(Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher64.exe (Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher32.exe (TechSmith Corporation) C:\Program Files (x86)\Snagit 11\Snagit32.exe (Rivet Networks) C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe (Alienware) C:\Program Files\Alienware\Command Center\AlienFusionController.exe (Alienware) C:\Program Files\Alienware\Command Center\AlienwareAlienFXController.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe (Alienware) C:\Program Files\Alienware\Command Center\ThermalController.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe (Alienware) C:\Program Files\Alienware\Command Center\AWCCServiceController.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe (Rivet Networks) C:\Program Files\Killer Networking\Network Manager\KillerService.exe () C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe
#ADORIASOFT LLC FACERIG SOFTWARE#
(Flexera Software LLC) C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe (Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Alienware) C:\Program Files\Alienware\Command Center\ThermalsWindowsService.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetr圜ontainer.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\.51\remoting_host.exe (Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\ (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Ready Mode Technology\IRMTService.exe (Intel Corporation) C:\Windows\System32\ibtsiva.exe or its subsidiaries) C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe (Juniper Networks, Inc.) C:\Program Files (x86)\Juniper Networks\Common Files\dsNcService.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Code 42 Software) C:\Program Files\CrashPlan\CrashPlanService.exe (Alienware) C:\Program Files\Alienware\Command Center\AlienFXWindowsService.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe (Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki119562.inf_amd64_6a130ba6366a3570\igfxCUIService.exe (If an entry is included in the fixlist, the process will be closed. Internet Explorer Version 11 (Default browser: Chrome)
#ADORIASOFT LLC FACERIG WINDOWS 10#
Platform: Windows 10 Pro Version 1607 (X64) Language: English (United States) Loaded Profiles: jenksy (Available Profiles: jenksy)
Scan result of Farbar Recovery Scan Tool (FRST) (圆4) Version: 05-02-2017 I've attached my Additiional.txt and my FRST.txt is below: PLEASE HELP, and THANK YOU in advance!! It appears to be coming from C:\Windows\System32\rundll32.exe (screenshot attached). Suspecting I have an infection I installed Malwarebytes and sure enough I'm receiving several notifications indicating a Website is blocked, each time with a different (very-suspicious) domain and IP address.
0 kommentar(er)
