Author Topic: Windows Temp Folder filled with Viruses  (Read 3064 times)

0 Members and 1 Guest are viewing this topic.

Offline unikat.82

  • Newbie
  • *
  • Posts: 6
Windows Temp Folder filled with Viruses
« on: October 29, 2020, 01:49:12 PM »
Hello Forum,

as you can see on the attached picture. My Avast Virus Container gets filled.
Its always in the Windows Temp Folder and its some kind of "code" as a exe file.
I hope you can help me:

Thx for help

Offline unikat.82

  • Newbie
  • *
  • Posts: 6
Re: Windows Temp Folder filled with Viruses
« Reply #1 on: October 29, 2020, 01:53:19 PM »
I have started the first steps of the Instructions. Here are the log files of Malewarebytes and FRST64.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37505
  • Not a avast user
Re: Windows Temp Folder filled with Viruses
« Reply #2 on: October 29, 2020, 02:35:48 PM »
So you are using cracked software     👎    have fun   :P



HackTool.KMS, C:\ProgramData\KMSAutoS\bin\driver\x64TAP1\devcon.exe, Keine Aktion durch Benutzer, 1303, 805275, , , , , 3904D0698962E09DA946046020CBCB17, A51E25ACC489948B31B1384E1DC29518D19B421D6BC0CED90587128899275289
HackTool.KMS, C:\ProgramData\KMSAutoS\bin\driver\x64TAP2\devcon.exe, Keine Aktion durch Benutzer, 1303, 805275, , , , , 7F0C8F7B6F6D22ECD83013F2F26A71AE, A4E561F666C08353C2226E8E264555C406893B0AD1B74FD05F4F29655E128809
HackTool.KMS, C:\ProgramData\KMSAutoS\bin\driver\x64TAP2\tapoas.inf, Keine Aktion durch Benutzer, 1303, 805275, , , , , 61243CB103543EE3163BF16DF69BCB54, 1652B1DE2F15EEACBD06E0AB14ADA5A466316FFD3AB88D4A2A46CFCBD25FDFA1
HackTool.KMS, C:\ProgramData\KMSAutoS\bin\driver\x64TAP2\tapoas.sys, Keine Aktion durch Benutzer, 1303, 805275, , , , , 927D0CDB3F96EFC1E98FB1A2C9FB67AD, 58F14DAA0EA21EA2F2A1D3D62C88BD8E5A0E0EF498B7B8D367BEEADE6A46843C
HackTool.KMS, C:\ProgramData\KMSAutoS\bin\driver\x64WDV\FakeClient.exe, Keine Aktion durch Benutzer, 1303, 805275, , , , , D25567C3C868A53A018A114C903E9932, 141BA0B04CBE778669F7BC9286E0F88FCAD05120C296BFF2F075E643ED5EB125
HackTool.KMS, C:\ProgramData\KMSAutoS\bin\driver\x64WDV\WdfCoInstaller01009.dll, Keine Aktion durch Benutzer, 1303, 805275, , , , , BE566E174EAF5B93B0474593CD8F2715, CEE8496BFA1080FD84FC48BA4375625238900FE93EA739B2DC0300206FDE8330
HackTool.KMS, C:\ProgramData\KMSAutoS\bin\driver\x64WDV\WinDivert.dll, Keine Aktion durch Benutzer, 1303, 805275, , , , , 3F0C03E5076C7E6B404F894FF4DC5BB1, 4E7EBED8410C83B73A23185AA94680143DA2933305CD6DEEFE8EC0B51B7EE6F3
HackTool.KMS, C:\ProgramData\KMSAutoS\bin\driver\x64WDV\WinDivert.inf, Keine Aktion durch Benutzer, 1303, 805275, , , , , A94D989905A248AFCA52BC3CBFCB248B, 6C9F7DEA4F9A47788D5D2BA110B08457FD00DBABE4812EBCA6F022300843A75D
HackTool.KMS, C:\ProgramData\KMSAutoS\bin\driver\x64WDV\WinDivert.sys, Keine Aktion durch Benutzer, 1303, 805275, , , , , A0D15D8727D0780C51628DF46B7268B3, 5E23F3ED1D6620C39A644F9879404A22DED86B3B076EC4A898B4B6BE244AFD64
HackTool.KMS, C:\ProgramData\KMSAutoS\bin\driver\oas_sert.cer, Keine Aktion durch Benutzer, 1303, 805275, , , , , 0041584E5F66762B1FA9BE8910D0B92B, BB27684B569CBB72DEC63EA6FDEF8E5F410CDAEB73717EEE1B36478DBCFF94CC
HackTool.KMS, C:\ProgramData\KMSAutoS\bin\driver\tap0901.cer, Keine Aktion durch Benutzer, 1303, 805275, , , , , 3D5FFD53BE77C32CBB147F32423C0A86, 669C56DB590C0308EA25C4508375BB88611B06B1AE689A895DC6B19F4DF5619C
HackTool.KMS, C:\ProgramData\KMSAutoS\bin\KMSSS.exe, Keine Aktion durch Benutzer, 1303, 805275, , , , , 0F03F72A92AEF6D63EB74E73F8AC201D, ACD55C44B8B0D66D66DEFED85CA18082C092F048D3621DA827FCE593305C11FD
HackTool.KMS, C:\ProgramData\KMSAutoS\bin\KMSSS.log, Keine Aktion durch Benutzer, 1303, 805275, , , , , FFE82653A19C263A7333F2FFF43D8233, 711A5B9D4F6D737D28713C5A09CDDEDBE22084D8578FCF56074232CE6D004C1C
HackTool.KMS, C:\ProgramData\KMSAutoS\bin\TunMirror.exe, Keine Aktion durch Benutzer, 1303, 805275, , , , , 362498C3E71EEAA066A67E4A3F981D1C, D87E8D9D43758CE67A8052CB2334B99CC24F9B0437EE44815F360BE0B22D835A
HackTool.KMS, C:\ProgramData\KMSAutoS\bin\TunMirror2.exe, Keine Aktion durch Benutzer, 1303, 805275, , , , , 4AA2E87FBA32884CC6FF97B1798E69EB, 8D6432321E0C5BC3C9ABEFB6B0C102F30E910B0691D90194DD0115A4F4DC4D9C
HackTool.KMS, C:\ProgramData\KMSAutoS\kmsauto.ini, Keine Aktion durch Benutzer, 1303, 805275, , , , , E5E5B4B5DBDB0C64F6D376DDCBF64FE5, 0B470469BEAFE48E484EBAD0CB6535692706E17BAA942AEBE2DD3FA9A7C971B5
HackTool.FilePatch, C:\PROGRAMDATA\FREEMAKE\FREEMAKEVIDEOCONVERTER\PATCH-FMVC.EXE, Keine Aktion durch Benutzer, 7521, 281135, 1.0.32202, , ame, , 89BAF4DC010476F30F1317201030F7BE, 44EAE2F6E5B23D4234BF10597B0F21E13267DC8004B6F33FA305071EB2834A7C




« Last Edit: October 29, 2020, 02:56:56 PM by Pondus »

Offline strakl

  • Sr. Member
  • ****
  • Posts: 246
Re: Windows Temp Folder filled with Viruses
« Reply #3 on: October 29, 2020, 02:50:06 PM »
And then you wonder why you have a virus on your computer. It's obvious now!
Guys, for the sake of god if you can then don't use crack software.

Offline unikat.82

  • Newbie
  • *
  • Posts: 6
Re: Windows Temp Folder filled with Viruses
« Reply #4 on: October 29, 2020, 02:58:56 PM »
Omg yeah thats the reason! . Iam using this for years without any problems and i will not discuss the reasons why.
If you don't have anything productive to contribute, than plz dont answer my thread. I dont need comments like:
"And then you wonder why you have a virus on your computer"!!!

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37505
  • Not a avast user
Re: Windows Temp Folder filled with Viruses
« Reply #5 on: October 29, 2020, 03:11:12 PM »
All malware removal helpers in this forum are trained at UNITE  https://uniteagainstmalware.com/

They usually follow these  piracy guidelines  (link to malwarebytes forum)  https://forums.malwarebytes.com/topic/97700-piracy/


« Last Edit: October 31, 2020, 10:29:51 AM by Pondus »