This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

HP Mini Netbook Super Slow [Solved]

20 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 9.0.8112.16421
Run by [removed] at 0:28:26 on 2012-04-01
Microsoft Windows 7 Starter 6.1.7601.1.1252.1.1033.18.1012.267 [GMT -4:00]
.
AV: Bitdefender Antivirus *Enabled/Updated* {50909708-FF80-02AF-F814-B28405891E92}
AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Bitdefender Antispyware *Enabled/Updated* {EBF176EC-D9BA-0D21-C2A4-89F67E0E542F}
FW: Bitdefender Firewall *Enabled* {68AB162D-B5EF-03F7-D34B-1BB1FB5A59E9}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Program Files\Bitdefender\Bitdefender 2012\vsserv.exe
C:\Windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9691412ff1876250\STacSV.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9691412ff1876250\aestsrv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\SwSetup\QuickWeb\QW.SYS\config\DVMExportService.exe
C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
C:\Program Files\Bitdefender\Bitdefender 2012\updatesrv.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\Skyhook Wireless\XPS\xpssvc.exe
C:\Windows\system32\wbem\wmiprvse.exe
c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\Hewlett-Packard\HP Support Framework\hpsa_service.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\Bitdefender\Bitdefender 2012\bdagent.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
C:\Program Files\Hp\HP Software Update\hpwuschd2.exe
C:\Program Files\Hewlett-Packard\HP CloudDrive\zumodrive.exe
C:\Program Files\Intel\IntelAppStore\bin\serviceManager.exe
C:\Windows\system32\conhost.exe
C:\Program Files\Common Files\BSD\AppUpdater\BSDChecker.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Windows\system32\DllHost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\msiexec.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\conhost.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.com/
mStart Page = about:blank
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre7\bin\jp2ssv.dll
mRun: [HP Quick Launch] c:\program files\hewlett-packard\hp quick launch\HPMSGSVC.exe
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
mRun: [ZumoDrive] "c:\program files\hewlett-packard\hp clouddrive\ZumoLauncher.lnk"
mRun: [Intel AppUp(SM) center] "c:\program files\intel\intelappstore\bin\serviceManager.lnk"
mRun: [BSDAppUpdater] c:\program files\common files\bsd\appupdater\BSDChecker.exe
mRun: [BDAgent] "c:\program files\bitdefender\bitdefender 2012\bdagent.exe"
mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [MSC] "c:\program files\microsoft security client\msseces.exe" -hide -runkey
mRun: [SysTrayApp] c:\program files\idt\wdm\sttray.exe
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [IAStorIcon] c:\program files\intel\intel® rapid storage technology\IAStorIcon.exe
mRun: [Malwarebytes' Anti-Malware] "c:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttray
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\mif5ba~1\office12\EXCEL.EXE/3000
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\mif5ba~1\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\mif5ba~1\office12\REFIEBAR.DLL
DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} - hxxp://h20614.www2.hp.com/ediags/gmd/Install/Cab/hpdetect118.cab
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab
TCP: DhcpNameServer = 192.168.1.1
TCP: Interfaces\{FE61774F-44E5-40D0-B0A3-8EB18FE2798A} : DhcpNameServer = 192.168.1.1
TCP: Interfaces\{FE61774F-44E5-40D0-B0A3-8EB18FE2798A}\D657368616368616 : DhcpNameServer = 192.168.1.1
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - c:\program files\windows live\photo gallery\AlbumDownloadProtocolHandler.dll
Notify: igfxcui - igfxdev.dll
mASetup: {4FB2AA7C-C8E4-BBC8-BB1C-FAAB2EF5914B} - c:\windows\system32\wscript.exe "c:\program files\hewlett-packard\hp media suite\home\PinItem.vbs"
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\mom\appdata\roaming\mozilla\firefox\profiles\kxk6khsu.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.msn.com/
FF - prefs.js: network.proxy.type - 0
FF - plugin: c:\program files\adobe\reader 9.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\java\jre7\bin\plugin2\npjp2.dll
FF - plugin: c:\program files\microsoft silverlight\4.1.10111.0\npctrlui.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll
FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll
FF - plugin: c:\users\mom\appdata\roaming\mozilla\firefox\profiles\kxk6khsu.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\plugins\npqscan.dll
.
============= SERVICES / DRIVERS ===============
.
R0 avc3;avc3;c:\windows\system32\drivers\avc3.sys [2011-11-25 611520]
R1 BdfNdisf;BitDefender Firewall NDIS 6 Filter Driver;c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [2011-11-14 74832]
R1 bdfwfpf;bdfwfpf;c:\program files\common files\bitdefender\bitdefender firewall\bdfwfpf.sys [2011-11-14 90704]
R1 BDVEDISK;BDVEDISK;c:\windows\system32\drivers\bdvedisk.sys [2010-1-19 85128]
R1 DVMIO;DeviceVM IO Service;c:\windows\system32\drivers\dvmio.sys [2009-11-11 18136]
R1 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2011-4-18 165648]
R1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\drivers\vwififlt.sys [2009-7-13 48128]
R3 avchv;avchv Function Driver;c:\windows\system32\drivers\avchv.sys [2011-11-25 240184]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-3-29 20464]
R3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\drivers\MpNWMon.sys [2011-4-18 43392]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\drivers\NisDrvWFP.sys [2011-4-27 65024]
R3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\drivers\RtsPStor.sys [2010-8-12 228896]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\drivers\Rt86win7.sys [2010-8-12 233472]
R3 XPSVCOM;XPSVCOM;c:\windows\system32\drivers\XPSVCOM.sys [2010-3-2 12416]
S3 avckf;avckf;c:\windows\system32\drivers\avckf.sys [2011-11-28 447208]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
S3 bdsandbox;bdsandbox;c:\windows\system32\drivers\bdsandbox.sys [2012-2-3 63056]
S3 netw5v32;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\drivers\netw5v32.sys [2009-6-10 4231168]
S3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\drivers\VSTAZL3.SYS [2009-7-13 207360]
S3 SrvHsfV92;SrvHsfV92;c:\windows\system32\drivers\VSTDPV3.SYS [2009-7-13 980992]
S3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\drivers\VSTCNXT3.SYS [2009-7-13 661504]
S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2011-5-27 52224]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\drivers\yk62x86.sys [2009-7-13 311296]
.
=============== Created Last 30 ================
.
2012-04-01 04:22:46 2106216 —-a-w- c:\program files\mozilla firefox\D3DCompiler_43.dll
2012-04-01 04:22:45 1998168 —-a-w- c:\program files\mozilla firefox\d3dx9_43.dll
2012-04-01 04:22:44 592824 —-a-w- c:\program files\mozilla firefox\gkmedias.dll
2012-04-01 04:22:43 44472 —-a-w- c:\program files\mozilla firefox\mozglue.dll
2012-04-01 04:22:42 626688 —-a-w- c:\program files\mozilla firefox\msvcr80.dll
2012-04-01 04:22:42 548864 —-a-w- c:\program files\mozilla firefox\msvcp80.dll
2012-04-01 04:22:42 479232 —-a-w- c:\program files\mozilla firefox\msvcm80.dll
2012-04-01 04:20:13 637848 —-a-w- c:\windows\system32\npdeployJava1.dll
2012-04-01 04:20:12 567696 —-a-w- c:\windows\system32\RENEF85.tmp
2012-04-01 04:01:05 ——– d—–w- c:\users\mom\appdata\local\Diagnostics
2012-04-01 03:41:27 6582328 —-a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\{f48f24f0-ff81-4f9a-9635-eca51a517013}\mpengine.dll
2012-03-31 03:50:17 ——– d—–w- c:\users\mom\appdata\local\CrashDumps
2012-03-30 03:27:42 ——– d—–w- c:\users\mom\appdata\roaming\Malwarebytes
2012-03-30 03:27:31 ——– d—–w- c:\programdata\Malwarebytes
2012-03-30 03:27:30 20464 —-a-w- c:\windows\system32\drivers\mbam.sys
2012-03-30 03:27:30 ——– d—–w- c:\program files\Malwarebytes' Anti-Malware
2012-03-30 01:08:43 ——– d—–w- c:\users\mom\appdata\roaming\ooVoo Details
2012-03-29 22:45:37 ——– d—–w- C:\$RECYCLE.BIN
2012-03-28 00:54:32 ——– d—–w- c:\users\mom\appdata\local\temp
2012-03-28 00:28:57 98816 —-a-w- c:\windows\sed.exe
2012-03-28 00:28:57 518144 —-a-w- c:\windows\SWREG.exe
2012-03-28 00:28:57 256000 —-a-w- c:\windows\PEV.exe
2012-03-28 00:28:57 208896 —-a-w- c:\windows\MBR.exe
2012-03-25 20:26:41 ——– d—–w- c:\programdata\{D3B41B92-9BC2-43EB-916A-4FA9E8191837}
2012-03-25 19:40:39 ——– d—–w- c:\users\mom\appdata\roaming\Intel Corporation
2012-03-25 19:28:09 354840 —-a-w- c:\windows\system32\drivers\iaStor.sys
2012-03-25 19:09:56 527872 ——w- c:\windows\system32\stapi32.dll
2012-03-25 19:09:01 61440 —-a-w- c:\windows\system32\aestaren.dll
2012-03-25 19:09:01 380928 —-a-w- c:\windows\system32\aestecap.dll
2012-03-25 19:09:01 140288 —-a-w- c:\windows\system32\aestacap.dll
2012-03-25 19:08:59 536576 —-a-w- c:\windows\system32\idtmini1.exe
2012-03-25 19:08:58 495708 —-a-w- c:\windows\sttray.exe
2012-03-25 19:08:58 3354624 —-a-w- c:\windows\system32\stlang.dll
2012-03-25 19:08:58 12628060 —-a-w- c:\windows\system32\idtcpl.cpl
2012-03-25 19:08:39 175616 —-a-w- c:\windows\system32\staco.dll
2012-03-25 18:12:53 ——– d—–w- C:\HJT
2012-03-25 17:51:46 388096 —-a-r- c:\users\mom\appdata\roaming\microsoft\installer\{45a66726-69bc-466b-a7a4-12fcba4883d7}\HiJackThis.exe
2012-03-25 17:29:14 ——– d—–w- c:\program files\Trend Micro
2012-03-15 23:30:41 6582328 —-a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\backup\mpengine.dll
2012-03-14 22:41:04 713784 ——w- c:\programdata\microsoft\microsoft antimalware\definition updates\{f38233c5-0a71-41f8-a5a9-361687a2f486}\gapaengine.dll
2012-03-14 22:38:41 ——– d—–w- c:\program files\Microsoft Security Client
2012-03-14 21:37:34 3968368 —-a-w- c:\windows\system32\ntkrnlpa.exe
2012-03-14 21:37:33 3913584 —-a-w- c:\windows\system32\ntoskrnl.exe
2012-03-14 01:20:53 6552120 —-a-w- c:\programdata\microsoft\windows defender\definition updates\{5b63491c-3068-41c8-9974-29f38f2e8b04}\mpengine.dll
2012-03-14 01:19:51 2343424 —-a-w- c:\windows\system32\win32k.sys
2012-03-14 01:19:45 1077248 —-a-w- c:\windows\system32\DWrite.dll
2012-03-14 01:18:17 8192 —-a-w- c:\windows\system32\rdrmemptylst.exe
2012-03-14 01:18:16 129536 —-a-w- c:\windows\system32\rdpcorekmts.dll
2012-03-14 01:18:15 58880 —-a-w- c:\windows\system32\rdpwsx.dll
2012-03-14 01:18:12 826880 —-a-w- c:\windows\system32\rdpcore.dll
2012-03-14 01:18:12 24576 —-a-w- c:\windows\system32\drivers\tdtcp.sys
2012-03-14 01:18:12 183808 —-a-w- c:\windows\system32\drivers\rdpwd.sys
.
==================== Find3M ====================
.
2012-03-30 22:54:13 611520 —-a-w- c:\windows\system32\drivers\avc3.sys
2012-03-25 19:41:10 414368 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-03-01 17:51:58 447208 ——w- c:\windows\system32\drivers\avckf.sys
2012-02-03 15:51:28 63056 ——w- c:\windows\system32\drivers\bdsandbox.sys
2012-01-31 12:44:05 237072 ——w- c:\windows\system32\MpSigStub.exe
2012-01-04 08:58:41 442880 —-a-w- c:\windows\system32\ntshrui.dll
2012-01-03 16:06:59 221658 —-a-w- c:\programdata\1325606236.bdinstall.bin
.
============= FINISH: 0:33:10.95 ===============




