What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Microsoft Runtime Error/Virus? [Solved]

22 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #16 last edited
MiniToolBox by Farbar Version: 23-07-2012 Ran by [removed] (administrator) on 08-08-2012 at 11:41:37 Microsoft Windows 7 Home Premium Service Pack 1 (X86) Boot Mode: Normal *************************************************************************** ========================= Flush DNS: =================================== Windows IP Configuration Successfully flushed the DNS Resolver Cache. ========================= IE Proxy Settings: ============================== Proxy is not enabled. No Proxy Server is set. "Reset IE Proxy Settings": IE Proxy Settings were reset. ========================= IP Configuration: ================================ Intel® 82562V-2 10/100 Network Connection = Local Area Connection (Connected) # ———————————- # IPv4 Configuration # ———————————- pushd interface ipv4 reset set global popd # End of IPv4 configuration Windows IP Configuration Host Name . . . . . . . . . . . . : LanandRanPC Primary Dns Suffix . . . . . . . : Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : nycap.rr.com Ethernet adapter Local Area Connection: Connection-specific DNS Suffix . : nycap.rr.com Description . . . . . . . . . . . : Intel® 82562V-2 10/100 Network Connection Physical Address. . . . . . . . . : 00-1D-09-84-2B-F7 DHCP Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : Yes Link-local IPv6 Address . . . . . : fe80::d45e:79f7:344:6b67%10(Preferred) IPv4 Address. . . . . . . . . . . : 192.168.1.100(Preferred) Subnet Mask . . . . . . . . . . . : 255.255.255.0 Lease Obtained. . . . . . . . . . : Wednesday, August 08, 2012 2:28:11 AM Lease Expires . . . . . . . . . . : Thursday, August 09, 2012 11:36:20 AM Default Gateway . . . . . . . . . : 192.168.1.1 DHCP Server . . . . . . . . . . . : 192.168.1.1 DHCPv6 IAID . . . . . . . . . . . : 234888457 DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-12-DB-F8-EE-00-1D-09-84-2B-F7 DNS Servers . . . . . . . . . . . : [removed] 209.18.47.62 NetBIOS over Tcpip. . . . . . . . : Enabled Tunnel adapter isatap.nycap.rr.com: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Microsoft ISATAP Adapter Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes Tunnel adapter Teredo Tunneling Pseudo-Interface: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes IPv6 Address. . . . . . . . . . . : 2001:0:4137:9e76:389a:2215:bc07:ad78(Preferred) Link-local IPv6 Address . . . . . : fe80::389a:2215:bc07:ad78%16(Preferred) Default Gateway . . . . . . . . . : :: NetBIOS over Tcpip. . . . . . . . : Disabled Server: dns-cac-lb-01.rr.com Address: [removed] Name: google.com Addresses: 2607:f8b0:4004:800::1009 [removed] [removed] [removed] [removed] 74.125.228.8 74.125.228.9 74.125.228.14 74.125.228.0 74.125.228.1 74.125.228.2 74.125.228.3 Pinging google.com [74.125.228.39] with 32 bytes of data: Reply from 74.125.228.39: bytes=32 time=29ms TTL=53 Reply from 74.125.228.39: bytes=32 time=28ms TTL=53 Ping statistics for 74.125.228.39: Packets: Sent = 2, Received = 2, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 28ms, Maximum = 29ms, Average = 28ms Server: dns-cac-lb-01.rr.com Address: 209.18.47.61 Name: yahoo.com Addresses: 209.191.122.70 72.30.38.140 98.139.183.24 Pinging yahoo.com [98.139.183.24] with 32 bytes of data: Reply from 98.139.183.24: bytes=32 time=406ms TTL=48 Reply from 98.139.183.24: bytes=32 time=612ms TTL=48 Ping statistics for 98.139.183.24: Packets: Sent = 2, Received = 2, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 406ms, Maximum = 612ms, Average = 509ms Server: dns-cac-lb-01.rr.com Address: 209.18.47.61 Name: bleepingcomputer.com Address: 208.43.87.2 Pinging bleepingcomputer.com [208.43.87.2] with 32 bytes of data: Reply from 208.43.87.2: Destination host unreachable. Reply from 208.43.87.2: Destination host unreachable. Ping statistics for 208.43.87.2: Packets: Sent = 2, Received = 2, Lost = 0 (0% loss), Pinging 127.0.0.1 with 32 bytes of data: Reply from 127.0.0.1: bytes=32 time<1ms TTL=128 Reply from 127.0.0.1: bytes=32 time<1ms TTL=128 Ping statistics for 127.0.0.1: Packets: Sent = 2, Received = 2, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 0ms, Maximum = 0ms, Average = 0ms =========================================================================== Interface List 10…00 1d 09 84 2b f7 ……Intel® 82562V-2 10/100 Network Connection 1………………………Software Loopback Interface 1 15…00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter 16…00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface =========================================================================== IPv4 Route Table =========================================================================== Active Routes: Network Destination Netmask Gateway Interface Metric 0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.100 20 127.0.0.0 255.0.0.0 On-link 127.0.0.1 306 127.0.0.1 255.255.255.255 On-link 127.0.0.1 306 127.255.255.255 255.255.255.255 On-link 127.0.0.1 306 192.168.1.0 255.255.255.0 On-link 192.168.1.100 276 192.168.1.100 255.255.255.255 On-link 192.168.1.100 276 192.168.1.255 255.255.255.255 On-link 192.168.1.100 276 224.0.0.0 240.0.0.0 On-link 127.0.0.1 306 224.0.0.0 240.0.0.0 On-link 192.168.1.100 276 255.255.255.255 255.255.255.255 On-link 127.0.0.1 306 255.255.255.255 255.255.255.255 On-link 192.168.1.100 276 =========================================================================== Persistent Routes: None IPv6 Route Table =========================================================================== Active Routes: If Metric Network Destination Gateway 16 58 ::/0 On-link 1 306 ::1/128 On-link 16 58 2001::/32 On-link 16 306 2001:0:4137:9e76:389a:2215:bc07:ad78/128 On-link 10 276 fe80::/64 On-link 16 306 fe80::/64 On-link 16 306 fe80::389a:2215:bc07:ad78/128 On-link 10 276 fe80::d45e:79f7:344:6b67/128 On-link 1 306 ff00::/8 On-link 16 306 ff00::/8 On-link 10 276 ff00::/8 On-link =========================================================================== Persistent Routes: None ========================= Event log errors: =============================== Application errors: ================== Error: (08/08/2012 02:00:46 AM) (Source: Application Error) (User: ) Description: Faulting application name: mfeicfcore.exe, version: 1.0.27.0, time stamp: 0x4fd7503b Faulting module name: mfeicfcore.exe, version: 1.0.27.0, time stamp: 0x4fd7503b Exception code: 0xc0000005 Fault offset: 0x00133407 Faulting process id: 0xbe0 Faulting application start time: 0xmfeicfcore.exe0 Faulting application path: mfeicfcore.exe1 Faulting module path: mfeicfcore.exe2 Report Id: mfeicfcore.exe3 Error: (08/08/2012 01:56:18 AM) (Source: Application Error) (User: ) Description: Faulting application name: mfp.exe, version: 2.3.27.0, time stamp: 0x4fd75124 Faulting module name: mfp.exe, version: 2.3.27.0, time stamp: 0x4fd75124 Exception code: 0x40000015 Fault offset: 0x0020cea1 Faulting process id: 0x4d0 Faulting application start time: 0xmfp.exe0 Faulting application path: mfp.exe1 Faulting module path: mfp.exe2 Report Id: mfp.exe3 Error: (08/08/2012 01:54:14 AM) (Source: Application Error) (User: ) Description: Faulting application name: mfp.exe, version: 2.3.27.0, time stamp: 0x4fd75124 Faulting module name: mfp.exe, version: 2.3.27.0, time stamp: 0x4fd75124 Exception code: 0x40000015 Fault offset: 0x0020cea1 Faulting process id: 0x111c Faulting application start time: 0xmfp.exe0 Faulting application path: mfp.exe1 Faulting module path: mfp.exe2 Report Id: mfp.exe3 Error: (08/08/2012 01:52:08 AM) (Source: Application Error) (User: ) Description: Faulting application name: mfp.exe, version: 2.3.27.0, time stamp: 0x4fd75124 Faulting module name: mfp.exe, version: 2.3.27.0, time stamp: 0x4fd75124 Exception code: 0x40000015 Fault offset: 0x0020cea1 Faulting process id: 0x1570 Faulting application start time: 0xmfp.exe0 Faulting application path: mfp.exe1 Faulting module path: mfp.exe2 Report Id: mfp.exe3 Error: (08/08/2012 01:50:01 AM) (Source: Application Error) (User: ) Description: Faulting application name: mfp.exe, version: 2.3.27.0, time stamp: 0x4fd75124 Faulting module name: mfp.exe, version: 2.3.27.0, time stamp: 0x4fd75124 Exception code: 0x40000015 Fault offset: 0x0020cea1 Faulting process id: 0x510 Faulting application start time: 0xmfp.exe0 Faulting application path: mfp.exe1 Faulting module path: mfp.exe2 Report Id: mfp.exe3 Error: (08/08/2012 01:46:57 AM) (Source: Application Error) (User: ) Description: Faulting application name: mfp.exe, version: 2.3.27.0, time stamp: 0x4fd75124 Faulting module name: mfp.exe, version: 2.3.27.0, time stamp: 0x4fd75124 Exception code: 0x40000015 Fault offset: 0x0020cea1 Faulting process id: 0x82c Faulting application start time: 0xmfp.exe0 Faulting application path: mfp.exe1 Faulting module path: mfp.exe2 Report Id: mfp.exe3 Error: (08/08/2012 01:45:30 AM) (Source: Application Error) (User: ) Description: Faulting application name: SEConf.exe, version: 2.3.27.0, time stamp: 0x4fd750a9 Faulting module name: SEConf.exe, version: 2.3.27.0, time stamp: 0x4fd750a9 Exception code: 0xc0000005 Fault offset: 0x000feedc Faulting process id: 0x10a8 Faulting application start time: 0xSEConf.exe0 Faulting application path: SEConf.exe1 Faulting module path: SEConf.exe2 Report Id: SEConf.exe3 Error: (08/08/2012 01:44:53 AM) (Source: Application Error) (User: ) Description: Faulting application name: mfp.exe, version: 2.3.27.0, time stamp: 0x4fd75124 Faulting module name: mfp.exe, version: 2.3.27.0, time stamp: 0x4fd75124 Exception code: 0x40000015 Fault offset: 0x0020cea1 Faulting process id: 0xaa0 Faulting application start time: 0xmfp.exe0 Faulting application path: mfp.exe1 Faulting module path: mfp.exe2 Report Id: mfp.exe3 Error: (08/08/2012 01:44:39 AM) (Source: Application Error) (User: ) Description: Faulting application name: mfp.exe, version: 2.3.27.0, time stamp: 0x4fd75124 Faulting module name: btmmhook.dll, version: 6.2.0.5800, time stamp: 0x48f5250e Exception code: 0x40000015 Fault offset: 0x0000eec3 Faulting process id: 0x154c Faulting application start time: 0xmfp.exe0 Faulting application path: mfp.exe1 Faulting module path: mfp.exe2 Report Id: mfp.exe3 Error: (08/08/2012 01:42:33 AM) (Source: Application Error) (User: ) Description: Faulting application name: mfp.exe, version: 2.3.27.0, time stamp: 0x4fd75124 Faulting module name: btmmhook.dll, version: 6.2.0.5800, time stamp: 0x48f5250e Exception code: 0x40000015 Fault offset: 0x0000eec3 Faulting process id: 0x164c Faulting application start time: 0xmfp.exe0 Faulting application path: mfp.exe1 Faulting module path: mfp.exe2 Report Id: mfp.exe3 System errors: ============= Error: (08/08/2012 02:28:27 AM) (Source: Service Control Manager) (User: ) Description: The following boot-start or system-start driver(s) failed to load: SASKUTIL Error: (08/08/2012 02:28:12 AM) (Source: Service Control Manager) (User: ) Description: The lxddCATSCustConnectService service failed to start due to the following error: %%1053 Error: (08/08/2012 02:28:12 AM) (Source: Service Control Manager) (User: ) Description: A timeout was reached (30000 milliseconds) while waiting for the lxddCATSCustConnectService service to connect. Error: (08/08/2012 02:25:01 AM) (Source: Service Control Manager) (User: ) Description: The Computer Browser service depends on the Server service which failed to start because of the following error: %%1068 Error: (08/08/2012 02:25:01 AM) (Source: Service Control Manager) (User: ) Description: The Computer Browser service depends on the Server service which failed to start because of the following error: %%1068 Error: (08/08/2012 02:25:01 AM) (Source: Service Control Manager) (User: ) Description: The Computer Browser service depends on the Server service which failed to start because of the following error: %%1068 Error: (08/08/2012 02:22:53 AM) (Source: Service Control Manager) (User: ) Description: The Computer Browser service depends on the Server service which failed to start because of the following error: %%1068 Error: (08/08/2012 02:22:53 AM) (Source: Service Control Manager) (User: ) Description: The Computer Browser service depends on the Server service which failed to start because of the following error: %%1068 Error: (08/08/2012 02:22:53 AM) (Source: Service Control Manager) (User: ) Description: The Computer Browser service depends on the Server service which failed to start because of the following error: %%1068 Error: (08/08/2012 02:19:57 AM) (Source: Service Control Manager) (User: ) Description: The Computer Browser service depends on the Server service which failed to start because of the following error: %%1068 Microsoft Office Sessions: ========================= Error: (08/08/2012 02:00:46 AM) (Source: Application Error)(User: ) Description: mfeicfcore.exe1.0.27.04fd7503bmfeicfcore.exe1.0.27.04fd7503bc000000500133407be00 1cd752987e3ec03C:\Program Files\Internet Content Filter\mfeicfcore.exeC:\Program Files\Internet Content Filter\mfeicfcore.exe64a2a4e0-e11e-11e1-933b-001d09842bf7 Error: (08/08/2012 01:56:18 AM) (Source: Application Error)(User: ) Description: mfp.exe2.3.27.04fd75124mfp.exe2.3.27.04fd75124400000150020cea14d001cd752a86b40e0 8C:\Program Files\Internet Content Filter\mfp.exeC:\Program Files\Internet Content Filter\mfp.exec4eac227-e11d-11e1-933b-001d09842bf7 Error: (08/08/2012 01:54:14 AM) (Source: Application Error)(User: ) Description: mfp.exe2.3.27.04fd75124mfp.exe2.3.27.04fd75124400000150020cea1111c01cd752a3c16b4 ecC:\Program Files\Internet Content Filter\mfp.exeC:\Program Files\Internet Content Filter\mfp.exe7b032724-e11d-11e1-933b-001d09842bf7 Error: (08/08/2012 01:52:08 AM) (Source: Application Error)(User: ) Description: mfp.exe2.3.27.04fd75124mfp.exe2.3.27.04fd75124400000150020cea1157001cd7529f1ef1b 60C:\Program Files\Internet Content Filter\mfp.exeC:\Program Files\Internet Content Filter\mfp.exe2fe73ef4-e11d-11e1-933b-001d09842bf7 Error: (08/08/2012 01:50:01 AM) (Source: Application Error)(User: ) Description: mfp.exe2.3.27.04fd75124mfp.exe2.3.27.04fd75124400000150020cea151001cd75299372647 bC:\Program Files\Internet Content Filter\mfp.exeC:\Program Files\Internet Content Filter\mfp.exee48ac371-e11c-11e1-933b-001d09842bf7 Error: (08/08/2012 01:46:57 AM) (Source: Application Error)(User: ) Description: mfp.exe2.3.27.04fd75124mfp.exe2.3.27.04fd75124400000150020cea182c01cd752939144cb 5C:\Program Files\Internet Content Filter\mfp.exeC:\Program Files\Internet Content Filter\mfp.exe76d50bca-e11c-11e1-aa81-001d09842bf7 Error: (08/08/2012 01:45:30 AM) (Source: Application Error)(User: ) Description: SEConf.exe2.3.27.04fd750a9SEConf.exe2.3.27.04fd750a9c0000005000feedc10a801cd7528 fc3a1f12C:\Program Files\Internet Content Filter\SEConf.exeC:\Program Files\Internet Content Filter\SEConf.exe42e074c0-e11c-11e1-aa81-001d09842bf7 Error: (08/08/2012 01:44:53 AM) (Source: Application Error)(User: ) Description: mfp.exe2.3.27.04fd75124mfp.exe2.3.27.04fd75124400000150020cea1aa001cd7528ef586da 1C:\Program Files\Internet Content Filter\mfp.exeC:\Program Files\Internet Content Filter\mfp.exe2d102be4-e11c-11e1-aa81-001d09842bf7 Error: (08/08/2012 01:44:39 AM) (Source: Application Error)(User: ) Description: mfp.exe2.3.27.04fd75124btmmhook.dll6.2.0.580048f5250e400000150000eec3154c01cd752 8e4f9cdfcC:\Program Files\Internet Content Filter\mfp.exeC:\Windows\system32\btmmhook.dll244e88cd-e11c-11e1-aa81-001d09842bf7 Error: (08/08/2012 01:42:33 AM) (Source: Application Error)(User: ) Description: mfp.exe2.3.27.04fd75124btmmhook.dll6.2.0.580048f5250e400000150000eec3164c01cd752 8992f73dbC:\Program Files\Internet Content Filter\mfp.exeC:\Windows\system32\btmmhook.dlld92c01cb-e11b-11e1-aa81-001d09842bf7 ========================= Memory info: =================================== Percentage of memory in use: 40% Total physical RAM: 3326.18 MB Available physical RAM: 1995.1 MB Total Pagefile: 6650.64 MB Available Pagefile: 4697.08 MB Total Virtual: 2047.88 MB Available Virtual: 1927.56 MB ========================= Partitions: ===================================== 1 Drive c: () (Fixed) (Total:294.73 GB) (Free:130.76 GB) NTFS 2 Drive d: (BF2DELUXE CD 1) (CDROM) (Total:0.66 GB) (Free:0 GB) CDFS ========================= Users: ======================================== User accounts for \\LANANDRANPC Administrator Guest Lee Randy **** End of log **** I did this before restarting so I knew I'd have internet. I should also mention I have deleted the McAfee Family Protection so that should no longer be an issue.
Post #17
I'm not seeing the issue.

