Voiceactivationmanager.dll detected as malware in my computer

[crack4]

Hello,

it all started a few days ago, when I was having some connectivity problems. My Internet suddenly disconnected and the browser showed (DNS_PROBE_NO_INTERNET). That only happened after being connected for a while, and after restarting the adapter it fixed. But I started to become worried. I noticed also that while talking through Discord, sometimes the voices of my friends became extremely high pitched and high volume,  almost deafening. I don't know if it has something to do, but it is very strange and happened randomly. 5 days later or so, a new update (Windows 10 update 2004) popped out in my computer, and after it suddenly all those problems seemed to be fixed. 

However, yesterday I scanned my computer with both Kaspersky Total Security and Malwarebytes, and the latter detected 2 malware.generic.4226327228, located in the older Windows version folder (Windows/SYSWOW64/voiceactivationmanager.dll). I quarantined those items, but I don't know if there could be more malware.

I would be very grateful if someone could orientate me in what to do. Thanks in advance.  

[crack4]

pd: Sorry, the route of the malware was 

Windows.old/SYSWOW64/voiceactivationmanager.dll

[kevinf80]

Hello crack4 and welcome to Malwarebytes,

That file is a Windows file that normally runs from the system32 folder, it also runs in the syswow64 folder. Obviously they also show in Windows.old folder after a major system update. I`m not really sure that file identified on your system is malicious.

Maybe @Atribune or @shadowwar will comment on this alert..

Run the following diagnostic scan to check your system:

Download Farbar Recovery Scan Tool and save it to your desktop. Alternative download option: http://www.techspot.com/downloads/6731-farbar-recovery-scan-tool.html Note: You need to run the version compatible with your system (32 bit or 64 bit). If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version. If your security alerts to FRST either, accept the alert or turn your security off to allow FRST to run. It is not malicious or infected in any way... Be aware FRST must be run from an account with Administrator status... When you`ve downloaded FRST64.exe, rename it to FRST64English.exe...   Double-click to run it. When the tool opens click Yes to disclaimer.(Windows 8/10 users will be prompted about Windows SmartScreen protection - click More information and Run.) Make sure Addition.txt is checkmarked under "Optional scans"   Press Scan button to run the tool.... It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply. The tool will also make a log named (Addition.txt) Please attach that log to your reply. Thank you, Kevin..

 

[crack4]

Thank you very much for the fast reply,

I attach the logs you requested.

 

 

Addition.txt FRST.txt

[kevinf80]

Hiya crack4,

The logs from FRST do not show any malware or infection, the "Attention" alerts in Group Policy and Firefox are related to your security "Kaspersky" so no further action is needed.

Hopefully one of the two staff guys i highlighted in my initial reply will respond soon and comment on the alert from within the Windows.old folder.

Have a read at the following link regarding that folder to understand why its there, is it worth keeping and it potential uses etc..

 

https://www.howtogeek.com/130558/how-to-restore-your-files-from-the-windows.old-folder-after-upgrading/

Thank you,

Kevin

 

 

Edited July 21, 2020 by kevinf80
typing error

[kevinf80]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Please review the following for Tips to help protect from infection

Thank you