We’d like to remind Forumites to please avoid political debate on the Forum.

This is to keep it a safe and useful space for MoneySaving discussions. Threads that are – or become – political in nature may be removed in line with the Forum’s rules. Thank you for your understanding.

📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!
The Forum now has a brand new text editor, adding a bunch of handy features to use when creating posts. Read more in our how-to guide

Why is it not responding?! help!

Hi can anyone help me as ive been pullin my hair out for days!

So Mcafee scheduled scan weeks ago reports a trojan has been quarantined,( this is after a mcafee update which told me my computer needed to be restarted and as soon as I restarted thats when the problems started I think)
I go to quarantined items and it wont open to show anything in there, just looks like the page is loading but never loads, following this I scanned it again and the following weekly scans do not detect anything, in the meantime my computer is not going as quick as usual and it sounds as if something is working in the background but I cannot detect anything by looking in task manager (im not very good with computers but can spend hours trying to 'fix' things by following step by step instructions and at the same time not really now what im doing and why im supposed to be doing it!)

So the past 2 weeks or so it has become even more frequent when im surfing the net the page will freeze or not load and it will come up with 'Internet explorer is not responding' so I task manager it, close it down and restore my last session, its getting the point now where it is every 15 mins or so and getting very annoying!

So I downloaded malware bytes, it found a tracking cookie

downloaded Spybot search and destory - it said it found no harmful software on my computer - it wouldnt let me open the log tho

downloaded Ad Aware and it that was fine no probs

Then did the CC cleaner and restarted the computer, but still it sounds as if something is running in the background (you know when ur laptop makes that sound when u put a cd in well its sorta like that but abit quieter) will post scan logs could any soul take pity on me and see if anything is glaringly obvious that ive missed??!
«13

Comments

  • DanE2010
    DanE2010 Posts: 1,909 Forumite
    Part of the Furniture 1,000 Posts Combo Breaker
    Ad Adware Log

    Logfile created: 13/09/2010 18:28:54
    Ad-Aware version: 8.3.3
    Extended engine: 3
    Extended engine version: 3.1.2770
    User performing scan: Danielle
    *********************** Definitions database information ***********************
    Lavasoft definition file: 150.86
    Genotype definition file version: 2010/09/13 07:43:32
    Extended engine definition file: 6869.0
    ******************************** Scan results: *********************************
    Scan profile name: Full Scan (ID: full)
    Objects scanned: 219006
    Objects detected: 1

    Type Detected
    ==========================
    Processes.......: 0
    Registry entries: 0
    Hostfile entries: 0
    Files...........: 0
    Folders.........: 0
    LSPs............: 0
    Cookies.........: 1
    Browser hijacks.: 0
    MRU objects.....: 0

    Removed items:
    Description: *tacoda* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 409123 Family ID: 0
    Scan and cleaning complete: Finished correctly after 9141 seconds
    *********************************** Settings ***********************************
    Scan profile:
    ID: full, enabled:1, value: Full Scan
    ID: folderstoscan, enabled:1, value: C:\
    ID: useantivirus, enabled:1, value: true
    ID: sections, enabled:1
    ID: scancriticalareas, enabled:1, value: true
    ID: scanrunningapps, enabled:1, value: true
    ID: scanregistry, enabled:1, value: true
    ID: scanlsp, enabled:1, value: true
    ID: scanads, enabled:1, value: true
    ID: scanhostsfile, enabled:1, value: true
    ID: scanmru, enabled:1, value: true
    ID: scanbrowserhijacks, enabled:1, value: true
    ID: scantrackingcookies, enabled:1, value: true
    ID: closebrowsers, enabled:1, value: false
    ID: filescanningoptions, enabled:1
    ID: archives, enabled:1, value: true
    ID: onlyexecutables, enabled:1, value: false
    ID: skiplargerthan, enabled:1, value: 20480
    ID: scanrootkits, enabled:1, value: true
    ID: rootkitlevel, enabled:1, value: mild, domain: medium,mild,strict
    ID: usespywareheuristics, enabled:1, value: true
    Scan global:
    ID: global, enabled:1
    ID: addtocontextmenu, enabled:1, value: true
    ID: playsoundoninfection, enabled:1, value: false
    ID: soundfile, enabled:0, value: N/A
    Scheduled scan settings:
    <Empty>
    Update settings:
    ID: updates, enabled:1
    ID: launchthreatworksafterscan, enabled:1, value: off, domain: normal,off,silently
    ID: deffiles, enabled:1, value: downloadandinstall, domain: dontcheck,downloadandinstall
    ID: licenseandinfo, enabled:1, value: downloadandinstall, domain: dontcheck,downloadandinstall
    ID: schedules, enabled:1, value: true
    ID: updatedaily1, enabled:1, value: Daily 1
    ID: time, enabled:1, value: Mon Sep 13 18:09:00 2010
    ID: frequency, enabled:1, value: daily, domain: daily,monthly,once,systemstart,weekly
    ID: weekdays, enabled:1
    ID: monday, enabled:1, value: false
    ID: tuesday, enabled:1, value: false
    ID: wednesday, enabled:1, value: false
    ID: thursday, enabled:1, value: false
    ID: friday, enabled:1, value: false
    ID: saturday, enabled:1, value: false
    ID: sunday, enabled:1, value: false
    ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31
    ID: scanprofile, enabled:1, value:
    ID: auto_deal_with_infections, enabled:1, value: false
    ID: updatedaily2, enabled:1, value: Daily 2
    ID: time, enabled:1, value: Mon Sep 13 00:09:00 2010
    ID: frequency, enabled:1, value: daily, domain: daily,monthly,once,systemstart,weekly
    ID: weekdays, enabled:1
    ID: monday, enabled:1, value: false
    ID: tuesday, enabled:1, value: false
    ID: wednesday, enabled:1, value: false
    ID: thursday, enabled:1, value: false
    ID: friday, enabled:1, value: false
    ID: saturday, enabled:1, value: false
    ID: sunday, enabled:1, value: false
    ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31
    ID: scanprofile, enabled:1, value:
    ID: auto_deal_with_infections, enabled:1, value: false
    ID: updatedaily3, enabled:1, value: Daily 3
    ID: time, enabled:1, value: Mon Sep 13 06:09:00 2010
    ID: frequency, enabled:1, value: daily, domain: daily,monthly,once,systemstart,weekly
    ID: weekdays, enabled:1
    ID: monday, enabled:1, value: false
    ID: tuesday, enabled:1, value: false
    ID: wednesday, enabled:1, value: false
    ID: thursday, enabled:1, value: false
    ID: friday, enabled:1, value: false
    ID: saturday, enabled:1, value: false
    ID: sunday, enabled:1, value: false
    ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31
    ID: scanprofile, enabled:1, value:
    ID: auto_deal_with_infections, enabled:1, value: false
    ID: updatedaily4, enabled:1, value: Daily 4
    ID: time, enabled:1, value: Mon Sep 13 12:09:00 2010
    ID: frequency, enabled:1, value: daily, domain: daily,monthly,once,systemstart,weekly
    ID: weekdays, enabled:1
    ID: monday, enabled:1, value: false
    ID: tuesday, enabled:1, value: false
    ID: wednesday, enabled:1, value: false
    ID: thursday, enabled:1, value: false
    ID: friday, enabled:1, value: false
    ID: saturday, enabled:1, value: false
    ID: sunday, enabled:1, value: false
    ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31
    ID: scanprofile, enabled:1, value:
    ID: auto_deal_with_infections, enabled:1, value: false
    ID: updateweekly1, enabled:1, value: Weekly
    ID: time, enabled:1, value: Mon Sep 13 18:09:00 2010
    ID: frequency, enabled:1, value: weekly, domain: daily,monthly,once,systemstart,weekly
    ID: weekdays, enabled:1
    ID: monday, enabled:1, value: true
    ID: tuesday, enabled:1, value: false
    ID: wednesday, enabled:1, value: false
    ID: thursday, enabled:1, value: true
    ID: friday, enabled:1, value: false
    ID: saturday, enabled:1, value: false
    ID: sunday, enabled:1, value: false
    ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31
    ID: scanprofile, enabled:1, value:
    ID: auto_deal_with_infections, enabled:1, value: false
    Appearance settings:
    ID: appearance, enabled:1
    ID: skin, enabled:1, value: default.egl, reglocation: HKEY_LOCAL_MACHINE\SOFTWARE\Lavasoft\Ad-Aware\Resource
    ID: showtrayicon, enabled:1, value: true
    ID: autoentertainmentmode, enabled:1, value: true
    ID: guimode, enabled:1, value: mode_simple, domain: mode_advanced,mode_simple
    ID: language, enabled:1, value: en, reglocation: HKEY_LOCAL_MACHINE\SOFTWARE\Lavasoft\Ad-Aware\Language
    Realtime protection settings:
    ID: realtime, enabled:1
    ID: layers, enabled:1
    ID: useantivirus, enabled:1, value: true
    ID: usespywareheuristics, enabled:1, value: true
    ID: infomessages, enabled:1, value: onlyimportant, domain: display,dontnotify,onlyimportant
    ID: modules, enabled:1
    ID: processprotection, enabled:1, value: true
    ID: onaccessprotection, enabled:1, value: true
    ID: registryprotection, enabled:1, value: true
    ID: networkprotection, enabled:1, value: true

    ****************************** System information ******************************
    Computer name: DANIELLE-PC
    Processor name: Intel(R) Pentium(R) Dual CPU T2390 @ 1.86GHz
    Processor identifier: x86 Family 6 Model 15 Stepping 13
    Processor speed: ~1862MHZ
    Raw info: processorarchitecture 0, processortype 586, processorlevel 6, processor revision 3853, number of processors 2, processor features: [MMX,SSE,SSE2,SSE3]
    Physical memory available: 966930432 bytes
    Physical memory total: 2145067008 bytes
    Virtual memory available: 1823055872 bytes
    Virtual memory total: 2147352576 bytes
    Memory load: 54%
    Microsoft Windows Vista Home Premium Edition, 32-bit Service Pack 2 (build 6002)
    Windows startup mode:
    Running processes:
    PID: 568 name: C:\Windows\System32\smss.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 640 name: C:\Windows\System32\csrss.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 692 name: C:\Windows\System32\csrss.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 700 name: C:\Windows\System32\wininit.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 740 name: C:\Windows\System32\services.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 752 name: C:\Windows\System32\lsass.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 760 name: C:\Windows\System32\lsm.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 924 name: C:\Windows\System32\svchost.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 932 name: C:\Windows\System32\winlogon.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 1020 name: C:\Windows\System32\svchost.exe owner: NETWORK SERVICE domain: NT AUTHORITY
    PID: 1064 name: C:\Windows\System32\svchost.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 1168 name: C:\Windows\System32\svchost.exe owner: LOCAL SERVICE domain: NT AUTHORITY
    PID: 1236 name: C:\Windows\System32\svchost.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 1276 name: C:\Windows\System32\svchost.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 1380 name: C:\Windows\System32\svchost.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 1408 name: C:\Windows\System32\SLsvc.exe owner: NETWORK SERVICE domain: NT AUTHORITY
    PID: 1432 name: C:\Windows\System32\svchost.exe owner: LOCAL SERVICE domain: NT AUTHORITY
    PID: 1616 name: C:\Windows\System32\svchost.exe owner: NETWORK SERVICE domain: NT AUTHORITY
    PID: 1776 name: C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 1912 name: C:\Windows\System32\spoolsv.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 1940 name: C:\Windows\System32\svchost.exe owner: LOCAL SERVICE domain: NT AUTHORITY
    PID: 580 name: C:\Windows\System32\svchost.exe owner: LOCAL SERVICE domain: NT AUTHORITY
    PID: 1100 name: C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 1424 name: C:\Program Files\McAfee\SiteAdvisor\McSACore.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 1564 name: C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 1932 name: C:\Windows\System32\svchost.exe owner: NETWORK SERVICE domain: NT AUTHORITY
    PID: 420 name: C:\Windows\RTKAUDIOSERVICE.EXE owner: SYSTEM domain: NT AUTHORITY
    PID: 1124 name: C:\Windows\System32\stacsv.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 1580 name: C:\Windows\System32\rundll32.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 2120 name: C:\Windows\System32\svchost.exe owner: LOCAL SERVICE domain: NT AUTHORITY
    PID: 2148 name: C:\Program Files\ArcSoft\Magic-i Visual Effects\uCamMonitor.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 2180 name: C:\Program Files\Sony\VAIO Event Service\VESMgr.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 2212 name: C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 2240 name: C:\Windows\System32\svchost.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 2268 name: C:\Windows\System32\SearchIndexer.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 2320 name: C:\Windows\System32\drivers\XAudio.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 2388 name: C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 2460 name: C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 2548 name: C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 2588 name: C:\Program Files\Sony\VAIO Event Service\VESMgrSub.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 2628 name: C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 2688 name: C:\Windows\System32\taskeng.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 2808 name: C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 3124 name: C:\Windows\System32\WUDFHost.exe owner: LOCAL SERVICE domain: NT AUTHORITY
    PID: 3264 name: C:\Windows\System32\dwm.exe owner: Danielle domain: Danielle-PC
    PID: 3324 name: C:\Windows\explorer.exe owner: Danielle domain: Danielle-PC
    PID: 3460 name: C:\Windows\System32\taskeng.exe owner: Danielle domain: Danielle-PC
    PID: 3620 name: C:\Program Files\Windows Defender\MSASCui.exe owner: Danielle domain: Danielle-PC
    PID: 3680 name: C:\Windows\System32\rundll32.exe owner: Danielle domain: Danielle-PC
    PID: 3708 name: C:\Windows\RtHDVCpl.exe owner: Danielle domain: Danielle-PC
    PID: 3744 name: C:\Program Files\Synaptics\SynTP\SynTPEnh.exe owner: Danielle domain: Danielle-PC
    PID: 3796 name: C:\Windows\System32\taskeng.exe owner: Danielle domain: Danielle-PC
    PID: 3820 name: C:\Program Files\Adobe\Acrobat 8.0\Acrobat\acrotray.exe owner: Danielle domain: Danielle-PC
    PID: 3828 name: C:\Program Files\Sony\ISB Utility\ISBMgr.exe owner: Danielle domain: Danielle-PC
    PID: 3848 name: C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe owner: Danielle domain: Danielle-PC
    PID: 3880 name: C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe owner: Danielle domain: Danielle-PC
    PID: 3944 name: C:\Program Files\McAfee.com\Agent\mcagent.exe owner: Danielle domain: Danielle-PC
    PID: 3952 name: C:\Windows\V0270Mon.exe owner: Danielle domain: Danielle-PC
    PID: 3964 name: C:\Program Files\Common Files\Java\Java Update\jusched.exe owner: Danielle domain: Danielle-PC
    PID: 4008 name: C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe owner: Danielle domain: Danielle-PC
    PID: 4024 name: C:\Program Files\Windows Live\Messenger\msnmsgr.exe owner: Danielle domain: Danielle-PC
    PID: 4032 name: C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe owner: Danielle domain: Danielle-PC
    PID: 4048 name: C:\Windows\System32\wbem\unsecapp.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 4060 name: C:\Program Files\Lavasoft\Ad-Aware\Ad-Aware.exe owner: Danielle domain: Danielle-PC
    PID: 2136 name: C:\Program Files\Sony\VAIO Update 4\VAIOUpdt.exe owner: Danielle domain: Danielle-PC
    PID: 3468 name: C:\Windows\System32\wbem\WmiPrvSE.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 3724 name: C:\Windows\System32\mobsync.exe owner: Danielle domain: Danielle-PC
    PID: 2052 name: C:\Program Files\Sony\VAIO Power Management\SPMgr.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 4376 name: C:\Windows\System32\rundll32.exe owner: Danielle domain: Danielle-PC
    PID: 5676 name: C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 2044 name: C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe owner: Danielle domain: Danielle-PC
    PID: 5052 name: C:\Program Files\Windows Media Player\wmpnscfg.exe owner: Danielle domain: Danielle-PC
    PID: 2916 name: C:\Program Files\Windows Media Player\wmpnetwk.exe owner: NETWORK SERVICE domain: NT AUTHORITY
    PID: 4484 name: C:\Windows\System32\sdclt.exe owner: Danielle domain: Danielle-PC
    PID: 4828 name: C:\Windows\System32\svchost.exe owner: SYSTEM domain: NT AUTHORITY
    PID: 5308 name: C:\Windows\System32\taskeng.exe owner: LOCAL SERVICE domain: NT AUTHORITY
    Startup items:
    Name: {8C7461EF-2B13-11d2-BE35-3078302C2030}
    imagepath: Component Categories cache daemon
    Name: WebCheck
    imagepath: {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
    Name: Windows Defender
    imagepath: %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    Name: NvSvc
    imagepath: RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
    Name: NvCplDaemon
    imagepath: RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
    Name: NvMediaCenter
    imagepath: RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
    Name: RtHDVCpl
    imagepath: RtHDVCpl.exe
    Name: SynTPEnh
    imagepath: C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    Name: Acrobat Assistant 8.0
    imagepath: "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
    Name: ISBMgr.exe
    imagepath: "C:\Program Files\Sony\ISB Utility\ISBMgr.exe"
    Name: Google Desktop Search
    imagepath: "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
    Name: Google Quick Search Box
    imagepath: "C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe" /autorun
    Name: Adobe ARM
    imagepath: "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    Name: mcui_exe
    imagepath: "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
    Name: V0270Mon.exe
    imagepath: C:\Windows\V0270Mon.exe
    Name: SunJavaUpdateSched
    imagepath: "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
    Name:
    imagepath: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
    Name:
    imagepath: C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
    Bootexecute items:
    Name:
    imagepath: autocheck autochk *
    Running services:
    Name: AeLookupSvc
    displayname: Application Experience
    Name: AudioEndpointBuilder
    displayname: Windows Audio Endpoint Builder
    Name: Audiosrv
    displayname: Windows Audio
    Name: BFE
    displayname: Base Filtering Engine
    Name: BITS
    displayname: Background Intelligent Transfer Service
    Name: Browser
    displayname: Computer Browser
    Name: BthServ
    displayname: Bluetooth Support Service
    Name: CryptSvc
    displayname: Cryptographic Services
    Name: DcomLaunch
    displayname: DCOM Server Process Launcher
    Name: Dhcp
    displayname: DHCP Client
    Name: Dnscache
    displayname: DNS Client
    Name: DPS
    displayname: Diagnostic Policy Service
    Name: EapHost
    displayname: Extensible Authentication Protocol
    Name: EMDMgmt
    displayname: ReadyBoost
    Name: Eventlog
    displayname: Windows Event Log
    Name: EventSystem
    displayname: COM+ Event System
    Name: fdPHost
    displayname: Function Discovery Provider Host
    Name: FDResPub
    displayname: Function Discovery Resource Publication
    Name: FLEXnet Licensing Service
    displayname: FLEXnet Licensing Service
    Name: gpsvc
    displayname: Group Policy Client
    Name: hidserv
    displayname: Human Interface Device Access
    Name: IKEEXT
    displayname: IKE and AuthIP IPsec Keying Modules
    Name: iphlpsvc
    displayname: IP Helper
    Name: IviRegMgr
    displayname: IviRegMgr
    Name: KeyIso
    displayname: CNG Key Isolation
    Name: KtmRm
    displayname: KtmRm for Distributed Transaction Coordinator
    Name: LanmanServer
    displayname: Server
    Name: LanmanWorkstation
    displayname: Workstation
    Name: Lavasoft Ad-Aware Service
    displayname: Lavasoft Ad-Aware Service
    Name: lmhosts
    displayname: TCP/IP NetBIOS Helper
    Name: McAfee SiteAdvisor Service
    displayname: McAfee SiteAdvisor Service
    Name: McMPFSvc
    displayname: McAfee Personal Firewall Service
    Name: mcmscsvc
    displayname: McAfee Services
    Name: McNaiAnn
    displayname: McAfee VirusScan Announcer
    Name: McNASvc
    displayname: McAfee Network Agent
    Name: McProxy
    displayname: McAfee Proxy Service
    Name: McShield
    displayname: McShield
    Name: mfefire
    displayname: McAfee Firewall Core Service
    Name: mfevtp
    displayname: McAfee Validation Trust Protection Service
    Name: MMCSS
    displayname: Multimedia Class Scheduler
    Name: MpsSvc
    displayname: Windows Firewall
    Name: Netman
    displayname: Network Connections
    Name: netprofm
    displayname: Network List Service
    Name: NlaSvc
    displayname: Network Location Awareness
    Name: nsi
    displayname: Network Store Interface Service
    Name: PcaSvc
    displayname: Program Compatibility Assistant Service
    Name: PlugPlay
    displayname: Plug and Play
    Name: PolicyAgent
    displayname: IPsec Policy Agent
    Name: ProfSvc
    displayname: User Profile Service
    Name: RasMan
    displayname: Remote Access Connection Manager
    Name: RpcSs
    displayname: Remote Procedure Call (RPC)
    Name: RtkHDMIService
    displayname: RtkHDMIService
    Name: SamSs
    displayname: Security Accounts Manager
    Name: Schedule
    displayname: Task Scheduler
    Name: SDRSVC
    displayname: Windows Backup
    Name: seclogon
    displayname: Secondary Logon
    Name: SENS
    displayname: System Event Notification Service
    Name: ShellHWDetection
    displayname: Shell Hardware Detection
    Name: slsvc
    displayname: Software Licensing
    Name: Spooler
    displayname: Print Spooler
    Name: SSDPSRV
    displayname: SSDP Discovery
    Name: SstpSvc
    displayname: Secure Socket Tunneling Protocol Service
    Name: STacSV
    displayname: SigmaTel Audio Service
    Name: stisvc
    displayname: Windows Image Acquisition (WIA)
    Name: SysMain
    displayname: Superfetch
    Name: TabletInputService
    displayname: Tablet PC Input Service
    Name: TapiSrv
    displayname: Telephony
    Name: TermService
    displayname: Terminal Services
    Name: Themes
    displayname: Themes
    Name: TrkWks
    displayname: Distributed Link Tracking Client
    Name: uCamMonitor
    displayname: CamMonitor
    Name: upnphost
    displayname: UPnP Device Host
    Name: UxSms
    displayname: Desktop Window Manager Session Manager
    Name: VAIO Event Service
    displayname: VAIO Event Service
    Name: Vcsw
    displayname: VAIO Entertainment UPnP Client Adapter
    Name: VzCdbSvc
    displayname: VAIO Entertainment Database Service
    Name: VzFw
    displayname: VAIO Entertainment File Import Service
    Name: W32Time
    displayname: Windows Time
    Name: WdiSystemHost
    displayname: Diagnostic System Host
    Name: WebClient
    displayname: WebClient
    Name: WerSvc
    displayname: Windows Error Reporting Service
    Name: WinDefend
    displayname: Windows Defender
    Name: Winmgmt
    displayname: Windows Management Instrumentation
    Name: Wlansvc
    displayname: WLAN AutoConfig
    Name: WMPNetworkSvc
    displayname: Windows Media Player Network Sharing Service
    Name: WPDBusEnum
    displayname: Portable Device Enumerator Service
    Name: wscsvc
    displayname: Security Center
    Name: WSearch
    displayname: Windows Search
    Name: wuauserv
    displayname: Windows Update
    Name: wudfsvc
    displayname: Windows Driver Foundation - User-mode Driver Framework
    Name: XAudioService
    displayname: XAudioService
  • DanE2010
    DanE2010 Posts: 1,909 Forumite
    Part of the Furniture 1,000 Posts Combo Breaker
    Malwarebytes Log

    Malwarebytes' Anti-Malware 1.46
    www.malwarebytes.org
    Database version: 4426
    Windows 6.0.6002 Service Pack 2
    Internet Explorer 8.0.6001.18943
    13/09/2010 17:40:37
    mbam-log-2010-09-13 (17-40-37).txt
    Scan type: Quick scan
    Objects scanned: 140546
    Time elapsed: 8 minute(s), 40 second(s)
    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 0
    Registry Values Infected: 0
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 0
    Memory Processes Infected:
    (No malicious items detected)
    Memory Modules Infected:
    (No malicious items detected)
    Registry Keys Infected:
    (No malicious items detected)
    Registry Values Infected:
    (No malicious items detected)
    Registry Data Items Infected:
    (No malicious items detected)
    Folders Infected:
    (No malicious items detected)
    Files Infected:
    (No malicious items detected)
  • closed
    closed Posts: 10,886 Forumite
    edited 13 September 2010 at 11:32PM
    post a hijackthis log.

    all that security software you've installed will slow things down, as does mcafee. avast is much lighter.

    reset ie to defaults under tools, internet options, advanced.

    you need to update malwarebytes and do a full scan, fix anything found.
    !!
    > . !!!! ----> .
  • DanE2010
    DanE2010 Posts: 1,909 Forumite
    Part of the Furniture 1,000 Posts Combo Breaker
    ok ive not done a hijack this scan so will do that now and remove the security software that I have downloaded, I started off with just mcafee but it has grown since the trojan was found in order for me to check everything. Thank you

    Il get back with the results!
  • closed
    closed Posts: 10,886 Forumite
    anything in the mcafee log?
    !!
    > . !!!! ----> .
  • DanE2010
    DanE2010 Posts: 1,909 Forumite
    Part of the Furniture 1,000 Posts Combo Breaker
    Hijack this log

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 00:39:25, on 14/09/2010
    Platform: Windows Vista SP2 (WinNT 6.00.1906)
    MSIE: Internet Explorer v8.00 (8.00.6001.18943)
    Boot mode: Normal
    Running processes:
    C:\Windows\system32\Dwm.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\Explorer.EXE
    C:\Windows\system32\taskeng.exe
    C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe
    C:\Program Files\Sony\VAIO Update 4\VAIOUpdt.exe
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\Windows\System32\rundll32.exe
    C:\Windows\RtHDVCpl.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Windows\System32\rundll32.exe
    C:\Program Files\Adobe\Acrobat 8.0\Acrobat\acrotray.exe
    C:\Program Files\Sony\ISB Utility\ISBMgr.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe
    C:\Program Files\McAfee.com\Agent\mcagent.exe
    C:\Windows\V0270Mon.exe
    C:\Program Files\Common Files\Java\Java Update\jusched.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe
    C:\Windows\system32\Macromed\Flash\FlashUtil10i_ActiveX.exe
    C:\Windows\system32\sdclt.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Windows Live\Contacts\wlcomm.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Windows\system32\SearchFilterHost.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.club-vaio.com
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/webhp?rlz=1W1SNYW&ie=UTF-8&oe=UTF-8
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.club-vaio.com
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://uk.search.yahoo.com/search?fr=mcafee&p=%s
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
    O1 - Hosts: ::1 localhost
    O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
    O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20100513195018.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
    O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll
    O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
    O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\PROGRA~1\GOOGLE~1\BAE.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
    O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
    O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
    O4 - HKLM\..\Run: [ISBMgr.exe] "C:\Program Files\Sony\ISB Utility\ISBMgr.exe"
    O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
    O4 - HKLM\..\Run: [Google Quick Search Box] "C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe" /autorun
    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    O4 - HKLM\..\Run: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
    O4 - HKLM\..\Run: [V0270Mon.exe] C:\Windows\V0270Mon.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
    O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
    O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
    O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\Windows\system32\Adobe\Shockwave 11\SwHelper_1150600.exe -Update -1150600 -"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; GTB6.5; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)" -"http://www.nationalexpress.com/home.aspx"
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
    O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
    O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
    O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
    O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
    O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
    O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
    O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O13 - Gopher Prefix:
    O15 - Trusted Zone: http://*.mcafee.com
    O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
    O16 - DPF: {C1FDEE68-98D5-4F42-A4DD-D0BECF5077EB} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-31-0.cab
    O16 - DPF: {DAF7E6E6-D53A-439A-B28D-12271406B8A9} (RIM AxLoader) - http://mobileapps.blackberry.com/devicesoftware/AxLoader.cab
    O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} (Windows Live Hotmail Photo Upload Tool) - http://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/VistaMSNPUplden-gb.cab
    O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
    O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: Google Desktop Manager 5.9.1005.12335 (GoogleDesktopManager-051210-111108) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    O23 - Service: Google Update Service (gupdate1caa50d2431308b) (gupdate1caa50d2431308b) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
    O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
    O23 - Service: McAfee Personal Firewall Service (McMPFSvc) - McAfee, Inc. - C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
    O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
    O23 - Service: McAfee VirusScan Announcer (McNaiAnn) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
    O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
    O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan\mcods.exe
    O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
    O23 - Service: McShield - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe
    O23 - Service: McAfee Firewall Core Service (mfefire) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe
    O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe
    O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
    O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
    O23 - Service: RtkHDMIService - Realtek Semiconductor - C:\Windows\RtkAudioService.exe
    O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    O23 - Service: VAIO Media plus Content Importer (SOHCImp) - Sony Corporation - C:\Program Files\Sony\VAIO Media plus\SOHCImp.exe
    O23 - Service: VAIO Media plus Digital Media Server (SOHDms) - Sony Corporation - C:\Program Files\Sony\VAIO Media plus\SOHDms.exe
    O23 - Service: VAIO Media plus Device Searcher (SOHDs) - Sony Corporation - C:\Program Files\Sony\VAIO Media plus\SOHDs.exe
    O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
    O23 - Service: SigmaTel Audio Service (STacSV) - IDT, Inc. - C:\Windows\system32\stacsv.exe
    O23 - Service: CamMonitor (uCamMonitor) - ArcSoft, Inc. - C:\Program Files\ArcSoft\Magic-i Visual Effects\uCamMonitor.exe
    O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe
    O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
    O23 - Service: VAIO Content Metadata Intelligent Analyzing Manager (VcmIAlzMgr) - Sony Corporation - C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
    O23 - Service: VAIO Content Metadata XML Interface (VcmXmlIfHelper) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe
    O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
    O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
    O23 - Service: VAIO Entertainment File Import Service (VzFw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
    O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
    --
    End of file - 15844 bytes
  • DanE2010
    DanE2010 Posts: 1,909 Forumite
    Part of the Furniture 1,000 Posts Combo Breaker
    Malware bytes log after upadting it

    Malwarebytes' Anti-Malware 1.46
    www.malwarebytes.org
    Database version: 4610
    Windows 6.0.6002 Service Pack 2
    Internet Explorer 8.0.6001.18943
    14/09/2010 00:53:48
    mbam-log-2010-09-14 (00-53-48).txt
    Scan type: Quick scan
    Objects scanned: 143321
    Time elapsed: 9 minute(s), 33 second(s)
    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 0
    Registry Values Infected: 0
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 0
    Memory Processes Infected:
    (No malicious items detected)
    Memory Modules Infected:
    (No malicious items detected)
    Registry Keys Infected:
    (No malicious items detected)
    Registry Values Infected:
    (No malicious items detected)
    Registry Data Items Infected:
    (No malicious items detected)
    Folders Infected:
    (No malicious items detected)
    Files Infected:
    (No malicious items detected)
  • closed
    closed Posts: 10,886 Forumite
    You need to do full scan not quick scan
    !!
    > . !!!! ----> .
  • DanE2010
    DanE2010 Posts: 1,909 Forumite
    Part of the Furniture 1,000 Posts Combo Breaker
    on malware bytes? it says a quick scan is recommended and also says to just to a quick scan in the sticky on here??
  • The_Grandmaster
    The_Grandmaster Posts: 1,424 Forumite
    Part of the Furniture Combo Breaker
    edited 14 September 2010 at 12:15AM
    Run a full scan please in malwarebytes. Update definitions first: UPDATE tab, CHECK FOR UPDATES.

    Quick scan does catch most things but not always all.
This discussion has been closed.
Meet your Ambassadors

🚀 Getting Started

Hi new member!

Our Getting Started Guide will help you get the most out of the Forum

Categories

  • All Categories
  • 353.5K Banking & Borrowing
  • 254.1K Reduce Debt & Boost Income
  • 455K Spending & Discounts
  • 246.6K Work, Benefits & Business
  • 602.9K Mortgages, Homes & Bills
  • 178.1K Life & Family
  • 260.6K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 16K Discuss & Feedback
  • 37.7K Read-Only Boards

Is this how you want to be seen?

We see you are using a default avatar. It takes only a few seconds to pick a picture.