📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!

can't get rid of Trojan virus!!! (hijack this log included)

Options
pennypincher2013
pennypincher2013 Posts: 357 Forumite
edited 10 February 2013 at 11:47PM in Techie Stuff
Avast version 7 found 2 high threats win32:dropper.gen found in my downloaded folder in rkill.com. I went to move them to the chest but it says this "Error: Virus chest is not running. RPC Communication Failed (2147422219) What should I do or what can I do to fix this? I run a weekly virus check so this virus has been here possibly since last Sunday. I'm concerned because tonight I've logged into an email account that's linked to Paypal and logged into ebay.
I dont know what to do next. Help me Obi Wan Kenobi. Or anyone else out there. Your my only hope.

wont let me attach hijack this log :(
«13

Comments

  • waddler_8
    waddler_8 Posts: 3,588 Forumite
    edited 11 February 2013 at 12:09AM
    Probably a false positive.

    Download DDS from the link below and save it to your desktop:

    Link

    After you've downloaded it and saved it to your desktop:
    • Double click DDS to run it.
    • When it's finished, DDS will open two logs:
    1. DDS.txt
    2. Attach.txt

    Save both reports to your desktop.

    Copy & paste the contents of just DDS.txt for now and post it here (you may need to split the log over separate posts)
  • DDS (Ver_2012-11-20.01) - NTFS_x86
    Internet Explorer: 9.0.8112.16457 BrowserJavaVersion: 1.7.0_05
    Run by Jones at 23:11:21 on 2013-02-10
    Microsoft Windows 7 Home Premium 6.1.7601.1.1252.44.1033.18.2815.1038 [GMT 0:00]
    .
    AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
    SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    .
    ============== Running Processes ================
    .
    C:\Windows\system32\wininit.exe
    C:\Windows\system32\lsm.exe
    C:\Windows\system32\nvvsvc.exe
    C:\Program Files\Sandboxie\SbieSvc.exe
    C:\Windows\system32\nvvsvc.exe
    C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
    C:\Windows\System32\spoolsv.exe
    C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
    C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
    C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
    C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
    C:\Windows\system32\taskhost.exe
    C:\Windows\System32\WUDFHost.exe
    C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
    C:\Program Files\Alwil Software\Avast5\AvastUI.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Program Files\Sandboxie\SbieCtrl.exe
    C:\Windows\system32\SearchIndexer.exe
    C:\Program Files\Windows Media Player\wmpnetwk.exe
    C:\Program Files\Common Files\HP\Digital Imaging\Bin\hpqPhotoCrm.exe
    C:\Program Files\Common Files\AOL\1269802939\ee\AOLDesktop.exe
    C:\Program Files\Common Files\AOL\1269802939\ee\aolsoftware.exe
    C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
    C:\Windows\system32\taskhost.exe
    C:\Windows\system32\SearchProtocolHost.exe
    C:\Windows\system32\SearchFilterHost.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Windows\system32\conhost.exe
    C:\Windows\system32\wbem\wmiprvse.exe
    C:\Windows\system32\svchost.exe -k DcomLaunch
    C:\Windows\system32\svchost.exe -k RPCSS
    C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
    C:\Windows\system32\svchost.exe -k netsvcs
    C:\Windows\system32\svchost.exe -k LocalService
    C:\Windows\system32\svchost.exe -k NetworkService
    C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
    C:\Windows\system32\svchost.exe -k hpdevmgmt
    C:\Windows\System32\svchost.exe -k HPZ12
    C:\Windows\System32\svchost.exe -k HPZ12
    C:\Windows\system32\svchost.exe -k imgsvc
    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
    C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
    .
    ============== Pseudo HJT Report ===============
    .
    uSearchURL,(Default) = hxxp://search.aol.co.uk/web?isinit=true&query=%s
    uURLSearchHooks: {3806b089-6759-411d-b2c3-b7995a9f34d7} - <orphaned>
    uURLSearchHooks: {8bdea9d6-6f62-45eb-8ee9-8a81af0d2f94} - <orphaned>
    mURLSearchHooks: {3806b089-6759-411d-b2c3-b7995a9f34d7} - <orphaned>
