Solved Sound Virus?

Sophos was taking a long time and I accidentally shut it down. I have it scanning now. I'll reply when I wake up (GMT)
 
2015-10-16 20:53:19.851 Sophos Virus Removal Tool version 2.5.4
2015-10-16 20:53:19.851 Copyright (c) 2009-2014 Sophos Limited. All rights reserved.

2015-10-16 20:53:19.851 This tool will scan your computer for viruses and other threats. If it finds any, it will give you the option to remove them.

2015-10-16 20:53:19.851 Windows version 6.2 SP 0.0 build 9200 SM=0x300 PT=0x1 WOW64
2015-10-16 20:53:19.866 Checking for updates...
2015-10-16 20:53:20.007 Update progress: proxy server not available
2015-10-16 20:53:40.875 Option all = no
2015-10-16 20:53:40.875 Option recurse = yes
2015-10-16 20:53:59.529 Option archive = no
2015-10-16 20:53:59.529 Option service = yes
2015-10-16 20:53:59.529 Option confirm = yes
2015-10-16 20:53:59.529 Option sxl = yes
2015-10-16 20:53:59.529 Option max-data-age = 35
2015-10-16 20:53:59.529 Option EnableSafeClean = yes
2015-10-16 20:54:01.860 Downloading updates...
2015-10-16 20:54:01.876 Update progress: [I96736] Looking for package C1A903B2-E63E-483b-982D-04BB9C457C60 1.0
2015-10-16 20:54:01.876 Update progress: [I49502] Found supplement SAVIW32 LATEST
2015-10-16 20:54:01.876 Update progress: [I49502] Found supplement IDE521 LATEST
2015-10-16 20:54:01.876 Update progress: [I49502] Found supplement IDE522 LATEST
2015-10-16 20:54:01.876 Update progress: [I49502] Found supplement IDE523 LATEST
2015-10-16 20:54:01.876 Update progress: [I19463] Syncing product C1A903B2-E63E-483b-982D-04BB9C457C60 1
2015-10-16 20:54:01.876 Update progress: [I19463] Syncing product SAVIW32 61
2015-10-16 20:54:03.282 Update progress: [I19463] Syncing product IDE521 142
2015-10-16 20:54:03.891 Installing updates...
2015-10-16 20:54:10.922 Option vdl-logging = yes
2015-10-16 20:54:12.157 Customer ID: 094260ca9b3af99f9d4a3909fc47a743
2015-10-16 20:54:12.157 Machine ID: 37f1bdba8e0748f09e7492d3f1d18093
2015-10-16 20:54:12.157 Component SVRTcli.exe version 2.5.4
2015-10-16 20:54:12.157 Component control.dll version 2.5.4
2015-10-16 20:54:12.157 Component SVRTservice.exe version 2.5.4
2015-10-16 20:54:12.157 Component engine\osdp.dll version 1.44.1.2230
2015-10-16 20:54:12.157 Component engine\veex.dll version 3.63.0.2230
2015-10-16 20:54:12.157 Component engine\savi.dll version 9.0.0.2230
2015-10-16 20:54:12.157 Component rkdisk.dll version 1.5.30.0
2015-10-16 20:54:12.157 Version info: Product version 2.5.4
2015-10-16 20:54:12.157 Version info: Detection engine 3.63.0
2015-10-16 20:54:12.157 Version info: Detection data 5.20
2015-10-16 20:54:12.157 Version info: Build date 13/10/2015
2015-10-16 20:54:12.157 Version info: Data files added 154
2015-10-16 20:54:12.157 Version info: Last successful update (not yet updated)
2015-10-16 20:54:12.157 Error level 1
2015-10-16 20:54:12.360 Update progress: [I19463] Syncing product IDE522 14
2015-10-16 20:54:12.360 Update progress: [I19463] Syncing product IDE523 1
2015-10-16 20:54:39.573 Update successful
2015-10-16 20:55:00.261 Option all = no
2015-10-16 20:55:00.261 Option recurse = yes
2015-10-16 20:55:00.261 Option archive = no
2015-10-16 20:55:00.261 Option service = yes
2015-10-16 20:55:00.261 Option confirm = yes
2015-10-16 20:55:00.261 Option sxl = yes
2015-10-16 20:55:00.261 Option max-data-age = 35
2015-10-16 20:55:00.261 Option EnableSafeClean = yes
2015-10-16 20:55:02.011 Option vdl-logging = yes
2015-10-16 20:55:02.027 Customer ID: 094260ca9b3af99f9d4a3909fc47a743
2015-10-16 20:55:02.027 Machine ID: 37f1bdba8e0748f09e7492d3f1d18093
2015-10-16 20:55:02.027 Component SVRTcli.exe version 2.5.4
2015-10-16 20:55:02.027 Component control.dll version 2.5.4
2015-10-16 20:55:02.027 Component SVRTservice.exe version 2.5.4
2015-10-16 20:55:02.027 Component engine\osdp.dll version 1.44.1.2230
2015-10-16 20:55:02.027 Component engine\veex.dll version 3.63.0.2230
2015-10-16 20:55:02.027 Component engine\savi.dll version 9.0.0.2230
2015-10-16 20:55:02.027 Component rkdisk.dll version 1.5.30.0
2015-10-16 20:55:02.027 Version info: Product version 2.5.4
2015-10-16 20:55:02.027 Version info: Detection engine 3.63.0
2015-10-16 20:55:02.027 Version info: Detection data 5.20
2015-10-16 20:55:02.027 Version info: Build date 13/10/2015
2015-10-16 20:55:02.027 Version info: Data files added 154
2015-10-16 20:55:02.027 Version info: Last successful update 16/10/2015 21:54:39

