11 (Eleven) instances of winlogon.exe running???

February 4, 2015, 4:39 pm

≫ Next: WEBCAM Enabled Remotely Suspected???

I cannot imagine having 11 instances of winlogon.exe at the same time is a good thing???
And yes, I have googled "multiple winlogon running" and such, with poor results in answers.

This is a Lenovo Y510P Laptop, Windows 8.1. 8G RAM.

Thank you to whomever can help!!!!!

↧

WEBCAM Enabled Remotely Suspected???

February 4, 2015, 4:49 pm

≫ Next: please help!!!!

≪ Previous: 11 (Eleven) instances of winlogon.exe running???

I have been suspecting spyware on my laptop - Lenovo Y510P. Windows 8.1. 8G RAM.

I especially suspect something now!!! Every time I log onto my computer and open Device Manager the only 2 programs that are ALWAYS open in there are the Webcam (Lenovo Easycam) and the Audio Outputs and Inputs. I have both the webcam and the Microphone disabled.

I will close those two programs in Device Manager and they will reopen and I am NOT doing it, and those are the only 2 that keep reopening.

Before anyone brings up whether the webcam light is on or not, that does not matter. I have already googled that and the webcam light can be disabled by malware. However, I have not found any good answers online regarding the issue.

Thank you to whomever can help!!!!!

↧

please help!!!!

February 4, 2015, 6:50 pm

≫ Next: Very Bad system performance.

≪ Previous: WEBCAM Enabled Remotely Suspected???

I am stuck! My home PC is currently unusable. It freezes, non of the metro apps open, nor do IE or chrome. I'm pretty much dead in the water. Any help would be appreciated.

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 8.1 Pro with Media Center, 64 bit
Processor: Intel(R) Core(TM) i7-2600 CPU @ 3.40GHz, Intel64 Family 6 Model 42 Stepping 7
Processor Count: 8
RAM: 12270 Mb
Graphics Card: AMD Radeon HD 5670, 1024 Mb
Hard Drives: C: Total - 941285 MB, Free - 249483 MB; E: Total - 476937 MB, Free - 185927 MB;
Motherboard: Dell Inc., 0Y2MRG
Antivirus: AVG AntiVirus Free Edition 2015, Updated and Enabled

↧

Very Bad system performance.

February 4, 2015, 11:54 pm

≫ Next: Chrome and IE Browser Google Search Infected by unknown virus

≪ Previous: please help!!!!

So far so good didnt bought me some more memory yet it seems the system runs slightly better
I might flush my dns once in a while with the ipconfig /flushdns maybe you got some cmnds to dump my cache etc.

Oh one thing i really dont understand my windows defender is not running according the Sysinfo tool while i just started it strangely it doesnt appear in the tool

↧

Chrome and IE Browser Google Search Infected by unknown virus

February 5, 2015, 5:33 am

≫ Next: ongoing trouble , starts within hours after running scans

≪ Previous: Very Bad system performance.

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: Intel(R) Core(TM) i5-4278U CPU @ 2.60GHz, Intel64 Family 6 Model 69 Stepping 1
Processor Count: 4
RAM: 8100 Mb
Graphics Card: Intel(R) Iris(TM) Graphics 5100, 1024 Mb
Hard Drives: C: Total - 119207 MB, Free - 68322 MB; D: Total - 119343 MB, Free - 85353 MB;
Motherboard: Apple Inc., Mac-189A3D4F975D5FFC
Antivirus: Panda Free Antivirus, Updated and Enabled

Hi,
Both my chrome and internet explorer seems to be infected by some virus as google looks weird whenever i use it.
1) At the top right, even though i'm logged into my google account, it shows that I'm not

2)At the footer of google, there are two things missing. First is the Google logo and blue arrow for going to the next search page and the other is the whole footer that has things such as help, terms and privacy is not available
This is the pic taken from my non affected firefox browser to describe what i'm talking about

This 2nd pic is the screenshot taken from my affected chrome browser

I've tried to using both panda antivirus and spybot s&d to find out what is wrong but no virus is detected. I tried to uninstall and reinstall my chrome but the problem still exist

Can someone assist?

Thanks

↧

ongoing trouble , starts within hours after running scans

February 5, 2015, 3:37 pm

≫ Next: Malware alerts and no internet access

≪ Previous: Chrome and IE Browser Google Search Infected by unknown virus

for months I have had same issue,, this started back awhile when my new system was hit when an app had issues.. a company charged to come online to fix but still seeing issues return.. Have wiped computer back to factory twice.. and again I start dealing with first slow running,, than unable to access settings, than unable to access problems , to everything dragging and finally dead lovely blue or black screen

can someone please help find and clean this visitor that I am tired of living in my computer ;)

as stated I have done a factory restore ,,complete twice.. I download back the browsers Firefox and Chrome only to learn they had also reloaded my prior profiles..

thought I had that all clean but unsure and I only have firefox and ie and the issue is coming back..

I have run. Malwarebytes , and again ran using their Chamleon.. I have Windows Security Essentials and for some reason now I have Windows Firewall with Advance Security and I was unable to make any changes to any program or download updates.. I solved that for now last night doing Malwarebytes, followed by Spybot , Ccleaner and Privacy Mantra ... Firefox was and still to a point eating up memory fast,, and creating multiple files for users profile.. I am lost ,, nothing has ever shown under MSE and Malwarebytes with catch tracks but feel there is something still on here

↧

Malware alerts and no internet access

February 5, 2015, 3:50 pm

≫ Next: Various - Computer start-up, Internet often non-responsive, and more

≪ Previous: ongoing trouble , starts within hours after running scans

UNinstall Spybot S&D, will cause many issues for us: http://www.ehow.com/how_5806889_dele..._-destroy.html

Next,

Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into.
NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work.

Run FRST and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply.

Is your internet restored? if so continue:

Next,

Download Malwarebytes Anti-Malware to your desktop.

Double-click mbam-setup and follow the prompts to install the program.
At the end, be sure a checkmark is placed next to the following:
Launch Malwarebytes Anti-Malware
A 14 day trial of the Premium features is pre-selected. You may deselect this if you wish, and it will not diminish the scanning and removal capabilities of the program.
Click Finish.
On the Dashboard, click the 'Update Now >>' link
After the update completes Select > Settings > Detection and Protection > Enable Scan for rootkit and Under Non Malware Protection set both PUP and PUM to Treat detections as malware.
Now select > Scan > Threat scan > Scan now
When the scan is complete, if there have been detections, click Apply Actions to allow MBAM to clean what was detected.
In most cases, a restart will be required.
Wait for the prompt to restart the computer to appear, then click on Yes.

When the scan is completed from the main GUI click on History > Application Logs. Find your scan log, the date when run will identify it. Checkmark "select" box > then hit the "view" button. The history log window will open. At the bottom of that window are two options, "Copy to clipboard" and "Export"
Select > "Copy to clipboard" that copies the full log to the windows clipboard, so at your reply you right click into the text field and select "Paste" the log is pasted (copied) to your reply.

Next,

Download AdwCleaner by Xplode onto your Desktop.

Double click on Adwcleaner.exe to run the tool.
Click on Scan
Once the scan is done, click on the Clean button.
You will get a prompt asking to close all programs. Click OK.
Click OK again to reboot your computer.
A text file will open after the restart. Please post the content of that logfile in your reply.
You can also find the logfile at C:\AdwCleaner[Sn].txt. Where n in the scan reference number

Next,

Please download Junkware Removal Tool to your desktop.

Shut down your protection software now to avoid potential conflicts. (re-enable when done)
Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
Post the contents of JRT.txt into your next message.

Next,

Download Microsoft's " Malicious Software Removal Tool" and save direct to the desktop
Ensure to get the correct version for your system....
32 Bit version:
https://www.microsoft.com/downloads/...displaylang=en
64 Bit version:
https://www.microsoft.com/downloads/...displaylang=en

Right click on the Tool, select Run as Administrator the tool will expand to the options Window
In the "Scan Type" window, select Quick Scan
Perform a scan and Click Finish when the scan is done.
Retrieve the MSRT log as follows, and post it in your next reply:

1) Select the Windows key and R key together to open the "Run" function
2) Type or Copy/Paste the following command to the "Run Line" and Press Enter:

notepad c:\windows\debug\mrt.log

Post those logs, also give an update on any remaining issues or concerns...

Thank you,

Kevin...

Attached Files

Fixlist.txt (6.8 KB)

↧

Various - Computer start-up, Internet often non-responsive, and more

February 6, 2015, 5:00 pm

≫ Next: Windows 8 thinks my key isn't activated

≪ Previous: Malware alerts and no internet access

Hi marina_p,

There are a few fundamental problems with this machine.
1) It has a single core processor. That makes it not very fast.
2) It has only 64Mb graphics card. That makes it slow loading websites.
3) It has no antivirus. That is a disaster. Your machine is a sitting duck for infections.

Tell me: Is this a laptop or desktop?

Before we do anything else, we have to get an antivirus on there.
-----------------------------------------------------------
Download the Microsoft Security Essentials Installer
The download is here: http://www.microsoft.com/security_essentials/
Choose "Save As" and Save it to your desktop. Make sure you can find it.

Install Microsoft Security Essentials
Double Click the icon for the Microsoft Security Essentials installer.
Let it install, update itself, run a FULL scan and delete anything it finds.

Tell me about the desktop/laptop thing, and any model number, if you know it.
Tell me if you were successful in downloading and running MS Security Essentials.

askey127

↧

Windows 8 thinks my key isn't activated

February 6, 2015, 9:24 pm

≫ Next: FreeFileViewer Remover

≪ Previous: Various - Computer start-up, Internet often non-responsive, and more

Hi all,

Here is my link to my stats http://speccy.piriform.com/results/P...kHnEJNQzx8MFnb & Win 8 came pre-installed on this Asus laptop.

Just an FYI to anyone out there, I will NEVER EVER buy anything Asus again. Their tech support is horrendous & they have wasted my time over & over again. And even their website doesn't even work properly when I tried to reach out to the executive area via their form, the submit button never works. And they hide management so you can never speak to them. They also won't let you speak to anyone in the US And lastly, no one even calls me back when they say they will (not one person, but many). Just a forewarning.

So after wasting almost a month with this issue & probably over 24 total hours of dealing with Asus & MS on the phone, MS is NOW saying they think I have a virus.

First I had issues with my wifi working when I was at a hotel, then after going thru the troubleshooting steps I think it wanted me to do a refresh which I did.

It then had a number to call to get the Win 8 activation key so I called it & got this new key. Then a day or two later Win wanted to do another update. Now I wasn't at my own apt. & the speeds were terrible at this place I was staying at, but seriously, it took the update 6-8 hours. I know b/c I got up in the middle of the night & it was STILL running.

Then it said the key was no longer valid & would deactivate on 02-10-15.

I called MS & they told me that Asus is responsible. I called Asus & they told me MS is responsible. Called MS again & when I learned that all Win 8 pre-install keys are now connected to the MB & they no longer put a sticker on the hardware, I knew Asus was responsible.

We went through everything at least 6 times with 6 different people & finally they said I had to do a factory refresh which I did just today & it took around 5 HOURS, can you believe that???

After that was done I was STILL getting the flag with the red X saying that MS wasn't activated, but under PC Info it says it is.

So I called up MS & said this is a problem on YOUR end. After he did something to upload a file to my computer & had me restart, the flag came back again.

Now this guy isn't smart as he was NOT aware that there's no sticker on the laptops anymore for the key, but he wouldn't let me speak to a manager (probably lied about him being busy) & so he is saying I must have a virus.

I'm very nervous now b/c the 10th is here in 4 days.

Can we try to get rid of any virus there may be to see if that helps.

In the meantime I clicked on the link that said to hide that message. I just rebooted & the flag isn't showing that red X anymore, but I don't trust this computer,

I'm in the middle of re-installing all my apps for the 2nd time in less then a month.

Oh & I always have Avast & MBAB on all my computers, so it's not like I'm unsecure & I've been working with computers for years.

Thank you

Michelle

↧

FreeFileViewer Remover

February 7, 2015, 5:31 am

≫ Next: High ram usage and cpu.

≪ Previous: Windows 8 thinks my key isn't activated

Hello, Zello.

Let's try something else. Please tell me if that gets rid of the problem.

Step #1
Junkware Removal Tool

Download Junkware Removal Tool to your Desktop
Close any open windows
Disable your Antivirus program (click here if you don't know how to do this)
Double click JRT.exe on your desktop to run it
Click any button to start the scan
Wait for Junkware Removal Tool to finish the scan
When the scan is finished, JRT.txt will be saved to your desktop and it will automatically open
Select all (CTRL+A) the content of the log, copy it (CTRL+C) and paste (CTRL+V) it into your next reply.

Step #2
AdwCleaner

Download AdwCleaner to your Desktop.
Close any open windows
Double click AdwCleaner.exe on your desktop to run it
Click the button
Wait for AdwCleaner to finish the scan
When the scan is finished, there will be "Pending. Please uncheck elements you don't want to remove" message. Leave everything as it is and click button.
When the cleaning is finished, the program will ask you to reboot the system. Please do so.
Once your machine has rebooted, a Notepad window will be opened. If it won't, you can find it in C:\AdwCleaner. The report will be saved as AdwCleaner[S0].txt.
Select all (CTRL+A) the content of the log, copy it (CTRL+C) and paste (CTRL+V) it into your next reply.

Remember to enable your Antivirus program once you're done!

Things that should appear in your next post:

JRT.txt log content
AdwCleaner[S0].txt log content
Are the popups still appearing?

↧

High ram usage and cpu.

February 7, 2015, 5:45 am

≫ Next: Audio Ad w/o Browser, other random online computer issues...i cant afford a "Geek"

≪ Previous: FreeFileViewer Remover

Hi piped21,

Lets deal with the high memory usage/slowness now, and address other issues afterwards.
Please do the following.

Farbar Recovery Scan Tool (FRST) Scan

Please download Farbar Recovery Scan Tool (x64) and save the file to your Desktop.
Right-Click FRST64.exe and select Run as administrator to run the programme.
Click Yes to the disclaimer.
Ensure the Addition.txt box is checked.
Click the Scan button and let the programme run.
Upon completion, click OK, then OK on the Addition.txt pop up screen.
Two logs (FRST.txt & Addition.txt) will now be open on your Desktop. Copy the contents of both logs and paste in your next reply.

↧

Audio Ad w/o Browser, other random online computer issues...i cant afford a "Geek"

February 7, 2015, 5:46 am

≫ Next: %hs is missing

≪ Previous: High ram usage and cpu.

Hello rmr,

Please do the following.

Farbar Recovery Scan Tool (FRST) Scan

Please download Farbar Recovery Scan Tool (x32) or Farbar Recovery Scan Tool (x64) and save the file to your Desktop.
Note: Download and run the version compatible with your system (32 or 64-bit). Download both if you're unsure; only one will run.
Right-Click FRST.exe or FRST64.exe and select Run as administrator to run the programme.
Click Yes to the disclaimer.
Ensure the Addition.txt box is checked.
Click the Scan button and let the programme run.
Upon completion, click OK, then OK on the Addition.txt pop up screen.
Two logs (FRST.txt & Addition.txt) will now be open on your Desktop. Copy the contents of both logs and paste in your next reply.

↧

%hs is missing

February 7, 2015, 6:02 am

≫ Next: HiJackThis Log--Lots of ? and X's

≪ Previous: Audio Ad w/o Browser, other random online computer issues...i cant afford a "Geek"

Welcome. :)

Your Hard Drive is not being recognized, or is unreadable. Check your BIOS Setup utility and see if the Hard Drive is being recognized.

Also follow these steps:

Please download Listparts to a flash drive.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

Plug the flashdrive into the infected PC.

From an Off position in the computer, enter the System Recovery Options.

To enter the System Recovery Options from the Advanced Boot Options:

Restart the computer.
As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
Click on Repair your computer menu item.
Select US as the keyboard language settings, and then click Next.
Select the operating system you want to repair, and then click Next.
Select your user account and click Next.

On the System Recovery Options menu you will get the following options:

Startup Repair
System Restore
Windows Complete PC Restore
Windows Memory Diagnostic Tool
Command Prompt

Select Command Prompt
In the command window type in notepad and press Enter.
The notepad opens. Under File menu select Open.
Select "Computer" and find your flash drive letter and close the notepad.
In the command window type e:\ListParts.exe (for x64 bit version type e:\ListParts64.exe) and press Enter
Note: Replace letter e with the drive letter of your flash drive.
The tool will start to run.
When the tool opens click Yes to disclaimer.
Put check mark on List BCD.
Press Scan button.
It will make a log (Result.txt) in the flash drive. Please copy and paste it to your reply.

↧

HiJackThis Log--Lots of ? and X's

February 7, 2015, 6:40 am

≫ Next: tabs opening with download demands

≪ Previous: %hs is missing

Reason I wanted to check my system is that when I ran Malwarebytes and SuperAntispyware I came across some things....I had them fixed or quarantined, but have attached screenshots of both logs.

I ran Farbar and aswMBR and attached all logs.

Attached Images

malware screenshot.png (41.4 KB)

Attached Files

	SUPERAntiSpyware Scan Log - 01-30-2015 - 17-58-07.log (19.4 KB)
	Addition.txt (22.3 KB)
	FRST.txt (63.7 KB)
	aswMBR.txt (1.8 KB)

↧

tabs opening with download demands

February 7, 2015, 7:33 am

≫ Next: Need Askey127's help again

≪ Previous: HiJackThis Log--Lots of ? and X's

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: Intel(R) Core(TM) i5-2450M CPU @ 2.50GHz, Intel64 Family 6 Model 42 Stepping 7
Processor Count: 4
RAM: 6050 Mb
Graphics Card: Intel(R) HD Graphics 3000, -1988 Mb
Hard Drives: C: Total - 715401 MB, Free - 535958 MB;
Motherboard: Dell Inc., 034W60
Antivirus: Ad-Aware Antivirus, Disabled

So, I cruise in Chrome. I have had problems with tabs opening up, usually a couple will open at a time, sometimes more, that ask to download something to update products that I don't even have on my computer. I simply close the windows and ignore them. but, they are a real nuisance.
I had been using the Microsoft antivirus products that you guys steered me to long ago. I am concerned that since I am on windows 7 they no longer keep them up.
I removed that Microsoft antivirus and installed the avg free and ran their diagnostic. One thing was discovered and removed, but since then the problem persists. So I ran Ad-Aware, that did not help. I downloaded and ran Kasperski antivirus. That is running but it did not show up in the TSG SysInfo log. Whats up with that?
I also ran spybot search and destroy. What was weird was that I could not use the immunize feature of that program. It said I did not have administrative privileges to do that. Can you help me on that point. I am the administrator!
So, I think I have AVG and Kasperski running together right now.
Can you help me sort through this mess?
Thanks
Michael

↧

Need Askey127's help again

February 7, 2015, 9:26 am

≫ Next: zperm virus

≪ Previous: tabs opening with download demands

Last year, Askey127 helped me with cleaning my notebook and I had said I also had a PC that needed a once-over. I'm happy to report that all these months later, the notebook is still performing well...I have been updating my HOSTs file monthly and running ADWCleaner periodically and never really seem to have any problems.

This PC however is another story. Askey127 told me the he/she did NOT like Steven Gould's Windows Clean-UP but never did explain why. When I use it, it shows a list of all the things it found and deleted AND shows all the things that are 'currently in use" and those are what let me know there is something going on. ON the notebook, it is normally only the temp files for the Windows Essentials updates. When I go into the TEMP folder on the notebook, I normally only find the one file with the very long name, then 2 others MpCmdRun and MpSigStub.

On this desktop however, I am continually finding lists of things that are "currently in use", and some folder labeled PDFC keeps reappearing after I delete it along with a couple of sqmwts or something type files. No matter how many times I try a Google search on the PDFC folder, I can't seem to get a straight answer of what it is and why it keeps reappearing. This PC runs the same OS as the Notebook so I don't know why I'm always finding these things in the TEMP folder on this. I've tried msconfig to see what shows as start-up services and try to make sure everything I don't want running at start-up is unchecked, but it keeps happening over and over. I need to find the root of what is hiding in this things drive.

Before we get into the scans, I have one problem I need to resolve: Before finding your website, on the advice of some other post, I created a separate ADMINISTRATOR account "so I could effect changes more safely". Now I can't remember my password and I want to get rid of the account altogether. I just want HOME again. Can you help me do that?

↧

zperm virus

February 7, 2015, 10:11 am

≫ Next: explorer.exe failure, and a plethora of other weird things on Windows 7

≪ Previous: Need Askey127's help again

i keep getting a virus called zperm. i ran AVG and ad-aware. here is a copy of hijackthis. do i need to do anything else?

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:10:41 PM, on 2/7/2015
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
c:\PROGRA~1\AVG\AVG2015\avgrsx.exe
C:\Program Files\AVG\AVG2015\avgcsrvx.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AVG\AVG2015\avgidsagent.exe
C:\Program Files\AVG\AVG2015\avgwdsvc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.5.202.7299\AdAwareService.exe
C:\Program Files\AVG\AVG2015\avgui.exe
C:\Program Files\AVG SafeGuard toolbar\vprot.exe
C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.5.202.7299\AdAwareTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\CCleaner\CCleaner.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.2.0\ToolbarUpdater.exe
C:\Program Files\AVG\AVG2015\avgnsx.exe
C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.2.0\loggingserver.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\QuickTime\QuickTimePlayer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll
O2 - BHO: AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG SafeGuard toolbar\18.2.0.829\AVG SafeGuard toolbar_toolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll
O3 - Toolbar: AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG SafeGuard toolbar\18.2.0.829\AVG SafeGuard toolbar_toolbar.dll
O4 - HKLM\..\Run: [DLCCCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLCCtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\AVG2015\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [vProt] "C:\Program Files\AVG SafeGuard toolbar\vprot.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AdAwareTray] "C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.5.202.7299\AdAwareTray.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
O4 - HKUS\S-1-5-21-2342698487-1329037420-3596670359-500\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup (User 'Administrator')
O4 - HKUS\S-1-5-21-2342698487-1329037420-3596670359-500\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Administrator')
O4 - Startup: Nikon Monitor.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.8.0_31\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.8.0_31\bin\jp2iexp.dll
O16 - DPF: {4EFA317A-8569-4788-B175-5BAF9731A549} (Microsoft Virtual Server VMRC Advanced Control) - http://66.133.171.94/rcm/VMRCActiveXClient1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/wind...?1371693433752
O16 - DPF: {8B0F07E1-00F9-4B1B-9A2F-456DC0F54EBF} (PortDetector Control) - http://vlab1se-ekt2.elementk.com/vlab/ax/PortTester.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pu...sh/swflash.cab
O16 - DPF: {F5D98C43-DB16-11CF-8ECA-0000C0FD59C7} (ActiveCGM Control) - http://jp-appserver.jeffparish.net/webmap/acgm/Acgm.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\18.2.0\ViProtocol.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2015\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2015\avgwdsvc.exe
O23 - Service: dlcc_device - Unknown owner - C:\WINDOWS\system32\dlcccoms.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Ad-Aware Service 11 (LavasoftAdAwareService11) - Unknown owner - C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.5.202.7299\AdAwareService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: vToolbarUpdater18.2.0 - AVG Secure Search - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.2.0\ToolbarUpdater.exe

--
End of file - 7124 bytes

↧

explorer.exe failure, and a plethora of other weird things on Windows 7

February 7, 2015, 9:02 pm

≫ Next: DNSChanger Trojan

≪ Previous: zperm virus

This ones a doosie.

Okay, so about a week ago I was playing The Sims 3 when it crashed, and the launcher wouldn't pop back up. No big deal, right? I restarted my computer and it instantly went to safe mode and ran CHKDSK (Check Disk, I presume?) and removed a bunch of stuff, it honestly went so fast and I had no idea what was going on, other than it was running CHKDSK. After that my computer has been behaving weirdly.

I ran avast, and nothing came up, but I noticed my default google tab was something called Vosteran.com. I googled and it turns out, it was a malware. I took the steps to remove it, and it seems to be completely gone from the computer, but I'm still having major issues.

When I try to access certain things through the control panel (Such as creating a new user, or uninstalling programs) nothing happens. Its hit or miss with certain things. I can do things like change my password, and change my clock settings, but when I click on other options, like uninstall program, or add devices (and even scarier, turning on windows defender) nothing happens when I click.

I've also noticed that when I try to change my monitor's resolution, it tells me that windows.exe has failed. "Server Execution has Failed"

I've tried to diagnose it through the boot menu, but it passes every single test.

I'm trying to avoid restoring my computer, because I have a lot of stuff on here that I don't want to lose, and I can't back it up, because Windows Backup won't launch when I try to open it, and there is way too many files for a USB to handle. I can't even attach things to emails, when I try, nothing happens.

Another annoying thing that has happened - Internet sounds don't play! I get the little badum noise when headphones or speakers connect, and I get the ding when I adjust the volume, but when I try to listen to sounds through the internet, or through video games, there's no sound.

TSG Sysinfo Results:
Tech Support Guy System Info Utility version 1.0.0.2
OS Version:
Processor:
Processor Count:
RAM:
Graphics Card:
Hard Drives:
Motherboard:
Antivirus: None

I'm pretty sure I either did that wrong, or something is seriously messed up with my computer. I'm a complete dummy with computers sometimes >.<

Here's what it should be:
Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Windows 7 64-bit
Processor: Intel(R) Core(TM) i3 CPU
Processor Count: 540 @ 3.07 GHz
RAM: 6.00 GB
Graphics Card: ATI Radeon HD 5570
Hard Drives: C & D? Please let me know what I should be looking for here >.<
Motherboard: HP p6530f
Antivirus: Avast Antivirus

↧

DNSChanger Trojan

February 7, 2015, 10:00 pm

≫ Next: browsers very slow to load first time

≪ Previous: explorer.exe failure, and a plethora of other weird things on Windows 7

Hi!

Malwarebytes is showing 2 files of DNSChanger trojans. I've checked the DNS settings and all are set to this computer. All DNSChanger tools are showing no problem. It only shows the trojans when connected to the home internet. What can I do to fix this problem? Thanks!

↧

browsers very slow to load first time

February 8, 2015, 1:20 am

≫ Next: Registry error on boot up

≪ Previous: DNSChanger Trojan

Hi guys/ladies
my laptop : Acer Aspire 5-571
Opsys: Win 7
browsers: Google Chrome and IE 11

Browsers slow to load ( both) first time ,occasional un-demanded redirect,these events seem to coincide with the loading of ICloud. run Windows Defender, Malwarebytes, no different , been like this for about a month.
Other programs a bit slow.
Hope you can help,

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: Intel(R) Core(TM) i3-2367M CPU @ 1.40GHz, Intel64 Family 6 Model 42 Stepping 7
Processor Count: 4
RAM: 3889 Mb
Graphics Card: Intel(R) HD Graphics 3000, 1816 Mb
Hard Drives: C: Total - 288642 MB, Free - 219176 MB;
Motherboard: Acer, Aspire V5-571
Antivirus: Microsoft Security Essentials, Updated and Enabled

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:57:23, on 08/02/2015
Platform: Unknown Windows (WinNT 6.01.3505 SP1)
MSIE: Internet Explorer v11.0 (11.00.9600.17496)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe
C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe
C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac
C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files (x86)\Cyberlink\MediaEspresso\DeviceDetector\DeviceDetector.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://us-mg6.mail.yahoo.com/neo/la...=0a7vcir2lnmte
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer, enhanced for Bing and MSN
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin .dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll
O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll" (file missing)
O3 - Toolbar: FindWide Toolbar - {28AB0A32-ADB4-4AEB-9E74-A0714CBA915E} - C:\Program Files (x86)\TNT2\Profiles\10801\passport.dll (file missing)
O4 - HKLM\..\Run: [BackupManagerTray] "C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" -h -k
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [SuiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe" -osboot
O4 - HKLM\..\Run: [RealDownloader] C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe
O4 - HKLM\..\Run: [ApnTBMon] "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'Default user')
O4 - Global Startup: RealPlayer Cloud Service UI.lnk = C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin64\rpsystray.exe
O8 - Extra context menu item: Clip image - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=4
O8 - Extra context menu item: Clip selection - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=3
O8 - Extra context menu item: Clip this page - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=1
O8 - Extra context menu item: Clip URL - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=0
O8 - Extra context menu item: New note - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\NewNote.html
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O13 - Gopher Prefix:
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\Skype4COM.dll
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - c:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Ask Update Service (APNMCP) - APN LLC. - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: EgisTec Ticket Service - Egis Technology Inc. - C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe
O23 - Service: ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Unknown owner - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: McAfee SiteAdvisor Service - Unknown owner - (no file)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
O23 - Service: NTI IScheduleSvc - NTI Corporation - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: PC Tools Startup and Shutdown Monitor service (PCToolsSSDMonitorSvc) - PC Tools - C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Rapport Management Service (RapportMgmtService) - IBM Corp. - C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe
O23 - Service: RealNetworks Downloader Resolver Service - Unknown owner - C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
O23 - Service: RealPlayer Cloud Service - RealNetworks, Inc. - C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
O23 - Service: RealPlayer Update Service (RealPlayerUpdateSvc) - Unknown owner - C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ZAtheros Wlan Agent - Atheros - C:\Program Files (x86)\Atheros\Ath_WlanAgent.exe

--
End of file - 16258 bytes

↧

Latest Images