    dURLSearchHooks: {A3BC75A2-1F87-4686-AA43-5347D756017C} - <orphaned>
    BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
    BHO: SSVHelper Class: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll
    BHO: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:\program files\alwil software\avast5\aswWebRepIE.dll
    BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
    BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\oracle\javafx 2.1 runtime\bin\jp2ssv.dll
    TB: Google Toolbar: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
    TB: AOL Broadband Toolbar: {DE9C389F-3316-41A7-809B-AA305ED9D922} -
    TB: AOL Broadband Toolbar: {DE9C389F-3316-41A7-809B-AA305ED9D922} -
    TB: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:\program files\alwil software\avast5\aswWebRepIE.dll
    TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
    EB: HP Smart Web Printing: {555D4D79-4BD2-4094-A395-CFC534424A05} -
    EB: &Research: {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\program files\microsoft office\office12\REFIEBAR.DLL
    uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
    uRun: [SandboxieControl] "c:\program files\sandboxie\SbieCtrl.exe"
    mRun: [RtHDVCpl] c:\program files\realtek\audio\hda\RtHDVCpl.exe
    mRun: [avast] "c:\program files\alwil software\avast5\avastUI.exe" /nogui
    mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"
    mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
    mRun: [SunJavaUpdateSched] "c:\program files\java\jre7\bin\jusched.exe"
    mPolicies-System: EnableUIADesktopToggle = dword:0
    IE: &AOL Toolbar Search - c:\program files\aol\aol broadband toolbar 5.0\resources\en-gb\local\search.html
    IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
    .
    INFO: HKCU has more than 50 listed domains.
    If you wish to scan all of them, select the 'Force scan all domains' option.
    .
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_05-windows-i586.cab
    DPF: {CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_15-windows-i586.cab
    DPF: {CAFEEFAC-0017-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_05-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_05-windows-i586.cab
    TCP: NameServer = 192.168.1.254
    TCP: Interfaces\{4846BBA3-4987-403D-BFB4-04CAA89F5015} : DHCPNameServer = 192.168.1.254
    Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - c:\program files\windows live\photo gallery\AlbumDownloadProtocolHandler.dll
    mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\24.0.1312.57\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
    .
    ================= FIREFOX ===================
    .
    FF - ProfilePath - c:\users\jones\appdata\roaming\mozilla\firefox\profiles\mrdey6xp.default\
    FF - plugin: c:\program files\adobe\reader 11.0\reader\air\nppdf32.dll
    FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
    FF - plugin: c:\program files\google\update\1.3.21.123\npGoogleUpdate3.dll
    FF - plugin: c:\program files\microsoft silverlight\5.1.10411.0\npctrlui.dll
    FF - plugin: c:\program files\microsoft\office live\npOLW.dll
    FF - plugin: c:\program files\mozilla firefox\plugins\npCouponPrinter.dll
    FF - plugin: c:\program files\mozilla firefox\plugins\npMozCouponPrinter.dll
    FF - plugin: c:\program files\oracle\javafx 2.1 runtime\bin\plugin2\npjp2.dll
    FF - plugin: c:\program files\viewpoint\viewpoint experience technology\npViewpoint.dll
    FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll
    FF - plugin: c:\users\jones\appdata\locallow\unity\webplayer\loader\npUnity3D32.dll
    FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_4_402_287.dll
    FF - plugin: c:\windows\system32\npDeployJava1.dll
    FF - plugin: c:\windows\system32\npmproxy.dll
    FF - ExtSQL: !HIDDEN! 2011-01-21 01:18; [EMAIL="smartwebprinting&#64;hp.com"]smartwebprinting@hp.com[/EMAIL]; c:\program files\hp\digital imaging\smart web printing\MozillaAddOn3
    .
    ============= SERVICES / DRIVERS ===============
    .
    R1 aswKbd;aswKbd;c:\windows\system32\drivers\aswKbd.sys [2012-8-28 18544]
    R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2011-5-27 738504]
    R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2011-1-25 361032]
