Windows Activation Technologies Pop-up

Callender · 08 Oct 2015

Re: Malware issues. Suggest getting help in the System Security thread.

If you like you can also run a scan with Ultra Adware Killer. You can launch it from UVK's welcome screen. Do not select anything for removal. When the scan completes select "Menu" then "Open Log" - upload the file.

Windows Activation Technologies Pop-up-uakr.jpg

You could also run scans with the other built in apps. Scan with MBAM and ADW Cleaner. Do not use the other apps!

Welcome Screen > System Repair > Third Party Apps.

It will download the app or update to the latest version if you already have the app installed.

Windows Activation Technologies Pop-up-uvk-apps.jpg

tjg79 · 08 Oct 2015

Callender said:

I looked at your log. Can you confirm what is in this folder?

C:\ProgramData\{9A88E103-A20A-4EA5-8636-C73B709A5BF8}

Two files:

amstream.dll, 8-Oct-15 14:10, Application Extension, 267 KB

8afc49b02429a, 8-Oct-15 14:32, File, 178 KB

Do you think this is the virus? If so, should I manually delete it?

Regards

tjg79 · 08 Oct 2015

I've contacted ESET tech support and they have opened a case with elevated tech support. We weren't able to do a chat support, so we've switched to email. I've emailed them a compendium of log files gathered by one of their ESET utilities. They're supposed to give me a call or email back after they've analyzed the logs.

I will move this topic to the malware forum, because that is what this is all about.

Regards

Callender · 08 Oct 2015

tjg79 said:

Callender said:

I looked at your log. Can you confirm what is in this folder?

C:\ProgramData\{9A88E103-A20A-4EA5-8636-C73B709A5BF8}

Two files:

amstream.dll, 8-Oct-15 14:10, Application Extension, 267 KB

8afc49b02429a, 8-Oct-15 14:32, File, 178 KB

Do you think this is the virus? If so, should I manually delete it?

Regards

I think it's legit and should be left alone. It's just that that GUID could have contained some malware. In this case - it doesn't. Thanks for having a look!

Callender · 08 Oct 2015

tjg79 said:

I will move this topic to the malware forum, because that is what this is all about.

Regards

Good idea!

tjg79 · 08 Oct 2015

The new thread:

https://www.sevenforums.com/system-se...ml#post3158572

NoelDP · 09 Oct 2015

The MGADiag is clear - and shows no significant changes in the past year or so (compared to your earlier thread).
KB971033 is installed - and happy

tjg79 · 09 Oct 2015

Thank you Noel.

When I clicked on that UAC pop-up, I immediately started having a virus problem. Presently, neither ESET Smart Security 8, Windows Defender nor SuperAntiSpyware have been able to eradicate it.

This virus downloads temp file junk at an alarming rate. It also causes the system to behave very sluggishly when navigating with Windows Explorer. When I shutdown, I get a few moments of webpage ads visible in flashes.

tjg79 · 09 Oct 2015

This was a Trojan.Bedep virus variation. ESET tech support removed it and repaired the damage. Without their support, I would have had to restore the system. However, as I had deleted all my restore points, I would have had to reload the OS.

It all started when I clicked "Yes" on that User Account Control box. Whenever something like that pops up for no reason, you should start scanning.

Regards

Callender · 09 Oct 2015

Great that you got it sorted. It would be interesting to know if task scheduler shows the time that WAT was last run and if it corresponded to the time/ date that you clicked on the pop up or if it was some sort of fake pop up.

https://www.sevenforums.com/attachmen...-scheduler.jpg