Solved! Hacking program on my PC (Windivert.sys)

[Help374]

I have recently found that I have this hacking program on my pc. I haven't really been able to find a way to actually remove it, despite my searches. I was wondering if anyone would be able to give me a hand with this.

My specs are:

Windows 8.1
AMD fx 8350
gtx 1070
gigabyte 990fxa-ud3
8gb ram

Thanks in advance

 

[COLGeek]

MERGED QUESTION
Question from Help374 : "Brand new system install of 8.1 received BSOD (CRASH DUMP INCLUDED)"

Hey. I've been using my PC for a very long time prior to these recent issues of BSODs, freezes and random resets. After fully rebooting my PC, my PC got a BSOD. Here is the dump: http/www.mediafire.com/file/m1dlcc2c3s49v11/030718-16593-01.dmp

My specs are:

Windows 8.1 64bit
GPU: Nvidia 1070 (Using older driver. Have tried current)
CPU: AMD FX 8350
Motherboard: gigabye 990fxa-ud3
8 GB ram
600W PSU

My bios has been fully updated.

fyi: you have a hacking program installed
WinDivert.sys
used for game cheating, and to steal usernames and password. you might want to remove it.


you need to apply the motherboard vendors driver updates also. you are using generic windows hardware drivers that are 2 years out of date from your bios data.

bughceck was from user mode, thru a filter driver, to cache management to a bad virtual address.

could be the hack program, could be the wrong sata drivers installed, or the chipset drivers, hard to tell.
I would apply the motherboard driver updates, and the windows updates and remove windivert.sys and see if you still get a bugcheck.

Note: it could be something simple, like a virus scanner hitting a bug in your old network driver, then causing a problem that resulted in the bugcheck. I would update the network drivers first:


you can look here if your motherboard vendor does not have a update
Realtek PCI-E Wireless LAN NIC NDIS Driver
http/www.realtek.com.tw/downloads/downloadsView.aspx?Langid=1&PNid=13&PFid=21&Level=4&Conn=3

I'll get to updating tomorrow. Thanks for the answers so far. I would like to mention that I've had all of this running for a fair but of time, prior to this, so I'm not sure if the updates could make that much of a difference. On the topic of the windivert.sys, I'm unable to find it under the uninstall programs section. Am I looking in the incorrect place?

if it was installed by malware there will not be a uninstall. search your hard drive for the binary file. boot into safe mode and delete the file.
https/www.reqrypt.org/windivert.html
you can google on how to remove windivert

I'll get to updating tomorrow. Thanks for the answers so far. I would like to mention that I've had all of this running for a fair but of time, prior to this, so I'm not sure if the updates could make that much of a difference. On the topic of the windivert.sys, I'm unable to find it under the uninstall programs section. Am I looking in the incorrect place?

So, updated my bios, GPU driver and windows earlier on, then I got another bsod. Here are the dumps: http/www.mediafire.com/folder/ep1fa4wz2d1e5/Dump Thanks for your help so far.

 

[COLGeek]

Do you have KMSPico installed on this system?

 

[Help374]

Do you have KMSPico installed on this system?

I do have it installed. I went into the folder and deleted windivert.sys. Would this be enough?

 

[COLGeek]

Then you are using pirated software. That is the problem.

Tom's Hardware does not support any form of software piracy. None. Period.

A fresh install of Windows with a legal product key will resolve the issue.

Case closed.

 

[johnbl]

MERGED QUESTION
Question from Help374 : "BSODs and freezes (Dumps included)"

I have updated my Bios, chipset, gpu and windows updates, but constantly receive these errors as well as random freezes.

Here are the dumps: http/www.mediafire.com/folder/ep1fa4wz2d1e5/Dump

Thanks for the help.

MERGED QUESTION
Question from Help374 : "BSODs (DUMP INCLUDED)"

I have updated my Bios, chipset, gpu and windows updates, but constantly receive these errors as well as random freezes.

Here are the dumps: http/www.mediafire.com/folder/ep1fa4wz2d1e5/Dump

Thanks for the help.

MERGED QUESTION
Question from Help374 : "Blue screens and freezes (Dumps included)"

I have updated my Bios, chipset, gpu and windows updates, but constantly receive these errors as well as random freezes.

Here are the dumps: http/www.mediafire.com/folder/ep1fa4wz2d1e5/Dump

Thanks for the help.

And here's my pc specs:
CPU:
Motherboard:
RAM:
GPU:
HDD:
PSU make and age:
OS:
HWINFO from here https/www.hwinfo.com/download.php

Please stop starting new threads to ask the same question. Have some patience please and follow up with the questions others are asking you. Thank you.

system bugchecked because internal windows memory management data structures were modified. the actual error code was not documented by Microsoft but could be related to standby memory or virtual memory.
(you might download and run rammap64.exe and go to the empty menu item and empty standby memory list)

you have windivert.sys running. this is a hacking tool running. I would remove it.

could not read the bios info in the memory dump.

also, your usb driver extensions do not match your USB version, looks like you have not applied proper motherboard driver updates or windows updates.

I have updated my Bios, chipset, gpu and windows updates, but constantly receive these errors as well as random freezes.

Here are the dumps: http/www.mediafire.com/folder/ep1fa4wz2d1e5/Dump

Thanks for the help.

Thanks for the reply. My windows us a fresh installation, is it still possible for me to have these errors with this being the case? As for windivert.sys, I've been researching methods of removing it to no avail so far. Could you recommend something to me?

windivert tends to get installed when you install pirate software. It is used to fake activation and steal userid and passwords. Sometimes it is used to cheat at games. you generally can search your drive for the program and boot into safe mode and manually delete the file. Some hack programs will reinstall it later via the task scheduler or other means.

Thanks for the reply. My windows us a fresh installation, is it still possible for me to have these errors with this being the case? As for windivert.sys, I've been researching methods of removing it to no avail so far. Could you recommend something to me?