FabFilter

PWS:Win32/Fareit!ml

Quarantined

This program is dangerous and captures user passwords.

Affected items:

file: C:\Program Files\FabFilter\Pro-C 2\Uninst.exe
file: C:\Program Files\FabFilter\Pro-L 2\Uninst.exe
regkey: HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\FabFilter Pro-C 2.20
regkey: HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\FabFilter Pro-L 2.24
uninstall: HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\FabFilter Pro-C 2.20
uninstall: HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\FabFilter Pro-L 2.24

And then...

Trojan:Script/Wacatac.B!ml
file: C:\Windows\Installer\44cf9e.msi

Trojan:Script/Wacatac.B!ml
file: C:\Windows\Installer\759b1f.msi

Trojan:Script/Wacatac.B!ml
file: C:\Windows\Installer\3117f3.msi
file: C:\Windows\Installer\44cb2c.msi

Trojan:Script/Wacatac.B!ml
file: C:\Windows\Installer\30f182.msi

I can't tell if any of this is real or not. I literally just did a system restore due to another virus...so it seems unlikely but...