Possible Infections - High memory usage

[maxiko]

Hello there,

 

At the task manager, i see those files are using 800-900k memory mostly. "atieclxx.exe, crss.exe, spotifywebhelper.exe, CCC.exe, itype.exe, ipoint.exe MOM.exe, taskeng.exe, winlogon.exe" That's not normal i guees. I need to make sure if my computer is clean.

 

Addition.txtFRST.txt

[kevinf80]

Hello and

 

P2P/Piracy Warning:

 

   

If you're using Peer 2 Peer software such as uTorrent, BitTorrent or similar you must either fully uninstall them or completely disable them from running while being assisted here.

Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.

If you have illegal/cracked software, cracks, keygens etc. on the system, please remove or uninstall them now and read the policy on Piracy.

 

 

Task: {E7F3FC2D-C69E-4BEF-AC82-A6A76DAAAF4E} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2014-04-20] ()

 

You have illegal software running on your system, that is a direct breach of Forum protocol. If you require help you MUST remove all such software, also any P2P software and associated application. When that is complete run the following.

 

Download CKScanner from here: http://downloads.malwareremoval.com/CKScanner.exe

Important - Save it to your desktop.

Doubleclick CKScanner.exe (Right click and "Run as administrator" in Vista/Win7).

Give permission if necessary, and click Search For Files.

After a very short time, when the cursor hourglass disappears, click Save List To File.

A message box will verify the file saved. Please run the program once only.

Double-click the CKFiles.txt icon on your desktop and copy/paste the contents in your next reply.

 

Next,

 

Run the MGA Diagnostic Tool and post back the report it creates:

• 
  

Download MGADiag from here: http://go.microsoft.com/fwlink/?linkid=52012 and save it to your desktop.
Double-click on MGADiag.exe to launch the program
Click "Continue"
Ensure that the "Windows" tab is selected (it should be by default).
Click the "Copy" button to copy the MGA Diagnostic Report to the Windows clipboard.
Paste the MGA Diagnostic Report back here in your next reply.

 

Next,

 

Re- run FRST, this time ensure "Addition" is checkmarked under "Optional Scans" Post both produced logs....

 

Thank you,

 

Kevin

[maxiko]

Hey there Kevin,

 

Thanks for your assistance. I just removed Office 2013 and did the other steps. Here are the reports.

 

MGA Diagnostic Report.txtFRST.txtckfiles.txtAddition.txt

[kevinf80]

The CKScanner log is not correct, there are missing entries. What is posted does not match the scanner sequence. I need to see the full CKScanner log before we progress

[maxiko]

Hello again Kevin,

 

I double checked to be sure and took a screenshot for you. It looked same to me.

 

ckfiles.txt

[kevinf80]

That is from the fifth run of CKScanner, I want to see the full log from the first run

[maxiko]

I have posted the first one at here  but I honestly have no idea about those missing entries. I just used "Save List to File" button then upladed the file here.

[kevinf80]

The scanner sequence was created so that we know exactly how many entry lines to expect in the log, it is impossible for the sequence to be wrong as has been proved in the last log you posted. The log sequence now shows correctly the number of expected lines. The trouble is it is the fifth time the scanner was run, why did you run CKScanner 5 times?

 

Until I see the first log in full I cannot any further help....

[AdvancedSetup]

This topic will now be closed due to evidence of cracked or pirated software on this system.

Piracy Policy