3. Need help with computer. Suspect hidden virus and Privoxy

Need help with computer. Suspect hidden virus and Privoxy

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 athr; C:\Windows\System32\drivers\athw10x.sys [4318760 2015-09-07] (Qualcomm Atheros Communications, Inc.) R1 BHDrvx64; C:\Program Files (x86)\Norton 360\NortonData\22.5.0.124\Definitions\BASHDefs\20160125.001\BHDrvx64.sys [1665608 2015-10-08] (Symantec Corporation) S3 BthA2DP; C:\Windows\system32\drivers\BthA2DP.sys [165376 2015-10-29] (Microsoft Corporation) R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1605050.00F\ccSetx64.sys [173808 2015-07-10] (Symantec Corporation) R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91912 2013-11-12] (CyberLink) R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [498512 2015-11-18] (Symantec Corporation) R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [157520 2015-11-18] (Symantec Corporation) R1 IDSVia64; C:\Program Files (x86)\Norton 360\NortonData\22.5.0.124\Definitions\IPSDefs\20160127.001\IDSvia64.sys [767224 2015-12-04] (Symantec Corporation) R3 ikbevent; C:\Windows\system32\DRIVERS\ikbevent.sys [21408 2013-08-13] () R3 imsevent; C:\Windows\system32\DRIVERS\imsevent.sys [21920 2013-08-13] () R3 ISCT; C:\Windows\System32\drivers\ISCTD64.sys [46568 2013-08-13] () R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2016-01-27] (Malwarebytes) S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation) R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation) R3 NAVENG; C:\Program Files (x86)\Norton 360\NortonData\22.5.0.124\Definitions\VirusDefs\20160128.003\ENG64.SYS [138488 2015-10-26] (Symantec Corporation) R3 NAVEX15; C:\Program Files (x86)\Norton 360\NortonData\22.5.0.124\Definitions\VirusDefs\20160128.003\EX64.SYS [2148080 2015-10-26] (Symantec Corporation) R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [751632 2015-05-14] (Realsil Semiconductor Corporation) S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [30448 2014-04-10] (Synaptics Incorporated) R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [44216 2015-12-01] (Synaptics Incorporated) R3 SRTSP; C:\Windows\System32\Drivers\N360x64\1605050.00F\SRTSP64.SYS [928496 2015-11-11] (Symantec Corporation) R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1605050.00F\SRTSPX64.SYS [50936 2015-07-10] (Symantec Corporation) R0 SymEFASI; C:\Windows\System32\drivers\N360x64\1605050.00F\SYMEFASI64.SYS [1621232 2015-11-11] (Symantec Corporation) S0 SymELAM; C:\Windows\System32\drivers\N360x64\1605050.00F\SymELAM.sys [24192 2015-07-10] (Symantec Corporation) R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [111344 2015-07-22] (Symantec Corporation) R1 SymIRON; C:\Windows\system32\drivers\N360x64\1605050.00F\Ironx64.SYS [297720 2015-07-10] (Symantec Corporation) R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1605050.00F\SYMNETS.SYS [577768 2015-11-11] (Symantec Corporation) R3 VirtualButtons; C:\Windows\System32\drivers\VirtualButtons.sys [32024 2013-10-04] (Intel Corporation) S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-29] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-29] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-29] (Microsoft Corporation) R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2013-07-22] (Hewlett-Packard Development Company, L.P.)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-01-28 13:22 - 2016-01-28 13:22 - 00025647 _____ C:\Users\Andrew\Downloads\FRST.txt 2016-01-28 13:20 - 2016-01-28 13:22 - 00000000 _D C:\FRST 2016-01-28 13:20 - 2016-01-28 13:20 - 02370560 __ (Farbar) C:\Users\Andrew\Downloads\FRST64.exe 2016-01-27 18:28 - 2016-01-27 18:29 - 01609032 _____ (Malwarebytes) C:\Users\Andrew\Downloads\JRT.exe 2016-01-27 13:47 - 2016-01-27 13:47 - 00000000 _D C:\Program Files (x86)\Softcomp Software 2016-01-26 20:21 - 2016-01-27 14:47 - 00000000 _D C:\Program Files (x86)\Mozilla Firefox 2016-01-22 18:58 - 2016-01-23 15:13 - 00000000 _D C:\AdwCleaner 2016-01-22 18:54 - 2016-01-22 18:56 - 01505280 __ C:\Users\Andrew\Downloads\adwcleaner5.030.exe 2016-01-22 13:10 - 2016-01-22 13:11 - 00003132 ____ C:\Users\Andrew\Desktop\Rkill.txt 2016-01-22 13:10 - 2016-01-22 13:10 - 02032072 _____ (Bleeping Computer, LLC) C:\Users\Andrew\Downloads\rkill.com 2016-01-17 11:10 - 2016-01-17 11:10 - 00092589 _____ C:\Users\Andrew\Downloads\RecReadQtr2_StyleGlossary.pdf 2016-01-17 11:05 - 2016-01-17 11:05 - 07389431 ____ C:\Users\Andrew\Downloads\TheAmerican_SpiritVol2-_Chs28-29.pdf 2016-01-14 20:09 - 2016-01-14 20:09 - 00207273 ____ C:\Users\Andrew\Downloads\Day3-IncorporatingVolumeAndParticles copy.pdf 2016-01-12 19:07 - 2016-01-04 18:51 - 07477600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2016-01-12 19:07 - 2016-01-04 18:51 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2016-01-12 19:07 - 2016-01-04 18:51 - 01141496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2016-01-12 19:07 - 2016-01-04 18:50 - 01173344 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2016-01-12 19:07 - 2016-01-04 18:50 - 00713568 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2016-01-12 19:07 - 2016-01-04 18:50 - 00671472 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll 2016-01-12 19:07 - 2016-01-04 18:49 - 00513888 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2016-01-12 19:07 - 2016-01-04 18:48 - 00499432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll 2016-01-12 19:07 - 2016-01-04 18:45 - 02587696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2016-01-12 19:07 - 2016-01-04 18:42 - 02026736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll 2016-01-12 19:07 - 2016-01-04 18:37 - 02544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2016-01-12 19:07 - 2016-01-04 18:37 - 01299504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll 2016-01-12 19:07 - 2016-01-04 18:37 - 00858952 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll 2016-01-12 19:07 - 2016-01-04 18:37 - 00848160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2016-01-12 19:07 - 2016-01-04 18:37 - 00785088 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll 2016-01-12 19:07 - 2016-01-04 18:37 - 00245840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2016-01-12 19:07 - 2016-01-04 18:37 - 00234504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mftranscode.dll 2016-01-12 19:07 - 2016-01-04 18:36 - 00808800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe 2016-01-12 19:07 - 2016-01-04 18:33 - 02180128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2016-01-12 19:07 - 2016-01-04 18:33 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll 2016-01-12 19:07 - 2016-01-04 18:33 - 00709688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2016-01-12 19:07 - 2016-01-04 18:33 - 00701384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll 2016-01-12 19:07 - 2016-01-04 18:33 - 00652312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll 2016-01-12 19:07 - 2016-01-04 18:33 - 00208176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mftranscode.dll 2016-01-12 19:07 - 2016-01-04 18:33 - 00116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll 2016-01-12 19:07 - 2016-01-04 18:31 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe 2016-01-12 19:07 - 2016-01-04 18:27 - 01594408 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2016-01-12 19:07 - 2016-01-04 18:24 - 00796352 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2016-01-12 19:07 - 2016-01-04 18:23 - 01804664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll 2016-01-12 19:07 - 2016-01-04 18:23 - 01309376 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2016-01-12 19:07 - 2016-01-04 18:23 - 00786696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOD.DLL 2016-01-12 19:07 - 2016-01-04 18:23 - 00119320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP3DMOD.DLL 2016-01-12 19:07 - 2016-01-04 18:21 - 01371792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll 2016-01-12 19:07 - 2016-01-04 18:17 - 00695752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOD.DLL

/r/computerviruses Thread Parent
Previous
Next

Recently removed from /r/computerviruses

Need help with computer. Suspect hidden virus and Privoxy Need help with computer. Suspect hidden virus and Privoxy

More Random Comments

I am my own worst enemy Is this non-PC San Pedro or am I scammed? Man captures local dog attack caused by a POS owner on film People need to date in their age range. Should you factor in the age of a lawyer when using one? ELI5: Why does it feel warmer to walk barefoot over wooden floors than to walk over ceramic tiles even if both are side-by-side in the same room? DUI [Spoilers C3E51] Most divisive episode yet? Judge uses a slavery law to rule frozen embryos are property Daily sticky thread for rants, raves, celebrations, advice and more! New? Start here! Emmanuel Macron to reject Sunak’s plan to solve small boats crisis No Luck Finding Good SD Pyosik speaks about whether or not stage nerves affect Team Liquid: "There were definitely nerves. For me, I was actually more nervous than the World Finals match for my first LCS game." Can anxiety be the cause of SPD? I’m sick of companies half-assing this sort of thing