This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Google/Yahoo searches not working

5 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Hi! ;) Can you please take a look at my laptop as I haven't been able to research information on my laptop? I think it is infected. My system is a Gateway NV55C Intel Pentium with a 64 -bit Operating System. I have Windows 7 Home Premium edtion with Service Pack 1. Any help will be appreciated. I hope someone can help me soon as I am really ready to pull my hair out! :pullhair:
Hello and Posted Image

My name is patndoris. I will be glad to take a look at your log and help you with solving any malware problems. It will be very helpful if you follow these guidelines:
  • Malware logs are often lengthy and can take a lot of time to research and interpret. Please be patient while I review your logs.
  • Please note that there is no "Quick Fix" to modern malware infections and we may need to use several different approaches to get your system clean.
  • Please make sure to carefully read any instruction that I give you. If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
  • Please follow my instructions carefully and in the order they are posted. You may also find it helpful to print out the instructions you receive.
  • Please do not run any scans or install/uninstall any applications or delete anything without being directed to do so.
  • Remember, absence of symptoms does not mean the infection is all gone. Please stick with me till you're given the "all clear".
  • Please do not use the Attachment feature for any log file. Do a Copy/Paste of the entire contents of the log file and submit it inside your post.
  • Please reply within 3 days. If I do not hear back from you in that time frame, I will post a reminder for you. Topics with no reply in 4 days are closed!




Download and Run DDS by sUBs

Please download DDS and save it to your desktop.
  • Disable any script blocking protection
  • Double click dds.scr to run the tool.
  • When done, DDS.txt will open.
  • Save both reports to your desktop.
—————————————————

Please Please copy / paste the scan reults.

DDS.txt and Attach.txt




Please read carefully and follow these steps. There is a difference between what you see in one of the images below and what I need you to do.
We are only creating a log - I do NOT want you to "cure" or try to fix anything in this step. It is very important that you don't choose Cure when presented with that option.

  • Download TDSSKiller and save it to your Desktop.
  • Extract its contents to your desktop.
  • Once extracted, open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.


    🖼Click to load external image (Posted Image)

  • If an infected file is detected, the default action will be Cure but I want you to choose SKIP instead , click on Continue.


    🖼Click to load external image (Posted Image)

  • If a suspicious file is detected, the default action will be Skip, click on Continue.


    🖼Click to load external image (Posted Image)

  • It may ask you to reboot the computer to complete the process. Click on Reboot Now.


    🖼Click to load external image (Posted Image)

  • If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
  • If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.
Thank Patndoris for your quick response. Here is the DDS report.

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421
Run by [removed] at 12:14:49 on 2011-11-23
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.2807.1395 [GMT -6:00]
.
AV: Webroot SecureAnywhere *Enabled/Updated* {53211D91-0C31-95F2-E3A5-7661FB22889E}
AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
AV: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Webroot SecureAnywhere *Enabled/Updated* {E840FC75-2A0B-9A7C-D915-4D1380A5C223}
FW: AVG Firewall *Disabled* {621CC794-9486-F902-D092-0484E8EA828B}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files (x86)\AVG\AVG2012\avgfws.exe
C:\Program Files (x86)\Launch Manager\dsiwmis.exe
C:\Program Files\Gateway\Gateway Power Management\ePowerSvc.exe
C:\Program Files (x86)\Gateway\Registration\GREGsvc.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
C:\Windows\system32\lxcrcoms.exe
C:\Program Files (x86)\NewTech Infosystems\Gateway MyBackup\IScheduleSvc.exe
C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
C:\Program Files\Gateway\Gateway Updater\UpdaterService.exe
C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\8.0.1\ToolbarUpdater.exe
C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files (x86)\AVG\AVG PC Tuneup 2011\BoostSpeed.exe
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
C:\Windows\PLFSetI.exe
C:\Program Files\Elantech\ETDCtrl.exe
C:\Program Files\Gateway\Gateway Power Management\ePowerTray.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files (x86)\Lexmark 2400 Series\lxcrmon.exe
C:\Program Files (x86)\Lexmark 2400 Series\ezprint.exe
C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\NewTech Infosystems\Gateway MyBackup\BackupManagerTray.exe
C:\Windows\system32\igfxext.exe
C:\Program Files (x86)\VideoWebCamera\VideoWebCamera.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Users\Owner\AppData\Local\Google\Update\1.3.21.79\GoogleCrashHandler.exe
C:\Program Files\Elantech\ETDCtrlHelper.exe
C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
C:\Program Files\Gateway\Gateway Power Management\ePowerEvent.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files (x86)\AVG Secure Search\vprot.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files (x86)\Yahoo!\Messenger\ymsgr_tray.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Windows\system32\svchost.exe -k SDRSVC
C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe
C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe
C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe
C:\Program Files (x86)\AVG\AVG2012\avgemca.exe
C:\Program Files (x86)\AVG\AVG2012\avgrsa.exe
C:\Program Files (x86)\AVG\AVG2012\avgcsrva.exe
C:\Program Files (x86)\AVG\AVG2012\avgtray.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil11c_ActiveX.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Windows\system32\notepad.exe
C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVH.EXE
C:\Program Files (x86)\Common Files\microsoft shared\virtualization handler\OfficeVirt.exe
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.com/
uDefault_Page_URL = hxxp://homepage.gateway.com/rdr.aspx?b=ACGW&l=0409&m=nv55c&r=27360711m475l0404z1k5a47l2j274
mDefault_Page_URL = hxxp://homepage.gateway.com/rdr.aspx?b=ACGW&l=0409&m=nv55c&r=27360711m475l0404z1k5a47l2j274
mStart Page = hxxp://homepage.gateway.com/rdr.aspx?b=ACGW&l=0409&m=nv55c&r=27360711m475l0404z1k5a47l2j274
uURLSearchHooks: YTNavAssist.YTNavAssistPlugin Class: {81017ea9-9aa8-4a6a-9734-7af40e7d593f} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\YTNavAssist.dll
mWinlogon: Userinit=userinit.exe
BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\yt.dll
BHO: Lexmark Toolbar: {1017a80c-6f09-4548-a84d-edd6ac9525f0} - C:\Program Files\Lexmark Toolbar\toolband.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: AVG Security Toolbar: {95b7759c-8c7f-4bf1-b163-73684a933233} - C:\Program Files (x86)\AVG Secure Search\8.0.0.34\AVG Secure Search_toolbar.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO: SingleInstance Class: {fdad4da1-61a2-4fd8-9c17-86f7ac245081} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\yt.dll
TB: Lexmark Toolbar: {1017a80c-6f09-4548-a84d-edd6ac9525f0} - C:\Program Files\Lexmark Toolbar\toolband.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
TB: AVG Security Toolbar: {95b7759c-8c7f-4bf1-b163-73684a933233} - C:\Program Files (x86)\AVG Secure Search\8.0.0.34\AVG Secure Search_toolbar.dll
uRun: [Messenger (Yahoo!)] "C:\PROGRA~2\Yahoo!\Messenger\YahooMessenger.exe" -quiet
uRun: [Facebook Update] "C:\Users\Owner\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
uRun: [Google Update] "C:\Users\Owner\AppData\Local\Google\Update\GoogleUpdate.exe" /c
mRun: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
mRun: [BackupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Gateway MyBackup\BackupManagerTray.exe" -h -k
mRun: [VideoWebCamera] "C:\Program Files (x86)\VideoWebCamera\VideoWebCamera.exe" -a
mRun: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [AVG_TRAY] "C:\Program Files (x86)\AVG\AVG2012\avgtray.exe"
mRun: [vProt] "C:\Program Files (x86)\AVG Secure Search\vprot.exe"
mRun: [WRSVC] "C:\Program Files\Webroot\WRSA.exe" -ul
StartupFolder: C:\Users\Owner\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\ZOOSKM~1.LNK - C:\Program Files (x86)\ZooskMessenger\ZooskMessenger.exe
uPolicies-explorer: NoDesktopCleanupWizard = 1 (0x1)
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC} - C:\Program Files (x86)\Java\jre1.5.0\bin\npjpi150.dll
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://javadl-esd.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab
TCP: DhcpNameServer = [removed] [removed] [removed]
TCP: Interfaces\{8192C47F-6A1B-475D-A522-A47F112D10F0} : DhcpNameServer = [removed] [removed]
TCP: Interfaces\{8285EB82-CAC9-4399-84F3-05B94863C3A5} : DhcpNameServer = [removed] [removed] [removed]
TCP: Interfaces\{8285EB82-CAC9-4399-84F3-05B94863C3A5}\34F657E64727970294E6E637 : DhcpNameServer = 10.61.32.1 1.1.1.1
TCP: Interfaces\{8285EB82-CAC9-4399-84F3-05B94863C3A5}\34F6D666F627470294E6E602348656C6375616 : DhcpNameServer = 192.168.1.1
TCP: Interfaces\{8285EB82-CAC9-4399-84F3-05B94863C3A5}\34F6D666F627470294E6E602348656C6375616029494 : DhcpNameServer = 192.168.1.1
TCP: Interfaces\{8285EB82-CAC9-4399-84F3-05B94863C3A5}\3583D435241636B674 : DhcpNameServer = [removed]
TCP: Interfaces\{8285EB82-CAC9-4399-84F3-05B94863C3A5}\46574747F6E6 : DhcpNameServer = 192.168.1.1
TCP: Interfaces\{8285EB82-CAC9-4399-84F3-05B94863C3A5}\A4F637B696566244166756 : DhcpNameServer = 192.168.1.1
TCP: Interfaces\{8285EB82-CAC9-4399-84F3-05B94863C3A5}\D4F64756C663F51313 : DhcpNameServer = 4.2.2.2 4.2.2.1
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\8.0.1\ViProtocol.dll
BHO-X64: &Yahoo! Toolbar Helper: {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\yt.dll
BHO-X64: 0x1 - No File
BHO-X64: Lexmark Toolbar: {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO-X64: AcroIEHelperStub - No File
BHO-X64: AVG Safe Search: {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll
BHO-X64: WormRadar.com IESiteBlocker.NavFilter - No File
BHO-X64: Windows Live Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO-X64: AVG Security Toolbar: {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\8.0.0.34\AVG Secure Search_toolbar.dll
BHO-X64: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
BHO-X64: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO-X64: SkypeIEPluginBHO - No File
BHO-X64: SingleInstance Class: {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll
TB-X64: Yahoo! Toolbar: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\yt.dll
TB-X64: Lexmark Toolbar: {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
TB-X64: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
TB-X64: AVG Security Toolbar: {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\8.0.0.34\AVG Secure Search_toolbar.dll
mRun-x64: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
mRun-x64: [BackupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Gateway MyBackup\BackupManagerTray.exe" -h -k
mRun-x64: [VideoWebCamera] "C:\Program Files (x86)\VideoWebCamera\VideoWebCamera.exe" -a
mRun-x64: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
mRun-x64: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun-x64: [AVG_TRAY] "C:\Program Files (x86)\AVG\AVG2012\avgtray.exe"
mRun-x64: [vProt] "C:\Program Files (x86)\AVG Secure Search\vprot.exe"
mRun-x64: [WRSVC] "C:\Program Files\Webroot\WRSA.exe" -ul
.
============= SERVICES / DRIVERS ===============
.
R0 AVGIDSEH;AVGIDSEH;C:\Windows\system32\DRIVERS\AVGIDSEH.Sys –> C:\Windows\system32\DRIVERS\AVGIDSEH.Sys [?]
R0 Avgrkx64;AVG Anti-Rootkit Driver;C:\Windows\system32\DRIVERS\avgrkx64.sys –> C:\Windows\system32\DRIVERS\avgrkx64.sys [?]
R0 WRkrn;WRkrn;C:\Windows\system32\drivers\WRkrn.sys –> C:\Windows\system32\drivers\WRkrn.sys [?]
R1 Avgldx64;AVG AVI Loader Driver;C:\Windows\system32\DRIVERS\avgldx64.sys –> C:\Windows\system32\DRIVERS\avgldx64.sys [?]
R1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;C:\Windows\system32\DRIVERS\avgmfx64.sys –> C:\Windows\system32\DRIVERS\avgmfx64.sys [?]
R1 Avgtdia;AVG TDI Driver;C:\Windows\system32\DRIVERS\avgtdia.sys –> C:\Windows\system32\DRIVERS\avgtdia.sys [?]
R1 MpFilter;Microsoft Malware Protection Driver;C:\Windows\system32\DRIVERS\MpFilter.sys –> C:\Windows\system32\DRIVERS\MpFilter.sys [?]
R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys –> C:\Windows\system32\DRIVERS\vwififlt.sys [?]
R2 AdobeARMservice;Adobe Acrobat Update Service;C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-6-6 64952]
R2 avgfws;AVG Firewall;C:\Program Files (x86)\AVG\AVG2012\avgfws.exe [2011-8-19 2399560]
R2 AVGIDSAgent;AVGIDSAgent;C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe [2011-10-12 4433248]
R2 avgwd;AVG WatchDog;C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe [2011-8-2 192776]
R2 cvhsvc;Client Virtualization Handler;C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE [2010-10-20 821664]
R2 DsiWMIService;Dritek WMI Service;C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-7-23 321104]
R2 ePowerSvc;Acer ePower Service;C:\Program Files\Gateway\Gateway Power Management\ePowerSvc.exe [2011-7-28 868896]
R2 GREGService;GREGService;C:\Program Files (x86)\Gateway\Registration\GREGsvc.exe [2010-1-8 23584]
R2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-7-23 13336]
R2 NTI IScheduleSvc;NTI IScheduleSvc;C:\Program Files (x86)\NewTech Infosystems\Gateway MyBackup\IScheduleSvc.exe [2010-5-24 255744]
R2 sftlist;Application Virtualization Client;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2010-9-14 508264]
R2 UNS;Intel® Management & Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2010-7-23

2320920]
R2 Updater Service;Updater Service;C:\Program Files\Gateway\Gateway Updater\UpdaterService.exe [2010-7-23 243232]
R2 vToolbarUpdater;vToolbarUpdater;C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\8.0.1\ToolbarUpdater.exe [2011-9-11 246600]
R3 AVGIDSDriver;AVGIDSDriver;C:\Windows\system32\DRIVERS\AVGIDSDriver.Sys –> C:\Windows\system32\DRIVERS\AVGIDSDriver.Sys [?]
R3 AVGIDSFilter;AVGIDSFilter;C:\Windows\system32\DRIVERS\AVGIDSFilter.Sys –> C:\Windows\system32\DRIVERS\AVGIDSFilter.Sys [?]
R3 ETD;ELAN PS/2 Port Input Device;C:\Windows\system32\DRIVERS\ETD.sys –> C:\Windows\system32\DRIVERS\ETD.sys [?]
R3 HECIx64;Intel® Management Engine Interface;C:\Windows\system32\DRIVERS\HECIx64.sys –> C:\Windows\system32\DRIVERS\HECIx64.sys [?]
R3 Impcd;Impcd;C:\Windows\system32\DRIVERS\Impcd.sys –> C:\Windows\system32\DRIVERS\Impcd.sys [?]
R3 IntcDAud;Intel® Display Audio;C:\Windows\system32\DRIVERS\IntcDAud.sys –> C:\Windows\system32\DRIVERS\IntcDAud.sys [?]
R3 k57nd60a;Broadcom NetLink ™ Gigabit Ethernet - NDIS 6.0;C:\Windows\system32\DRIVERS\k57nd60a.sys –> C:\Windows\system32\DRIVERS\k57nd60a.sys [?]
R3 MpNWMon;Microsoft Malware Protection Network Driver;C:\Windows\system32\DRIVERS\MpNWMon.sys –> C:\Windows\system32\DRIVERS\MpNWMon.sys [?]
R3 NisDrv;Microsoft Network Inspection System;C:\Windows\system32\DRIVERS\NisDrvWFP.sys –> C:\Windows\system32\DRIVERS\NisDrvWFP.sys [?]
R3 NisSrv;Microsoft Network Inspection;C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe [2011-4-27 288272]
R3 osppsvc;Office Software Protection Platform;C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-1-9 4925184]
R3 Sftfs;Sftfs;C:\Windows\system32\DRIVERS\Sftfslh.sys –> C:\Windows\system32\DRIVERS\Sftfslh.sys [?]
R3 Sftplay;Sftplay;C:\Windows\system32\DRIVERS\Sftplaylh.sys –> C:\Windows\system32\DRIVERS\Sftplaylh.sys [?]
R3 Sftredir;Sftredir;C:\Windows\system32\DRIVERS\Sftredirlh.sys –> C:\Windows\system32\DRIVERS\Sftredirlh.sys [?]
R3 Sftvol;Sftvol;C:\Windows\system32\DRIVERS\Sftvollh.sys –> C:\Windows\system32\DRIVERS\Sftvollh.sys [?]
R3 sftvsa;Application Virtualization Service Agent;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2010-9-14 219496]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-8-2 136176]
S2 WRSVC;WRSVC;C:\Program Files\Webroot\WRSA.exe [2011-10-28 633088]
S3 gupdatem;Google Update Service (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-8-2 136176]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\system32\Drivers\RtsUStor.sys –> C:\Windows\system32\Drivers\RtsUStor.sys [?]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys –> C:\Windows\system32\drivers\tsusbflt.sys [?]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\system32\Wat\WatAdminSvc.exe –> C:\Windows\system32\Wat\WatAdminSvc.exe [?]
.
=============== Created Last 30 ================
.
2011-11-23 04:36:23 69000 —-a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{B245C0CB-EAD7-4F73-9A02-F3365CAF3D44}\offreg.dll
2011-11-23 04:36:19 8570192 —-a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{B245C0CB-EAD7-4F73-9A02-F3365CAF3D44}\mpengine.dll
2011-11-22 00:56:36 886784 —-a-w- C:\Program Files\Common Files\System\wab32.dll
2011-11-22 00:56:36 708608 —-a-w- C:\Program Files (x86)\Common Files\System\wab32.dll
2011-11-22 00:56:30 1923952 —-a-w- C:\Windows\System32\drivers\tcpip.sys
2011-11-22 00:56:23 3144704 —-a-w- C:\Windows\System32\win32k.sys
2011-11-19 01:03:18 ——– d—–w- C:\Windows\XSxS
2011-11-19 01:03:18 ——– d—–w- C:\Users\Owner\AppData\Local\Xenocode
2011-11-05 00:38:36 ——– d—–r- C:\Program Files (x86)\Skype
2011-10-31 19:23:38 ——– d—–w- C:\Windows\PCHEALTH
2011-10-31 19:23:38 ——– d—–w- C:\Program Files (x86)\Microsoft Application Virtualization Client
2011-10-29 01:16:15 ——– d—–w- C:\ProgramData\Virtualized Applications
2011-10-28 23:51:52 91832 —-a-w- C:\Windows\System32\WRusr.dll
2011-10-28 23:51:52 141272 —-a-w- C:\Windows\SysWow64\WRusr.dll
2011-10-28 23:51:52 108896 —-a-w- C:\Windows\System32\drivers\WRkrn.sys
2011-10-28 23:51:49 ——– d—–w- C:\Program Files\Webroot
2011-10-28 23:51:45 ——– d—–w- C:\ProgramData\WRData
.
==================== Find3M ====================
.
2011-10-08 13:17:19 0 —-a-w- C:\Windows\SysWow64\sho3F66.tmp
2011-10-07 11:23:46 283728 —-a-w- C:\Windows\System32\drivers\avgldx64.sys
2011-10-06 14:39:19 0 —-a-w- C:\Windows\SysWow64\sho447.tmp
2011-10-05 07:06:39 414368 —-a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2011-09-30 23:18:54 0 —-a-w- C:\Windows\SysWow64\sho3714.tmp
2011-09-13 11:30:08 37456 —-a-w- C:\Windows\System32\drivers\avgrkx64.sys
2011-09-01 05:24:07 2309120 —-a-w- C:\Windows\System32\jscript9.dll
2011-09-01 05:17:57 1389056 —-a-w- C:\Windows\System32\wininet.dll
2011-09-01 05:12:04 2382848 —-a-w- C:\Windows\System32\mshtml.tlb
2011-09-01 02:35:59 1798144 —-a-w- C:\Windows\SysWow64\jscript9.dll
2011-09-01 02:28:15 1126912 —-a-w- C:\Windows\SysWow64\wininet.dll
2011-09-01 02:22:54 2382848 —-a-w- C:\Windows\SysWow64\mshtml.tlb
2011-08-27 14:51:01 49262 —-a-w- C:\Windows\SysWow64\jpicpl32.cpl
2011-08-27 05:37:49 861696 —-a-w- C:\Windows\System32\oleaut32.dll
2011-08-27 05:37:48 331776 —-a-w- C:\Windows\System32\oleacc.dll
2011-08-27 04:26:27 571904 —-a-w- C:\Windows\SysWow64\oleaut32.dll
2011-08-27 04:26:27 233472 —-a-w- C:\Windows\SysWow64\oleacc.dll
.
============= FINISH: 12:15:48.83 ===============




Here is the Attach log.


.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-08-26.01)
.
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume1
Install Date: 7/28/2011 10:58:06 AM
System Uptime: 11/23/2011 6:39:59 AM (6 hours ago)
.
Motherboard: Gateway | | NV55C
Processor: Intel® Pentium® CPU P6100 @ 2.00GHz | CPU | 1859/1066mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 286 GiB total, 243.231 GiB free.
D: is FIXED (NTFS) - 13 GiB total, 8.466 GiB free.
E: is CDROM ()
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP75: 11/9/2011 12:18:16 PM - Windows Update
RP76: 11/10/2011 2:27:04 AM - Windows Update
RP77: 11/11/2011 3:00:14 AM - Windows Update
RP78: 11/11/2011 10:27:24 AM - Removed Skype Click to Call
RP79: 11/11/2011 10:28:29 AM - Removed Skype™ 5.5
RP80: 11/11/2011 10:29:35 AM - Removed Skype Click to Call
RP81: 11/14/2011 8:33:19 PM - Windows Update
RP82: 11/21/2011 9:06:20 PM - Windows Update
RP83: 11/21/2011 9:15:43 PM - Restore Operation
RP84: 11/22/2011 3:00:14 AM - Windows Update
.
==== Installed Programs ======================
.
Adobe AIR
Adobe Flash Player 11 ActiveX
Adobe Reader X (10.1.1)
Adobe Shockwave Player 11.6
Advertising Center
AVG PC Tuneup 2011
Backup Manager Basic
Best Buy pc app
Compatibility Pack for the 2007 Office system
CyberLink PowerDVD 9
Facebook Video Calling 1.0.0.8953
Gateway InfoCentre
Gateway MyBackup
Gateway Power Management
Gateway Recovery Management
Gateway Registration
Gateway ScreenSaver
Gateway Social Networks
Gateway Updater
Google Chrome
Google Toolbar for Internet Explorer
Google Update Helper
Identity Card
ImagXpress
Intel® Control Center
Intel® Graphics Media Accelerator Driver
Intel® Management Engine Components
Intel® Rapid Storage Technology
J2SE Runtime Environment 5.0
Junk Mail filter update
Launch Manager
Lexmark Toolbar
Microsoft Choice Guard
Microsoft Office Click-to-Run 2010
Microsoft Office Home and Student 2010 - English
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2005 Redistributable - KB2467175
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
MSVCRT
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
Nero 9 Essentials
Nero ControlCenter
Nero DiscSpeed
Nero DiscSpeed Help
Nero DriveSpeed
Nero DriveSpeed Help
Nero Express Help
Nero InfoTool
Nero InfoTool Help
Nero Installer
Nero Online Upgrade
Nero StartSmart
Nero StartSmart Help
Nero StartSmart OEM
NeroExpress
neroxml
Realtek High Definition Audio Driver
Realtek USB 2.0 Card Reader
Respondus LockDown Browser
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Skype Click to Call
Skype™ 5.5
swMSM
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Video Web Camera
Visual Studio 2008 x64 Redistributables
Webroot SecureAnywhere
Welcome Center
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live Mail
Windows Live Messenger
Windows Live Movie Maker
Windows Live Photo Gallery
Windows Live Sign-in Assistant
Windows Live Sync
Windows Live Upload Tool
Windows Live Writer
Yahoo! BrowserPlus 2.9.8
Yahoo! Messenger
Yahoo! Software Update
Yahoo! Toolbar
.
==== Event Viewer Messages From Past Week ========
.
11/22/2011 3:32:41 AM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying

to update signatures. New Signature Version: Previous Signature Version: 1.115.2090.0 Update

Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature

Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:

Previous Engine Version: 1.1.7801.0 Error code: 0x8024402c Error description: An unexpected problem

occurred while checking for updates. For information on installing or troubleshooting updates, see Help and

Support.
11/22/2011 3:23:08 AM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature

has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error

description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to

function. You must install the latest definition updates in order to enable real-time protection.
11/21/2011 7:19:00 PM, Error: Microsoft Antimalware [2004] - Microsoft Antimalware has encountered an error trying

to load signatures and will attempt reverting back to a known-good set of signatures. Signatures Attempted:

Current Error Code: 0x80070002 Error description: The system cannot find the file specified.

Signature version: 0.0.0.0;0.0.0.0 Engine version: 0.0.0.0
11/21/2011 6:45:43 PM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying

to update signatures. New Signature Version: Previous Signature Version: 1.115.2090.0 Update

Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature

Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:

Previous Engine Version: 1.1.7801.0 Error code: 0x8024402c Error description: An unexpected problem

occurred while checking for updates. For information on installing or troubleshooting updates, see Help and

Support.
11/21/2011 6:35:31 PM, Error: Microsoft Antimalware [2004] - Microsoft Antimalware has encountered an error trying

to load signatures and will attempt reverting back to a known-good set of signatures. Signatures Attempted:

Current Error Code: 0x80070002 Error description: The system cannot find the file specified.

Signature version: 0.0.0.0;0.0.0.0 Engine version: 0.0.0.0
11/21/2011 4:47:26 PM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying

to update signatures. New Signature Version: Previous Signature Version: 1.115.2090.0 Update

Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature

Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:

Previous Engine Version: 1.1.7801.0 Error code: 0x8024402c Error description: An unexpected problem

occurred while checking for updates. For information on installing or troubleshooting updates, see Help and

Support.
11/21/2011 4:38:31 PM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature

has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error

description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to

function. You must install the latest definition updates in order to enable real-time protection.
11/21/2011 2:23:33 PM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying

to update signatures. New Signature Version: Previous Signature Version: 1.115.2090.0 Update

Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature

Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:

Previous Engine Version: 1.1.7801.0 Error code: 0x80072f8f Error description: A security error

occurred
11/21/2011 2:14:40 PM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature

has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error

description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to

function. You must install the latest definition updates in order to enable real-time protection.
11/21/2011 2:09:19 PM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying

to update signatures. New Signature Version: Previous Signature Version: 1.115.2090.0 Update

Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature

Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:

Previous Engine Version: 1.1.7801.0 Error code: 0x8024402c Error description: An unexpected problem

occurred while checking for updates. For information on installing or troubleshooting updates, see Help and

Support.
11/21/2011 1:59:55 PM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature

has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error

description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to

function. You must install the latest definition updates in order to enable real-time protection.
11/20/2011 11:04:07 AM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error

trying to update signatures. New Signature Version: Previous Signature Version: 1.115.2090.0

Update Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com

Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:

Previous Engine Version: 1.1.7801.0 Error code: 0x8024402c Error description: An unexpected problem

occurred while checking for updates. For information on installing or troubleshooting updates, see Help and

Support.
11/20/2011 10:55:03 AM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature

has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error

description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to

function. You must install the latest definition updates in order to enable real-time protection.
11/19/2011 9:44:37 AM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying

to update signatures. New Signature Version: Previous Signature Version: 1.115.2090.0 Update

Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature

Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:

Previous Engine Version: 1.1.7801.0 Error code: 0x8024402c Error description: An unexpected problem

occurred while checking for updates. For information on installing or troubleshooting updates, see Help and

Support.
11/19/2011 9:35:42 AM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature

has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error

description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to

function. You must install the latest definition updates in order to enable real-time protection.
11/19/2011 5:17:31 PM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying

to update signatures. New Signature Version: Previous Signature Version: 1.115.2090.0 Update

Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature

Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:

Previous Engine Version: 1.1.7801.0 Error code: 0x8024402c Error description: An unexpected problem

occurred while checking for updates. For information on installing or troubleshooting updates, see Help and

Support.
11/18/2011 9:23:15 AM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature

has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error

description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to

function. You must install the latest definition updates in order to enable real-time protection.
11/18/2011 7:28:18 PM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\DR9.
11/18/2011 12:55:30 PM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature

has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error

description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to

function. You must install the latest definition updates in order to enable real-time protection.
11/17/2011 9:40:44 AM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature

has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error

description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to

function. You must install the latest definition updates in order to enable real-time protection.
11/17/2011 11:11:36 PM, Error: bowser [8003] - The master browser has received a server announcement from the

computer SCOTT-PC that believes that it is the master browser for the domain on transport NetBT_Tcpip_{8285EB82-

CAC9-4399-84F3-05B94863C3A5}. The master browser is stopping or an election is being forced.
11/16/2011 9:25:25 AM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying

to update signatures. New Signature Version: Previous Signature Version: 1.115.1860.0 Update

Source: Microsoft Update Server Update Stage: Install Source Path: http://www.microsoft.com Signature

Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:

Previous Engine Version: 1.1.7801.0 Error code: 0x80070001 Error description: Incorrect function.
11/16/2011 8:51:28 AM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying

to update signatures. New Signature Version: Previous Signature Version: 1.115.1860.0 Update

Source: Microsoft Update Server Update Stage: Install Source Path: http://www.microsoft.com Signature

Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:

Previous Engine Version: 1.1.7801.0 Error code: 0x80070001 Error description: Incorrect function.
11/16/2011 5:06:59 AM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to

install the following update with error 0x80070005: Definition Update for Microsoft Security Essentials - KB2310138

(Definition 1.115.1979.0).
11/16/2011 5:06:50 AM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying

to update signatures. New Signature Version: Previous Signature Version: 1.115.1860.0 Update

Source: Microsoft Update Server Update Stage: Install Source Path: http://www.microsoft.com Signature

Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:

Previous Engine Version: 1.1.7801.0 Error code: 0x80070005 Error description: Access is denied.
11/16/2011 4:34:51 PM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\DR1.
11/16/2011 12:14:02 AM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error

trying to update signatures. New Signature Version: Previous Signature Version: 1.115.1860.0

Update Source: Microsoft Update Server Update Stage: Install Source Path: http://www.microsoft.com

Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:

Previous Engine Version: 1.1.7801.0 Error code: 0x80070005 Error description: Access is denied.
11/16/2011 10:50:40 PM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature

has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error

description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to

function. You must install the latest definition updates in order to enable real-time protection.
11/16/2011 1:11:33 PM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to

install the following update with error 0x80070001: Definition Update for Microsoft Security Essentials - KB2310138

(Definition 1.115.1989.0).
11/16/2011 1:11:26 PM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying

to update signatures. New Signature Version: Previous Signature Version: 1.115.1860.0 Update

Source: Microsoft Update Server Update Stage: Install Source Path: http://www.microsoft.com Signature

Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:

Previous Engine Version: 1.1.7801.0 Error code: 0x80070001 Error description: Incorrect function.
.
==== End Of File ===========================
HI, Patndoris! As far as the TDSSKiller scan, it scanned 259 objects in 27 seconds. Once the scan was completed it said no threats was found. No report or log opened for me to save.
It would appear that you have more than one anti-virus solution on your machine. I can see Webroot, AVG, and Microsoft Security Essentials installed.
Having more than one anti-virus program on your machine, even if only one is running, can cause conflicts and slowdowns in the performance of the machine.
Before continuing on, please completely uninstall two of the programs. Let's start by doing this through Control Panel > Programs and Features. You'll need to uninstall one, reboot the system and then uninstall the other, then reboot the system again.

If it were me, I'd remove Webroot and AVG and keep Microsoft Security Essentials. Ultimately the choice is yours, but we only want one Anti-Virus on the machine.

After removing the 2 anti-virus programs you don't want to keep, please rerun DDS and just post the DDS.txt log. I do not need the attach.txt a second time.

Hopefully, you will see an immediate improvement in speed. Then we can attack your search results problems.
Hi, Patndoris!

I have downloaded two of the anti-virus programs and kept Microsoft Security Essentials. Here is the new reports you wanted.



DDS log:
.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421
Run by [removed] at 14:19:26 on 2011-11-23
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.2807.1535 [GMT -6:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
AV: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: AVG Firewall *Disabled* {621CC794-9486-F902-D092-0484E8EA828B}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files (x86)\AVG\AVG2012\avgfws.exe
C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe
C:\Program Files (x86)\Launch Manager\dsiwmis.exe
C:\Program Files\Gateway\Gateway Power Management\ePowerSvc.exe
C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files (x86)\Gateway\Registration\GREGsvc.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
C:\Windows\system32\lxcrcoms.exe
C:\Program Files (x86)\NewTech Infosystems\Gateway MyBackup\IScheduleSvc.exe
C:\Windows\system32\taskeng.exe
C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Gateway\Gateway Updater\UpdaterService.exe
C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\8.0.1\ToolbarUpdater.exe
C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
C:\Program Files (x86)\AVG\AVG PC Tuneup 2011\BoostSpeed.exe
C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
C:\Windows\PLFSetI.exe
C:\Program Files\Elantech\ETDCtrl.exe
C:\Program Files\Gateway\Gateway Power Management\ePowerTray.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Windows\system32\igfxext.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files (x86)\Lexmark 2400 Series\lxcrmon.exe
C:\Program Files (x86)\Lexmark 2400 Series\ezprint.exe
C:\Users\Owner\AppData\Local\Facebook\Update\FacebookUpdate.exe
C:\Users\Owner\AppData\Local\Google\Update\1.3.21.79\GoogleCrashHandler.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\NewTech Infosystems\Gateway MyBackup\BackupManagerTray.exe
C:\Program Files (x86)\VideoWebCamera\VideoWebCamera.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\AVG\AVG2012\avgtray.exe
C:\Program Files (x86)\AVG Secure Search\vprot.exe
C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files\Elantech\ETDCtrlHelper.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Gateway\Gateway Power Management\ePowerEvent.exe
C:\Program Files (x86)\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
C:\Windows\system32\sppsvc.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil11c_ActiveX.exe
C:\Windows\system32\svchost.exe -k SDRSVC
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.com/
uDefault_Page_URL = hxxp://homepage.gateway.com/rdr.aspx?b=ACGW&l=0409&m=nv55c&r=27360711m475l0404z1k5a47l2j274
mDefault_Page_URL = hxxp://homepage.gateway.com/rdr.aspx?b=ACGW&l=0409&m=nv55c&r=27360711m475l0404z1k5a47l2j274
mStart Page = hxxp://homepage.gateway.com/rdr.aspx?b=ACGW&l=0409&m=nv55c&r=27360711m475l0404z1k5a47l2j274
uURLSearchHooks: YTNavAssist.YTNavAssistPlugin Class: {81017ea9-9aa8-4a6a-9734-7af40e7d593f} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\YTNavAssist.dll
mWinlogon: Userinit=userinit.exe
BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\yt.dll
BHO: Lexmark Toolbar: {1017a80c-6f09-4548-a84d-edd6ac9525f0} - C:\Program Files\Lexmark Toolbar\toolband.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: AVG Security Toolbar: {95b7759c-8c7f-4bf1-b163-73684a933233} - C:\Program Files (x86)\AVG Secure Search\8.0.0.40\AVG Secure Search_toolbar.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
BHO: SingleInstance Class: {fdad4da1-61a2-4fd8-9c17-86f7ac245081} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\yt.dll
TB: Lexmark Toolbar: {1017a80c-6f09-4548-a84d-edd6ac9525f0} - C:\Program Files\Lexmark Toolbar\toolband.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
TB: AVG Security Toolbar: {95b7759c-8c7f-4bf1-b163-73684a933233} - C:\Program Files (x86)\AVG Secure Search\8.0.0.40\AVG Secure Search_toolbar.dll
uRun: [Messenger (Yahoo!)] "C:\PROGRA~2\Yahoo!\Messenger\YahooMessenger.exe" -quiet
uRun: [Facebook Update] "C:\Users\Owner\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
uRun: [Google Update] "C:\Users\Owner\AppData\Local\Google\Update\GoogleUpdate.exe" /c
mRun: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
mRun: [BackupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Gateway MyBackup\BackupManagerTray.exe" -h -k
mRun: [VideoWebCamera] "C:\Program Files (x86)\VideoWebCamera\VideoWebCamera.exe" -a
mRun: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [AVG_TRAY] "C:\Program Files (x86)\AVG\AVG2012\avgtray.exe"
mRun: [vProt] "C:\Program Files (x86)\AVG Secure Search\vprot.exe"
StartupFolder: C:\Users\Owner\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\ZOOSKM~1.LNK - C:\Program Files (x86)\ZooskMessenger\ZooskMessenger.exe
uPolicies-explorer: NoDesktopCleanupWizard = 1 (0x1)
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC} - C:\Program Files (x86)\Java\jre1.5.0\bin\npjpi150.dll
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://javadl-esd.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab
TCP: DhcpNameServer = [removed] [removed] [removed]
TCP: Interfaces\{8192C47F-6A1B-475D-A522-A47F112D10F0} : DhcpNameServer = [removed] [removed]
TCP: Interfaces\{8285EB82-CAC9-4399-84F3-05B94863C3A5} : DhcpNameServer = [removed] [removed] [removed]
TCP: Interfaces\{8285EB82-CAC9-4399-84F3-05B94863C3A5}\34F657E64727970294E6E637 : DhcpNameServer = 10.61.32.1 1.1.1.1
TCP: Interfaces\{8285EB82-CAC9-4399-84F3-05B94863C3A5}\34F6D666F627470294E6E602348656C6375616 : DhcpNameServer = 192.168.1.1
TCP: Interfaces\{8285EB82-CAC9-4399-84F3-05B94863C3A5}\34F6D666F627470294E6E602348656C6375616029494 : DhcpNameServer = 192.168.1.1
TCP: Interfaces\{8285EB82-CAC9-4399-84F3-05B94863C3A5}\3583D435241636B674 : DhcpNameServer = [removed]
TCP: Interfaces\{8285EB82-CAC9-4399-84F3-05B94863C3A5}\46574747F6E6 : DhcpNameServer = 192.168.1.1
TCP: Interfaces\{8285EB82-CAC9-4399-84F3-05B94863C3A5}\A4F637B696566244166756 : DhcpNameServer = 192.168.1.1
TCP: Interfaces\{8285EB82-CAC9-4399-84F3-05B94863C3A5}\D4F64756C663F51313 : DhcpNameServer = 4.2.2.2 4.2.2.1
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\8.0.1\ViProtocol.dll
BHO-X64: &Yahoo! Toolbar Helper: {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\yt.dll
BHO-X64: 0x1 - No File
BHO-X64: Lexmark Toolbar: {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO-X64: AcroIEHelperStub - No File
BHO-X64: AVG Safe Search: {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll
BHO-X64: WormRadar.com IESiteBlocker.NavFilter - No File
BHO-X64: Windows Live Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO-X64: AVG Security Toolbar: {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\8.0.0.40\AVG Secure Search_toolbar.dll
BHO-X64: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
BHO-X64: SingleInstance Class: {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll
TB-X64: Yahoo! Toolbar: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\yt.dll
TB-X64: Lexmark Toolbar: {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
TB-X64: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
TB-X64: AVG Security Toolbar: {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\8.0.0.40\AVG Secure Search_toolbar.dll
mRun-x64: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
mRun-x64: [BackupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Gateway MyBackup\BackupManagerTray.exe" -h -k
mRun-x64: [VideoWebCamera] "C:\Program Files (x86)\VideoWebCamera\VideoWebCamera.exe" -a
mRun-x64: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
mRun-x64: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun-x64: [AVG_TRAY] "C:\Program Files (x86)\AVG\AVG2012\avgtray.exe"
mRun-x64: [vProt] "C:\Program Files (x86)\AVG Secure Search\vprot.exe"
.
============= SERVICES / DRIVERS ===============
.
R0 AVGIDSEH;AVGIDSEH;C:\Windows\system32\DRIVERS\AVGIDSEH.Sys –> C:\Windows\system32\DRIVERS\AVGIDSEH.Sys [?]
R1 Avgtdia;AVG TDI Driver;C:\Windows\system32\DRIVERS\avgtdia.sys –> C:\Windows\system32\DRIVERS\avgtdia.sys [?]
R1 MpFilter;Microsoft Malware Protection Driver;C:\Windows\system32\DRIVERS\MpFilter.sys –> C:\Windows\system32\DRIVERS\MpFilter.sys [?]
R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys –> C:\Windows\system32\DRIVERS\vwififlt.sys [?]
R2 AdobeARMservice;Adobe Acrobat Update Service;C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-6-6 64952]
R2 avgfws;AVG Firewall;C:\Program Files (x86)\AVG\AVG2012\avgfws.exe [2011-8-19 2399560]
R2 avgwd;AVG WatchDog;C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe [2011-8-2 192776]
R2 cvhsvc;Client Virtualization Handler;C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE [2010-10-20 821664]
R2 DsiWMIService;Dritek WMI Service;C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-7-23 321104]
R2 ePowerSvc;Acer ePower Service;C:\Program Files\Gateway\Gateway Power Management\ePowerSvc.exe [2011-7-28 868896]
R2 GREGService;GREGService;C:\Program Files (x86)\Gateway\Registration\GREGsvc.exe [2010-1-8 23584]
R2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-7-23 13336]
R2 NTI IScheduleSvc;NTI IScheduleSvc;C:\Program Files (x86)\NewTech Infosystems\Gateway MyBackup\IScheduleSvc.exe [2010-5-24 255744]
R2 sftlist;Application Virtualization Client;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2010-9-14 508264]
R2 UNS;Intel® Management & Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2010-7-23

2320920]
R2 Updater Service;Updater Service;C:\Program Files\Gateway\Gateway Updater\UpdaterService.exe [2010-7-23 243232]
R2 vToolbarUpdater;vToolbarUpdater;C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\8.0.1\ToolbarUpdater.exe [2011-9-11 246600]
R3 ETD;ELAN PS/2 Port Input Device;C:\Windows\system32\DRIVERS\ETD.sys –> C:\Windows\system32\DRIVERS\ETD.sys [?]
R3 HECIx64;Intel® Management Engine Interface;C:\Windows\system32\DRIVERS\HECIx64.sys –> C:\Windows\system32\DRIVERS\HECIx64.sys [?]
R3 Impcd;Impcd;C:\Windows\system32\DRIVERS\Impcd.sys –> C:\Windows\system32\DRIVERS\Impcd.sys [?]
R3 IntcDAud;Intel® Display Audio;C:\Windows\system32\DRIVERS\IntcDAud.sys –> C:\Windows\system32\DRIVERS\IntcDAud.sys [?]
R3 k57nd60a;Broadcom NetLink ™ Gigabit Ethernet - NDIS 6.0;C:\Windows\system32\DRIVERS\k57nd60a.sys –> C:\Windows\system32\DRIVERS\k57nd60a.sys [?]
R3 NisDrv;Microsoft Network Inspection System;C:\Windows\system32\DRIVERS\NisDrvWFP.sys –> C:\Windows\system32\DRIVERS\NisDrvWFP.sys [?]
R3 NisSrv;Microsoft Network Inspection;C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe [2011-4-27 288272]
R3 Sftfs;Sftfs;C:\Windows\system32\DRIVERS\Sftfslh.sys –> C:\Windows\system32\DRIVERS\Sftfslh.sys [?]
R3 Sftplay;Sftplay;C:\Windows\system32\DRIVERS\Sftplaylh.sys –> C:\Windows\system32\DRIVERS\Sftplaylh.sys [?]
R3 Sftredir;Sftredir;C:\Windows\system32\DRIVERS\Sftredirlh.sys –> C:\Windows\system32\DRIVERS\Sftredirlh.sys [?]
R3 Sftvol;Sftvol;C:\Windows\system32\DRIVERS\Sftvollh.sys –> C:\Windows\system32\DRIVERS\Sftvollh.sys [?]
R3 sftvsa;Application Virtualization Service Agent;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2010-9-14 219496]
S2 AVGIDSAgent;AVGIDSAgent;C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe [2011-10-12 4433248]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-8-2 136176]
S3 gupdatem;Google Update Service (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-8-2 136176]
S3 MpNWMon;Microsoft Malware Protection Network Driver;C:\Windows\system32\DRIVERS\MpNWMon.sys –> C:\Windows\system32\DRIVERS\MpNWMon.sys [?]
S3 osppsvc;Office Software Protection Platform;C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-1-9 4925184]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\system32\Drivers\RtsUStor.sys –> C:\Windows\system32\Drivers\RtsUStor.sys [?]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys –> C:\Windows\system32\drivers\tsusbflt.sys [?]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\system32\Wat\WatAdminSvc.exe –> C:\Windows\system32\Wat\WatAdminSvc.exe [?]
.
=============== Created Last 30 ================
.
2011-11-23 20:12:46 69000 —-a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{B245C0CB-EAD7-4F73-9A02-F3365CAF3D44}\offreg.dll
2011-11-23 04:36:19 8570192 —-a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{B245C0CB-EAD7-4F73-9A02-F3365CAF3D44}\mpengine.dll
2011-11-22 00:56:36 886784 —-a-w- C:\Program Files\Common Files\System\wab32.dll
2011-11-22 00:56:36 708608 —-a-w- C:\Program Files (x86)\Common Files\System\wab32.dll
2011-11-22 00:56:30 1923952 —-a-w- C:\Windows\System32\drivers\tcpip.sys
2011-11-22 00:56:23 3144704 —-a-w- C:\Windows\System32\win32k.sys
2011-11-19 01:03:18 ——– d—–w- C:\Windows\XSxS
2011-11-19 01:03:18 ——– d—–w- C:\Users\Owner\AppData\Local\Xenocode
2011-10-31 19:23:38 ——– d—–w- C:\Windows\PCHEALTH
2011-10-31 19:23:38 ——– d—–w- C:\Program Files (x86)\Microsoft Application Virtualization Client
2011-10-29 01:16:15 ——– d—–w- C:\ProgramData\Virtualized Applications
.
==================== Find3M ====================
.
2011-10-08 13:17:19 0 —-a-w- C:\Windows\SysWow64\sho3F66.tmp
2011-10-06 14:39:19 0 —-a-w- C:\Windows\SysWow64\sho447.tmp
2011-10-05 07:06:39 414368 —-a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2011-09-30 23:18:54 0 —-a-w- C:\Windows\SysWow64\sho3714.tmp
2011-09-01 05:24:07 2309120 —-a-w- C:\Windows\System32\jscript9.dll
2011-09-01 05:17:57 1389056 —-a-w- C:\Windows\System32\wininet.dll
2011-09-01 05:12:04 2382848 —-a-w- C:\Windows\System32\mshtml.tlb
2011-09-01 02:35:59 1798144 —-a-w- C:\Windows\SysWow64\jscript9.dll
2011-09-01 02:28:15 1126912 —-a-w- C:\Windows\SysWow64\wininet.dll
2011-09-01 02:22:54 2382848 —-a-w- C:\Windows\SysWow64\mshtml.tlb
2011-08-27 14:51:01 49262 —-a-w- C:\Windows\SysWow64\jpicpl32.cpl
2011-08-27 05:37:49 861696 —-a-w- C:\Windows\System32\oleaut32.dll
2011-08-27 05:37:48 331776 —-a-w- C:\Windows\System32\oleacc.dll
2011-08-27 04:26:27 571904 —-a-w- C:\Windows\SysWow64\oleaut32.dll
2011-08-27 04:26:27 233472 —-a-w- C:\Windows\SysWow64\oleacc.dll
.
============= FINISH: 14:20:10.44 ===============



Atach log:
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-08-26.01)
.
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume1
Install Date: 7/28/2011 10:58:06 AM
System Uptime: 11/23/2011 2:12:14 PM (0 hours ago)
.
Motherboard: Gateway | | NV55C
Processor: Intel® Pentium® CPU P6100 @ 2.00GHz | CPU | 1999/1066mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 286 GiB total, 245.426 GiB free.
D: is FIXED (NTFS) - 13 GiB total, 8.466 GiB free.
E: is CDROM ()
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP77: 11/11/2011 3:00:14 AM - Windows Update
RP78: 11/11/2011 10:27:24 AM - Removed Skype Click to Call
RP79: 11/11/2011 10:28:29 AM - Removed Skype™ 5.5
RP80: 11/11/2011 10:29:35 AM - Removed Skype Click to Call
RP81: 11/14/2011 8:33:19 PM - Windows Update
RP82: 11/21/2011 9:06:20 PM - Windows Update
RP83: 11/21/2011 9:15:43 PM - Restore Operation
RP84: 11/22/2011 3:00:14 AM - Windows Update
RP85: 11/23/2011 2:02:21 PM - Removed Skype™ 5.5
RP86: 11/23/2011 2:03:16 PM - Removed Skype Click to Call
.
==== Installed Programs ======================
.
Adobe AIR
Adobe Flash Player 11 ActiveX
Adobe Reader X (10.1.1)
Adobe Shockwave Player 11.6
Advertising Center
AVG PC Tuneup 2011
Backup Manager Basic
Best Buy pc app
Compatibility Pack for the 2007 Office system
CyberLink PowerDVD 9
Facebook Video Calling 1.0.0.8953
Gateway InfoCentre
Gateway MyBackup
Gateway Power Management
Gateway Recovery Management
Gateway Registration
Gateway ScreenSaver
Gateway Social Networks
Gateway Updater
Google Chrome
Google Toolbar for Internet Explorer
Google Update Helper
Identity Card
ImagXpress
Intel® Control Center
Intel® Graphics Media Accelerator Driver
Intel® Management Engine Components
Intel® Rapid Storage Technology
J2SE Runtime Environment 5.0
Junk Mail filter update
Launch Manager
Lexmark Toolbar
Microsoft Choice Guard
Microsoft Office Click-to-Run 2010
Microsoft Office Home and Student 2010 - English
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2005 Redistributable - KB2467175
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
MSVCRT
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
Nero 9 Essentials
Nero ControlCenter
Nero DiscSpeed
Nero DiscSpeed Help
Nero DriveSpeed
Nero DriveSpeed Help
Nero Express Help
Nero InfoTool
Nero InfoTool Help
Nero Installer
Nero Online Upgrade
Nero StartSmart
Nero StartSmart Help
Nero StartSmart OEM
NeroExpress
neroxml
Realtek High Definition Audio Driver
Realtek USB 2.0 Card Reader
Respondus LockDown Browser
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
swMSM
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Video Web Camera
Visual Studio 2008 x64 Redistributables
Welcome Center
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live Mail
Windows Live Messenger
Windows Live Movie Maker
Windows Live Photo Gallery
Windows Live Sign-in Assistant
Windows Live Sync
Windows Live Upload Tool
Windows Live Writer
Yahoo! BrowserPlus 2.9.8
Yahoo! Messenger
Yahoo! Software Update
Yahoo! Toolbar
.
==== Event Viewer Messages From Past Week ========
.
11/23/2011 2:13:29 PM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature

has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error

description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to

function. You must install the latest definition updates in order to enable real-time protection.
11/23/2011 2:12:50 PM, Error: Service Control Manager [7003] - The AVGIDSAgent service depends the following

service: AVGIDSDriver. This service might not be installed.
11/23/2011 2:07:52 PM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature

has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error

description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to

function. You must install the latest definition updates in order to enable real-time protection.
11/22/2011 3:32:41 AM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying

to update signatures. New Signature Version: Previous Signature Version: 1.115.2090.0 Update

Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature

Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:

Previous Engine Version: 1.1.7801.0 Error code: 0x8024402c Error description: An unexpected problem

occurred while checking for updates. For information on installing or troubleshooting updates, see Help and

Support.
11/22/2011 3:23:08 AM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature

has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error

description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to

function. You must install the latest definition updates in order to enable real-time protection.
11/21/2011 7:19:00 PM, Error: Microsoft Antimalware [2004] - Microsoft Antimalware has encountered an error trying

to load signatures and will attempt reverting back to a known-good set of signatures. Signatures Attempted:

Current Error Code: 0x80070002 Error description: The system cannot find the file specified.

Signature version: 0.0.0.0;0.0.0.0 Engine version: 0.0.0.0
11/21/2011 6:45:43 PM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying

to update signatures. New Signature Version: Previous Signature Version: 1.115.2090.0 Update

Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature

Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:

Previous Engine Version: 1.1.7801.0 Error code: 0x8024402c Error description: An unexpected problem

occurred while checking for updates. For information on installing or troubleshooting updates, see Help and

Support.
11/21/2011 6:35:31 PM, Error: Microsoft Antimalware [2004] - Microsoft Antimalware has encountered an error trying

to load signatures and will attempt reverting back to a known-good set of signatures. Signatures Attempted:

Current Error Code: 0x80070002 Error description: The system cannot find the file specified.

Signature version: 0.0.0.0;0.0.0.0 Engine version: 0.0.0.0
11/21/2011 4:47:26 PM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying

to update signatures. New Signature Version: Previous Signature Version: 1.115.2090.0 Update

Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature

Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:

Previous Engine Version: 1.1.7801.0 Error code: 0x8024402c Error description: An unexpected problem

occurred while checking for updates. For information on installing or troubleshooting updates, see Help and

Support.
11/21/2011 4:38:31 PM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature

has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error

description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to

function. You must install the latest definition updates in order to enable real-time protection.
11/21/2011 2:23:33 PM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying

to update signatures. New Signature Version: Previous Signature Version: 1.115.2090.0 Update

Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature

Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:

Previous Engine Version: 1.1.7801.0 Error code: 0x80072f8f Error description: A security error

occurred
11/21/2011 2:14:40 PM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature

has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error

description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to

function. You must install the latest definition updates in order to enable real-time protection.
11/21/2011 2:09:19 PM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying

to update signatures. New Signature Version: Previous Signature Version: 1.115.2090.0 Update

Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature

Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:

Previous Engine Version: 1.1.7801.0 Error code: 0x8024402c Error description: An unexpected problem

occurred while checking for updates. For information on installing or troubleshooting updates, see Help and

Support.
11/21/2011 1:59:55 PM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature

has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error

description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to

function. You must install the latest definition updates in order to enable real-time protection.
11/20/2011 11:04:07 AM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error

trying to update signatures. New Signature Version: Previous Signature Version: 1.115.2090.0

Update Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com

Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:

Previous Engine Version: 1.1.7801.0 Error code: 0x8024402c Error description: An unexpected problem

occurred while checking for updates. For information on installing or troubleshooting updates, see Help and

Support.
11/20/2011 10:55:03 AM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature

has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error

description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to

function. You must install the latest definition updates in order to enable real-time protection.
11/19/2011 9:44:37 AM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying

to update signatures. New Signature Version: Previous Signature Version: 1.115.2090.0 Update

Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature

Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:

Previous Engine Version: 1.1.7801.0 Error code: 0x8024402c Error description: An unexpected problem

occurred while checking for updates. For information on installing or troubleshooting updates, see Help and

Support.
11/19/2011 9:35:42 AM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature

has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error

description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to

function. You must install the latest definition updates in order to enable real-time protection.
11/19/2011 5:17:31 PM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying

to update signatures. New Signature Version: Previous Signature Version: 1.115.2090.0 Update

Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature

Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:

Previous Engine Version: 1.1.7801.0 Error code: 0x8024402c Error description: An unexpected problem

occurred while checking for updates. For information on installing or troubleshooting updates, see Help and

Support.
11/18/2011 9:23:15 AM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature

has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error

description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to

function. You must install the latest definition updates in order to enable real-time protection.
11/18/2011 7:28:18 PM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\DR9.
11/18/2011 12:55:30 PM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature

has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error

description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to

function. You must install the latest definition updates in order to enable real-time protection.
11/17/2011 9:40:44 AM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature

has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error

description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to

function. You must install the latest definition updates in order to enable real-time protection.
11/17/2011 11:11:36 PM, Error: bowser [8003] - The master browser has received a server announcement from the

computer SCOTT-PC that believes that it is the master browser for the domain on transport NetBT_Tcpip_{8285EB82-

CAC9-4399-84F3-05B94863C3A5}. The master browser is stopping or an election is being forced.
11/16/2011 9:25:25 AM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying

to update signatures. New Signature Version: Previous Signature Version: 1.115.1860.0 Update

Source: Microsoft Update Server Update Stage: Install Source Path: http://www.microsoft.com Signature

Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:

Previous Engine Version: 1.1.7801.0 Error code: 0x80070001 Error description: Incorrect function.
11/16/2011 8:51:28 AM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying

to update signatures. New Signature Version: Previous Signature Version: 1.115.1860.0 Update

Source: Microsoft Update Server Update Stage: Install Source Path: http://www.microsoft.com Signature

Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:

Previous Engine Version: 1.1.7801.0 Error code: 0x80070001 Error description: Incorrect function.
11/16/2011 5:06:59 AM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to

install the following update with error 0x80070005: Definition Update for Microsoft Security Essentials - KB2310138

(Definition 1.115.1979.0).
11/16/2011 5:06:50 AM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying

to update signatures. New Signature Version: Previous Signature Version: 1.115.1860.0 Update

Source: Microsoft Update Server Update Stage: Install Source Path: http://www.microsoft.com Signature

Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:

Previous Engine Version: 1.1.7801.0 Error code: 0x80070005 Error description: Access is denied.
11/16/2011 4:34:51 PM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\DR1.
11/16/2011 12:14:02 AM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error

trying to update signatures. New Signature Version: Previous Signature Version: 1.115.1860.0

Update Source: Microsoft Update Server Update Stage: Install Source Path: http://www.microsoft.com

Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:

Previous Engine Version: 1.1.7801.0 Error code: 0x80070005 Error description: Access is denied.
11/16/2011 10:50:40 PM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature

has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error

description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to

function. You must install the latest definition updates in order to enable real-time protection.
11/16/2011 1:11:33 PM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to

install the following update with error 0x80070001: Definition Update for Microsoft Security Essentials - KB2310138

(Definition 1.115.1989.0).
11/16/2011 1:11:26 PM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying

to update signatures. New Signature Version: Previous Signature Version: 1.115.1860.0 Update

Source: Microsoft Update Server Update Stage: Install Source Path: http://www.microsoft.com Signature

Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version:

Previous Engine Version: 1.1.7801.0 Error code: 0x80070001 Error description: Incorrect function.
.
==== End Of File ===========================
It doesn't look like AVG has fully uninstalled. Sometimes anti-virus programs embed themselves in ways that make it really hard to remove them. Let's try a specialized tool to see if that will help.
Please try following the instructions found here: AVG Removal Tool
If you are not prompted to do so, reboot the machine after running it.

I'm not seeing any evidence of malware in your logs. Can you please elaborate on what you mean by the Google/Yahoo searches aren't working? Are you getting redirected to sites you don't expect? Or what is happening?

Let's try a couple of other scans as well. Different tools look in different areas and no one tool catches everything.


Please download Malwarebytes' Anti-Malware to your desktop.

  • Double-click mbam-setup.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select Perform quick scan, then click Scan.
    [external image: Posted Image]
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is checked, and click Remove Selected .
  • When completed, a log will open in Notepad. Please save it to a convenient location and post the results.
  • Note: If you receive a notice that some of the items couldn't be removed, that they have been added to the delete on reboot list, please reboot.



This scan make take awhile depending on how many items are on the computer. You may want to run it at a time you won't be needing the machine. It should be run from IE and I'd recommend not doing anything else while it's running.

Please go to here to run the online scannner from ESET.
  • Turn off the real time scanner of any existing antivirus program while performing the online scan
  • Tick the box next to YES, I accept the Terms of Use.
  • Click Start
  • When asked, allow the activex control to install
  • Click Start
  • Make sure that the option Remove found threats is unticked, and the option Scan unwanted applications is checked
  • Click on Advanced Settings and ensure these options are ticked:
    • Scan for potentially unwanted applications
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth Technology
  • Click Scan
  • Wait for the scan to finish
  • If any threats were found, click the 'List of found threats' , then click Export to text file….
  • Save it to your desktop, then please copy and paste that log as a reply to this topic.
Hi, Patndoris! I am able to do the searches now. Google and yahoo are navigating to the webpage I am requesting the searches for now. What was happening was I would input info to be searched and the page would navigate to the search results.
I'm glad the searches seem to be working now. Let's go ahead and run the other 2 scans just to be on the safe side. If they come back clear then you'll be good to go.
Hi, Patndoris! Here is the mbam log. I will run the other one now. Malwarebytes' Anti-Malware 1.51.2.1300 www.malwarebytes.org Database version: 8229 Windows 6.1.7601 Service Pack 1 Internet Explorer 9.0.8112.16421 11/23/2011 8:17:09 PM mbam-log-2011-11-23 (20-17-09).txt Scan type: Quick scan Objects scanned: 216094 Time elapsed: 5 minute(s), 48 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 1 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowSearch (PUM.Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully. Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected)
Hi, Patndoris! :thumbup: The last scan just got done. It came back with no threats found. I'm a much happier camper now, YAAAAAAYYYYYYYY!!!! :) Thanks so much for what you have done for me today! Have a great holiday season and a Blessed New Year! :thumbup:
I think the bulk of your issues were caused by the multiple anti-virus programs on the machine. In the case of anti-virus, more is not better. I'm so glad everything seems to be working well now. Have a wonderful holiday season and happy surfing the internet!!

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI