Potential Malware restricting access on windows 7 64-bit laptop

December 21, 2014, 11:51 am

≫ Next: Laptop = Paperweight

≪ Previous: laptop with administrator section completly ruined

$

0

0

Good day,

I am currently experiencing the following errors with my Windows 7, 64-bit Toshiba Satellite laptop:
- I am being blocked from my 2 User Profiles intermittently when I try to log in during and after start up. I am getting this error message: "Windows is unable to load user profile. Please try again later."

- I am unable to use my phone as a USB device when it is connected to my laptop, even though my drivers are up to date, the cable is working properly (I have tested it on other phones), the phone is unlocked and the relevant settings were adjusted on my phone so that the phone can function as a USB device and allow me to view files on a PC / laptop. It even gives me the option to safely remove my device on the task bar when it is connected to me device yet I cannot open it to view files.

- My anti-virus programs are not updating. Both AVG and Bitdefender were unable to update on the laptop. Currently, I am only using Bitdefender.

- The desktop configuration file is in all my folders as a hidden file, along with the System Volume Information, $RECYCLE.BIN, Program Data folder as hidden files. When I tried to delete them in safe mode the Program Data and System Volume Information Folders don't move and the other two hidden files come back eventually.

- I cannot access my Microsoft Office programs. Below are screen shots of what occurs when I try to enter a Microsoft document:

* "Configuring Process: Configuring Microsoft Office Professional Plus 2010..."
- "Preparing to install"
* "Preparing wait while Windows configures Microsoft Office Professional 2010"
* "Error 1706. Setup cannot find the required files. Check your connection to the network, or CD-ROM drive. For other potential solutions to this problem, see SETUP.CHM"

Then the program closes, then I get this error message:
" The feature you are trying to use is on a network resource that is unavailable. Click OK to try again, or enter an alternative path to a folder containing the installation package 'ProPlusWW.msi" in the box below." This is the link the shows up in the Use source text box: "C:\MSOCache\AllUsers\{90140000-0011-0000-0000-0000-0...." When I tried to select the box to get the use source the dialog box with the error message disappeared.

- All of my programs are gone, except, Internet Explorer, the Accessories program folder, Bitdefender 2015, Maintenance, Notepad++ folder, the startup folder, WINRAR.


Can you assist me please. I though that this was the Recycler virus virus so I have tried implementing the steps explained in this link to no avail: en.kioskea.net.


Thank you in advance.

---

Laptop = Paperweight

December 21, 2014, 4:35 pm

≫ Next: Unwanted links in mmy webpage

≪ Previous: Potential Malware restricting access on windows 7 64-bit laptop

$

0

0

Hello again psugirl13,

Let's do this:

Please download Rkill by Grinler and save it to your desktop.

• Link 1
• Link 2
  • Double-click on the Rkill desktop icon to run the tool.
  • If using Vista, right-click on it and Run As Administrator.
  • A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
  • If not, delete the file, then download and use the one provided in Link 2.
  • If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.
  • If the tool does not run from any of the links provided, please let me know.
• When the scan is done Notepad will open with rKill log. Please copy and past that in your reply.

Note: rKill.txt log can also be found on your desktop.

Unwanted links in mmy webpage

December 21, 2014, 5:15 pm

≫ Next: Annoying RunDll message!

≪ Previous: Laptop = Paperweight

$

0

0

Hi, Not sure of how valid this site tool may be on today's OSes but it used to be pretty good

http://www.unmaskparasites.com/

Does it indicate anything for you if you load your webpage(s)?

The code for your pages has to be "fixed" if there is something amiss, but I am not sure how to do that, might point to security issues with whoever hosts your pages, for example, the advertising appearing, is that controlled by the host? If so, maybe you have something to leverage with....THEY may need the bad ads removed from their servers..... ?

Those text popup ads are getting out of hand,I agree see them lots of places. Maybe someone here can help- I will message you a suggestion

Annoying RunDll message!

December 21, 2014, 5:37 pm

≫ Next: please help

≪ Previous: Unwanted links in mmy webpage

$

0

0

File #3

Attached Files

Shortcut.txt (45.1 KB)

please help

December 21, 2014, 7:53 pm

≫ Next: enterdigitalvirus/trogen

≪ Previous: Annoying RunDll message!

$

0

0

It would be best to continue in your other thread here as instructed earlier today where you were asked to post the ADW log. Maybe you missed that request?

Please click the Thread Tools drop-down menu and make sure you're subscribed to that thread so you don't miss any replies. ;)

Opening multiple threads will only complicate and slow down the resolution of your problem(s).

There are many additional steps that can be taken to help you but you need to stick with your original thread until the assistant has told you your machine is "clean" of malware.

Please remember that everyone here is a volunteer and the Holidays can be a very busy time of year.

Cheers!

enterdigitalvirus/trogen

December 21, 2014, 8:04 pm

≫ Next: Extutil and Managera Extensions

≪ Previous: please help

$

0

0

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft® Windows Vista™ Home Premium, Service Pack 2, 32 bit
Processor: AMD Turion(tm) 64 X2 Mobile Technology TL-58, x64 Family 15 Model 104 Stepping 1
Processor Count: 2
RAM: 1917 Mb
Graphics Card: ATI Radeon Xpress 1150, 2 Mb
Hard Drives: C: Total - 142144 MB, Free - 77802 MB; D: Total - 10448 MB, Free - 4 MB;
Motherboard: Dell Inc., 0UW744
Antivirus: Symantec Endpoint Protection, Updated and Enabled:mad:

Extutil and Managera Extensions

December 22, 2014, 5:44 am

≫ Next: Cannot launch any programmes

≪ Previous: enterdigitalvirus/trogen

$

0

0

My Avast Virus Detection program has recently started telling me that I have Extutil and Managera extensions and that they should be removed. I tried their program, but it says that they couldn't be removed because of an unspecified error. I have reset Chrome to its defaults. I recently run Malwarebytes and Adware cleaner to correct other issues. Can't seem to get rid of the Avast warning messages. I don't seem to be effected by them, but want to get back to a clean system. Any help would be appreciated.

Cannot launch any programmes

December 18, 2014, 9:44 am

≫ Next: Windows tech imposter

≪ Previous: Extutil and Managera Extensions

$

0

0

Quote:

Originally Posted by Phantom010 (Post 9010822) I believe you may have more serious issues that were not only caused by your services. Not having access to many applications is a sign of a malware infestation. If you wish, you can click on the Report button and kindly ask for a malware removal specialist's assistance.

Thank you for your advice. A request has been sent.

---

Windows tech imposter

December 22, 2014, 2:52 pm

≫ Next: Getting the following message "Google chrome has stopped working"

≪ Previous: Cannot launch any programmes

$

0

0

If you performed a Recovery to Factory settings, all is wiped out from the computer, including your own documents.

Getting the following message "Google chrome has stopped working"

December 22, 2014, 10:51 pm

≫ Next: Getting rid of Delta homes and find22.com and ads from my firefox and google chrome

≪ Previous: Windows tech imposter

$

0

0

lets see if we can get Combofix to run
turn off Norton First
Delete any existing version of ComboFix you might already have sitting on your desktop or in downloads folder

Please read and follow all these instructions very carefully

Do not edit or remove any information or user names etc, otherwise we cannot fix the problem. If you insist on editing out anything then I will close the topic & refuse to offer any help.

Download ComboFix from Hereto your Desktop or your downloads folder.

**Note: It is important that it is saved directly to your desktop or downloads folder and run from either the desktop or the downloads folder and not any other folder on your computer**
--------------------------------------------------------------------
1. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

• Very Important! Temporarily disable your anti-virus and anti-malware real-time protection and any script blocking components of them or your firewall before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results" or stop combofix running at all
• Click on THIS LINK to see instructions on how to temporarily disable many security programs while running combofix. The list does not cover every program. If yours is not listed and you don't know how to disable it, please ask.
• Remember to re enable the protection again after combofix has finished

--------------------------------------------------------------------
2. Close any open browsers and any other programs you might have running

Double click on combofix.exe & follow the prompts.

If you are using windows XP It might display a pop up saying that "Recovery console is not installed, do you want to install?"
Please select yes & let it download the files it needs to do this. Once the recovery console is installed Combofix will then offer to scan for malware. Select continue or yes.
When finished, it will produce a report for you.
Please post the "C:\ComboFix.txt" for further review


****Note: Do not mouseclick combofix's window while it's running. That may cause it to stall or freeze ****

Note: ComboFix may reset a number of Internet Explorer's settings, including making it the default browser.
Note: Combofix prevents autorun of ALL CDs, floppies and USB devices to assist with malware removal & increase security.Read HERE why we disable autoruns

Please do not install any new programs or update anything (always allow your antivirus/antispyware to update) unless told to do so while we are fixing your problem. If combofix alerts to a new version and offers to update, please let it. It is essential we always use the latest version.

Please tell us if it has cured the problems or if there are any outstanding issues

*EXTRA NOTES*

• If Combofix detects any Rootkit/Bootkit activity on your system it will give a warning and prompt for a reboot, you must allow it to do so.
• If Combofix reboot is due to a rootkit, the screen may stay black for several minutes on reboot, this is normal
• If after running Combofix you receive any type of warning message about registry key's being listed for deletion when trying to open certain items, reboot the system and this will fix the issue (Those items will not be deleted)

Post the log in next reply please...

Getting rid of Delta homes and find22.com and ads from my firefox and google chrome

December 23, 2014, 5:17 am

≫ Next: Cursor blinks busy and open programs randomly reduce to the System Tray

≪ Previous: Getting the following message "Google chrome has stopped working"

$

0

0

http://forums.techguy.org/virus-othe...e-posting.html

Cursor blinks busy and open programs randomly reduce to the System Tray

December 23, 2014, 6:55 am

≫ Next: Definitely a Malware in my system

≪ Previous: Getting rid of Delta homes and find22.com and ads from my firefox and google chrome

$

0

0

Yesterday, I began experiencing a strange thing where my pointer/cursor appears as the arrow but then flashes the blue circle "busy" cursor right beside it. In and of itself, this wouldn't be so bad except that the effect of it appears to be that whenever I have a program open (Chrome, Firefox, Word, email, Task Manager etc), the program randomly and frustratingly reduces to the System Tray. The program doesn't close, it simply moves to the System Tray and I'm presented with my Desktop. I have run Malwarebytes, Norton Security Suite, CCleaner and the problem continues. I booted to Safe Mode and the problem disappears.

Here is the log from TSG Sys Info:

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 8, 64 bit
Processor: Intel(R) Core(TM) i3-3120M CPU @ 2.50GHz, Intel64 Family 6 Model 58 Stepping 9
Processor Count: 4
RAM: 6008 Mb
Graphics Card: Intel(R) HD Graphics 4000, -1984 Mb
Hard Drives: C: Total - 702210 MB, Free - 643162 MB;
Motherboard: TOSHIBA, Portable PC
Antivirus: Windows Defender, Disabled

I should add that Norton Security Suite, supplied by Comcast, is my antivirus since I don't see that listed in the log above.

Thanks,
Doug

Definitely a Malware in my system

December 25, 2014, 12:31 pm

≫ Next: computer running slow after games

≪ Previous: Cursor blinks busy and open programs randomly reduce to the System Tray

$

0

0

Your MGA report is showing that to be a company laptop

I cannot safely work on that
IMPORTANT NOTE REGARDING CORPORATE/COMPANY OWNED COMPUTERS

Please do not request assistance for corporate/company owned computers. Many changes/deletions are made during the clean up process, some of which may involve uninstalling programs, deleting folders/files, changing settings and/or removing policies etc. As we have no way of knowing for sure if these are actually needed for company operations, malware issues in these cases should be handled by your own IT Departments in order to avoid any undesirable results.

computer running slow after games

December 25, 2014, 7:08 pm

≫ Next: Need help - computer freezing

≪ Previous: Definitely a Malware in my system

$

0

0

Computer running slow after playing online games. Please take a look.

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: AMD Athlon(tm) II X2 220 Processor, AMD64 Family 16 Model 6 Stepping 3
Processor Count: 2
RAM: 3839 Mb
Graphics Card: NVIDIA GeForce 6150SE nForce 430, 256 Mb
Hard Drives: C: Total - 463197 MB, Free - 388048 MB; D: Total - 13639 MB, Free - 1679 MB;
Motherboard: PEGATRON CORPORATION, 2A6C
Antivirus: avast! Antivirus, Updated and Enabled

Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 9:55:41 PM, on 12/25/2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17496)

FIREFOX: 34.0.5 (x86 en-US)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe
C:\Program Files\Alwil Software\Avast5\avastui.exe
C:\Program Files (x86)\Carbonite\Carbonite Backup\CarboniteUI.exe
C:\Users\phil\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O3 - Toolbar: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)
O4 - HKLM\..\Run: [EKStatusMonitor] C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\Alwil Software\Avast5\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe"
O4 - HKLM\..\Run: [Carbonite Backup] C:\Program Files (x86)\Carbonite\Carbonite Backup\CarboniteUI.exe
O4 - HKLM\..\Run: [Conime] %windir%\system32\conime.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [KodakHomeCenter] "C:\Program Files (x86)\Kodak\AiO\Center\AiOHomeCenter.exe" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [KodakHomeCenter] "C:\Program Files (x86)\Kodak\AiO\Center\AiOHomeCenter.exe" (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.5\ViProtocol.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Application Layer Gateway Service (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\Alwil Software\Avast5\afwServ.exe
O23 - Service: CarboniteService - Carbonite, Inc. (www.carbonite.com) - C:\Program Files\Carbonite\Carbonite Backup\carboniteservice.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
O23 - Service: Foxit Cloud Safe Update Service (FoxitCloudUpdateService) - Foxit Software Inc. - C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Client Services (HPClientSvc) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Kodak AiO Network Discovery Service - Eastman Kodak Company - C:\Program Files (x86)\Kodak\AiO\Center\EKAiOHostService.exe
O23 - Service: Kodak AiO Status Monitor Service - Eastman Kodak Company - C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Distributed Transaction Coordinator (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Internet Security (NIS) - Unknown owner - C:\Program Files (x86)\Norton Internet Security\Engine\18.1.0.37\ccSvcHst.exe (file missing)
O23 - Service: ForceWare IP service (nSvcIp) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files (x86)\PDF Complete\pdfsvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: RoxioNow Service - Roxio - C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Print Spooler (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: vToolbarUpdater18.1.5 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.5\ToolbarUpdater.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10791 bytes

Need help - computer freezing

December 25, 2014, 8:17 pm

≫ Next: repeated Java update requests

≪ Previous: computer running slow after games

$

0

0

I tried to download the TSG info but I got a notification that my current settings do not allow for this type of file to be downloaded. I will post the info if someone can tell me how to fix that. I am using a Dell laptop with windows 7. My problem is that my computer was running perfectly until about a month ago when it started freezing on me. That problem increasingly worsened to the point where it was barely functioning.


I downloaded malwareabytes and ran the extensive scan. It quarantined two files and since then it's been better but still very slow. It works ok when I first begin using it but then it starts to freeze after about fifteen minutes. I tried rebooting a few times and also tried allow it to cool off.


I though about bringing the computer to a shop but then I remembered that I came here years ago (don't remember my screen name or log in) for a similar problem and whoever helped me did such a great job. I made a donation back then. I will make another if you can fix this issue. Thanks for so much

---

repeated Java update requests

December 26, 2014, 11:35 am

≫ Next: Windows & Virus's/Malware...

≪ Previous: Need help - computer freezing

$

0

0

If you really feel that you do want and need java then install the latest version from www.java.com press the red download java now button

If you continue to get update prompts after that, then it means the prompts are fake and malware related. Let us know

Windows & Virus's/Malware...

December 26, 2014, 1:43 pm

≫ Next: Almost cleaned this malware laden beast. Trovi.com sticking around

≪ Previous: repeated Java update requests

$

0

0

Another problem with this PC is that when I download an application, say CCleaner.exe, it's saving it as CCleaner_exe. It uses an underscore in lieu of the period....

Almost cleaned this malware laden beast. Trovi.com sticking around

December 26, 2014, 2:38 pm

≫ Next: web browser hijack

≪ Previous: Windows & Virus's/Malware...

$

0

0

Well I'll be. Strange thing is I pinned it directly from the start menu in metro that opened just fine. When I made a fresh I.E link on the desktop its now gone and that is what I pinned from to keep it going. Still not sure why in the metro it opens to google but pinned from it opens to Trovi.com but you gave me enough for me to work around this annoyance at least. Thanks hadn't thought of just a single new link. Does anyone know how to in the start menu of windows 8.1 see what the properties are of those tiles?

web browser hijack

December 26, 2014, 4:18 pm

≫ Next: jrfzpbonblg.exe information help

≪ Previous: Almost cleaned this malware laden beast. Trovi.com sticking around

$

0

0

Click on this link to download : ADWCleaner Click on ONE of the Two Blue Download Now buttons That have a blue arrow beside them and save it to your desktop. Do not click on any links in the top Advert.

See the screenshot where the proper download buttons are highlighted


NOTE: If using Internet Explorer and you get an alert that stops the program downloading click on Tools > Smartscreen Filter > Turn off Smartscreen Filter then click on OK in the box that opens. Then click on the link again.

Close your browser and double click on this icon on your desktop:



You will then see the screen below, click on the Scan button (as indicated), accept any prompts that appear and allow it to run, it may take several minutes to complete, when it is done, you will get a message saying "PENDING" , Ignore that & click on the Clean button, accept any prompts that appear and allow the system to reboot. You will then be presented with the report, Copy & Paste it into your next post.
Please note: the newer versions of Adwcleaner have a pretty colour display on some versions of windows and slightly different icons. The screenshots are from the older version but are basically the same

jrfzpbonblg.exe information help

December 26, 2014, 10:57 pm

≫ Next: Can't open Facebook on my computer

≪ Previous: web browser hijack

$

0

0

don't worry then
I wish Norton was as efficient at stopping real malware