QTrax being detected in my disc drive

[Juliet]

Please open Notepad *Do Not Use Wordpad!* or use any other text editor than Notepad or the script will fail. (Start -> Run -> type notepad in the Open field -> OK) and copy and paste the text present inside the quote box below:
To do this highlight the contents of the box and right click on it and select copy.
Paste this into the open notepad. save it to the Desktop as fixlist.txt
NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.
It needs to be saved Next to the "Farbar Recovery Scan Tool" (If asked to overwrite existing one please allow)

start
CreateRestorePoint:
CloseProcesses:
C:\Users\Sarah\Downloads\ccsetup321.exe
C:\Users\Sarah\Downloads\ccsetup411.exe
C:\Users\Sarah\Downloads\dfsetup217.exe
C:\Users\Sarah\Downloads\epm.exe
C:\Users\Sarah\Downloads\Shockwave_Installer_Slim.exe
C:\Users\Sarah\Downloads\spsetup123 (1).exe
C:\Windows\System32\Adobe\Shockwave 12\gt.exe
C:\Windows\SysWOW64\Adobe\Shockwave 12\gt.exe
D:\Downloads\ccsetup321.exe
D:\Downloads\ccsetup411.exe
D:\Downloads\dfsetup217.exe
D:\Downloads\epm.exe
D:\Downloads\Shockwave_Installer_Slim.exe
D:\Downloads\spsetup123 (1).exe
D:\Downloads\spsetup126.exe
D:\Pictures\Random internet pictures I love\Backgrounds\spsetup123.exe
End

Open FRST/FRST64 and press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

Please post this log when finished.

Ready to remove tools and quarantine folders?

[montypy88]

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-03-2015
Ran by Sarah at 2015-04-01 21:47:21 Run:2
Running from C:\Users\Sarah\Desktop
Loaded Profiles: Sarah (Available profiles: Sarah)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
start
CreateRestorePoint:
CloseProcesses:
C:\Users\Sarah\Downloads\ccsetup321.exe
C:\Users\Sarah\Downloads\ccsetup411.exe
C:\Users\Sarah\Downloads\dfsetup217.exe
C:\Users\Sarah\Downloads\epm.exe
C:\Users\Sarah\Downloads\Shockwave_Installer_Slim.exe
C:\Users\Sarah\Downloads\spsetup123 (1).exe
C:\Windows\System32\Adobe\Shockwave 12\gt.exe
C:\Windows\SysWOW64\Adobe\Shockwave 12\gt.exe
D:\Downloads\ccsetup321.exe
D:\Downloads\ccsetup411.exe
D:\Downloads\dfsetup217.exe
D:\Downloads\epm.exe
D:\Downloads\Shockwave_Installer_Slim.exe
D:\Downloads\spsetup123 (1).exe
D:\Downloads\spsetup126.exe
D:\Pictures\Random internet pictures I love\Backgrounds\spsetup123.exe
End
*****************

Restore point was successfully created.
Processes closed successfully.
C:\Users\Sarah\Downloads\ccsetup321.exe => Moved successfully.
C:\Users\Sarah\Downloads\ccsetup411.exe => Moved successfully.
C:\Users\Sarah\Downloads\dfsetup217.exe => Moved successfully.
C:\Users\Sarah\Downloads\epm.exe => Moved successfully.
C:\Users\Sarah\Downloads\Shockwave_Installer_Slim.exe => Moved successfully.
C:\Users\Sarah\Downloads\spsetup123 (1).exe => Moved successfully.
"C:\Windows\System32\Adobe\Shockwave 12\gt.exe" => File/Directory not found.
C:\Windows\SysWOW64\Adobe\Shockwave 12\gt.exe => Moved successfully.
D:\Downloads\ccsetup321.exe => Moved successfully.
D:\Downloads\ccsetup411.exe => Moved successfully.
D:\Downloads\dfsetup217.exe => Moved successfully.
D:\Downloads\epm.exe => Moved successfully.
D:\Downloads\Shockwave_Installer_Slim.exe => Moved successfully.
D:\Downloads\spsetup123 (1).exe => Moved successfully.
D:\Downloads\spsetup126.exe => Moved successfully.
D:\Pictures\Random internet pictures I love\Backgrounds\spsetup123.exe => Moved successfully.


The system needed a reboot.

==== End of Fixlog 21:47:51 ====


~~~~~~~~~~~~~

Yes I am! Not sure if it matters, but Spybot still runs when I start my computer and it still says that Qtrax is in my disc drive.

[Juliet]

I think this came in through downloading music?

Qtrax DRM (Qtrax digital music
Qtrax is a P2P file sharing network
Qtrax said its DRM system (which counts how many times tracks have been
Qtrax is a service aiming to provide free music

Let's see if we can find it.

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2

• Double-click SystemLook.exe to run it.
• Copy the content of the following codebox into the main textfield:
  

  :folderfind
  Qtrax
  :filefind
  Qtrax
  :regfind
  Qtrax

• Click the Look button to start the scan.
• When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.

Note: The log can also be found on your Desktop entitled SystemLook.txt

Also, run this file name through the same procedure

:folderfind
akprivjh.sys
:filefind
akprivjh.sys
:regfind
akprivjh.sys

Please post the info when done.

[montypy88]

Qtrax -

SystemLook 30.07.11 by jpshortstuff
Log created at 17:31 on 02/04/2015 by Sarah
Administrator - Elevation successful
WARNING: SystemLook running under WOW64. Use SystemLook_x64 for accurate results.

========== folderfind ==========

Searching for "Qtrax"
No folders found.

========== filefind ==========

Searching for "Qtrax"
No files found.

========== regfind ==========

Searching for "Qtrax"
No data found.

-= EOF =-


~~~~~~~~~~~~~~~

That other file -

SystemLook 30.07.11 by jpshortstuff
Log created at 17:33 on 02/04/2015 by Sarah
Administrator - Elevation successful
WARNING: SystemLook running under WOW64. Use SystemLook_x64 for accurate results.

========== folderfind ==========

Searching for "akprivjh.sys"
No folders found.

========== filefind ==========

Searching for "akprivjh.sys"
No files found.

========== regfind ==========

Searching for "akprivjh.sys"
No data found.

-= EOF =-

[Juliet]

Not the results I was hoping for.


Please download Junkware Removal Tool to your desktop.

• Shut down your protection software now to avoid potential conflicts.
• Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
• The tool will open and start scanning your system.
• Please be patient as this can take a while to complete depending on your system's specifications.
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
• Post the contents of JRT.txt into your next message.

~~~~~~~~~~~~~~~~~~

Run FRST one more time:

Type the following in the edit box after "Search:"
Qtrax
then copy and paste the below in
FindFolder:Qtrax
Click Search button and post the log (Search.txt) it makes to your reply.

[Juliet]

Do you have some sort of external USB or disc drive connected when SpyBot alerts to Qtrax?

[montypy88]

Nope! There is nothing in my disc drive and I do not have any external drives plugged in. I even opened up my disc drive to check to see if I had forgotten a CD in there, but I haven't.

~~~~~~~~~~~~

JRT.txt

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.5.1 (04.02.2015:1)
OS: Windows 7 Ultimate x64
Ran by Sarah on Thu 04/02/2015 at 20:30:50.11
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files

Successfully deleted: [File] "C:\Windows\wininit.ini"



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Thu 04/02/2015 at 20:33:01.51
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[montypy88]

Qtrax Search - "Qtrax"

Farbar Recovery Scan Tool (x64) Version: 11-03-2015
Ran by Sarah at 2015-04-02 21:18:14
Running from C:\Users\Sarah\Desktop
Boot Mode: Normal

================== Search Files: "Qtrax" =============

====== End Of Search ======

~~~~~~~~~~~~~~~

Qtrax Search - FindFolder:Qtrax

Farbar Recovery Scan Tool (x64) Version: 11-03-2015
Ran by Sarah at 2015-04-02 21:19:43
Running from C:\Users\Sarah\Desktop
Boot Mode: Normal

================== Search Files: "FindFolder:Qtrax" =============

====== End Of Search ======

~~~~~~~~~~~~~~

I also searched the below because I wasn't 100% sure what you were asking me.

Farbar Recovery Scan Tool (x64) Version: 11-03-2015
Ran by Sarah at 2015-04-02 21:20:46
Running from C:\Users\Sarah\Desktop
Boot Mode: Normal

================== Search Files: "Qtrax FindFolder:Qtrax" =============

====== End Of Search ======

[montypy88]

If it helps, Spybot says that it is detecting a program directory in F:\Music\Qtrax Media Library\. The F:\ drive is definitely my disc drive, though, which I rarely if ever use.

[montypy88]

If it helps, Spybot says that it is detecting a program directory in F:\Music\Qtrax Media Library\. The F:\ drive is definitely my disc drive, though, which I rarely if ever use.

Here's a screenshot, if it helps.

Qtrax.jpgQtrax.jpg