2015-10-17 22:04:20.595 Sophos Virus Removal Tool version 2.5.4
2015-10-17 22:04:20.595 Copyright (c) 2009-2014 Sophos Limited. All rights reserved.

2015-10-17 22:04:20.595 This tool will scan your computer for viruses and other threats. If it finds any, it will give you the option to remove them.

2015-10-17 22:04:20.595 Windows version 6.2 SP 0.0 build 9200 SM=0x300 PT=0x1 WOW64
2015-10-17 22:04:20.595 Checking for updates...
2015-10-17 22:04:20.627 Update progress: proxy server not available
2015-10-17 22:04:20.798 Error: failed to create service (1072: The specified service has been marked for deletion.)
2015-10-17 22:04:28.728 Sophos Virus Removal Tool version 2.5.4
2015-10-17 22:04:28.728 Copyright (c) 2009-2014 Sophos Limited. All rights reserved.

2015-10-17 22:04:28.728 This tool will scan your computer for viruses and other threats. If it finds any, it will give you the option to remove them.

2015-10-17 22:04:28.728 Windows version 6.2 SP 0.0 build 9200 SM=0x300 PT=0x1 WOW64
2015-10-17 22:04:28.728 Checking for updates...
2015-10-17 22:04:28.774 Update progress: proxy server not available
2015-10-17 22:04:49.375 Option all = no
2015-10-17 22:04:49.375 Option recurse = yes
2015-10-17 22:04:49.375 Option archive = no
2015-10-17 22:04:49.375 Option service = yes
2015-10-17 22:04:49.375 Option confirm = yes
2015-10-17 22:04:49.375 Option sxl = yes
2015-10-17 22:04:49.375 Option max-data-age = 35
2015-10-17 22:04:49.375 Option EnableSafeClean = yes
2015-10-17 22:04:53.049 Option vdl-logging = yes
2015-10-17 22:04:53.065 Customer ID: 094260ca9b3af99f9d4a3909fc47a743
2015-10-17 22:04:53.065 Machine ID: 37f1bdba8e0748f09e7492d3f1d18093
2015-10-17 22:04:53.143 Component SVRTcli.exe version 2.5.4
2015-10-17 22:04:53.143 Component control.dll version 2.5.4
2015-10-17 22:04:53.159 Component SVRTservice.exe version 2.5.4
2015-10-17 22:04:53.159 Component engine\osdp.dll version 1.44.1.2230
2015-10-17 22:04:53.159 Component engine\veex.dll version 3.63.0.2230
2015-10-17 22:04:53.159 Component engine\savi.dll version 9.0.0.2230
2015-10-17 22:04:53.190 Component rkdisk.dll version 1.5.30.0
2015-10-17 22:04:53.190 Version info: Product version 2.5.4
2015-10-17 22:04:53.190 Version info: Detection engine 3.63.0
2015-10-17 22:04:53.190 Version info: Detection data 5.20
2015-10-17 22:04:53.190 Version info: Build date 13/10/2015
2015-10-17 22:04:53.190 Version info: Data files added 154
2015-10-17 22:04:53.190 Version info: Last successful update 16/10/2015 21:54:39
2015-10-17 22:04:55.846 Downloading updates...
2015-10-17 22:04:55.846 Update progress: [I96736] Looking for package C1A903B2-E63E-483b-982D-04BB9C457C60 1.0
2015-10-17 22:04:55.846 Update progress: [I49502] Found supplement SAVIW32 LATEST
2015-10-17 22:04:55.846 Update progress: [I49502] Found supplement IDE521 LATEST
2015-10-17 22:04:55.846 Update progress: [I49502] Found supplement IDE522 LATEST
2015-10-17 22:04:55.846 Update progress: [I49502] Found supplement IDE523 LATEST
2015-10-17 22:04:55.846 Update progress: [I19463] Syncing product C1A903B2-E63E-483b-982D-04BB9C457C60 1
2015-10-17 22:04:55.846 Update progress: [I19463] Syncing product SAVIW32 61
2015-10-17 22:04:55.846 Update progress: [I19463] Syncing product IDE521 142
2015-10-17 22:04:56.143 Update progress: [I19463] Syncing product IDE522 17
2015-10-17 22:04:56.487 Installing updates...
2015-10-17 22:04:57.518 Error level 1
2015-10-17 22:04:58.127 Update progress: [I19463] Syncing product IDE523 1
2015-10-17 22:04:58.284 Update successful
2015-10-17 22:05:17.561 Option all = no
2015-10-17 22:05:17.561 Option recurse = yes
2015-10-17 22:05:17.561 Option archive = no
2015-10-17 22:05:17.561 Option service = yes
2015-10-17 22:05:17.561 Option confirm = yes
2015-10-17 22:05:17.561 Option sxl = yes
2015-10-17 22:05:17.577 Option max-data-age = 35
2015-10-17 22:05:17.577 Option EnableSafeClean = yes
2015-10-17 22:05:19.327 Option vdl-logging = yes
2015-10-17 22:05:19.374 Customer ID: 094260ca9b3af99f9d4a3909fc47a743
2015-10-17 22:05:19.374 Machine ID: 37f1bdba8e0748f09e7492d3f1d18093
2015-10-17 22:05:19.374 Component SVRTcli.exe version 2.5.4
2015-10-17 22:05:19.374 Component control.dll version 2.5.4
2015-10-17 22:05:19.390 Component SVRTservice.exe version 2.5.4
2015-10-17 22:05:19.390 Component engine\osdp.dll version 1.44.1.2230
2015-10-17 22:05:19.390 Component engine\veex.dll version 3.63.0.2230
2015-10-17 22:05:19.390 Component engine\savi.dll version 9.0.0.2230
2015-10-17 22:05:19.390 Component rkdisk.dll version 1.5.30.0
2015-10-17 22:05:19.390 Version info: Product version 2.5.4
2015-10-17 22:05:19.390 Version info: Detection engine 3.63.0
2015-10-17 22:05:19.390 Version info: Detection data 5.20
2015-10-17 22:05:19.390 Version info: Build date 13/10/2015
2015-10-17 22:05:19.390 Version info: Data files added 157
2015-10-17 22:05:19.390 Version info: Last successful update 17/10/2015 23:04:58

2015-10-17 22:20:53.241 SafeClean bin directory is empty.
2015-10-17 22:20:53.241 Error level 0

2015-10-17 22:23:20.629 Scan cancelled by user.
2015-10-17 22:23:20.629

------------------------------------------------------------

2015-10-17 22:23:24.410 Sophos Virus Removal Tool version 2.5.4
2015-10-17 22:23:24.410 Copyright (c) 2009-2014 Sophos Limited. All rights reserved.

2015-10-17 22:23:24.410 This tool will scan your computer for viruses and other threats. If it finds any, it will give you the option to remove them.