McAfee was throwing alot of errors. Do things work better now that you've removed McAfee Family Protection?

I don't know what more to do for you. We have reached the limits of my expertise. I believe that malware is not an issue so you will be better served by the Tech Team. I suggest that you post in the Browsers, Internet, and email forum. When you post there, please include a link to this thread so that they can see the information posted here.

Meanwhile, we need to clean up.

Time for some housekeeping
  • Click START then RUN
  • Now type ComboFix /Uninstall in the runbox and click OK.
  • Note the space between the X and the U, it needs to be there.
  • [external image: Posted Image]
The above procedure will:
  • Implement some cleanup procedures.
  • Reset System Restore.

  • Double click on OTL to run it.
  • Click on CleanUp!
  • When done, you will be prompted to restart your computer. Please restart your computer.

Please re-enable any security that was disabled.


The following is my standard advice for the future. Use what you can and pat yourself on the back for what you're already doing.

Please take time to read Preventing Malware - Tools and Practices for Safe Computing. Very important information for your consideration is contained therein.

I would also suggest you read this:
So how did I get infected in the first place?
by Tony Klein


Also: "How to prevent malware"
by miekiemoes

Please respond back that you understand the above and let me know if you have any questions. Otherwise, this thread will be closed Resolved at least as far as malware is concerned. :thumbup:
Post #18
I believe you have fixed my issue. THANK YOU! I restarted after doing the above and my internet worked right off the bat. Now I've noticed that my explorer.exe is running my cpu at a constant 25% until I stop it and re-engage it. I read online that it could be something to do with an invalid .flv file. I'll try my hand at locating the bugger and hopefully get it squared away. Again, I cannot thank you enough.
Post #19
If you've been having internet troubles… the "excessive" current usage could be due to updates. I'd not worry about it for a day or two and see if it continues.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI