Hi!
Can you please take a look at my laptop as I haven't been able to research information on my laptop? I think it is infected.
My system is a Gateway NV55C Intel Pentium with a 64 -bit Operating System. I have Windows 7 Home Premium edtion with Service Pack 1. Any help will be appreciated.
I hope someone can help me soon as I am really ready to pull my hair out!
My name is patndoris. I will be glad to take a look at your log and help you with solving any malware problems. It will be very helpful if you follow these guidelines:
Malware logs are often lengthy and can take a lot of time to research and interpret. Please be patient while I review your logs.
Please note that there is no "Quick Fix" to modern malware infections and we may need to use several different approaches to get your system clean.
Please make sure to carefully read any instruction that I give you. If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
Please follow my instructions carefully and in the order they are posted. You may also find it helpful to print out the instructions you receive.
Please do not run any scans or install/uninstall any applications or delete anything without being directed to do so.
Remember, absence of symptoms does not mean the infection is all gone. Please stick with me till you're given the "all clear".
Please do not use the Attachment feature for any log file. Do a Copy/Paste of the entire contents of the log file and submit it inside your post.
Please reply within 3 days. If I do not hear back from you in that time frame, I will post a reminder for you. Topics with no reply in 4 days are closed!
Download and Run DDS by sUBs
Please download DDS and save it to your desktop.
Disable any script blocking protection
Double click dds.scr to run the tool.
When done, DDS.txt will open.
Save both reports to your desktop.
—————————————————
Please Please copy / paste the scan reults.
DDS.txt and Attach.txt
Please read carefully and follow these steps. There is a difference between what you see in one of the images below and what I need you to do.
We are only creating a log - I do NOT want you to "cure" or try to fix anything in this step. It is very important that you don't choose Cure when presented with that option.
If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-08-26.01)
.
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume1
Install Date: 7/28/2011 10:58:06 AM
System Uptime: 11/23/2011 6:39:59 AM (6 hours ago)
.
Motherboard: Gateway | | NV55C
Processor: Intel® Pentium® CPU P6100 @ 2.00GHz | CPU | 1859/1066mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 286 GiB total, 243.231 GiB free.
D: is FIXED (NTFS) - 13 GiB total, 8.466 GiB free.
E: is CDROM ()
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP75: 11/9/2011 12:18:16 PM - Windows Update
RP76: 11/10/2011 2:27:04 AM - Windows Update
RP77: 11/11/2011 3:00:14 AM - Windows Update
RP78: 11/11/2011 10:27:24 AM - Removed Skype Click to Call
RP79: 11/11/2011 10:28:29 AM - Removed Skype™ 5.5
RP80: 11/11/2011 10:29:35 AM - Removed Skype Click to Call
RP81: 11/14/2011 8:33:19 PM - Windows Update
RP82: 11/21/2011 9:06:20 PM - Windows Update
RP83: 11/21/2011 9:15:43 PM - Restore Operation
RP84: 11/22/2011 3:00:14 AM - Windows Update
.
==== Installed Programs ======================
.
Adobe AIR
Adobe Flash Player 11 ActiveX
Adobe Reader X (10.1.1)
Adobe Shockwave Player 11.6
Advertising Center
AVG PC Tuneup 2011
Backup Manager Basic
Best Buy pc app
Compatibility Pack for the 2007 Office system
CyberLink PowerDVD 9
Facebook Video Calling 1.0.0.8953
Gateway InfoCentre
Gateway MyBackup
Gateway Power Management
Gateway Recovery Management
Gateway Registration
Gateway ScreenSaver
Gateway Social Networks
Gateway Updater
Google Chrome
Google Toolbar for Internet Explorer
Google Update Helper
Identity Card
ImagXpress
Intel® Control Center
Intel® Graphics Media Accelerator Driver
Intel® Management Engine Components
Intel® Rapid Storage Technology
J2SE Runtime Environment 5.0
Junk Mail filter update
Launch Manager
Lexmark Toolbar
Microsoft Choice Guard
Microsoft Office Click-to-Run 2010
Microsoft Office Home and Student 2010 - English
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2005 Redistributable - KB2467175
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
MSVCRT
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
Nero 9 Essentials
Nero ControlCenter
Nero DiscSpeed
Nero DiscSpeed Help
Nero DriveSpeed
Nero DriveSpeed Help
Nero Express Help
Nero InfoTool
Nero InfoTool Help
Nero Installer
Nero Online Upgrade
Nero StartSmart
Nero StartSmart Help
Nero StartSmart OEM
NeroExpress
neroxml
Realtek High Definition Audio Driver
Realtek USB 2.0 Card Reader
Respondus LockDown Browser
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Skype Click to Call
Skype™ 5.5
swMSM
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Video Web Camera
Visual Studio 2008 x64 Redistributables
Webroot SecureAnywhere
Welcome Center
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live Mail
Windows Live Messenger
Windows Live Movie Maker
Windows Live Photo Gallery
Windows Live Sign-in Assistant
Windows Live Sync
Windows Live Upload Tool
Windows Live Writer
Yahoo! BrowserPlus 2.9.8
Yahoo! Messenger
Yahoo! Software Update
Yahoo! Toolbar
.
==== Event Viewer Messages From Past Week ========
.
11/22/2011 3:32:41 AM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying
to update signatures. New Signature Version: Previous Signature Version: 1.115.2090.0 Update
Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature
Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:
Previous Engine Version: 1.1.7801.0 Error code: 0x8024402c Error description: An unexpected problem
occurred while checking for updates. For information on installing or troubleshooting updates, see Help and
Support.
11/22/2011 3:23:08 AM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature
has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error
description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to
function. You must install the latest definition updates in order to enable real-time protection.
11/21/2011 7:19:00 PM, Error: Microsoft Antimalware [2004] - Microsoft Antimalware has encountered an error trying
to load signatures and will attempt reverting back to a known-good set of signatures. Signatures Attempted:
Current Error Code: 0x80070002 Error description: The system cannot find the file specified.
Signature version: 0.0.0.0;0.0.0.0 Engine version: 0.0.0.0
11/21/2011 6:45:43 PM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying
to update signatures. New Signature Version: Previous Signature Version: 1.115.2090.0 Update
Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature
Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:
Previous Engine Version: 1.1.7801.0 Error code: 0x8024402c Error description: An unexpected problem
occurred while checking for updates. For information on installing or troubleshooting updates, see Help and
Support.
11/21/2011 6:35:31 PM, Error: Microsoft Antimalware [2004] - Microsoft Antimalware has encountered an error trying
to load signatures and will attempt reverting back to a known-good set of signatures. Signatures Attempted:
Current Error Code: 0x80070002 Error description: The system cannot find the file specified.
Signature version: 0.0.0.0;0.0.0.0 Engine version: 0.0.0.0
11/21/2011 4:47:26 PM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying
to update signatures. New Signature Version: Previous Signature Version: 1.115.2090.0 Update
Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature
Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:
Previous Engine Version: 1.1.7801.0 Error code: 0x8024402c Error description: An unexpected problem
occurred while checking for updates. For information on installing or troubleshooting updates, see Help and
Support.
11/21/2011 4:38:31 PM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature
has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error
description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to
function. You must install the latest definition updates in order to enable real-time protection.
11/21/2011 2:23:33 PM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying
to update signatures. New Signature Version: Previous Signature Version: 1.115.2090.0 Update
Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature
Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:
occurred
11/21/2011 2:14:40 PM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature
has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error
description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to
function. You must install the latest definition updates in order to enable real-time protection.
11/21/2011 2:09:19 PM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying
to update signatures. New Signature Version: Previous Signature Version: 1.115.2090.0 Update
Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature
Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:
Previous Engine Version: 1.1.7801.0 Error code: 0x8024402c Error description: An unexpected problem
occurred while checking for updates. For information on installing or troubleshooting updates, see Help and
Support.
11/21/2011 1:59:55 PM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature
has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error
description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to
function. You must install the latest definition updates in order to enable real-time protection.
11/20/2011 11:04:07 AM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error
trying to update signatures. New Signature Version: Previous Signature Version: 1.115.2090.0
Update Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com
Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:
Previous Engine Version: 1.1.7801.0 Error code: 0x8024402c Error description: An unexpected problem
occurred while checking for updates. For information on installing or troubleshooting updates, see Help and
Support.
11/20/2011 10:55:03 AM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature
has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error
description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to
function. You must install the latest definition updates in order to enable real-time protection.
11/19/2011 9:44:37 AM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying
to update signatures. New Signature Version: Previous Signature Version: 1.115.2090.0 Update
Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature
Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:
Previous Engine Version: 1.1.7801.0 Error code: 0x8024402c Error description: An unexpected problem
occurred while checking for updates. For information on installing or troubleshooting updates, see Help and
Support.
11/19/2011 9:35:42 AM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature
has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error
description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to
function. You must install the latest definition updates in order to enable real-time protection.
11/19/2011 5:17:31 PM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying
to update signatures. New Signature Version: Previous Signature Version: 1.115.2090.0 Update
Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature
Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:
Previous Engine Version: 1.1.7801.0 Error code: 0x8024402c Error description: An unexpected problem
occurred while checking for updates. For information on installing or troubleshooting updates, see Help and
Support.
11/18/2011 9:23:15 AM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature
has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error
description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to
function. You must install the latest definition updates in order to enable real-time protection.
11/18/2011 7:28:18 PM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\DR9.
11/18/2011 12:55:30 PM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature
has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error
description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to
function. You must install the latest definition updates in order to enable real-time protection.
11/17/2011 9:40:44 AM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature
has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error
description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to
function. You must install the latest definition updates in order to enable real-time protection.
11/17/2011 11:11:36 PM, Error: bowser [8003] - The master browser has received a server announcement from the
computer SCOTT-PC that believes that it is the master browser for the domain on transport NetBT_Tcpip_{8285EB82-
CAC9-4399-84F3-05B94863C3A5}. The master browser is stopping or an election is being forced.
11/16/2011 9:25:25 AM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying
to update signatures. New Signature Version: Previous Signature Version: 1.115.1860.0 Update
Source: Microsoft Update Server Update Stage: Install Source Path: http://www.microsoft.com Signature
Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:
Previous Engine Version: 1.1.7801.0 Error code: 0x80070001 Error description: Incorrect function.
11/16/2011 8:51:28 AM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying
to update signatures. New Signature Version: Previous Signature Version: 1.115.1860.0 Update
Source: Microsoft Update Server Update Stage: Install Source Path: http://www.microsoft.com Signature
Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:
install the following update with error 0x80070005: Definition Update for Microsoft Security Essentials - KB2310138
(Definition 1.115.1979.0).
11/16/2011 5:06:50 AM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying
to update signatures. New Signature Version: Previous Signature Version: 1.115.1860.0 Update
Source: Microsoft Update Server Update Stage: Install Source Path: http://www.microsoft.com Signature
Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:
Previous Engine Version: 1.1.7801.0 Error code: 0x80070005 Error description: Access is denied.
11/16/2011 4:34:51 PM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\DR1.
11/16/2011 12:14:02 AM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error
trying to update signatures. New Signature Version: Previous Signature Version: 1.115.1860.0
Update Source: Microsoft Update Server Update Stage: Install Source Path: http://www.microsoft.com
Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:
Previous Engine Version: 1.1.7801.0 Error code: 0x80070005 Error description: Access is denied.
11/16/2011 10:50:40 PM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature
has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error
description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to
function. You must install the latest definition updates in order to enable real-time protection.
11/16/2011 1:11:33 PM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to
install the following update with error 0x80070001: Definition Update for Microsoft Security Essentials - KB2310138
(Definition 1.115.1989.0).
11/16/2011 1:11:26 PM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying
to update signatures. New Signature Version: Previous Signature Version: 1.115.1860.0 Update
Source: Microsoft Update Server Update Stage: Install Source Path: http://www.microsoft.com Signature
Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:
Previous Engine Version: 1.1.7801.0 Error code: 0x80070001 Error description: Incorrect function.
.
==== End Of File ===========================
HI, Patndoris!
As far as the TDSSKiller scan, it scanned 259 objects in 27 seconds. Once the scan was completed it said no threats was found. No report or log opened for me to save.
It would appear that you have more than one anti-virus solution on your machine. I can see Webroot, AVG, and Microsoft Security Essentials installed.
Having more than one anti-virus program on your machine, even if only one is running, can cause conflicts and slowdowns in the performance of the machine.
Before continuing on, please completely uninstall two of the programs. Let's start by doing this through Control Panel > Programs and Features. You'll need to uninstall one, reboot the system and then uninstall the other, then reboot the system again.
If it were me, I'd remove Webroot and AVG and keep Microsoft Security Essentials. Ultimately the choice is yours, but we only want one Anti-Virus on the machine.
After removing the 2 anti-virus programs you don't want to keep, please rerun DDS and just post the DDS.txt log. I do not need the attach.txt a second time.
Hopefully, you will see an immediate improvement in speed. Then we can attack your search results problems.
Atach log:
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-08-26.01)
.
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume1
Install Date: 7/28/2011 10:58:06 AM
System Uptime: 11/23/2011 2:12:14 PM (0 hours ago)
.
Motherboard: Gateway | | NV55C
Processor: Intel® Pentium® CPU P6100 @ 2.00GHz | CPU | 1999/1066mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 286 GiB total, 245.426 GiB free.
D: is FIXED (NTFS) - 13 GiB total, 8.466 GiB free.
E: is CDROM ()
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP77: 11/11/2011 3:00:14 AM - Windows Update
RP78: 11/11/2011 10:27:24 AM - Removed Skype Click to Call
RP79: 11/11/2011 10:28:29 AM - Removed Skype™ 5.5
RP80: 11/11/2011 10:29:35 AM - Removed Skype Click to Call
RP81: 11/14/2011 8:33:19 PM - Windows Update
RP82: 11/21/2011 9:06:20 PM - Windows Update
RP83: 11/21/2011 9:15:43 PM - Restore Operation
RP84: 11/22/2011 3:00:14 AM - Windows Update
RP85: 11/23/2011 2:02:21 PM - Removed Skype™ 5.5
RP86: 11/23/2011 2:03:16 PM - Removed Skype Click to Call
.
==== Installed Programs ======================
.
Adobe AIR
Adobe Flash Player 11 ActiveX
Adobe Reader X (10.1.1)
Adobe Shockwave Player 11.6
Advertising Center
AVG PC Tuneup 2011
Backup Manager Basic
Best Buy pc app
Compatibility Pack for the 2007 Office system
CyberLink PowerDVD 9
Facebook Video Calling 1.0.0.8953
Gateway InfoCentre
Gateway MyBackup
Gateway Power Management
Gateway Recovery Management
Gateway Registration
Gateway ScreenSaver
Gateway Social Networks
Gateway Updater
Google Chrome
Google Toolbar for Internet Explorer
Google Update Helper
Identity Card
ImagXpress
Intel® Control Center
Intel® Graphics Media Accelerator Driver
Intel® Management Engine Components
Intel® Rapid Storage Technology
J2SE Runtime Environment 5.0
Junk Mail filter update
Launch Manager
Lexmark Toolbar
Microsoft Choice Guard
Microsoft Office Click-to-Run 2010
Microsoft Office Home and Student 2010 - English
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2005 Redistributable - KB2467175
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
MSVCRT
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
Nero 9 Essentials
Nero ControlCenter
Nero DiscSpeed
Nero DiscSpeed Help
Nero DriveSpeed
Nero DriveSpeed Help
Nero Express Help
Nero InfoTool
Nero InfoTool Help
Nero Installer
Nero Online Upgrade
Nero StartSmart
Nero StartSmart Help
Nero StartSmart OEM
NeroExpress
neroxml
Realtek High Definition Audio Driver
Realtek USB 2.0 Card Reader
Respondus LockDown Browser
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
swMSM
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Video Web Camera
Visual Studio 2008 x64 Redistributables
Welcome Center
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live Mail
Windows Live Messenger
Windows Live Movie Maker
Windows Live Photo Gallery
Windows Live Sign-in Assistant
Windows Live Sync
Windows Live Upload Tool
Windows Live Writer
Yahoo! BrowserPlus 2.9.8
Yahoo! Messenger
Yahoo! Software Update
Yahoo! Toolbar
.
==== Event Viewer Messages From Past Week ========
.
11/23/2011 2:13:29 PM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature
has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error
description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to
function. You must install the latest definition updates in order to enable real-time protection.
11/23/2011 2:12:50 PM, Error: Service Control Manager [7003] - The AVGIDSAgent service depends the following
service: AVGIDSDriver. This service might not be installed.
11/23/2011 2:07:52 PM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature
has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error
description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to
function. You must install the latest definition updates in order to enable real-time protection.
11/22/2011 3:32:41 AM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying
to update signatures. New Signature Version: Previous Signature Version: 1.115.2090.0 Update
Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature
Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:
Previous Engine Version: 1.1.7801.0 Error code: 0x8024402c Error description: An unexpected problem
occurred while checking for updates. For information on installing or troubleshooting updates, see Help and
Support.
11/22/2011 3:23:08 AM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature
has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error
description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to
function. You must install the latest definition updates in order to enable real-time protection.
11/21/2011 7:19:00 PM, Error: Microsoft Antimalware [2004] - Microsoft Antimalware has encountered an error trying
to load signatures and will attempt reverting back to a known-good set of signatures. Signatures Attempted:
Current Error Code: 0x80070002 Error description: The system cannot find the file specified.
Signature version: 0.0.0.0;0.0.0.0 Engine version: 0.0.0.0
11/21/2011 6:45:43 PM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying
to update signatures. New Signature Version: Previous Signature Version: 1.115.2090.0 Update
Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature
Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:
Previous Engine Version: 1.1.7801.0 Error code: 0x8024402c Error description: An unexpected problem
occurred while checking for updates. For information on installing or troubleshooting updates, see Help and
Support.
11/21/2011 6:35:31 PM, Error: Microsoft Antimalware [2004] - Microsoft Antimalware has encountered an error trying
to load signatures and will attempt reverting back to a known-good set of signatures. Signatures Attempted:
Current Error Code: 0x80070002 Error description: The system cannot find the file specified.
Signature version: 0.0.0.0;0.0.0.0 Engine version: 0.0.0.0
11/21/2011 4:47:26 PM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying
to update signatures. New Signature Version: Previous Signature Version: 1.115.2090.0 Update
Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature
Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:
Previous Engine Version: 1.1.7801.0 Error code: 0x8024402c Error description: An unexpected problem
occurred while checking for updates. For information on installing or troubleshooting updates, see Help and
Support.
11/21/2011 4:38:31 PM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature
has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error
description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to
function. You must install the latest definition updates in order to enable real-time protection.
11/21/2011 2:23:33 PM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying
to update signatures. New Signature Version: Previous Signature Version: 1.115.2090.0 Update
Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature
Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:
occurred
11/21/2011 2:14:40 PM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature
has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error
description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to
function. You must install the latest definition updates in order to enable real-time protection.
11/21/2011 2:09:19 PM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying
to update signatures. New Signature Version: Previous Signature Version: 1.115.2090.0 Update
Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature
Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:
Previous Engine Version: 1.1.7801.0 Error code: 0x8024402c Error description: An unexpected problem
occurred while checking for updates. For information on installing or troubleshooting updates, see Help and
Support.
11/21/2011 1:59:55 PM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature
has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error
description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to
function. You must install the latest definition updates in order to enable real-time protection.
11/20/2011 11:04:07 AM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error
trying to update signatures. New Signature Version: Previous Signature Version: 1.115.2090.0
Update Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com
Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:
Previous Engine Version: 1.1.7801.0 Error code: 0x8024402c Error description: An unexpected problem
occurred while checking for updates. For information on installing or troubleshooting updates, see Help and
Support.
11/20/2011 10:55:03 AM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature
has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error
description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to
function. You must install the latest definition updates in order to enable real-time protection.
11/19/2011 9:44:37 AM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying
to update signatures. New Signature Version: Previous Signature Version: 1.115.2090.0 Update
Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature
Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:
Previous Engine Version: 1.1.7801.0 Error code: 0x8024402c Error description: An unexpected problem
occurred while checking for updates. For information on installing or troubleshooting updates, see Help and
Support.
11/19/2011 9:35:42 AM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature
has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error
description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to
function. You must install the latest definition updates in order to enable real-time protection.
11/19/2011 5:17:31 PM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying
to update signatures. New Signature Version: Previous Signature Version: 1.115.2090.0 Update
Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature
Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:
Previous Engine Version: 1.1.7801.0 Error code: 0x8024402c Error description: An unexpected problem
occurred while checking for updates. For information on installing or troubleshooting updates, see Help and
Support.
11/18/2011 9:23:15 AM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature
has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error
description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to
function. You must install the latest definition updates in order to enable real-time protection.
11/18/2011 7:28:18 PM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\DR9.
11/18/2011 12:55:30 PM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature
has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error
description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to
function. You must install the latest definition updates in order to enable real-time protection.
11/17/2011 9:40:44 AM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature
has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error
description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to
function. You must install the latest definition updates in order to enable real-time protection.
11/17/2011 11:11:36 PM, Error: bowser [8003] - The master browser has received a server announcement from the
computer SCOTT-PC that believes that it is the master browser for the domain on transport NetBT_Tcpip_{8285EB82-
CAC9-4399-84F3-05B94863C3A5}. The master browser is stopping or an election is being forced.
11/16/2011 9:25:25 AM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying
to update signatures. New Signature Version: Previous Signature Version: 1.115.1860.0 Update
Source: Microsoft Update Server Update Stage: Install Source Path: http://www.microsoft.com Signature
Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:
Previous Engine Version: 1.1.7801.0 Error code: 0x80070001 Error description: Incorrect function.
11/16/2011 8:51:28 AM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying
to update signatures. New Signature Version: Previous Signature Version: 1.115.1860.0 Update
Source: Microsoft Update Server Update Stage: Install Source Path: http://www.microsoft.com Signature
Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:
install the following update with error 0x80070005: Definition Update for Microsoft Security Essentials - KB2310138
(Definition 1.115.1979.0).
11/16/2011 5:06:50 AM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying
to update signatures. New Signature Version: Previous Signature Version: 1.115.1860.0 Update
Source: Microsoft Update Server Update Stage: Install Source Path: http://www.microsoft.com Signature
Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:
Previous Engine Version: 1.1.7801.0 Error code: 0x80070005 Error description: Access is denied.
11/16/2011 4:34:51 PM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\DR1.
11/16/2011 12:14:02 AM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error
trying to update signatures. New Signature Version: Previous Signature Version: 1.115.1860.0
Update Source: Microsoft Update Server Update Stage: Install Source Path: http://www.microsoft.com
Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:
Previous Engine Version: 1.1.7801.0 Error code: 0x80070005 Error description: Access is denied.
11/16/2011 10:50:40 PM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature
has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error
description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to
function. You must install the latest definition updates in order to enable real-time protection.
11/16/2011 1:11:33 PM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to
install the following update with error 0x80070001: Definition Update for Microsoft Security Essentials - KB2310138
(Definition 1.115.1989.0).
11/16/2011 1:11:26 PM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying
to update signatures. New Signature Version: Previous Signature Version: 1.115.1860.0 Update
Source: Microsoft Update Server Update Stage: Install Source Path: http://www.microsoft.com Signature
Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:
Previous Engine Version: 1.1.7801.0 Error code: 0x80070001 Error description: Incorrect function.
.
==== End Of File ===========================
It doesn't look like AVG has fully uninstalled. Sometimes anti-virus programs embed themselves in ways that make it really hard to remove them. Let's try a specialized tool to see if that will help.
Please try following the instructions found here: AVG Removal Tool
If you are not prompted to do so, reboot the machine after running it.
I'm not seeing any evidence of malware in your logs. Can you please elaborate on what you mean by the Google/Yahoo searches aren't working? Are you getting redirected to sites you don't expect? Or what is happening?
Let's try a couple of other scans as well. Different tools look in different areas and no one tool catches everything.
Please download Malwarebytes' Anti-Malware to your desktop.
Double-click mbam-setup.exe and follow the prompts to install the program.
At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select Perform quick scan, then click Scan. [external image: Posted Image]
When the scan is complete, click OK, then Show Results to view the results.
Be sure that everything is checked, and click Remove Selected.
When completed, a log will open in Notepad. Please save it to a convenient location and post the results.
Note: If you receive a notice that some of the items couldn't be removed, that they have been added to the delete on reboot list, please reboot.
This scan make take awhile depending on how many items are on the computer. You may want to run it at a time you won't be needing the machine. It should be run from IE and I'd recommend not doing anything else while it's running.
Please go to here to run the online scannner from ESET.
Turn off the real time scanner of any existing antivirus program while performing the online scan
Tick the box next to YES, I accept the Terms of Use.
Click Start
When asked, allow the activex control to install
Click Start
Make sure that the option Remove found threats is unticked, and the option Scan unwanted applications is checked
Click on Advanced Settings and ensure these options are ticked:
Scan for potentially unwanted applications
Scan for potentially unsafe applications
Enable Anti-Stealth Technology
Click Scan
Wait for the scan to finish
If any threats were found, click the 'List of found threats' , then click Export to text file….
Save it to your desktop, then please copy and paste that log as a reply to this topic.
Hi, Patndoris!
I am able to do the searches now. Google and yahoo are navigating to the webpage I am requesting the searches for now. What was happening was I would input info to be searched and the page would navigate to the search results.
I'm glad the searches seem to be working now. Let's go ahead and run the other 2 scans just to be on the safe side. If they come back clear then you'll be good to go.
Hi, Patndoris!
The last scan just got done. It came back with no threats found. I'm a much happier camper now, YAAAAAAYYYYYYYY!!!!
Thanks so much for what you have done for me today! Have a great holiday season and a Blessed New Year!
I think the bulk of your issues were caused by the multiple anti-virus programs on the machine. In the case of anti-virus, more is not better.
I'm so glad everything seems to be working well now. Have a wonderful holiday season and happy surfing the internet!!