2015-10-17 22:23:24.410 Windows version 6.2 SP 0.0 build 9200 SM=0x300 PT=0x1 WOW64
2015-10-17 22:23:24.410 Checking for updates...
2015-10-17 22:23:24.457 Update progress: proxy server not available
2015-10-17 22:23:26.472 Update not required
2015-10-17 22:23:44.342 Option all = no
2015-10-17 22:23:44.342 Option recurse = yes
2015-10-17 22:23:44.342 Option archive = no
2015-10-17 22:23:44.342 Option service = yes
2015-10-17 22:23:44.342 Option confirm = yes
2015-10-17 22:23:44.342 Option sxl = yes
2015-10-17 22:23:44.342 Option max-data-age = 35
2015-10-17 22:23:44.342 Option EnableSafeClean = yes
2015-10-17 22:23:46.061 Option vdl-logging = yes
2015-10-17 22:23:46.061 Customer ID: 094260ca9b3af99f9d4a3909fc47a743
2015-10-17 22:23:46.061 Machine ID: 37f1bdba8e0748f09e7492d3f1d18093
2015-10-17 22:23:46.061 Component SVRTcli.exe version 2.5.4
2015-10-17 22:23:46.061 Component control.dll version 2.5.4
2015-10-17 22:23:46.061 Component SVRTservice.exe version 2.5.4
2015-10-17 22:23:46.061 Component engine\osdp.dll version 1.44.1.2230
2015-10-17 22:23:46.061 Component engine\veex.dll version 3.63.0.2230
2015-10-17 22:23:46.061 Component engine\savi.dll version 9.0.0.2230
2015-10-17 22:23:46.077 Component rkdisk.dll version 1.5.30.0
2015-10-17 22:23:46.077 Version info: Product version 2.5.4
2015-10-17 22:23:46.077 Version info: Detection engine 3.63.0
2015-10-17 22:23:46.077 Version info: Detection data 5.20
2015-10-17 22:23:46.077 Version info: Build date 13/10/2015
2015-10-17 22:23:46.077 Version info: Data files added 157
2015-10-17 22:23:46.077 Version info: Last successful update 17/10/2015 23:04:58

2015-10-17 23:44:21.668 >>> Virus 'Mal/VMProtBad-A' found in file C:\Games\Sniper Elite 3\bin\steam_api.dll
2015-10-17 23:44:40.890 >>> Virus 'Mal/VMProtBad-A' found in file C:\Games\Sniper Elite 3\steam_api.dll
2015-10-17 23:44:41.156 Could not open C:\hiberfil.sys
2015-10-18 01:01:28.170 Could not open C:\swapfile.sys
2015-10-18 01:05:14.794 Could not open C:\System Volume Information\{1708bdf0-69bd-11e5-bf32-a0481c1c8d5b}{3808876b-c176-4e48-b7ae-04046e6cc752}
2015-10-18 01:05:14.794 Could not open C:\System Volume Information\{3808876b-c176-4e48-b7ae-04046e6cc752}
2015-10-18 01:05:14.794 Could not open C:\System Volume Information\{52c5c069-7443-11e5-bf3b-a0481c1c8d5b}{3808876b-c176-4e48-b7ae-04046e6cc752}
2015-10-18 01:05:14.794 Could not open C:\System Volume Information\{95aeb07e-6f9f-11e5-bf39-a0481c1c8d5b}{3808876b-c176-4e48-b7ae-04046e6cc752}
2015-10-18 01:05:14.809 Could not open C:\System Volume Information\{95aec8a3-6f9f-11e5-bf39-a0481c1c8d5b}{3808876b-c176-4e48-b7ae-04046e6cc752}
2015-10-18 01:05:14.809 Could not open C:\System Volume Information\{95aec8b6-6f9f-11e5-bf39-a0481c1c8d5b}{3808876b-c176-4e48-b7ae-04046e6cc752}
2015-10-18 01:06:10.291 Could not check C:\Users\Mikee\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOCK (virus scan failed)
2015-10-18 01:06:10.416 Could not check C:\Users\Mikee\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOCK (virus scan failed)
2015-10-18 01:06:18.653 Could not check C:\Users\Mikee\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\LOCK (virus scan failed)
2015-10-18 01:06:18.700 Could not check C:\Users\Mikee\AppData\Local\Google\Chrome\User Data\Default\GCM Store\LOCK (virus scan failed)
2015-10-18 01:06:22.294 Could not check C:\Users\Mikee\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mfidmkgnfgnkihnjeklbekckimkipmoe\LOCK (virus scan failed)
2015-10-18 01:06:22.372 Could not check C:\Users\Mikee\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\LOCK (virus scan failed)
2015-10-18 01:06:39.657 Could not check C:\Users\Mikee\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\LOCK (virus scan failed)
2015-10-18 01:39:50.976 >>> Virus 'Troj/Agent-AEEN' found in file C:\Users\Mikee\Downloads\Adobe After Effects CC 12.2.0.52 Final Multilanguage [ChingLiu]\Patch VR\Adobe.CC.Anticloud.exe
2015-10-18 01:50:09.377 Could not open C:\Windows\System32\catroot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb
2015-10-18 01:50:09.377 Could not open C:\Windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb
2015-10-18 01:50:16.127 Could not open C:\Windows\System32\config\BBI
2015-10-18 01:50:16.377 Could not open C:\Windows\System32\config\RegBack\DEFAULT
2015-10-18 01:50:16.377 Could not open C:\Windows\System32\config\RegBack\SAM
2015-10-18 01:50:16.393 Could not open C:\Windows\System32\config\RegBack\SECURITY
2015-10-18 01:50:16.393 Could not open C:\Windows\System32\config\RegBack\SOFTWARE
2015-10-18 01:50:16.393 Could not open C:\Windows\System32\config\RegBack\SYSTEM
2015-10-18 02:23:13.730 The following items will be cleaned up:
2015-10-18 02:23:13.745 Mal/VMProtBad-A
2015-10-18 02:23:13.745 Troj/Agent-AEEN
 
redtarget.gif
Update Firefox to the current version.

redtarget.gif
Update Adobe Flash Player: http://get.adobe.com/flashplayer/
Make sure you UN-check Yes, install McAfee Security Scan Plus

NOTE 1: Beginning with Adobe Flash Version 11.3, the universal installer includes the 32-bit and 64-bit versions of the Flash Player.
NOTE 2: While installing make sure you UN-check any extra garbage which wants to install alongside.

redtarget.gif
Update your Java version here: https://www.techspot.com/downloads/6463-java-se.html
Alternate download: http://www.java.com/en/download/manual.jsp

Note 1: UNCHECK any pre-checked toolbar and/or software offered with the Java update. The pre-checked toolbars/software are not part of the Java update.
Note 2: If you're running 64-bit system make sure you install BOTH, 32-bit and 64-bit Java.

====================================

Your computer is clean

1. This step will remove all cleaning tools we used, it'll reset restore points (so you won't get reinfected by accidentally using some older restore point) and it'll make some other minor adjustments...
This is a very crucial step so make sure you don't skip it.
Download
51a5ce45263de-delfix.png
DelFix by Xplode to your desktop. Delfix will delete all the used tools and logfiles.

Double-click Delfix.exe to start the tool.
Make sure the following items are checked:
  • Activate UAC (optional; some users prefer to keep it off)
  • Remove disinfection tools
  • Create registry backup
  • Purge System Restore
  • Reset system settings
Now click "Run" and wait patiently.
Once finished a logfile will be created. You don't have to attach it to your next reply.

2. Make sure Windows Updates are current.

3. If any trojans, rootkits or bootkits were listed among your infection(s), make sure, you change all of your on-line important passwords (bank account(s), secured web sites, etc.) immediately!

4. Check if your browser plugins are up to date.
Firefox - https://www.mozilla.org/en-US/plugincheck/
other browsers: https://browsercheck.qualys.com/ (click on "Scan without installing plugin" and then on "Scan now")

5. Download, and install WOT (Web OF Trust): http://www.mywot.com/. It'll warn you (in most cases) about dangerous web sites.

6. Run Malwarebytes "Quick scan" once in a while to assure safety of your computer.

7. Run Temporary File Cleaner (TFC), AdwCleaner and Junkware Removal Tool (JRT) weekly (you need to redownload these tools since they were removed by DelFix).

8. Download and install Secunia Personal Software Inspector (PSI): https://www.techspot.com/downloads/4898-secunia-personal-software-inspector-psi.html. The Secunia PSI is a FREE security tool designed to detect vulnerable and out-dated programs and plug-ins which expose your PC to attacks. Run it weekly.

9. (optional) If you want to keep all your programs up to date, download and install FileHippo Update Checker.
The Update Checker will scan your computer for installed software, check the versions and then send this information to FileHippo.com to see if there are any newer releases.

10. When installing\updating ANY program, make sure you always select "Custom " installation, so you can UN-check any possible "drive-by-install" (foistware), like toolbars etc., which may try to install along with the legitimate program. Do NOT click "Next" button without looking at any given page.

11. Read:
How did I get infected?, With steps so it does not happen again!: http://www.bleepingcomputer.com/forums/topic2520.html
Simple and easy ways to keep your computer safe and secure on the Internet: http://www.bleepingcomputer.com/tutorials/keep-your-computer-safe-online/
About those Toolbars and Add-ons - Potentially Unwanted Programs (PUPs) which change your browser settings: http://www.bleepingcomputer.com/for...curity-questions-best-practices/#entry3187642

12. Please, let me know, how your computer is doing.
 
Back