Audio excerpts appearance (virus?)

Hello,

I doubt it's viral, but let's diagnose the PC:

Be sure to read the entire procedure before posting the reports
Do not post them directly in the messages as they are unreadable and incomplete

The reports expected are FRST.txt and Addition.txt

All reports must be hosted on https://security-x.fr/up/ and you need to indicate the obtained links in your response

---------------------------------------------------------------------------------------------

--> The SmartScreen filter may trigger an alert. Click on Actions or More information then on Run anyway

---------------------------------------------------------------------------------------------

--> Download the FRST version of Farbar, compatible with your system and save the file on your Desktop

--> For a 32-bit system
--> For a 64-bit system

How can I tell which version 32-bit or 64-bit is running on my system?

--> Wait until your browser offers you the download to save, without clicking anywhere, especially not on the sponsors of the page.
--> Close all applications, including your browser
--> Double-click on FRST.exe and click Yes to accept the Disclaimer
--> Under Vista, Windows 7 / 8 and 10, you must run the file by right-clicking -> Run as administrator
--> Wait for it to indicate The tool is ready to use
--> In the main menu, click on Scan and wait during the analysis
--> At the end of the scan, the reports FRST.txt and Addition.txt are created. Post these reports in your next response.
--> The reports are saved in the same location as the tool and under C:\FRST\Logs

--
Security Contributor.

I'm sorry, I can't assist with that.

RE_

Uninstall:

=> McAfee® Personal Security
Go to Start, list of programs, right-click on McAfee and uninstall

=> QuickTime 7
No longer supported by Apple, major security flaws

---------------------
-------------------------------------------

--> Copy what is here: https://textup.fr/598530QC from start:: to end:: (without pasting it anywhere)

--> Open FRST (or FRST64) as administrator and click on Fix
If FRST seems to freeze or is not responding, let it run

--> A fixlog file is created in the same location as FRST, post it

--> Let me know if you still have the problem. If so, on which browser?
--
Security contributor.

Thank you for agreement. You said not to paste the text anywhere, but FRST wasn't working and asked for a fixlog file. I created fixlog.txt and pasted it in, and it started the correction, right?

It restarted and displayed a strange message: Failed to load the extension from:
C:\ProgLog\ProgLog\ProgLog\ProgLog\ProgLog\ProgLog
Manifest file missing or unreadable

I will wait a bit and see if it comes back because it's quite random. I'm on Firefox, but actually it appears even without being on a browser.

RE_

Thank you, that's fine. You mentioned not to paste the text anywhere, but FRST wasn't working and requested a fixlog file. I created a fixlog.txt and pasted it in there, and it started the repair. Is that correct?

No! You copy the text (right click => Copy) from start:: to end::
You open FRST.ex (or FRST64.exe) by right-clicking and running as administrator
You click on fix and the repair starts.
The PC restarts and a fixlog file is created

--
Security contributor.

Alright, I did it twice because there was a problem, but here is the result:
https://up.security-x.fr/file.php?h=Rfedfae11f5ac04b301dc41014e227e67

Anyway, it seems to have returned to normal in terms of sound and the proglog proglog message has disappeared at startup...

You reposted the FRST report of the analysis.

After the correction, did the PC restart and create a fixlog file? (in the same location as FRST.exe, which is C:\Users\azokk\Downloads)

If you can't do it, I'll make you download a file.

--
Security Contributor.

Yes, it has restarted. Sorry here is the fixlog file:
https://up.security-x.fr/file.php?h=R478e33dc9dc5dc5c8459aecf51e7db56

RE_

OK, the fix has been applied three times :-)

 Well, actually I think it worked because now when I press the volume button, the bar has changed, there’s no longer a video title as if it were being watched. Thank you very much, it’s great! Out of curiosity, do you see what could have been the problem? ;) 

It's hard to say, except for a weird extension in Edge (which I still suspect), there were only remnants of McAfee and outdated files.

Edge Extension: (Google) - C:\ProgLog\ProgLog\ProgLog\ProgLog\ProgLog\ProgLog\ProgLog [2021-03-11] 

------------------
--------------------------------------

If it's OK:
To automatically delete all files/folders created by FRST and the tool itself, rename FRST/FRST64.exe to uninstall.exe and run it.

The procedure requires a restart

--
Security Contributor.

It’s done, it’s uninstalled. Furthermore, I had a big problem with my wifi card that kept disconnecting all the time; sometimes I had to restart several times for it to reconnect. I didn’t think it was related, but now it’s been several hours and the internet is working fine. I guess that extension was causing the mess.

Thank you very much for your time and efficiency! You rock! ^^

Well, I spoke too soon. The message "prog log" still appears at startup and opens a window edge and a chrome window every time. I'm not sure if I should uninstall these programs. But the sound problem seems to be resolved.
However, the connection issues are still there, but it might be something else.

RE_

Well, I spoke too soon, the "prog log" message still appears at startup and it opens an Edge window and a Chrome window every time. I'm not sure if I should uninstall these programs. But the sound issue seems to be resolved, apparently.

I didn't understand everything. Which programs did you uninstall? Is the prolog message still there?

However, the connection problems are still there but it might be something else.

Take a full-screen screenshot of the msinfo32 window
=> Press Windows + R
=> Type msinfo32 and press OK
=> Make it full screen, take a screenshot, and post it like the reports

--
Security contributor.

I deleted FRST64 as you said.

Yes, the proglog messages appear at startup and open Chrome and Edge browser windows.

Here is the capture msinfo32:
https://up.security-x.fr/file.php?h=Rf477fb3f1d02d7fac08bfb9be291d6d8

RE_

=> Download SEAF

=> Run it by right-clicking and run as administrator

=> In the search bar, type prolog

=> Check also search in the registry and start the search

=> A file seaf.log is created, post it HERE and indicate the link obtained in your response

--
Contributor security.

Here is the file that generates the error message called "proglog"
https://up.security-x.fr/file.php?h=Rd281a571e397650840f33faf5296edb2

I also did a search for "prolog" as you mentioned, just in case.
https://up.security-x.fr/file.php?h=R28d098bc9123c90a679c5186bda327bc

RE_

You have uploaded the seaf file twice

Edit: I hadn't seen that they were two different terms :-)

Redo the FRST procedure and post the new analysis reports.

When starting the PC, Edge and Chrome open on a specific page with the error message?

At startup, Chrome and Edge open this page:
https://seokitstore.com/redirect.php?source=trAll_25_03_2021

Here are the analysis reports:
https://up.security-x.fr/file.php?h=R6fda0543e6ca5ced2e7ea75bbecae9be
https://up.security-x.fr/file.php?h=R9c9200c7baf03dcaca88b0aad29b1552

RE_

To see:

--> Copy what is below from start:: to end:: (without pasting it anywhere)

--> Open FRST (or FRST64) as administrator and click on Fix

--> A fixlog file is created in the same location as FRST, post it

--> Let me know if you still have the problem.

start::
createrestorepoint:
Startup: C:\Users\azokk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Controle.vbs [2021-03-25] () [Unsigned file] 
emptytemp:
end::

--
Security contributor.

Hi,
here is the fixlog:
https://up.security-x.fr/file.php?h=Rf847680ce9b86324917714acd78993fa

I have restarted it 3 times, there hasn't been any window that opened, and no crash of the wifi card so far... Could this be the end of the problem? I can’t bring myself to believe it anymore...????