Results of screen317's Security Check version 0.99.59
Windows 7 Service Pack 1 x64 (UAC is disabled!)
Internet Explorer 8 Out of date! ``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
AVG Anti-Virus Free Edition 2012
Antivirus up to date! `````````Anti-malware/Other Utilities Check:`````````
Malwarebytes Anti-Malware version 1.70.0.1100
JavaFX 2.0.3
JavaFX 2.0.3 SDK
Java™ 6 Update 30
Java™ 7 Update 3
Java™ SE Development Kit 7 Update 3 Java version out of Date!
Adobe Flash Player 11.5.502.149 Flash Player out of Date!
Adobe Reader 9 Adobe Reader out of Date!
Mozilla Firefox 18.0.2 Firefox out of Date! ````````Process Check: objlist.exe by Laurent````````
AVG avgwdsvc.exe
AVG avgtray.exe `````````````````System Health check`````````````````
Total Fragmentation on Drive C: 0% ````````````````````End of Log``````````````````````
This is a problem with an update notifier from one of your Adobe products.
I’d like you to check your system files:
click on Start, All Programs. Accessories, then right click on Command Prompt and click on Run as administrator
type in sfc /scannow in the command window and press Enter - note the space between the c and the /
if any files require replacing SFC will replace them. You may be asked to insert your Windows 7 Disk for this process to continue. This can be done with a borrowed Windows 7 disk if you don't have one.
be patient because the scan may take some time.
allow the scan to run and when completed, reboot the system.
===================================
Run MiniToolBox
Note: Please make sure Firefox is closed before you run this.
Please download MiniToolBox, save it to your desktop and run it.
Place a checkmark in the following checkboxes:
List last 10 Event Viewer log
List Installed Programs
List Users, Partitions and Memory size.
List Minidump Files
Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.
I ran the Command Prompt, it said it found corruptions but was unable to correct some of them. It generated a log, I don't know if you want to see it, its very long.
And here is the mini log
MiniToolBox by Farbar Version:10-01-2013
Ran by [removed] (administrator) on 21-02-2013 at 18:30:19
Running from "C:\Users\Pete\Desktop"
Windows 7 Home Premium Service Pack 1 (X64)
Boot Mode: Normal
***************************************************************************
========================= Event log errors: ===============================
Application errors:
==================
Error: (02/21/2013 06:28:52 PM) (Source: Windows Search Service) (User: )
Description: 100x80071a91Failed to save Crawl Scope Manager changes:
Error: (02/21/2013 06:28:52 PM) (Source: Windows Search Service) (User: )
Description: 200x80071a91
Error: (02/21/2013 05:50:33 PM) (Source: Windows Search Service) (User: )
Description: 100x80071a91Failed to save Crawl Scope Manager changes:
Error: (02/21/2013 05:50:33 PM) (Source: Windows Search Service) (User: )
Description: 200x80071a91
Error: (02/21/2013 05:44:49 PM) (Source: Windows Search Service) (User: )
Description: 100x80071a91Failed to save Crawl Scope Manager changes:
Error: (02/21/2013 05:44:49 PM) (Source: Windows Search Service) (User: )
Description: 200x80071a91
Error: (02/21/2013 05:43:58 PM) (Source: Windows Search Service) (User: )
Description: 100x80071a91Failed to save Crawl Scope Manager changes:
Error: (02/21/2013 05:43:58 PM) (Source: Windows Search Service) (User: )
Description: 200x80071a91
Error: (02/21/2013 05:43:21 PM) (Source: MSSQL$MSSMLBIZ) (User: )
Description: One or more files do not match the primary file of the database. If you are attempting to attach a database, retry the operation with the correct files. If this is an existing database, the file may be corrupted and should be restored from a backup.
Error: (02/21/2013 05:43:21 PM) (Source: MSSQL$MSSMLBIZ) (User: )
Description: One or more files do not match the primary file of the database. If you are attempting to attach a database, retry the operation with the correct files. If this is an existing database, the file may be corrupted and should be restored from a backup.
System errors:
=============
Error: (02/21/2013 06:28:53 PM) (Source: Service Control Manager) (User: )
Description: The Windows Search service terminated unexpectedly. It has done this 4 time(s).