    R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2011-1-25 21256]
    R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-1-25 58680]
    R2 avast! Antivirus;avast! Antivirus;c:\program files\alwil software\avast5\AvastSvc.exe [2013-2-10 44808]
    R2 MBAMScheduler;MBAMScheduler;c:\program files\malwarebytes' anti-malware\mbamscheduler.exe [2012-9-17 398184]
    R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2012-9-17 682344]
    R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-1-20 21104]
    R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2013-2-10 40776]
    R3 SbieDrv;SbieDrv;c:\program files\sandboxie\SbieDrv.sys [2012-6-17 137488]
    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
    S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
    S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2011-6-23 52224]
    .
    =============== Created Last 30 ================
    .
    2013-02-10 22:43:36 40776 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
    2013-02-10 21:05:23
    d
    w- c:\users\jones\appdata\local\Programs
    2013-02-09 18:20:32
    d
    w- c:\users\jones\appdata\local\Sun
    2013-02-06 20:12:59
    d
    w- c:\users\jones\appdata\local\{1DA467A1-5A9D-45C6-B16B-92BD24BC05D7}
    2013-01-15 20:10:42
    d
    w- c:\users\jones\appdata\roaming\TP
    .
    ==================== Find3M ====================
    .
    2013-02-09 18:44:46 74096 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
    2013-02-09 18:44:46 697712 ----a-w- c:\windows\system32\FlashPlayerApp.exe
    2012-12-16 14:13:28 295424 ----a-w- c:\windows\system32\atmfd.dll
    2012-12-16 14:13:20 34304 ----a-w- c:\windows\system32\atmlib.dll
    2012-12-14 16:49:28 21104 ----a-w- c:\windows\system32\drivers\mbam.sys
    2012-12-07 12:26:17 308736 ----a-w- c:\windows\system32\Wpc.dll
    2012-12-07 12:20:43 2576384 ----a-w- c:\windows\system32\gameux.dll
    2012-11-30 04:53:34 169984 ----a-w- c:\windows\system32\winsrv.dll
    2012-11-30 04:47:45 293376 ----a-w- c:\windows\system32\KernelBase.dll
    2012-11-30 02:55:25 271360 ----a-w- c:\windows\system32\conhost.exe
    2012-11-30 02:38:59 6144 ---ha-w- c:\windows\system32\api-ms-win-security-base-l1-1-0.dll
    2012-11-30 02:38:59 4608 ---ha-w- c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
    2012-11-30 02:38:59 3584 ---ha-w- c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
    2012-11-30 02:38:59 3072 ---ha-w- c:\windows\system32\api-ms-win-core-util-l1-1-0.dll
    2012-11-23 02:56:23 2345984 ----a-w- c:\windows\system32\win32k.sys
    2012-11-23 02:48:41 49152 ----a-w- c:\windows\system32\taskhost.exe
    2012-11-22 04:45:03 626688 ----a-w- c:\windows\system32\usp10.dll
    2012-11-20 04:51:09 220160 ----a-w- c:\windows\system32\ncrypt.dll
    2012-11-14 02:09:22 1800704 ----a-w- c:\windows\system32\jscript9.dll
    2012-11-14 01:58:15 1427968 ----a-w- c:\windows\system32\inetcpl.cpl
    2012-11-14 01:57:37 1129472 ----a-w- c:\windows\system32\wininet.dll
    2012-11-14 01:49:25 142848 ----a-w- c:\windows\system32\ieUnatt.exe
    2012-11-14 01:48:27 420864 ----a-w- c:\windows\system32\vbscript.dll
    2012-11-14 01:44:42 2382848 ----a-w- c:\windows\system32\mshtml.tlb
    2004-11-11 16:36:30 1020416 ----a-w- c:\program files\PSCore3.dll
    2004-11-11 16:36:28 92160 ----a-w- c:\program files\PSSourceFilter3.dll
    2004-11-11 16:36:24 901120 ----a-w- c:\program files\MSRAAutoFix.dll
    2004-11-11 16:36:24 77312 ----a-w- c:\program files\PSPublish.dll
    2004-11-11 16:36:22 78848 ----a-w- c:\program files\CabinetDll3.dll
    2004-11-11 16:36:22 76800 ----a-w- c:\program files\bandexpander.dll
    2004-11-11 16:36:22 71680 ----a-w- c:\program files\PSTransitionFilter.dll
    2004-11-11 16:36:22 49664 ----a-w- c:\program files\PSDMusicDMO.dll
    2004-11-11 16:36:22 41984 ----a-w- c:\program files\WavDest3.dll
    2004-11-11 16:36:22 102912 ----a-w- c:\program files\PhotoStory3.exe
    2004-09-17 19:00:26 31440 ----a-w- c:\program files\PSLegitCheck.dll
    .
    ============= FINISH: 23:12:52.13 ===============
  • I've found that sometimes the AV package wont remove something, because it's spyware not a 'virus' - as such.

    I'd get a copy of Malware Bytes - apparently cant post the url as i'm a newbie!- but google knows everything if you follow the .org link ;) its free and has worked for me in the past.

    if you can download it, restart you system in safe mode with networking, by repeatedly pressing f8 on start up.
    install malwarebytes, let it update then run a full scan.

    hopefully this helps and will erradicate the begger!
  • waddler_8
    waddler_8 Posts: 3,588 Forumite
    The DDS log looks ok.

    If the detections are for Bleeping Computers rkill.com only, then it's safe to ignore the warnings. Because of what the tool does (Kills processes etc), it is detected by antivirus companies from time to time. These are false positives.
  • waddler_8
    waddler_8 Posts: 3,588 Forumite
    restart you system in safe mode with networking, by repeatedly pressing f8 on start up.
    install malwarebytes, let it update then run a full scan.

    It's recommended to run mbam in normal mode & a quick scan, rather than safe mode & a full scan.

    http://helpdesk.malwarebytes.org/entries/21892442-Should-I-scan-with-Malwarebytes-Anti-Malware-in-Safe-Mode-

    http://helpdesk.malwarebytes.org/entries/20883848-What-is-the-difference-between-the-three-scan-types-in-Malwarebytes-Anti-Malware-
  • waddler_8 wrote: »
    The DDS log looks ok.

    If the detections are for Bleeping Computers rkill.com only, then it's safe to ignore the warnings. Because of what the tool does (Kills processes etc), it is detected by antivirus companies from time to time. These are false positives.

    Phew! Yeah only for rkill.com. I'm going to run malware bytes to make sure there's nothing else. Do you know why avast has made a false positive now? rkill.com has been on my computer for almost 2 years. Thank you for taking a look at my log and saving me a lot of stress. :beer:
  • waddler_8
    waddler_8 Posts: 3,588 Forumite
    Probably a mixture of it being an old copy of rkill (It's updated regularly) and new definitions updates from Avast.

    It's a generic detection (win32:dropper.gen) & generic detections use a broad set of rules to identify possible malware and can be prone to false positives from time to time.

    Avast isn't detecting the latest copy of rkill.

    https://www.virustotal.com/file/eb06b0835418731f9b9c5a37bb52f013d38ab50fe293f2cadcbda0be9684c163/analysis/1360537674/
  • waddler_8
    waddler_8 Posts: 3,588 Forumite
    You should also post the contents of the other log - attach.txt

    You've at least a vulnerable version of Java installed.

    http://www.securelist.com/en/analysis/204792255/Kaspersky_Security_Bulletin_2012_The_overall_statistics_for_2012#4
    Vulnerable applications targeted by malicious users

    While we called 2011 the year of the vulnerability, 2012 can justifiably be described as the year of the Java vulnerability, with half of all detected exploit-based attacks targeting vulnerabilities in Oracle Java.
  • Here's the attach.txt log. Since that log Ive downloaded this Java version 7 update 13. Is this version ok?

