Is this a nasty???

shown73

Ran my periodic Spybot scans today, and amongst other bits and pieces, it found something called "wajam29.zip." Can't seem to get rid of it, either with spybot or Avira. Does anyone know if it is something to worry about, and if so how to get rid of it? I tried googling, but found nothing of any use. Thanks in advance...

waddler_8

Wajam related? http://forums.spybot.info/showthread.php?t=67653

Nothing to worry about particularly.

To get rid, run spybot in admin mode:
http://www.safer-networking.org/faq/how-can-i-get-administrator-rights-under-windows-vista-or-windows-7/

shown73

I always do run Spybot as administrator, but it still wouldn't get rid of this. Whilst trying, Avira popped up with an alert, but also didn't really seem to deal with it.

waddler_8

Download DDS from the link below and save it to your desktop:

Link

After you've downloaded it and saved it to your desktop:

• Double click DDS to run it.
• When it's finished, DDS will open two logs:

1. DDS.txt
2. Attach.txt

Save both reports to your desktop.

Copy & paste the contents of just DDS.txt for now and post it here (you may need to split the log over separate posts)

shown73

DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 9.0.8112.16457
Run by 000000 at 20:35:44 on 2013-01-23
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.44.1033.18.3325.1689 [GMT 0:00]
.
AV: Avira Desktop *Enabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Enabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\nvvsvc.exe
C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\IObit\Advanced SystemCare 4\ASCService.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Windows\system32\bgsvcgen.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\system32\IProsetMonitor.exe
C:\Program Files\Macrium\Reflect\ReflectService.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
C:\Program Files\Web Assistant\ExtensionUpdaterService.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\Windows\ehome\ehsched.exe
C:\Windows\ehome\ehRecvr.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Panicware\Pop-Up Stopper Free Edition\PSFree.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\IncrediMail\bin\IncMail.exe
C:\Program Files\IncrediMail\Bin\ImApp.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil32_11_5_502_110_ActiveX.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.virginmedia.com/
uSearch Bar = Preserve
mStart Page = hxxp://home.!!!!!!!!!!!!
uURLSearchHooks: IncrediMail MediaBar 2 Toolbar: {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - c:\program files\incredimail_mediabar_2\prxtbIncr.dll
mURLSearchHooks: IncrediMail MediaBar 2 Toolbar: {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - c:\program files\incredimail_mediabar_2\prxtbIncr.dll
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Search Helper: {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - c:\program files\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll
BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
BHO: Google Toolbar Notifier BHO: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - c:\program files\google\googletoolbarnotifier\5.4.4525.1752\swg.dll
BHO: IncrediMail MediaBar 2 Toolbar: {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - c:\program files\incredimail_mediabar_2\prxtbIncr.dll
BHO: {F081D70D-477F-11D9-95EC-004095356F63} - <orphaned>
TB: IncrediMail MediaBar 2 Toolbar: {D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0} - c:\program files\incredimail_mediabar_2\prxtbIncr.dll
TB: IncrediMail MediaBar 2 Toolbar: {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - c:\program files\incredimail_mediabar_2\prxtbIncr.dll
uRun: [PopUpStopperFreeEdition] "c:\progra~1\panicw~1\pop-up~1\PSFree.exe"
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
uRun: [ISUSPM Startup] c:\progra~1\common~1\instal~1\update~1\isuspm.exe -startup
uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
mRun: [Windows Defender] c:\program files\windows defender\MSASCui.exe -hide
mRun: [avgnt] "c:\program files\avira\antivir desktop\avgnt.exe" /min
mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mPolicies-Explorer: BindDirectlyToPropertySetStorage = dword:0
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
.
INFO: HKCU has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
TCP: NameServer = 192.168.2.1
TCP: Interfaces\{49C1D4DE-190F-47F1-9290-08A76F4B7755} : DHCPNameServer = 194.168.4.100 194.168.8.100
TCP: Interfaces\{C19088BB-3551-4615-852C-4DEF72420F59} : DHCPNameServer = 192.168.2.1
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - c:\program files\windows live\photo gallery\AlbumDownloadProtocolHandler.dll
LSA: Security Packages = kerberos msv1_0 schannel wdigest tspkg
.
============= SERVICES / DRIVERS ===============
.
R0 pssnap;Paramount Software Snapshot Filter;c:\windows\system32\drivers\pssnap.sys [2011-1-17 16024]
R0 SmartDefragDriver;SmartDefragDriver;c:\windows\system32\drivers\SmartDefragDriver.sys [2012-1-8 15672]
R1 avkmgr;avkmgr;c:\windows\system32\drivers\avkmgr.sys [2012-4-5 36000]
R1 RapportBuka;RapportBuka;c:\windows\system32\drivers\RapportBuka.sys [2010-3-3 390528]
R1 RapportCerberus_43926;RapportCerberus_43926;c:\programdata\trusteer\rapport\store\exts\rapportcerberus\43926\RapportCerberus32_43926.sys [2012-10-23 272216]
R1 RapportEI;RapportEI;c:\program files\trusteer\rapport\bin\RapportEI.sys [2012-7-29 71480]
R1 RapportPG;RapportPG;c:\program files\trusteer\rapport\bin\RapportPG.sys [2012-7-29 166840]
R2 AdvancedSystemCareService;Advanced SystemCare Service;c:\program files\iobit\advanced systemcare 4\ASCService.exe [2011-7-11 353168]
R2 AntiVirSchedulerService;Avira Scheduler;c:\program files\avira\antivir desktop\sched.exe [2012-4-5 86224]
R2 AntiVirService;Avira Realtime Protection;c:\program files\avira\antivir desktop\avguard.exe [2012-4-5 110032]
R2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2012-4-5 83392]
R2 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-11-21 21504]
R2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service;c:\windows\system32\IPROSetMonitor.exe [2010-12-11 110752]
R2 RapportMgmtService;Rapport Management Service;c:\program files\trusteer\rapport\bin\RapportMgmtService.exe [2012-7-29 976728]
R2 ReflectService;Macrium Reflect Image Mounting Service;c:\program files\macrium\reflect\ReflectService.exe [2011-1-17 220824]
R2 SBSDWSCService;SBSD Security Center Service;c:\program files\spybot - search & destroy\SDWinSec.exe [2008-11-17 1153368]
R2 TomTomHOMEService;TomTomHOMEService;c:\program files\tomtom home 2\TomTomHOMEService.exe [2012-8-28 92632]
R2 UMVPFSrv;UMVPFSrv;c:\program files\common files\logishrd\lvmvfm\UMVPFSrv.exe [2011-8-19 450848]
R2 Web Assistant Updater;Web Assistant Updater;c:\program files\web assistant\ExtensionUpdaterService.exe [2012-5-30 185856]
R3 Ph3xIB32;Philips 713x Inbox PCI TV Card;c:\windows\system32\drivers\Ph3xIB32.sys [2007-4-3 1131136]
R3 RapportIaso;RapportIaso;c:\programdata\trusteer\rapport\store\exts\rapportms\39624\RapportIaso.sys [2012-5-28 21520]
R3 X10Hid;X10 Hid Device;c:\windows\system32\drivers\x10hid.sys [2008-6-23 13976]
S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2012-7-13 160944]
S2 WajamUpdater;WajamUpdater;"c:\program files\wajam\updater\wajamupdater.exe" --> c:\program files\wajam\updater\WajamUpdater.exe [?]
S3 androidusb;ADB Interface Driver;c:\windows\system32\drivers\androidusb.sys [2010-10-18 32408]
S3 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr.sys [2011-4-13 39272]
S3 fsssvc;Windows Live Family Safety Service;c:\program files\windows live\family safety\fsssvc.exe [2011-5-13 1492840]
S3 imhidusb;Immersion's HID USB Driver;c:\windows\system32\drivers\imhidusb.sys [2008-11-20 30984]
S3 massfilter_hs;ZTE HandSet Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter_hs.sys [2012-4-20 15896]
S3 RapportKELL;RapportKELL;c:\windows\system32\drivers\RapportKELL.sys [2012-7-29 65848]
S3 SaiHFFB5;SaiHFFB5;c:\windows\system32\drivers\SaiHFFB5.sys [2008-4-4 136832]
S3 SaiIFFB5;Immersion's HID USB Driver (FFB5);c:\windows\system32\drivers\SaiIFFB5.sys [2008-4-4 16384]
S3 zghsmdm;ZTE General Handset USB Modem Proprietary;c:\windows\system32\drivers\zghsmdm.sys [2011-1-13 113432]
.
=============== Created Last 30 ================
.
2066-10-07 13:07:50 307200

---

w- c:\program files\microsoft games\combat flight simulator 3\backup\cfsres.A259.dll
2066-10-07 13:07:50 307200

---

w- c:\program files\microsoft games\combat flight simulator 3\backup\cfsres.A085.dll
2013-01-23 09:35:57 6991832 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{c2a88607-59c4-4bea-b244-409190838e43}\mpengine.dll
2013-01-08 18:53:21 1400832 ----a-w- c:\windows\system32\msxml6.dll
2013-01-08 18:53:20 2048000 ----a-w- c:\windows\system32\win32k.sys
2013-01-08 18:52:35 204288 ----a-w- c:\windows\system32\ncrypt.dll
2013-01-01 22:43:41 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin7.dll
2013-01-01 22:43:41 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin6.dll
2013-01-01 22:43:41 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin5.dll
2013-01-01 22:43:41 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin4.dll
2013-01-01 22:43:41 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin3.dll
2013-01-01 22:43:41 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin2.dll
2013-01-01 22:43:41 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin.dll
2012-12-25 19:42:04

---

d

---

w- c:\programdata\188F1432-103A-4ffb-80F1-36B633C5C9E1
.
==================== Find3M ====================
.
2012-12-16 13:12:54 34304 ----a-w- c:\windows\system32\atmlib.dll
2012-12-16 10:50:29 293376 ----a-w- c:\windows\system32\atmfd.dll
2012-12-07 09:26:02 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-12-07 09:26:02 697272 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-11-14 02:09:22 1800704 ----a-w- c:\windows\system32\jscript9.dll
2012-11-14 01:58:15 1427968 ----a-w- c:\windows\system32\inetcpl.cpl
2012-11-14 01:57:37 1129472 ----a-w- c:\windows\system32\wininet.dll
2012-11-14 01:49:25 142848 ----a-w- c:\windows\system32\ieUnatt.exe
2012-11-14 01:48:27 420864 ----a-w- c:\windows\system32\vbscript.dll
2012-11-14 01:44:42 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2012-11-13 01:29:51 2048 ----a-w- c:\windows\system32\tzres.dll
2012-11-02 10:18:17 376320 ----a-w- c:\windows\system32\dpnet.dll
2012-11-02 08:26:06 23040 ----a-w- c:\windows\system32\dpnsvr.exe
.
============= FINISH: 20:36:15.01 ===============

waddler_8

Thanks.

Post the contents of attach.txt too.

shown73

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft® Windows Vista™ Home Premium
Boot Device: \Device\HarddiskVolume1
Install Date: 23/06/2008 08:42:11
System Uptime: 23/01/2013 15:10:49 (5 hours ago)
.
Motherboard: MICRO-STAR INTERNATIONAL CO., LTD | | MS-7358
Processor: Intel(R) Core(TM)2 Duo CPU E6750 @ 2.66GHz | Socket 775 | 1992/332mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 446 GiB total, 332.463 GiB free.
is FIXED (FAT32) - 20 GiB total, 7.268 GiB free.
E: is Removable
F: is Removable
G: is Removable
H: is CDROM ()
I: is CDROM ()
.
==== Disabled Device Manager Items =============
.
Class GUID: {4d36e96c-e325-11ce-bfc1-08002be10318}
Description: ADS Instant HDTV PCI
Device ID: ROOT\MEDIA\0000
Manufacturer: ADS Technologies
Name: ADS Instant HDTV PCI
PNP Device ID: ROOT\MEDIA\0000
Service: Ph3xIB32
.
Class GUID: {4d36e978-e325-11ce-bfc1-08002be10318}
Description: Communications Port
Device ID: ROOT\PORTS\0000
Manufacturer: (Standard port types)
Name: Communications Port (COM5)
PNP Device ID: ROOT\PORTS\0000
Service: Serial
.
Class GUID:
Description: Samsung TV DMR
Device ID: UUID:6BAC14E2-A769-F1BE-7505-A9B55EDFA925\UMB\3&451F012&0&UUID:6BAC14E2-A769-F1BE-7505-A9B55EDFA925
Manufacturer:
Name: Samsung TV DMR
PNP Device ID: UUID:6BAC14E2-A769-F1BE-7505-A9B55EDFA925\UMB\3&451F012&0&UUID:6BAC14E2-A769-F1BE-7505-A9B55EDFA925
Service:
.
Class GUID: {4d36e96c-e325-11ce-bfc1-08002be10318}
Description: Philips SAA7130, Hybrid Capture Device
Device ID: ROOT\UNKNOWN\0000
Manufacturer: Philips Semiconductors
Name: Philips SAA7130, Hybrid Capture Device
PNP Device ID: ROOT\UNKNOWN\0000
Service: Ph3xIB32
.
Class GUID: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Description: Windows Mobile-based device
Device ID: ROOT\WPD\0000
Manufacturer: (Standard Windows Mobile devices)
Name: Windows Mobile-based device
PNP Device ID: ROOT\WPD\0000
Service: WUDFRd
.
==== System Restore Points ===================
.
RP1350: 19/12/2012 11:30:07 - Windows Update
RP1351: 20/12/2012 22:48:54 - Scheduled Checkpoint
RP1352: 21/12/2012 16:19:49 - Windows Update
RP1353: 25/12/2012 21:50:14 - Scheduled Checkpoint
RP1354: 27/12/2012 14:18:11 - Scheduled Checkpoint
RP1355: 28/12/2012 15:00:56 - Scheduled Checkpoint
RP1356: 29/12/2012 19:48:25 - Windows Update
RP1357: 30/12/2012 16:32:13 - Scheduled Checkpoint
RP1358: 31/12/2012 13:11:20 - Scheduled Checkpoint
RP1359: 01/01/2013 22:40:16 - Scheduled Checkpoint
RP1360: 03/01/2013 18:51:09 - Windows Update
RP1361: 05/01/2013 21:48:30 - Scheduled Checkpoint
RP1362: 06/01/2013 18:48:56 - Windows Update
RP1363: 08/01/2013 18:53:46 - Windows Update
RP1364: 09/01/2013 16:16:41 - Windows Update
RP1365: 12/01/2013 19:13:36 - Windows Update
RP1366: 16/01/2013 16:02:38 - Windows Update
RP1367: 18/01/2013 16:19:40 - Scheduled Checkpoint
RP1368: 19/01/2013 18:34:05 - Windows Update
RP1369: 21/01/2013 16:46:38 - Scheduled Checkpoint
RP1370: 22/01/2013 16:52:35 - Scheduled Checkpoint
RP1371: 23/01/2013 09:35:15 - Windows Update
.
==== Installed Programs ======================
.
1ClickDownloader
Acrobat.com
Adobe AIR
Adobe Flash Player 11 ActiveX
Adobe Reader 9.4.5
Adobe Shockwave Player 11.6
Advanced SystemCare 4
Apple Application Support
Apple Mobile Device Support
Apple Software Update
Auslogics Duplicate File Finder
Avira Free Antivirus
AVS Audio Converter version 5.1
AVS Update Manager 1.0
BBC iPlayer Desktop
Bonjour
Button Manager v1.60
CameraHelperMsi
Canon Camera Window DC_DV 6 for ZoomBrowser EX
Canon Camera Window MC 6 for ZoomBrowser EX
Canon G.726 WMP-Decoder
CANON iMAGE GATEWAY Task for ZoomBrowser EX
Canon Internet Library for ZoomBrowser EX
Canon MovieEdit Task for ZoomBrowser EX
Canon RAW Image Task for ZoomBrowser EX
Canon RemoteCapture Task for ZoomBrowser EX
Canon Utilities PhotoStitch
Canon Utilities ZoomBrowser EX
CCleaner
Compatibility Pack for the 2007 Office system
Coupon Printer
D3DX10
Defraggler
Disketch CD Label Software
DTC Library 1.1
EasyObdII Free Software version 2.4.0
erLT
Express Burn Disc Burning Software
Express Rip
Facebook Video Calling 1.2.0.159
ffdshow (remove only)
FileHippo.com Update Checker
Glary Utilities 2.51.0.1666
Google Earth
Google Update Helper
Google Updater
Handset USB Driver 5.2066.1.8B04
HD Writer 2.6E for HDC
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
iCloud
IMVU Avatar Chat Software
IncrediMail
IncrediMail 2.0
IncrediMail MediaBar 2 Toolbar
Intel(R) Network Connections 15.7.176.0
iTunes
Junk Mail filter update
Logitech Vid HD
Logitech Webcam Software
Logitech Webcam Software Driver Package
LWS Launcher
LWS Motion Detection
LWS Pictures And Video
LWS Webcam Software
LWS WLM Plugin
Macrium Reflect - Free Edition
Malwarebytes' Anti-Malware
Microsoft .NET Framework 3.5 SP1
Microsoft Application Error Reporting
Microsoft Combat Flight Simulator 3 Mission Pack
Microsoft Combat Flight Simulator 3.0
Microsoft Office Live Add-in 1.5
Microsoft Office XP Professional with FrontPage
Microsoft Search Enhancement Pack
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
MSVCRT
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
NVIDIA Display Control Panel
NVIDIA Drivers
PC Wizard 2008.1.87
Photo Notifier and Animation Creator
PhotoMail Maker
Picasa 3
Pop-Up Stopper Free Edition
PVSonyDll
QuickTime
Rapport
Reality Fusion GameCam SE
Reality Fusion GameCam SE Activities
RealPlayer
RealUpgrade 1.0
Revo Uninstaller 1.94
SAMSUNG Mobile Modem Driver Set
Samsung Mobile phone USB driver Software
SAMSUNG Mobile USB Modem 1.0 Software
SAMSUNG Mobile USB Modem Software
Samsung PC Studio 3
Security Update for CAPICOM (KB931906)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2736416)
Segoe UI
Skype Click to Call
Skype™ 5.10
Smart Defrag 2
SpotLife
Spybot - Search & Destroy
SST Programming Software
Stellarium 0.10.5
swMSM
System Requirements Lab
System Requirements Lab for Intel
TomTom HOME
TomTom HOME Visual Studio Merge Modules
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
V Stuff Backup v1.6.2.16478
VideoLink Mail
Web Assistant 2.0.0.457
Windows Live Communications Platform
Windows Live Essentials
Windows Live Family Safety
Windows Live ID Sign-in Assistant
Windows Live Installer
Windows Live Mail
Windows Live Messenger
Windows Live MIME IFilter
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live PIMT Platform
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live Sync
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Live Writer
Windows Live Writer Resources
X10 Hardware(TM)
.
==== Event Viewer Messages From Past Week ========
.
23/01/2013 15:11:38, Error: Service Control Manager [7000] - The WajamUpdater service failed to start due to the following error: The system cannot find the file specified.
23/01/2013 15:11:03, Error: volmgr [46] - Crash dump initialization failed!
21/01/2013 15:08:26, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1053" attempting to start the service ehRecvr with arguments "-Service" in order to run the server: {F4396DC6-E851-4D3A-8D01-34E6949F3500}
21/01/2013 15:08:17, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Media Center Receiver Service service to connect.
20/01/2013 19:46:30, Error: Service Control Manager [7000] - The Windows Media Player Network Sharing Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
20/01/2013 19:46:29, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Media Player Network Sharing Service service to connect.
17/01/2013 16:35:45, Error: Microsoft-Windows-DriverFrameworks-UserMode [10101] - The driver package installation has failed. The final status was 3758096899.
.
==== End Of File ===========================

waddler_8

Uninstall this: Web Assistant 2.0.0.457

Download OTM by Old Timer from the link below and save it to your Desktop.

LINK

• Right click OTM.exe and choose Run as Administrator to run it.
• Agree to any UAC prompt
• Copy the following code inside the codebox below. Do not include the word Code:

  :commands
  [CREATERESTOREPOINT]
  
  :processes
  killallprocesses
  
  :services
  Web Assistant Updater
  WajamUpdater
  
  :Files
  dir c:\programdata\188F1432-103A-4ffb-80F1-36B633C5C9E1 /s /c
  c:\program files\wajam
  c:\program files\web assistant
  
  :commands
  [CREATERESTOREPOINT]
  [REBOOT]
  

• Return to OTM, right click in the Paste instructions for Items to be Moved window (under the yellow bar) and choose Paste.
• Push the large MoveIt! button.
• Click OK to the prompt
• The report should appear in Notepad. Copy/paste the contents of that report back here in your next reply.

shown73

Give it a go. Could take a while!

waddler_8

It's pretty self explanatory & should only take a few minutes, let me know if there's anything you don't understand or if you have problems.

shown73

Seemed to go ok, but can't find the report for the life of me, sorry...