Error: (02/21/2013 06:28:53 PM) (Source: Service Control Manager) (User: )
Description: The Windows Search service terminated with the following error:
%%6801
Error: (02/21/2013 05:50:40 PM) (Source: Service Control Manager) (User: )
Description: The Windows Search service terminated unexpectedly. It has done this 3 time(s).
Error: (02/21/2013 05:50:40 PM) (Source: Service Control Manager) (User: )
Description: The Windows Search service terminated with the following error:
%%6801
Error: (02/21/2013 05:50:20 PM) (Source: Service Control Manager) (User: )
Description: The Windows Search service hung on starting.
Error: (02/21/2013 05:44:49 PM) (Source: Service Control Manager) (User: )
Description: The Windows Search service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.
Error: (02/21/2013 05:44:49 PM) (Source: Service Control Manager) (User: )
Description: The Windows Search service terminated with the following error:
%%6801
Error: (02/21/2013 05:43:59 PM) (Source: Service Control Manager) (User: )
Description: The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.
Error: (02/21/2013 05:43:59 PM) (Source: Service Control Manager) (User: )
Description: The Windows Search service terminated with the following error:
%%6801
Error: (02/21/2013 05:43:11 PM) (Source: atikmdag) (User: )
Description: Display is not active
Microsoft Office Sessions:
=========================
CodeIntegrity Errors:
===================================
Date: 2013-02-11 20:44:30.618
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFixx\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-02-11 20:44:30.218
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFixx\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2012-07-22 14:51:34.610
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2012-07-22 14:51:34.454
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2010-04-20 21:56:35.472
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\softnyx\GunboundWC\GameGuard\dump_wmimmc.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2010-04-20 21:56:35.472
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\softnyx\GunboundWC\GameGuard\dump_wmimmc.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2010-04-20 14:50:07.498
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\softnyx\GunboundWC\GameGuard\dump_wmimmc.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2010-04-20 14:50:07.466
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\softnyx\GunboundWC\GameGuard\dump_wmimmc.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2010-04-13 22:19:44.468
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\softnyx\GunboundWC\GameGuard\dump_wmimmc.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2010-04-13 22:19:44.437
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\softnyx\GunboundWC\GameGuard\dump_wmimmc.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
=========================== Installed Programs ============================
Update for Microsoft Office 2007 (KB2508958)
7-Zip 9.20
Active@ ISO Burner (Version: 2.1.0)
Adobe AIR (Version: 3.1.0.4880)
Adobe Flash Player 11 ActiveX (Version: 11.5.502.149)
Adobe Flash Player 11 Plugin (Version: 11.5.502.149)
Adobe Reader 9.5.2 (Version: 9.5.2)
Adobe Shockwave Player 11.6 (Version: 11.6.3.633)
Apple Application Support (Version: 2.1.7)
Apple Mobile Device Support (Version: 5.1.1.4)
Apple Software Update (Version: 2.1.3.127)
Audacity 2.0.2 (Version: 2.0.2)
Audible Download Manager (Version: 6.6.0.15)
AVG 2012 (Version: 12.0.2639)
AVG 2012 (Version: 12.1.2238)
AVG 2012 (Version: 2012.1.2238)
Bing Rewards Client Installer (Version: 16.0.345.0)
CCleaner (Version: 3.21)
Conexant HD Audio (Version: 4.98.8.61)
DAEMON Tools Pro (Version: 5.1.0.0333)
Dell Driver Download Manager (Version: 2.1.0.0)
DivX Setup (Version: 2.6.1.8)
Dota 2
Downloader
ESET Online Scanner v3
Facebook Video Calling 1.2.0.287 (Version: 1.2.287)