.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-08-26.01)
.
Microsoft Windows 7 Starter
Boot Device: \Device\HarddiskVolume1
Install Date: 12/3/2010 3:52:06 PM
System Uptime: 3/31/2012 3:44:43 PM (9 hours ago)
.
Motherboard: Hewlett-Packard | | 148A
Processor: Intel® Atom™ CPU N450 @ 1.66GHz | CPU | 999/667mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 133 GiB total, 85.134 GiB free.
D: is FIXED (NTFS) - 15 GiB total, 2.167 GiB free.
E: is FIXED (FAT32) - 0 GiB total, 0.087 GiB free.
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP207: 3/25/2012 4:27:05 PM - Installed HP Support Assistant
RP208: 3/25/2012 4:33:42 PM - Windows Modules Installer
RP209: 3/25/2012 4:35:40 PM - Windows Modules Installer
RP211: 3/27/2012 11:31:31 AM - Microsoft Antimalware Checkpoint
RP212: 3/28/2012 7:44:51 PM - Windows Update
RP213: 3/31/2012 11:39:48 PM - Windows Update
RP214: 4/1/2012 12:18:12 AM - Installed Java™ 7 Update 3
.
==== Installed Programs ======================
.
Update for Microsoft Office 2007 (KB2508958)
Acrobat.com
Adobe AIR
Adobe Flash Player 10 Plugin
Adobe Flash Player 11 ActiveX
Adobe Reader 9.5.0 MUI
Adobe Shockwave Player
Amazon MP3 Downloader 1.0.10
Apple Application Support
Apple Mobile Device Support
Apple Software Update
ArcSoft WebCam Companion 3
Ask Toolbar
Atheros Driver Installation Program
Bejeweled 2 Deluxe
Bitdefender Internet Security 2012
Blasterball 3
Bonjour
Chuzzle Deluxe
Compatibility Pack for the 2007 Office system
CyberLink DVD Suite
D3DX10
Diner Dash 2 Restaurant Rescue
Dream Chronicles
ESU for Microsoft Windows 7
Faerie Solitaire
FATE
Feedback Tool
Gem Shop
Hewlett-Packard ACLM.NET v1.1.1.0
HiJackThis
HP CloudDrive
HP Customer Experience Enhancements
HP Game Console
HP Games
HP HomeBase
HP Navigator
HP Product Detection
HP Quick Launch
HP QuickSync
HP QuickWeb Installer
HP Setup
HP Software Framework
HP Update
HP User Guides 0197
HP Wireless Assistant
IDT Audio
Insaniquarium Deluxe
Intel AppUp(SM) center
Intel® Graphics Media Accelerator Driver
Intel® Rapid Storage Technology
iTunes
Java Auto Updater
Java™ 6 Update 24
Java™ 7 Update 3
Jewel Match 2
Jewel Quest II
Jewel Quest Solitaire
JoJo's Fashion Show
Junk Mail filter update
Mahjongg Artifacts
Malwarebytes Anti-Malware version 1.60.1.1000
Microsoft .NET Framework 4 Client Profile
Microsoft Antimalware
Microsoft Application Error Reporting
Microsoft Default Manager
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Excel MUI (English) 2007
Microsoft Office File Validation Add-In
Microsoft Office Home and Student 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office PowerPoint Viewer 2007 (English)
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Suite Activation Assistant
Microsoft Office Word MUI (English) 2007
Microsoft Security Client
Microsoft Security Essentials
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
Microsoft Works
Mozilla Firefox 11.0 (x86 en-US)
MSVCRT
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
ooVoo
Penguins!
Plants vs. Zombies
Polar Bowler
Power2Go
QuickTime
Realtek Ethernet Controller Driver For Windows 7
Realtek PCIE Card Reader
Recovery Manager
Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition
Skyhook Wireless XPS Service
Slingo Deluxe
Synaptics Pointing Device Driver
Times Reader
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office 2007 suites (KB2596651) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596789) 32-Bit Edition
Update for Microsoft Office Excel 2007 (KB2596596) 32-Bit Edition
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office OneNote 2007 Help (KB963670)
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
Virtual Villagers - The Secret City
Visual C++ 2008 x86 Runtime - (v9.0.30729)
Visual C++ 2008 x86 Runtime - v9.0.30729.01
Wedding Dash
Windows 7 Upgrade Advisor
Windows Live Communications Platform
Windows Live Essentials
Windows Live ID Sign-in Assistant
Windows Live Installer
Windows Live Mail
Windows Live Messenger
Windows Live MIME IFilter
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live PIMT Platform
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live Sync
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Live Writer
Windows Live Writer Resources
Zuma Deluxe
.
==== Event Viewer Messages From Past Week ========
.
4/1/2012 12:31:38 AM, Error: iaStor [9] - The device, \Device\Ide\iaStor0, did not respond within the timeout period.
4/1/2012 12:16:32 AM, Error: Schannel [36887] - The following fatal alert was received: 40.
3/31/2012 4:08:37 PM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection.
3/31/2012 4:08:14 PM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: bdselfpr trufos
3/31/2012 3:00:20 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the HPWMISVC service.
3/31/2012 10:41:34 AM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection.
3/31/2012 1:47:40 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the VSSERV service.
3/29/2012 6:45:17 PM, Error: Service Control Manager [7030] - The PEVSystemStart service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
3/29/2012 6:01:01 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the eventlog service.
3/29/2012 11:40:11 PM, Error: Service Control Manager [7001] - The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start.
3/29/2012 11:24:10 PM, Error: Service Control Manager [7001] - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error: The dependency service or group failed to start.
3/29/2012 11:24:09 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}
3/29/2012 11:24:09 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
3/29/2012 11:24:05 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
3/29/2012 11:23:57 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}
3/29/2012 11:23:54 PM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: avc3 bdfsfltr bdfwfpf bdselfpr BDVEDISK discache DVMIO MpFilter spldr trufos Wanarpv6
3/29/2012 11:05:15 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Netman service.
3/28/2012 7:42:47 PM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection.
3/28/2012 7:16:59 PM, Error: Service Control Manager [7043] - The Group Policy Client service did not shut down properly after receiving a preshutdown control.
3/28/2012 7:15:28 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Spooler service.
3/27/2012 8:31:14 PM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.123.403.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: Default URL Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.8202.0 Error code: 0x8007043c Error description: This service cannot be started in Safe Mode
3/27/2012 8:31:14 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334}
3/27/2012 8:29:02 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service VSS with arguments "" in order to run the server: {E579AB5F-1CC4-44B4-BED9-DE0991FF0623}
3/27/2012 6:33:10 PM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.123.403.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: Default URL Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.8202.0 Error code: 0x8007043c Error description: This service cannot be started in Safe Mode
3/27/2012 5:40:50 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the hpqwmiex service.
3/27/2012 4:40:05 PM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection.
3/27/2012 4:32:38 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the ShellHWDetection service.
3/26/2012 9:21:27 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Wlansvc service.
3/25/2012 9:57:34 AM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: On Access Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver skipped scanning items and is in pass through mode. This may be due to low resource conditions.
3/25/2012 5:38:12 PM, Error: Service Control Manager [7022] - The Windows Search service hung on starting.
3/25/2012 5:33:28 PM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection.
3/25/2012 3:40:16 PM, Error: Microsoft-Windows-WMPNSS-Service [14332] - Service 'WMPNetworkSvc' did not start correctly because CoCreateInstance(CLSID_UPnPDeviceFinder) encountered error '0x80070420'. Verify that the UPnPHost service is running and that the UPnPHost component of Windows is installed properly.
3/25/2012 12:50:24 PM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.123.308.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: Default URL Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.8202.0 Error code: 0x8007043c Error description: This service cannot be started in Safe Mode
3/25/2012 12:44:58 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service MSIServer with arguments "" in order to run the server: {000C101C-0000-0000-C000-000000000046}
3/25/2012 12:24:15 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the BFE service.