    .
    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT
    .
    DDS (Ver_2012-11-20.01)
    .
    Microsoft Windows 7 Home Premium
    Boot Device: \Device\HarddiskVolume1
    Install Date: 21/01/2011 02:00:59
    System Uptime: 10/02/2013 21:08:09 (2 hours ago)
    .
    Motherboard: MEDIONPC | | MS-7366
    Processor: Intel(R) Core(TM)2 Quad CPU Q8300 @ 2.50GHz | CPU 1 | 1999/333mhz
    .
    ==== Disk Partitions =========================
    .
    C: is FIXED (NTFS) - 272 GiB total, 188.586 GiB free.
    D: is FIXED (NTFS) - 25 GiB total, 15.684 GiB free.
    E: is CDROM ()
    F: is Removable
    G: is Removable
    H: is Removable
    .
    ==== Disabled Device Manager Items =============
    .
    ==== System Restore Points ===================
    .
    RP118: 15/11/2012 12:33:34 - Windows Update
    RP119: 28/11/2012 17:44:02 - Windows Update
    RP120: 12/12/2012 19:30:04 - Windows Update
    RP121: 20/12/2012 19:43:51 - Windows Update
    RP122: 09/01/2013 21:37:49 - Windows Update
    RP123: 09/02/2013 18:21:43 - Installed J2SE Runtime Environment 5.0 Update 15
    RP124: 10/02/2013 21:04:02 - avast! Free Antivirus Setup
    .
    ==== Installed Programs ======================
    .
    Update for Microsoft Office 2007 (KB2508958)
    32 Bit HP CIO Components Installer
    Activation Assistant for the 2007 Microsoft Office suites
    Adobe AIR
    Adobe Flash Player 11 ActiveX
    Adobe Flash Player 11 Plugin
    Adobe Reader XI (11.0.01)
    AOL Broadband Toolbar 5.0
    AOL Registration
    AOL Uninstaller (Choose which Products to Remove)
    Apple Application Support
    Apple Software Update
    avast! Free Antivirus
    Bing Bar
    BufferChm
    CCleaner
    ClearCloudUtility
    Compatibility Pack for the 2007 Office system
    Coupon Printer
    CyberLink LabelPrint
    CyberLink Power2Go
    D1600
    D3DX10
    DeviceDiscovery
    DHTML Editing Component
    DJ_SF_06_D1600_SW_Min
    Driving Test Success - All Tests (2009-2010)
    EPSON Scan
    FileHippo.com Update Checker
    FileZilla Client 3.5.0
    Final Draft
    Freecorder
    GIMP 2.6.11
    Google Chrome
    Google Drive
    Google Earth
    Google Toolbar for Internet Explorer
    Google Update Helper
    GPBaseService2
    Harmony Hollow Software Toolbar
    Hewlett-Packard ACLM.NET v1.1.0.0
    HiJackThis
    Hitman Pro 3.5
    HP Customer Participation Program 13.0
    HP Deskjet D1600 Printer Driver Software 13.0 Rel .6
    HP Imaging Device Functions 13.0
    HP Print Diagnostic Utility
    HP Print Projects 1.0
    HP Product Detection
    HP Smart Web Printing 4.60
    HP Solution Center 13.0
    HP Update
    HPDiagnosticAlert
    HPPhotoGadget
    hpPrintProjects
    HPProductAssistant
    HPSSupply
    hpWLPGInstaller
    Inquisit 3 Web Edition
    J2SE Runtime Environment 5.0 Update 15
    Java Auto Updater
    Java(TM) 7 Update 5
    JavaFX 2.1.1
    Junk Mail filter update
    Malwarebytes Anti-Malware version 1.70.0.1100
    MarketResearch
    Microsoft .NET Framework 4 Client Profile
    Microsoft Application Error Reporting
    Microsoft Office 2007 Service Pack 3 (SP3)
    Microsoft Office Excel MUI (English) 2007
    Microsoft Office File Validation Add-In
    Microsoft Office Home and Student 2007
    Microsoft Office Live Add-in 1.5
    Microsoft Office OneNote MUI (English) 2007
    Microsoft Office PowerPoint MUI (English) 2007
    Microsoft Office PowerPoint Viewer 2007 (English)
    Microsoft Office Proof (English) 2007
    Microsoft Office Proof (French) 2007
    Microsoft Office Proof (Spanish) 2007
    Microsoft Office Proofing (English) 2007
    Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
    Microsoft Office Shared MUI (English) 2007
    Microsoft Office Shared Setup Metadata MUI (English) 2007
    Microsoft Office Word MUI (English) 2007
    Microsoft Search Enhancement Pack
    Microsoft Silverlight
    Microsoft SQL Server 2005 Compact Edition [ENU]
    Microsoft VC9 runtime libraries
    Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
    Microsoft Visual C++ 2005 Redistributable
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
    Microsoft Works
    Mozilla Firefox 13.0.1 (x86 en-US)
