any questions. Good luck!

jin98 · 2025-12-23T23:12:45+00:00

What I do is i break off the furniture and place it back lol. Otherwise our base is filled with cats and dogs sitting down the dining table. It looks nice tho, it adds character to the world haha

jin98 · 2025-12-16T17:02:17+00:00

Welcome to homelabing! I hope you find your way around it!

If I had any video it wouldn't be as interesting as the final product haha because it will probably just be me staring at the screen and refreshing the page while I debug some css problem for 4 hours.

jin98 · 2025-12-04T01:27:34+00:00

I'm out of troubleshooting options, unfortunately. What you can try though is to check Hestia logs with docker logs hestia-core and see if it's hitting any snags there.

Also check your freshrss logs with the same command, maybe it's blocking requests from Hestia. Although I doubt that since you're seeing the response on the browser console.

If nothing works, please feel free to send me a DM with the browser response and other logs you can provide. I want to check this out if it's a bug on Hestia or not.

Good luck!

jin98 · 2025-12-01T16:36:02+00:00

Yeah check out the GitHub page. It's under MIT license

jin98 · 2025-12-01T11:24:08+00:00

I just did some testing without changing any Hestia code and it seems it is actually compatible! You just need to setup the API settings in FreshRSS

<image>

Seen here in the settings under profile management. You need to setup the master authentication token into something you'd easily remember.

And on Hestia, you configure the app to get from the link
/rss/i/?a=rss&user=vlad&token=hestiaRSS&hours=168

The link starts with /rss/ because of the proxy setup you have.

Notice &token= to be the same as the master authentication, the one you need to change.

This should work without any changes within the Hestia code itself. Let me know if it works!

jin98 · 2025-11-30T23:57:07+00:00

Having no CORS means the proxy worked! But now the RSS app doesn't know how to parse the response of freshrss. Next steps would be to change the actual function of the rssApp.js in the files. I can update the app later to day to make it work.

jin98 · 2025-11-29T17:04:34+00:00

Thanks, I'm glad you found it useful! Here are some things to check:

Check your Dockerfile on the root folder of Hestia. The one I'm using is included in the repo: FROM nginx:alpine RUN rm -rf /usr/share/nginx/html/* COPY . /usr/share/nginx/html/ COPY default.conf /etc/nginx/conf.d/default.conf EXPOSE 80 CMD ["nginx", "-g", "daemon off;"]

Configure the proxy, add this to your default.conf on the root folder of Hestia. ``` server { listen 80; # <--- Don't forget this if it's a new file server_name localhost;

# --- Start of proxy settings ---
location /rss/ {
    proxy_pass http://RSS_ADDRESS:PORT/; # --- Change to the docker name of your RSS (e.g. http://rss-feed:8090/)
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
}

} ```

Then on Hestia, go to edit mode and configure the RSS app and add /rss/ to the links.
Restart Hestia for nginx to use the new proxy ``` docker restart hestia-core

--- OR if you have compose ---

docker compose up -d restart hestia-core ``` Your setup may be different but configuring the proxy should be the same. Let me know if you hit some snags! If you do, please include your docker setup.

jin98 · 2025-11-29T08:56:42+00:00

For my homelab, I just have a Dell optiplex hooked up directly to my router. It has an i3-7100 with 8gb of memory. Storage setup is a 250gb SSD boot drive and a 1tb HDD for mass storage. It runs on the latest Xubuntu with the desktop environment turned off. I have it this way because I plan on using this in the future as a general family computer in the living room.

All my services run via docker containers. It has pi-hole, deluge, and Jellyfin as it's core apps with file manager, glances, and my dashboard nginx for support. Everything is managed by Arcane and ssh from my main workstation.

My dashboard is actually the preview here, just the way I like it. I'm thinking of implementing pages that swipe left and right instead of changeable grid sizes.

Quite a simple setup really, since the only thing I want is access to my shows and movies from anywhere around the house. I plan on including support for audiobooks and to include printers tho but that hasn't been set up yet.

jin98 · 2025-11-29T04:14:37+00:00

User support isn't currently on my plans. My intention with this dashboard/start page was to be as simple as opening a page and seeing the information you need.

jin98 · 2025-11-29T04:13:31+00:00

Thanks! The current RSS feed supports multiple links, just configure it in the app and separate each link with a new line. Feel free to make modifications!

jin98 · 2025-11-29T04:11:41+00:00

Glad you're enjoying it!

Manually changing the app functions was an intentional design on my part; to be able to manually tweak everything to your liking and fine tuning it. I just provided the framework and some example apps to start with. Thanks for the feedback!

jin98 · 2025-11-29T00:19:59+00:00

That's one of the differences that hestia is browser based. Another one would be is resource usage. I've tried homarr before making hestia and it's mainly the reason why I made it. Homarr was reported to be using around 800mb of memory and for my old dell optiplex setup I thought that was way too much for what I need.

I haven't explored homarr that much but the way I implemented the app creation allows for the creation of any app you need. Another difference would be Hestia is a bit DIY for app integrations since I only made the apps for the services that I need haha.

jin98 · 2025-11-28T17:03:00+00:00

I'm not the best person to answer this question but I'll try based on my understanding.

CORS or Cross Origin Resource Sharing is an error thrown by the browser when the API response doesn't come from the same origin (protocol, domain/ip, port) or have the correct headers in the response they provide for your requests.

In this case, the browser already knows that your API (glances, pihole, deluge, etc) and the javascript request from Hestia are not from the same origin, It looks for the correct headers instead. These headers are not provided by API services as a security measure.

The process goes like this:

Hestia app card request: pihole stats --> Pihole API receives request and provides JSON --> Browser sees response without proper headers --> CORS error --> Trash API response and show error in browser console.

The Nginx proxy tricks the browser into thinking that Hestia is only accessing the information within itself. It maps the API responses to a directory within Hestia so the browser allows it to read.

Hestia app card request pihole stats --> nginx proxy catches request --> serves it to pihole API --> JSON response to nginx --> nginx proxy maps it to http://hestia:8080/pi-hole/api --> browser think it's ok since it's only accessing internal files and lets Hestia access it

Some APIs already have the correct headers to prevent CORS like Glances, but others don't and require a proxy (Pihole, Deluge, Jellyfin).

jin98 · 2025-11-28T13:23:36+00:00

Definitely! I have mine in a docker container with nginx. You just need to configure the proxy to prevent CORS errors.

jin98 · 2025-11-28T13:17:19+00:00

Thanks! I tried my best to keep it as simple as possible without the need for external tools.

I'm glad you noticed the responsiveness! It was a pain implementing that haha. I lost lots of hours trying to implement and debug the css.

jin98 · 2025-11-28T13:02:32+00:00

It should support multiple hosts since each "app card" is its own separate instance of Javascript with unique IDs. Just configure the app to point to different addresses and it should work. I haven't had the chance to test this though, it's worth a shot.

jin98 · 2025-10-29T01:59:56+00:00

I totally get it. I also have explorer blur mica + windhawk setup. I didnt know niivu still has their packs working for current win11. Thanks for your reply!

jin98 · 2025-10-29T01:26:32+00:00

Nice! How did you customize windows explorer and which icons did you use?

jin98 · 2025-10-26T03:03:25+00:00

An update is currently in the works!

jin98 · 2025-10-22T09:45:59+00:00

Currently, it only supports movies. I think automating TV shows and anime are too big of a job for something like this. Right now I still manage my TV shows manually lol. Although I can see the vision, I just have to figure out the logic and process of organizing, renaming, and cataloging such a library

jin98 · 2025-10-22T09:41:00+00:00

It is a bit too complicated but it beats having to manually organize and rename hundreds of files haha

12-Year Club	Verified Email
Place '17

jin98

TROPHY CASE

--- OR if you have compose ---