Is there a way to deal with constant flow of blocked webresources?

[ojman94]

I believe the source of the issue is a set of files located in the roaming section of the appdata

 

[argus]

Scan with ZOEK

Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
• Wait patiently until the main console will appear, it may take a minute or two.
• In the main box please paste in the following script:
  

  createsrpoint;
  autoclean;
  emptyalltemp;
  ipconfig /flushdns;b

• Make sure that Scan All Users option is checked.
• Push Run Script and wait patiently. The scan may take a couple of minutes.
• When the scan completes, a zoek-results logfile should open in notepad.
• If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)

Post its content into your next reply.

 

[ojman94]

Here are the results

 

[argus]

Re-run zoek and run this script:

bkhcnklgddkdpmhgojhfihboibhpoabc;chr
hiledapehlkhdehbhppgmekfalnlfajc;chr
ccahoghmggldkcdjiebjkidpfongdfbl;chr
fabcmochhfpldjekobfaaggijgohadih;chr
createsrpoint;
autoclean;
emptyalltemp;
ipconfig /flushdns;b

 

[ojman94]

Re-run zoek and run this script:

bkhcnklgddkdpmhgojhfihboibhpoabc;chr
hiledapehlkhdehbhppgmekfalnlfajc;chr
ccahoghmggldkcdjiebjkidpfongdfbl;chr
fabcmochhfpldjekobfaaggijgohadih;chr
createsrpoint;
autoclean;
emptyalltemp;
ipconfig /flushdns;b

Here are the results from the different script

 

[argus]

How is the situation now?

 

[ojman94]

How is the situation now?

Well nothing much has changed. Bitdefender is still blocking webresources but it is also blocking an application, compatibility verifier, that I first noticed when this problem started. I'm sure its that application and the webresources are linked.

 

[argus]

Maybe is Bitdefender problem. He is known for false alarms.

 

[ojman94]

Maybe is Bitdefender problem. He is known for false alarms.

I mean the file is there in the appdata/roaming folder and I can't remove it manually.

 

[argus]

Unlocker will solve the problem.

http://www.softpedia.com/get/System/System-Miscellaneous/Unlocker.shtml

 

[ojman94]

meant for this message to be a reply.

 

[ojman94]

Unlocker will solve the problem.

http://www.softpedia.com/get/System/System-Miscellaneous/Unlocker.shtml

I'm not sure what it did since I still wasn't able to delete it. However it showed me which .dll files it was using. I tried deleting them and said that I couldn't since it was under the use of HControl.exe. Now of a way I can end that process?

 

[argus]

http://www.threatexpert.com/files/HControl.exe.html

Legitimate file

 

[argus]

Send a file to Virus Total
https://www.virustotal.com/

 

[ojman94]

Send a file to Virus Total
https://www.virustotal.com/

Only one file was flagged a 3/56. Should I be concerned?

 

[argus]

attach link here

 

[ojman94]

attach link here

I scanned some more files:
This one got a 1/56
This one got a 3/56

 

[argus]

False positive, don't worry.

 

[ojman94]

False positive, don't worry.

All right. I just got another audio ad and it stopped when I ended the process of "compatibilityverifier.exe".

 

[argus]

Windows drivers

Driver Verifier monitors Windows kernel-mode drivers and graphics drivers to detect illegal function calls or actions that might corrupt the system. Driver Verifier can subject the Windows drivers to a variety of stresses and tests to find improper behavior.

You can run Driver Verifier on multiple drivers simultaneously, or on one driver at a time. You can configure which tests to run, which allows you to put a driver through heavy stress loads or through more streamlined testing.