Is this a virus?


  1. CodeMonkey
    Posts : 2
    Windows 10
       New #1

    Is this a virus?


    Is this a virus?-problem.png

    The problem is the image in the top left corner of in this case google.maps.
    It occures in many places:

    • the login page of windows 10. But only when entering the password.
    • Chrome is not useable, due to this issue. Firefox has fewer issues.


    Is this a known issue? A virus? A problem with the graphics card?

    I am a software developer and like to think that I know a thing or two about computers, but I am absolutely puzzeled by this.

    If you need more information, I am happy to provide it.
      My Computer
    Quote Quote

  3. FreeBooter
    Posts : 5,330
    Windows 11 Pro 64-bit
       New #2

    Please download Malwarebytes' AdwCleaner onto your Desktop.

    • Double click on AdwCleaner_xxxx.exe to run the tool.
    • Click on Scan.
    • After done scanning, please hit Logfile. Locate the logfile in the Scan tab, double-click on it, copy the information inside of it, and paste it into your next reply.
    • You can find the logfile at C:\AdwCleaner[Sx].txt as well.
      My Computer
    Quote Quote

  4. CodeMonkey
    Posts : 2
    Windows 10
    Thread Starter
       New #3

    Thanks for the help so far.

    This is the content of the log file:

    Code:
    2019-10-13 12:57:18 :  <INFO>      [Application] AdwCleaner  7 . 4 . 1  launched
2019-10-13 12:57:19 :  <INFO>      [MBInstaller] Checking Iris
2019-10-13 12:57:19 :  <INFO>      [IRIS] Making request
2019-10-13 12:57:20 :  <INFO>      [AdwUpgrade] Checking application updates
2019-10-13 12:57:21 :  <INFO>      [SslCert] Issued by ("DigiCert SHA2 High Assurance Server CA")
2019-10-13 12:57:21 :  <INFO>      [SslCert] Issued to ("*.malwarebytes.com")
2019-10-13 12:57:21 :  <INFO>      [SslCert] Locality Name ("Santa Clara")
2019-10-13 12:57:21 :  <INFO>      [SslCert] Organization ("Malwarebytes Inc")
2019-10-13 12:57:21 :  <INFO>      [SslCert] Certificate EffectiveDate:  "Mo Okt 2 00:00:00 2017 GMT"
2019-10-13 12:57:21 :  <INFO>      [SslCert] Certificate ExpirationDate:  "Di Okt 6 12:00:00 2020 GMT"
2019-10-13 12:57:21 :  <INFO>      [SslCert] ALPN: None
2019-10-13 12:57:21 :  <INFO>      [SslCert] Cipher:  "ECDHE-RSA-AES256-GCM-SHA384"
2019-10-13 12:57:21 :  <INFO>      [SslCert] KXE:  "ECDH"
2019-10-13 12:57:21 :  <INFO>      [SslCert] Protocol:  "TLSv1.2"
2019-10-13 12:57:21 :  <INFO>      [SslCert] Issued by ("DigiCert SHA2 High Assurance Server CA")
2019-10-13 12:57:21 :  <INFO>      [SslCert] Issued to ("*.malwarebytes.com")
2019-10-13 12:57:21 :  <INFO>      [SslCert] Locality Name ("Santa Clara")
2019-10-13 12:57:21 :  <INFO>      [SslCert] Organization ("Malwarebytes Inc")
2019-10-13 12:57:21 :  <INFO>      [SslCert] Certificate EffectiveDate:  "Mo Okt 2 00:00:00 2017 GMT"
2019-10-13 12:57:21 :  <INFO>      [SslCert] Certificate ExpirationDate:  "Di Okt 6 12:00:00 2020 GMT"
2019-10-13 12:57:21 :  <INFO>      [SslCert] ALPN: None
2019-10-13 12:57:21 :  <INFO>      [SslCert] Cipher:  "ECDHE-RSA-AES256-GCM-SHA384"
2019-10-13 12:57:21 :  <INFO>      [SslCert] KXE:  "ECDH"
2019-10-13 12:57:21 :  <INFO>      [SslCert] Protocol:  "TLSv1.2"
2019-10-13 12:57:21 :  <INFO>      [Telemetry] Status code:  QVariant(int, 200)
2019-10-13 12:57:21 :  <WARNING>   [File Downloader] Error downloading ( QNetworkReply::NetworkError(ContentNotFoundError) )
2019-10-13 12:57:21 :  <INFO>      [IRIS] Failed
2019-10-13 12:57:23 :  <INFO>      [Button clicked] EULA agreed
2019-10-13 12:57:27 :  <INFO>      [Button clicked] Scan
2019-10-13 12:57:27 :  <INFO>      [Scan] Started
2019-10-13 12:57:27 :  <INFO>      [Database] Downloading database
2019-10-13 12:57:28 :  <INFO>      [Database] Checking integrity
2019-10-13 12:57:28 :  <INFO>      [Database] Found  2586  families
2019-10-13 12:57:28 :  <INFO>      [Database] Database v "2019-10-03.2"
2019-10-13 12:57:28 :  <INFO>      [Loading paths] Local paths loaded
2019-10-13 12:57:28 :  <INFO>      [Loading paths] Chrome paths loaded
2019-10-13 12:57:28 :  <INFO>      [Loading paths] User Keys loaded
2019-10-13 12:57:28 :  <INFO>      [Module initialized]  "File"
2019-10-13 12:57:28 :  <INFO>      [Module initialized]  "Folder"
2019-10-13 12:57:28 :  <INFO>      [Module initialized]  "RegistryKey"
2019-10-13 12:57:28 :  <INFO>      [Module initialized]  "RegistryValue"
2019-10-13 12:57:28 :  <INFO>      [Module initialized]  "TaskName"
2019-10-13 12:57:28 :  <INFO>      [Module initialized]  "Service"
2019-10-13 12:57:28 :  <INFO>      [Module initialized]  "Winlogon"
2019-10-13 13:00:09 :  <INFO>      [Module initialized]  "URL"
2019-10-13 13:00:09 :  <INFO>      [Module initialized]  "RegAppInit"
2019-10-13 13:00:09 :  <INFO>      [Module initialized]  "RegClasses"
2019-10-13 13:00:09 :  <INFO>      [Module initialized]  "DNS"
2019-10-13 13:00:10 :  <INFO>      [Module initialized]  "RegFirewallPolicy"
2019-10-13 13:00:10 :  <INFO>      [Module initialized]  "RegGuid"
2019-10-13 13:00:10 :  <INFO>      [Module initialized]  "RegIEElevationPolicy"
2019-10-13 13:00:10 :  <INFO>      [Module initialized]  "RegOther"
2019-10-13 13:00:10 :  <INFO>      [Module initialized]  "RegProductID"
2019-10-13 13:00:10 :  <INFO>      [Module initialized]  "RegSoftware"
2019-10-13 13:00:10 :  <INFO>      [Module initialized]  "RegStartup"
2019-10-13 13:00:10 :  <INFO>      [Module initialized]  "WMI"
2019-10-13 13:00:10 :  <INFO>      [Module initialized]  "ChromiumExt"
2019-10-13 13:00:10 :  <INFO>      [Module initialized]  "FirefoxExt"
2019-10-13 13:00:10 :  <INFO>      [Module initialize] Scan Browser
2019-10-13 13:00:11 :  <INFO>      [Module initialize] Scan Browser FF
2019-10-13 13:00:11 :  <INFO>      [Module initialize] FF start pages loaded
2019-10-13 13:00:11 :  <INFO>      [Module initialize] FF search providers loaded
2019-10-13 13:00:11 :  <INFO>      [Module initialize] FF plugin list loaded
2019-10-13 13:00:11 :  <INFO>      [Scan] Exclusions loaded
2019-10-13 13:00:12 :  <INFO>      [Scan] Item detected:  "PUP.Optional.Legacy" ,  "C:\\Users\\tobia\\AppData\\Roaming\\acestream" [ "Folder" ]
2019-10-13 13:00:12 :  <INFO>      [Scan] Item detected:  "PUP.Optional.Legacy" ,  "C:\\Users\\tobia\\AppData\\Roaming\\.acestream" [ "Folder" ]
2019-10-13 13:00:12 :  <INFO>      [Scan] Item detected:  "PUP.Optional.Legacy" ,  "C:\\Users\\tobia\\AppData\\LocalLow\\.acestream" [ "Folder" ]
2019-10-13 13:00:12 :  <INFO>      [Scan] Item detected:  "PUP.Optional.Legacy" ,  "C:\\_acestream_cache_" [ "Folder" ]
2019-10-13 13:00:13 :  <INFO>      [Scan] Item detected:  "PUP.Optional.Legacy" ,  "HKCU\\Software\\Classes\\.acelive" [ "Registry" ]
2019-10-13 13:00:13 :  <INFO>      [Scan] Item detected:  "PUP.Optional.Legacy" ,  "HKCU\\Software\\Classes\\.acemedia" [ "Registry" ]
2019-10-13 13:00:13 :  <INFO>      [Scan] Item detected:  "PUP.Optional.Legacy" ,  "HKCU\\Software\\Classes\\.tslive" [ "Registry" ]
2019-10-13 13:00:13 :  <INFO>      [Scan] Item detected:  "PUP.Optional.Legacy" ,  "HKLM\\Software\\Classes\\.acestream" [ "Registry" ]
2019-10-13 13:00:13 :  <INFO>      [Scan] Item detected:  "PUP.Optional.Legacy" ,  "HKCU\\Software\\Classes\\.acestream" [ "Registry" ]
2019-10-13 13:00:13 :  <INFO>      [Scan] Item detected:  "PUP.Optional.Legacy" ,  "HKLM\\SYSTEM\\CurrentControlSet\\Services\\SharedAccess\\Parameters\\FirewallPolicy\\FirewallRules|{4DAB6FDD-5573-44BA-A4D6-5E0A1AB0FDE1}" [ "Registry" ]
2019-10-13 13:00:13 :  <INFO>      [Scan] Item detected:  "PUP.Optional.Legacy" ,  "HKLM\\SYSTEM\\CurrentControlSet\\Services\\SharedAccess\\Parameters\\FirewallPolicy\\FirewallRules|{D11B2256-3958-4784-AF3D-D87EE70ECA9D}" [ "Registry" ]
2019-10-13 13:00:13 :  <INFO>      [Scan] Item detected:  "PUP.Optional.Legacy" ,  "HKLM\\SYSTEM\\CurrentControlSet\\Services\\SharedAccess\\Parameters\\FirewallPolicy\\FirewallRules|TCP Query User{C84E09C1-72D5-4DCB-B7EB-9ED174491262}C:\\users\\tobia\\appdata\\roaming\\acestream\\engine\\ace_engine.exe" [ "Registry" ]
2019-10-13 13:00:13 :  <INFO>      [Scan] Item detected:  "PUP.Optional.Legacy" ,  "HKLM\\SYSTEM\\CurrentControlSet\\Services\\SharedAccess\\Parameters\\FirewallPolicy\\FirewallRules|UDP Query User{C4F0B3CD-F194-4EC0-A70E-27F0B03F2C49}C:\\users\\tobia\\appdata\\roaming\\acestream\\engine\\ace_engine.exe" [ "Registry" ]
2019-10-13 13:00:15 :  <INFO>      [Scan] Item detected:  "PUP.Optional.Legacy" ,  "HKLM\\Software\\Wow6432Node\\\\Classes\\CLSID\\{79690976-ED6E-403C-BBBA-F8928B5EDE17}" [ "Registry" ]
2019-10-13 13:00:15 :  <INFO>      [Scan] Item detected:  "PUP.Optional.Legacy" ,  "HKCU\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.acelive" [ "Registry" ]
2019-10-13 13:00:15 :  <INFO>      [Scan] Item detected:  "PUP.Optional.Legacy" ,  "HKCU\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.acemedia" [ "Registry" ]
2019-10-13 13:00:15 :  <INFO>      [Scan] Item detected:  "PUP.Optional.Legacy" ,  "HKCU\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.acestream" [ "Registry" ]
2019-10-13 13:00:15 :  <INFO>      [Scan] Item detected:  "PUP.Optional.Legacy" ,  "HKCU\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\FileExts\\.tslive" [ "Registry" ]
2019-10-13 13:00:15 :  <INFO>      [Scan] Item detected:  "PUP.Optional.Legacy" ,  "HKCU\\SOFTWARE\\Classes\\Applications\\ace_player.exe" [ "Registry" ]
2019-10-13 13:00:15 :  <INFO>      [Scan] Item detected:  "PUP.Optional.Legacy" ,  "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\AutoplayHandlers\\Handlers\\ACEStreamPlayCDAudioOnArrival" [ "Registry" ]
2019-10-13 13:00:15 :  <INFO>      [Scan] Item detected:  "PUP.Optional.Legacy" ,  "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\AutoplayHandlers\\Handlers\\ACEStreamPlayDVDAudioOnArrival" [ "Registry" ]
2019-10-13 13:00:15 :  <INFO>      [Scan] Item detected:  "PUP.Optional.Legacy" ,  "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\AutoplayHandlers\\Handlers\\ACEStreamPlayDVDMovieOnArrival" [ "Registry" ]
2019-10-13 13:00:15 :  <INFO>      [Scan] Item detected:  "PUP.Optional.Legacy" ,  "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\AutoplayHandlers\\Handlers\\ACEStreamPlayMusicFilesOnArrival" [ "Registry" ]
2019-10-13 13:00:15 :  <INFO>      [Scan] Item detected:  "PUP.Optional.Legacy" ,  "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\AutoplayHandlers\\Handlers\\ACEStreamPlaySVCDMovieOnArrival" [ "Registry" ]
2019-10-13 13:00:15 :  <INFO>      [Scan] Item detected:  "PUP.Optional.Legacy" ,  "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\AutoplayHandlers\\Handlers\\ACEStreamPlayVCDMovieOnArrival" [ "Registry" ]
2019-10-13 13:00:15 :  <INFO>      [Scan] Item detected:  "PUP.Optional.Legacy" ,  "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\AutoplayHandlers\\Handlers\\ACEStreamPlayVideoFilesOnArrival" [ "Registry" ]
2019-10-13 13:00:15 :  <INFO>      [Scan] Item detected:  "PUP.Optional.Legacy" ,  "HKCU\\Software\\Classes\\AudioCD\\shell\\PlayWithACEStream" [ "Registry" ]
2019-10-13 13:00:15 :  <INFO>      [Scan] Item detected:  "PUP.Optional.Legacy" ,  "HKCU\\Software\\Classes\\DVD\\shell\\PlayWithACEStream" [ "Registry" ]
2019-10-13 13:00:16 :  <INFO>      [Scan] Item detected:  "PUP.Optional.Legacy" ,  "HKCU\\Software\\AceStream" [ "Registry" ]
2019-10-13 13:00:16 :  <INFO>      [Scan] Item detected:  "PUP.Optional.Legacy" ,  "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\AceStream" [ "Registry" ]
2019-10-13 13:00:22 :  <INFO>      [Scan] Item detected:  "PUP.Optional.ASMagicPlayer" ,  "HKCU\\Software\\Classes\\acestream" [ "Registry" ]
2019-10-13 13:00:24 :  <INFO>      [Scan] Item detected:  "PUP.Optional.AceStream" ,  "HKCU\\Software\\RegisteredApplications|AceStream" [ "Registry" ]
2019-10-13 13:00:25 :  <INFO>      [Telemetry] Sending to Influx
2019-10-13 13:00:25 :  <INFO>      [SslCert] Issued by ("Let's Encrypt Authority X3")
2019-10-13 13:00:25 :  <INFO>      [SslCert] Issued to ("telemetry-02.adwc.mb.fr33tux.org")
2019-10-13 13:00:25 :  <INFO>      [SslCert] Locality Name ()
2019-10-13 13:00:25 :  <INFO>      [SslCert] Organization ()
2019-10-13 13:00:25 :  <INFO>      [SslCert] Certificate EffectiveDate:  "So Aug 18 10:50:38 2019 GMT"
2019-10-13 13:00:25 :  <INFO>      [SslCert] Certificate ExpirationDate:  "Sa Nov 16 10:50:38 2019 GMT"
2019-10-13 13:00:25 :  <INFO>      [SslCert] ALPN: Yes
2019-10-13 13:00:25 :  <INFO>      [SslCert] Cipher:  "ECDHE-RSA-AES256-GCM-SHA384"
2019-10-13 13:00:25 :  <INFO>      [SslCert] KXE:  "ECDH"
2019-10-13 13:00:25 :  <INFO>      [SslCert] Protocol:  "TLSv1.2"
2019-10-13 13:00:25 :  <INFO>      [Telemetry] Status code:  QVariant(int, 204)
2019-10-13 13:00:25 :  <INFO>      [Telemetry] Sending to DSE
2019-10-13 13:00:26 :  <INFO>      [SslCert] Issued by ("DigiCert SHA2 High Assurance Server CA")
2019-10-13 13:00:26 :  <INFO>      [SslCert] Issued to ("*.malwarebytes.com")
2019-10-13 13:00:26 :  <INFO>      [SslCert] Locality Name ("San Jose")
2019-10-13 13:00:26 :  <INFO>      [SslCert] Organization ("Malwarebytes Inc.")
2019-10-13 13:00:26 :  <INFO>      [SslCert] Certificate EffectiveDate:  "Do Feb 22 00:00:00 2018 GMT"
2019-10-13 13:00:26 :  <INFO>      [SslCert] Certificate ExpirationDate:  "Mi Apr 22 12:00:00 2020 GMT"
2019-10-13 13:00:26 :  <INFO>      [SslCert] ALPN: Yes
2019-10-13 13:00:26 :  <INFO>      [SslCert] Cipher:  "ECDHE-RSA-AES256-GCM-SHA384"
2019-10-13 13:00:26 :  <INFO>      [SslCert] KXE:  "ECDH"
2019-10-13 13:00:26 :  <INFO>      [SslCert] Protocol:  "TLSv1.2"
2019-10-13 13:00:26 :  <INFO>      [Telemetry] Status code:  QVariant(int, 201)
2019-10-13 13:00:26 :  <INFO>      [Scan] Finished
2019-10-13 13:01:22 :  <INFO>      [Button clicked] Quarantine menu item
2019-10-13 13:01:22 :  <INFO>      [Button clicked] Log files menu item
2019-10-13 13:03:42 :  <INFO>      [Button clicked] Settings menu item
2019-10-13 13:09:48 :  <INFO>      [Button clicked] Dashboard menu item
2019-10-13 13:09:50 :  <INFO>      [Button clicked] Log files menu item
      My Computer
    Quote Quote

  6. bro67
    Posts : 9,791
    Mac OS Catalina
       New #4

    There are no viruses that would cause that behavior. Bad GPU Drivers can cause it along with a possible failing GPU Chipset/Card or monitor.
      My Computer
    Quote Quote

 

  Related Discussions
Is this a virus?
in AntiVirus, Firewalls and System Security

Hi I need some advice. Every time I start my PC I get this notification: "Threat Found - action needed". And very time I have to remove it. Is it dangerous? If yes, how can I remove that 'Patcher.exe? Thanks 278079 278080
Is this a virus?
in AntiVirus, Firewalls and System Security

Hello! I have an unsual problem since getting my new laptop. So, last week i bought a Lenovo Legion y570, i5 with 16 gb ram and a 500 gb ssd. It came with no OS, so i installed a copy of Windows 10 Pro build 1903 on it. The problem manifests as...
Hi, I recently noticed some changes to Windows Security. No longer is there a delete option after taking actions against a Virus. If the action result shows the Virus is blocked does the Virus still remain on the System ? If so is there any...
Kodi Tab Virus - Nothing showing from Virus Scan
in AntiVirus, Firewalls and System Security

Windows 10 was working fine until, somebody downloaded Kodi on the affected machine and Kodi was behaving as if a permanent TAB key was being inputted on the keyboard (i.e. left to right across rows permanently) - when trying to select anything on...
Have I a virus
in AntiVirus, Firewalls and System Security

Hi all I just just noticed that if I open the link to 10 forums and look through the posts without logging on some of the words in the post is in green and open a video to an advert and there is a x in the top corner but I dare not click on it in...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

 © Designer Media Ltd
All times are GMT -5. The time now is 15:39.
Find Us




Windows 10 Forums