Free Opener (Version: 1.4)
HP Deskjet 3050 J610 series Basic Device Software (Version: 22.50.231.0)
HP Deskjet 3050 J610 series Help (Version: 140.0.63.63)
HP Deskjet 3050 J610 series Product Improvement Study (Version: 22.50.231.0)
HP Photo Creations (Version: 1.0.0.3781)
HP Update (Version: 5.002.006.003)
iTunes (Version: 10.6.1.7)
Java Auto Updater (Version: 2.1.6.0)
Java™ 6 Update 26 (64-bit) (Version: 6.0.260)
Java™ 6 Update 30 (Version: 6.0.300)
Java™ 7 Update 3 (Version: 7.0.30)
Java™ SE Development Kit 7 Update 3 (Version: 1.7.0.30)
JavaFX 2.0.3 (Version: 2.0.3)
JavaFX 2.0.3 SDK (Version: 2.0.3)
Juniper Networks Cache Cleaner 6.5.0 (Version: 6.5.0.15255)
Juniper Networks Setup Client (Version: 2.1.2.5973)
Juniper Networks Setup Client Activex Control (Version: 2.1.1.1)
K-Lite Codec Pack 7.0.0 (Standard) (Version: 7.0.0)
Malwarebytes Anti-Malware version 1.70.0.1100 (Version: 1.70.0.1100)
McAfee Security Scan Plus (Version: 3.0.318.3)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Office 2007 Primary Interop Assemblies (Version: 12.0.4518.1014)
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Excel MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Spanish) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Shared 64-bit MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.10411.0)
Microsoft SQL Server 2005
Microsoft SQL Server 2005 Express Edition (MSSMLBIZ) (Version: 9.3.4035.00)
Microsoft SQL Server Native Client (Version: 9.00.5000.00)
Microsoft SQL Server Setup Support Files (English) (Version: 9.00.5000.00)
Microsoft SQL Server VSS Writer (Version: 9.00.5000.00)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual Studio 2005 Tools for Office Runtime
Microsoft Visual Studio 2005 Tools for Office Runtime (Version: 8.0.60940.0)
Microsoft WSE 3.0 Runtime (Version: 3.0.5305.0)
Mozilla Firefox 18.0.2 (x86 en-US) (Version: 18.0.2)
Mozilla Maintenance Service (Version: 18.0.2)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
Norton Security Scan (Version: 3.6.1.11)
Pandora (Version: 2.0.7)
Portal 2
Premiumplay Codec-C (Version: 1.6.146.147)
QuickBooks (Version: 20.0.4002.807)
QuickBooks Premier: Accountant Edition 2010 (Version: 20.0.4002.807)
Rosetta Stone Version 3 (Version: 3.4.5.0)
SketchUp 8 (Version: 3.0.15158)
Skype™ 5.10 (Version: 5.10.116)
Steam (Version: 1.0.0.0)
SupportSoft Assisted Service (Version: 15)
swMSM (Version: 12.0.0.1)
TaxACT 2011 - 1040 Edition
TaxACT 2011 California
TaxACT 2012 - 1040 Edition
TaxACT 2012 California
TextPad 5 (Version: 5.4.2)
The Elder Scrolls IV: Oblivion
The Sims™ 3 (Version: 1.29.55)
TOSHIBA HDD Protection (Version: 2.2.0.1)
Touch and Launch
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office OneNote 2007 Help (KB963670)
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0)
VirtualCloneDrive
Visual Studio 2008 x64 Redistributables (Version: 10.0.0.2)
VoiceOver Kit (Version: 1.42.128.0)
WavePad Sound Editor
Windows Media Player Firefox Plugin (Version: 1.0.0.8)
WinZip 16.0 (Version: 16.0.9715)
Wondershare DVD Slideshow Builder Deluxe(Build [removed]) (Version: 6.1.11.66)
Zoo Tycoon: Complete Collection
========================= Memory info: ===================================
Percentage of memory in use: 40%
Total physical RAM: 3838.36 MB
Available physical RAM: 2272.34 MB
Total Pagefile: 7674.91 MB
Available Pagefile: 5920.96 MB
Total Virtual: 4095.88 MB
Available Virtual: 3974.39 MB
========================= Partitions: =====================================
1 Drive c: () (Fixed) (Total:372.51 GB) (Free:202.62 GB) NTFS
========================= Users: ========================================
User accounts for \\JOCELIN-ARRIK
Administrator Guest Pete
========================= Minidump Files ==================================
No minidump file found
**** End of log ****
With regard to your error message, AAM is the Adobe Application Manager.
AAM Update Notifier is installed with Adobe products but as yours are out-of-date, uninstalling and updating them should solve the “bad image” problem.
Update installed programs
Your version of Flash Player is out-of-date. You also have old versions of Adobe Reader and Java on your computer which are vulnerable to infections.
from the Start menu, select Control Panel.
in Large or Small icon view, click Programs and Features. If you're using Category view, under "Programs", click Uninstall a program.
select any version of Adobe Reader, Flash and Java, then click Uninstall.
Install the latest versions:
Visit ADOBE and download the latest version of Acrobat Reader.
Having the latest updates ensures there are no security vulnerabilities in your system.
Go here and download the latest version of Flash.
Java
NOTE – when you install Java, before clicking on Install, be sure to Uncheck “Install the Ask Toolbar and make Ask my default search provider”
IMPORTANT Please make sure you uncheck the box next to Remove found threats. Eset will detect anything that looks even slightly suspicious, which could include legitimate program files. If you do not uncheck the box, Eset will automatically remove all suspicious files which could leave some of your software inoperable.
Note: You can use either Internet Explorer or Mozilla FireFox for this scan. You will however need to disable your current installed Anti-Virus, how to do so can be read here.
Hold down Control and click on the following link to open ESET OnlineScan in a new window.
ESET OnlineScan 1. Click the Eset online Scanner button.
2. For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
• Click on esetinstaller.exe to download the ESET Smart Installer. Save it to your desktop.
• Double click on the Eset installer icon on your desktop.
3. Check Yes, I accept the Terms of Use
4. Click the Start button.
5. Accept any security warnings from your browser.
6. Check Scan archives
7. Push the Start button.
8. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
9. When the scan completes, push List of found threats
10. Push Export to Text file and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply. Note - if ESET doesn't find any threats, no report will be created.
11. Push the back button.
12. Push Finish
If a log has been produced post it in your next reply.
sorry, the scan finished but then my computer crashed before i was able to get the log. took forever so I am planning on letting it run again over night tonight. It did find some threats the first time tho two trojans.
dangg itt!! yeah my wife had exited the second scan after it was completed :(. I thought it saved it on the desktop. I was afraid it might have been from last time, so i started running it again hours ago :). Ill post tonight.
here you go Satchfan
C:\Qoobox\Quarantine\C\Windows\Installer\{86b67214-cacf-3544-f67a-920439385c0d}\U\00000004.@.vir Win64/Conedex.C trojan
C:\Qoobox\Quarantine\C\Windows\Installer\{86b67214-cacf-3544-f67a-920439385c0d}\U\80000064.@.vir Win64/Sirefef.AN trojan
sorry for the trouble
Your computer appears to be clean now and the two entries that showed up in the current scan have been dealt with by ComboFix so please follow these instructions to clean up which will get rid of those entries.
Uninstall Combofix
Follow these steps to uninstall Combofix
click START then RUN
now type Combofix /uninstall in the runbox and click OK.
select Yes when the Begin cleanup Process? prompt appears.
if you are prompted to reboot during the cleanup, select Yes.
the tool will delete itself once it finishes, if not delete it by yourself.
NOTE: If you receive a warning from your firewall or other security programs regarding OTL attempting to contact the internet, please allow it to do so. You can delete all other logs and programs we’ve used that are on your desktop. Just click on them and press Delete.
{fo[…]
Deleted : user_pref("extensions.crossriderapp435.435.plugins.plugin_16.code", "(function(b,a){function h(){var[…]
Deleted : user_pref("extensions.crossriderapp435.435.plugins.plugin_17.code", "var $$jquery;\n(function(l,n){f[…]
*************************
AdwCleaner[S1].txt - [7277 octets] - [20/02/2013 23:33:06]
########## EOF - C:\AdwCleaner[S1].txt - [7337 octets] ##########
Also, I took a screen shot of exactly what the error message says. I will attach the jpeg file 
, i don't know what that means! But it happens every time during bootup, and randomly whenever I try to open certain programs, like Adobe.