3/25/2012 12:23:17 PM, Error: Microsoft Antimalware [1119] - Microsoft Antimalware has encountered a critical error when taking action on malware or other potentially unwanted software. For more information please see the following: http://go.microsoft.com/fwlink/?linkid=370…atid=2147651799 Name: Exploit:Java/CVE-2011-3544.A ID: 2147651799 Severity: Severe Category: Exploit Path: containerfile:_C:\Users\Dad\AppData\Local\Temp\jar_cache4858169653164489856.tmp;containerfile:_C:\Windows\Temp\tmp00004045\tmp000165cb;containerfile:_C:\Windows\Temp\tmp00004045\tmp000165ce;containerfile:_C:\Windows\Temp\tmp00004045\tmp000165d9;containerfile:_C:\Windows\Temp\tmp00004045\tmp000165da;containerfile:_C:\Windows\Temp\tmp00004045\tmp000165fd;containerfile:_C:\Windows\Temp\tmp00004045\tmp0001660e;containerfile:_C:\Windows\Temp\tmp00004045\tmp00016619;containerfile:_C:\Windows\Temp\tmp00004045\tmp0001663f;containerfile:_C:\Windows\Temp\tmp00004045\tmp0001673d;containerfile:_C:\Windows\Temp\tmp00004045\tmp00016765;containerfile:_C:\Windows\Temp\tmp00004045\tmp000167d5;containerfile:_C:\Windows\Temp\tmp00004686\tmp0000019a;containerfile:_C:\Windows\Temp\tmp00004686\tmp0000019d;containerfile:_C:\Windows\Temp\tmp00004686\tmp0000019e;containerfile:_C:\Windows\Temp\tmp00004686\tmp0000019f;containerfile:_C:\Windows\Temp\tmp00004686\tmp000001a1;containerfile:_C:\Windows\Temp\tmp00004686\tmp000001a5;file:_C: Detection Origin: Local machine Detection Type: Concrete Detection Source: Real-Time Protection User: NT AUTHORITY\SYSTEM Process Name: C:\Program Files\Bitdefender\Bitdefender 2012\vsserv.exe Action: Remove Action Status: No additional actions required Error Code: 0x80070005 Error description: Access is denied. Signature Version: AV: 1.123.308.0, AS: 1.123.308.0, NIS: 11.0.0.0 Engine Version: AM: 1.1.8202.0, NIS: 2.0.8001.0
3/25/2012 12:21:44 PM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Microsoft Software Shadow Copy Provider service to connect.
3/25/2012 12:21:44 PM, Error: Service Control Manager [7000] - The Microsoft Software Shadow Copy Provider service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
3/25/2012 12:14:57 AM, Error: Microsoft Antimalware [1119] - Microsoft Antimalware has encountered a critical error when taking action on malware or other potentially unwanted software. For more information please see the following: http://go.microsoft.com/fwlink/?linkid=370…atid=2147651799 Name: Exploit:Java/CVE-2011-3544.A ID: 2147651799 Severity: Severe Category: Exploit Path: containerfile:_C:\Users\Dad\AppData\Local\Temp\jar_cache4858169653164489856.tmp;file:_C:\Users\Dad\AppData\Local\Temp\jar_cache4858169653164489856.tmp->Applet.class;file:_C:\Windows\Temp\tmp00004045\tmp00015a2e->Applet.class Detection Origin: Local machine Detection Type: Concrete Detection Source: Real-Time Protection User: NT AUTHORITY\SYSTEM Process Name: C:\Program Files\Bitdefender\Bitdefender 2012\vsserv.exe Action: Remove Action Status: No additional actions required Error Code: 0x80070005 Error description: Access is denied. Signature Version: AV: 1.123.308.0, AS: 1.123.308.0, NIS: 11.0.0.0 Engine Version: AM: 1.1.8202.0, NIS: 2.0.8001.0
3/25/2012 12:10:15 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the SysMain service.
3/25/2012 12:08:19 AM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: On Access Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver skipped scanning items and is in pass through mode. This may be due to low resource conditions.
3/25/2012 12:07:34 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the PlugPlay service.
3/25/2012 11:52:42 AM, Error: Microsoft Antimalware [1119] - Microsoft Antimalware has encountered a critical error when taking action on malware or other potentially unwanted software. For more information please see the following: http://go.microsoft.com/fwlink/?linkid=370…atid=2147651799 Name: Exploit:Java/CVE-2011-3544.A ID: 2147651799 Severity: Severe Category: Exploit Path: containerfile:_C:\Users\Dad\AppData\Local\Temp\jar_cache4858169653164489856.tmp;containerfile:_C:\Windows\Temp\tmp00004045\tmp000165cb;containerfile:_C:\Windows\Temp\tmp00004045\tmp000165ce;containerfile:_C:\Windows\Temp\tmp00004045\tmp000165d9;containerfile:_C:\Windows\Temp\tmp00004045\tmp000165da;containerfile:_C:\Windows\Temp\tmp00004045\tmp000165fd;containerfile:_C:\Windows\Temp\tmp00004045\tmp0001660e;containerfile:_C:\Windows\Temp\tmp00004045\tmp00016619;containerfile:_C:\Windows\Temp\tmp00004045\tmp0001663f;containerfile:_C:\Windows\Temp\tmp00004045\tmp0001673d;containerfile:_C:\Windows\Temp\tmp00004045\tmp00016765;containerfile:_C:\Windows\Temp\tmp00004045\tmp000167d5;containerfile:_C:\Windows\Temp\tmp00004686\tmp0000019a;containerfile:_C:\Windows\Temp\tmp00004686\tmp0000019d;containerfile:_C:\Windows\Temp\tmp00004686\tmp0000019e;containerfile:_C:\Windows\Temp\tmp00004686\tmp0000019f;containerfile:_C:\Windows\Temp\tmp00004686\tmp000001a1;containerfile:_C:\Windows\Temp\tmp00004686\tmp000001a5;file:_C: Detection Origin: Local machine Detection Type: Concrete Detection Source: Real-Time Protection User: NT AUTHORITY\SYSTEM Process Name: C:\Program Files\Bitdefender\Bitdefender 2012\vsserv.exe Action: Remove Action Status: No additional actions required Error Code: 0x80070005 Error description: Access is denied. Signature Version: AV: 1.123.308.0, AS: 1.123.308.0, NIS: 11.0.0.0 Engine Version: AM: 1.1.8202.0, NIS: 2.0.8001.0
3/25/2012 11:48:16 AM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Volume Shadow Copy service to connect.
3/25/2012 11:48:16 AM, Error: Service Control Manager [7000] - The Volume Shadow Copy service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
3/25/2012 11:25:28 AM, Error: Microsoft Antimalware [1119] - Microsoft Antimalware has encountered a critical error when taking action on malware or other potentially unwanted software. For more information please see the following: http://go.microsoft.com/fwlink/?linkid=370…atid=2147651799 Name: Exploit:Java/CVE-2011-3544.A ID: 2147651799 Severity: Severe Category: Exploit Path: containerfile:_C:\Users\Dad\AppData\Local\Temp\jar_cache4858169653164489856.tmp;containerfile:_C:\Windows\Temp\tmp00004045\tmp000165cb;containerfile:_C:\Windows\Temp\tmp00004045\tmp000165ce;containerfile:_C:\Windows\Temp\tmp00004045\tmp000165d9;containerfile:_C:\Windows\Temp\tmp00004045\tmp000165da;containerfile:_C:\Windows\Temp\tmp00004045\tmp000165fd;containerfile:_C:\Windows\Temp\tmp00004045\tmp0001660e;containerfile:_C:\Windows\Temp\tmp00004045\tmp00016619;containerfile:_C:\Windows\Temp\tmp00004045\tmp0001663f;containerfile:_C:\Windows\Temp\tmp00004045\tmp0001673d;containerfile:_C:\Windows\Temp\tmp00004045\tmp00016765;containerfile:_C:\Windows\Temp\tmp00004045\tmp000167d5;file:_C:\Users\Dad\AppData\Local\Temp\jar_cache4858169653164489856.tmp->Applet.class;file:_C:\Windows\Temp\tmp00004045\tmp00015a2e->Applet.class;file:_C:\Windows\Temp\tmp00004045\tmp00015a2f->Applet.class;file:_C:\Windows\Temp\tmp00004045\tmp00015a3c->Applet.class;file:_C:\Windows\Temp\tmp00004045\tmp00015a3d->Applet.class;file:_C:\Wind Detection Origin: Local machine Detection Type: Concrete Detection Source: Real-Time Protection User: NT AUTHORITY\SYSTEM Process Name: C:\Program Files\Bitdefender\Bitdefender 2012\vsserv.exe Action: Remove Action Status: No additional actions required Error Code: 0x80070005 Error description: Access is denied. Signature Version: AV: 1.123.308.0, AS: 1.123.308.0, NIS: 11.0.0.0 Engine Version: AM: 1.1.8202.0, NIS: 2.0.8001.0
3/25/2012 11:12:47 AM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: On Access Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver skipped scanning items and is in pass through mode. This may be due to low resource conditions.
3/25/2012 11:00:47 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1053" attempting to start the service swprv with arguments "" in order to run the server: {65EE1DBA-8FF4-4A58-AC1C-3470EE2F376A}
3/25/2012 11:00:01 AM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1053" attempting to start the service VSS with arguments "" in order to run the server: {0B5A2C52-3EB9-470A-96E2-6C6D4570E40F}
3/25/2012 10:42:09 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the TabletInputService service.
3/25/2012 10:06:34 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the HP Wireless Assistant Service service.
3/25/2012 1:21:17 PM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the HP Wireless Assistant Service service to connect.
3/25/2012 1:21:17 PM, Error: Service Control Manager [7000] - The HP Wireless Assistant Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
3/25/2012 1:18:22 PM, Error: Microsoft Antimalware [3002] - Microsoft Antimalware Real-Time Protection feature has encountered an error and failed. Feature: Behavior Monitoring Error Code: 0x80004005 Error description: Unspecified error Reason: The filter driver requires an up-to-date engine in order to function. You must install the latest definition updates in order to enable real-time protection.
.
==== End Of File ===========================
Hi,

Great job!! I noticed that you did not get Adobe Reader updated yet. Be sure to do that so that you do not have outdated software which create security vulnerabilities on your computer.
———-

Please do the following:

Hold down the Windows key and press R to open a run box
type the following text into the run box

appwiz.cpl

This will open your Programs And Features. A list of installed programs will populate

Remove the following programs if they are still there:

Update for Microsoft Office 2007 (KB2508958)
Ask Toolbar
Java™ 6 Update 24

———-

I notice that you have both BitDefender and Microsoft Security Essentials running at the same time. Having more than one antivirus program running at the same time can seriously degrade the performance of your system. Please uninstall either BitDefender or Microsoft Security Essentials (which ever you prefer) using either the provided uninstall feature that is part of the antivirus program or through Add/Remove Programs (for Vista and Win 7 users to go to Programs and Features in the Control Panel). As a rule of thumb one should run one firewall, one antivirus program in memory, and one antispyware utility in memory. It's fine to have other security tools available on an as-needed or on-demand basis, but when multiple tools simultaneously perform the same function, you're asking for trouble.
———-

Once you get that completed let me know how your system is running. :)
i did try downloading adobe, but it took forever and when i went into my programs it was there listed and it opened up, so i'm not sure what happened. I will do your instuctions and repost. thanks
hi, just a couple of things… One, I think I finally got adobe reader 10 to download. does it read adobe reader x when complete? also, i attached a screen shot of three things i notice. 1. attachment). Every time I login to a profile (every profile). attachment 1 pops up. 2. attachment). If i hit start. my chooses don't include the right hand side navigation or the task menu options. 3. attachment). When I open up my browser I also get about=blank as my homepage. I'm able to change it successfully, but it always changes back when i close out. 4. attachment). When I open firefox, i get two windows. a start up page and the other pages just keep connecting until i get this script error. if i hit cancel script i finally get the second window to come up. *question? will deleting fire fox clear up a lot of memory problems or do i need it? thanks!

Attachments:

Hi,

How about this….Go to the webpage here and use the Fix It button to try to repair this. When finished let me know if that fixed your problem. If not we can look further. :)
the fix it button would work, so i tried finding it manually. i located only one instance under startup off the start menu, however it wouldn't allow me to delete it. so i didn't get that far.
Hi,

Ok let's try to remove it through MSCONFIG.

  • Click Start, in the Start Search bar type Run and when it populates above click Run.
  • In the Open box, type msconfig, and then click OK.
  • Click the Startup tab.
  • Click to clear the check box beside any desktop entries in the Startup Item column that are listed as Common Startup in the Location column, and are also located in any of the following locations (as indicated in the Command column):
  • c:\Documents and Settings\All Users\Start Menu\Programs\Startup
  • c:\Documents and Settings\All Users\Start Menu\Programs
  • c:\Documents and Settings\All Users\Start Menu
  • Click Apply then OK to quit the System Configuration Utility.
  • Restart your computer and verify that the issue is resolved.
I'm having trouble finding documents and settings. windows 7 is set up differently. other than that I had nothing under startup via msconfig.
:smack: ugh….I apologize…try it this way.

  • Click Start, in the Start Search bar type Run and when it populates above click Run.
  • In the Open box, type msconfig, and then click OK.
  • Click the Startup tab.
  • Click to clear the check box beside any desktop entries in the Startup Item column that are listed as Common Startup in the Location column, and are also located in any of the following locations (as indicated in the Command column):
  • c:\ProgramData\All Users\Start Menu\Programs\Startup
  • c:\ProgramData\All Users\Start Menu\Programs
  • c:\ProgramData\All Users\Start Menu
  • Click Apply then OK to quit the System Configuration Utility.
  • Restart your computer and verify that the issue is resolved.
thank you jeff for all your help. the laptop seems to be working much better. so what was the main problem? my son goes on youtube and he uses this voodo (or something like that). also downloads a lot of them silly apps from facebook.
Hi,

Glad to hear it is running better. :) As for how it got infected it is hard to say but there were several malware related toolbars that had been downloaded and then having two antivirus programs running at once surely degraded the performance of the system.
———-

Providing there are no other malware related problems…

IT APPEARS THAT YOUR LOGS ARE NOW CLEAN :D SO LETS DO A COUPLE OF THINGS TO WRAP THIS UP!! :D

This infection appears to have been cleaned, but I can not give you any absolute guarantees. As a precaution, I would go ahead and change all of your passwords as this is especially important after an infection.
———-

The following will implement some cleanup procedures as well as reset System Restore points:

Click Start > Run and copy/paste the following text into the Run box as shown and click OK.
Combofix /Uninstall
(Note: There is a space between the ..X and the /U that needs to be there.)

[external image: Posted Image]
———-

Any of the logs that you created for use in the forums or remaining tools that have not yet been removed can be deleted so they aren't cluttering up your desktop.

Here are some tips to reduce the potential for spyware infection in the future:

1. Make your Internet Explorer more secure - This can be done by following these simple instructions:
  • From within Internet Explorer click on the Tools menu and then click on Options.
  • Click once on the Security tab
  • Click once on the Internet icon so it becomes highlighted.
  • Click once on the Custom Level button.
  • Change the Download signed ActiveX controls to Prompt
  • Change the Download unsigned ActiveX controls to Disable
  • Change the Initialize and script ActiveX controls not marked as safe to Disable
  • Change the Installation of desktop items to Prompt
  • Change the Launching programs and files in an IFRAME to Prompt
  • Change the Navigate sub-frames across different domains to Prompt
  • When all these settings have been made, click on the OK button.
  • If it prompts you as to whether or not you want to save the settings, press the Yes button.
  • Next press the Apply button and then the OK to exit the Internet Properties page.
2. Enable Protected Mode in Internet Explorer. This helps Windows Vista users stay more protected from attack by running Internet Explorer with restricted privileges as well as reducing the ability to write, alter or destroy data on your system or install malicious code. To make sure this is running follow these steps:
  • Open Internet Explorer
  • Click on Tools > Internet Options
  • Press Security tab
  • Select Internet zone then place check next to Enable Protected Mode if not already done
  • Do the same for Local Intranet, Trusted Sites and Restricted Sites and then press Apply
  • Restart Internet Explorer and in the bottom right corner of your screen you will see Protected Mode: On showing you it is enabled.
3. Use and update an anti-virus software - I can not overemphasize the need for you to use and update your anti-virus application on a regular basis. With the ever increasing number of new variants of malware arriving on the scene daily, you become very susceptible to an attack without updated protection.

4. Firewall
Using a third-party firewall will allow you to give/deny access for applications that want to go online. Without a firewall your computer is susceptible to being hacked and taken over. Simply using a firewall in its default configuration can lower your risk greatly. A tutorial on firewalls can be found here. **There are firewalls listed in this tutorial that could be downloaded and used but I would personally only recommend using one of the following two below:
Online Armor Free
Agnitum Outpost Firewall Free

5. Make sure you keep your Windows OS current. Windows XP users can visit Windows update regularly to download and install any critical updates and service packs. Windows Vista/7 users can open the Start menu > All Programs > Windows Update > Check for Updates (in left hand task pane) to update these systems. Without these you are leaving the back door open.

6. Consider a custom hosts file such as MVPS HOSTS. This custom hosts file effectively blocks a wide range of unwanted ads, banners, 3rd party Cookies, 3rd party page counters, web bugs, and many hijackers. For information on how to download and install, please read this tutorial by WinHelp2002
Note: Be sure to follow the instructions to disable the DNS Client service before installing a custom hosts file.

7. WOT (Web of Trust) As "Googling" is such an integral part of internet life, this free browser add on warns you about risky websites that try to scam visitors, deliver malware or send spam. It is especially helpful when browsing or searching in unfamiliar territory. WOT's color-coded icons show you ratings for 21 million websites, helping you avoid the dangerous sites. WOT has an add-on available for Firefox, Internet Explorer as well as Google Chrome.

8.Finally, I strongly recommend that you read TonyKlein's good advice So how did I get infected in the first place?

Please reply to this thread once more if you are satisfied so that we can mark the problem as resolved.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI