[Thaqalain]

Its to be noted that recently system is attacked by Sec Tool from one of site. It was downloaded itself.
----------

C:/Program Files/Wincap/rpcapd.exe (It's from CACE Tech.)

Overnight scan from XoftSpySE shows above file as unwanted , see detail log as shown in the picture. Although its from CACE Technologies, in the past from another thread
White/Gray flashing desktop.html
you suggested for another user to remove the line O23 (but it was showing as Unknown).
Kindly advice me further about complete log:

WinPcap (Reg Key):
Software/Wincap (I have deleted)
System/CurrentControlSet/service/npf
System/CurrentControlSet/service/npf/imagepath (I have deleted)


Agent YQQ TrojanSevere Risk)
Software/microsoft/windows/currentversion/run/promoreg (I have deleted)

WinPcap associated Potentially Unwanted files:
C:/Program Files/Wincap/rpcapd.exe (It's from CACE Tech.)
C:/Windows/System32/Drivers/npf.sys
C:/Windows/System32/Drivers/packet.dll
C:/Windows/System32/Drivers/phthreadVC.dll
C:/Windows/System32/Drivers/WanPacket.dll
C:/Windows/System32/Drivers/wapcap.dll


Please advice me about the stuff which I have not yet deleted.

[Osiris]

Run Malwarebytes and post its log. That file belongs to WinPCAP

[Thaqalain]

Originally Posted by Osiris

Run Malwarebytes and post its log. That file belongs to WinPCAP

I know , in the past archive you or others have never suggested to remove that file if it was from CACE Tech , a reliable source. Am I right.

Paretologic description:
Description of WinPCap
Winpcap is a library that listens to network traffic. It can be used for good purposes but is also used by many Spy Software applications. If the user is unaware that Winpcap is installed on their PC then they should know that their network usage is being tracked and it is recommended that they remove it. If the user is aware of the presence of Winpcap and appreciates its functionality then the user should not remove it.

Give me a link to run Malwarebites.


Thanks for support.

[Osiris]

Spyware Asylum

[Thaqalain]

I have Avast, Xoft and Norton Free versions, + I can post HJT log, before I install another one as it may conflict with others.

[Osiris]

Use Avast or Norton, not both. If you want to use 2 programs, use Avast and MSE or AVG and MSE or MSE and paid version of Malwarebytes, I prefer AVG 9 and MSE, even AVG 9, MBAM and MSE.