Got a typiccor.com / McAfee Secure, 3 viruses detected box

[PhilipO]

I have a typiccor.com / McAfee Secure box on the right side in Windows 10. I just installed a video card, downloaded drivers from AMD and it popped up. Malwarebytes can't detect it. I have a picture of the desktop, FRST, and Addition files attached.

Cannot find anything in Chrome having to do with typiccor.com.

FRST.txt Addition.txt

[Porthos]

4 minutes ago, PhilipO said:

I have a typiccor.com / McAfee Secure box on the right side in Windows 10.

It sounds like an issue with the push notifications feature in Chromium based browsers (which includes MS Edge).  Please see if the instructions in this Malwarebytes Labs article help or not.

Please let us know how it goes and if the issue still persists.

Thanks

[PhilipO]

I rarely use edge, but I did find typiccor.com in notifications. Turned it off and the, I guess it is a ad bar, went away. Thanks so much Porthos.

[AdvancedSetup]

Hello @PhilipO

I would recommend you uninstall the following

• Bonjour
   

 

Your Event Logs show the following issues as well

 

Error: (12/21/2021 09:11:29 PM) (Source: Apache Service) (EventID: 3299) (User: )
Description: The Apache service named  reported the following error:
>>> httpd.exe: Could not reliably determine the server's fully qualified domain name, using 192.168.1.3 for ServerName     .

 

Error: (12/21/2021 08:57:54 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: HitmanPro_x64.exe, version: 3.8.23.318, time stamp: 0x60a20d09
Faulting module name: HitmanPro_x64.exe, version: 3.8.23.318, time stamp: 0x60a20d09
Exception code: 0xc0000005
Fault offset: 0x00000000002c7039
Faulting process id: 0x19ac
Faulting application start time: 0x01d7f6e7ba68b012
Faulting application path: C:\Users\Phil.000\Downloads\HitmanPro_x64.exe
Faulting module path: C:\Users\Phil.000\Downloads\HitmanPro_x64.exe
Report Id: e22d4fe1-ad0f-484a-9d44-c34d47dda451
Faulting package full name:
Faulting package-relative application ID:

Error: (12/21/2021 08:57:42 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Failed to create restore point (Process = C:\Users\Phil.000\Downloads\HitmanPro_x64.exe ; Description = Checkpoint by HitmanPro; Error = 0x8007043c).

 

System errors:
=============
Error: (12/22/2021 05:26:41 AM) (Source: Netwtw08) (EventID: 5005) (User: )
Description: Intel(R) Wi-Fi 6 AX200 160MHz : Has encountered an internal error and has failed.
5005 - Driver internal error

Error: (12/22/2021 05:26:41 AM) (Source: Netwtw08) (EventID: 5002) (User: )
Description: Intel(R) Wi-Fi 6 AX200 160MHz : Has determined that the network adapter is not functioning properly.
5002 - uCode SW error (SysAssert, NMI)

 

Error: (12/21/2021 09:11:28 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The AMDRyzenMasterDriver service failed to start due to the following error:
The system cannot find the path specified.

 

 

You have an App Init value for a file that does not appear to be there anymore

AppInit_DLLs: C:\Windows\system32\nvinitx.dll => No File

 

You have some policy restrictins set, which may or may not be on purpose

GroupPolicy: Restriction ? <==== ATTENTION
GroupPolicy\User: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION

 

You have multiple old entries listed in your Task Schedules that indicate the computer was upgraded from Windows 7 to Windows 10 that could be removed as well

 

Just some items you may want to research more and see if they need correcting or not.

Cheers

 

 

[PhilipO]

Thank you,

deleted Bonjour

 

Don't know what to do about the second one.

 

Had an old version of Hitman Pro (2014). I installed a new version to check for viruses, might need to uninstall all of it.

 

New motherboard has wifi 6, never did install the driver because I use a wired connection.

 

AMDRyzenMasterDriver appears to be a leftover from when I installed Gigabyte EasyTune. I never could get it to work.

 

I found the nvinitx.dll entry in the registry, I can delete it? Sounds like it's for a nvidia I don't have.

 

The policy restrictions were probably from the olden days.

 

I deleted several scheduled tasks. Might have to work more on that.

 

Thanks again.

[AdvancedSetup]

Completely up to you but you might consider backing up your personal data to an external drive and then reinstalling Windows fresh and clean. Would work so much better, faster, safer.

 

Greg Carmack - MVP 2010-2020 -Clean Install Windows 10
https://answers.microsoft.com/en-us/windows/forum/windows_10-windows_install/clean-install-windows-10/1c426bdf-79b1-4d42-be93-17378d93e587

How to Create a Local Account While Setting Up Windows 10
https://www.howtogeek.com/442792/how-to-create-a-local-account-while-setting-up-windows-10/

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Please review the following to help you better protect your computer and privacy Tips to help protect from infection

Thank you