    Mozilla Maintenance Service
    MSVCRT
    NVIDIA Display Control Panel
    NVIDIA Drivers
    OGA Notifier 2.0.0048.0
    Photo Story 3 for Windows
    PVSonyDll
    QuickTime
    Realtek High Definition Audio Driver
    Safari
    Sandboxie 3.72 (32-bit)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)
    Security Update for Microsoft Office 2007 suites (KB2596615) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2687311) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2687441) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2687499) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2760416) 32-Bit Edition
    Security Update for Microsoft Office Excel 2007 (KB2687307) 32-Bit Edition
    Security Update for Microsoft Office InfoPath 2007 (KB2687440) 32-Bit Edition
    Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition
    Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition
    Security Update for Microsoft Office Word 2007 (KB2760421) 32-Bit Edition
    Shop for HP Supplies
    SmartWebPrinting
    SolutionCenter
    Sophos Virus Removal Tool
    SoulSeek 157 NS 13e
    Spybot - Search & Destroy
    StarOffice 9
    Status
    The Hat 2.4
    Toolbox
    TrayApp
    U.B. Funkeys
    Unity Web Player
    Update for 2007 Microsoft Office System (KB967642)
    Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
    Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
    Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
    Update for Microsoft Office 2007 Help for Common Features (KB963673)
    Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition
    Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition
    Update for Microsoft Office Excel 2007 Help (KB963678)
    Update for Microsoft Office OneNote 2007 Help (KB963670)
    Update for Microsoft Office Powerpoint 2007 Help (KB963669)
    Update for Microsoft Office Script Editor Help (KB963671)
    Update for Microsoft Office Word 2007 Help (KB963665)
    Viewpoint Media Player
    WebReg
    Widestream6
    Windows Live Communications Platform
    Windows Live Essentials
    Windows Live ID Sign-in Assistant
    Windows Live Installer
    Windows Live Mail
    Windows Live Messenger
    Windows Live MIME IFilter
    Windows Live Movie Maker
    Windows Live Photo Common
    Windows Live Photo Gallery
    Windows Live PIMT Platform
    Windows Live SOXE
    Windows Live SOXE Definitions
    Windows Live Sync
    Windows Live UX Platform
    Windows Live UX Platform Language Pack
    Windows Live Writer
    Windows Live Writer Resources
    Youtube Downloader HD v. 2.9.3
    .
    ==== Event Viewer Messages From Past Week ========
    .
    10/02/2013 19:15:58, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - The computer has rebooted from a bugcheck. The bugcheck was: 0x00000050 (0xffff0048, 0x00000001, 0x8ad478aa, 0x00000000). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 021013-18782-01.
    09/02/2013 17:28:38, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk2\DR2.
    07/02/2013 10:52:37, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - The computer has rebooted from a bugcheck. The bugcheck was: 0x00000050 (0xffff0050, 0x00000000, 0x8acd14d1, 0x00000000). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 020713-19468-01.
    06/02/2013 18:58:23, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - The computer has rebooted from a bugcheck. The bugcheck was: 0x00000050 (0xff7f0050, 0x00000000, 0x8acca4d1, 0x00000000). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 020613-24117-01.
    .
    ==== End Of File ===========================
  • waddler_8
    waddler_8 Posts: 3,588 Forumite
    Since that log Ive downloaded this Java version 7 update 13. Is this version ok?

    Make sure these are removed:

    J2SE Runtime Environment 5.0 Update 15
    Java Auto Updater
    Java(TM) 7 Update 5


    You can help mitigate any threat by disabling Java in your browser, only enabling it for sites you explicitly trust that require it.

    http://www.java.com/en/download/help/disable_browser.xml


    Firefox needs updating too - remove Mozilla Firefox 13.0.1 (x86 en-US)

    Download: http://www.mozilla.org/en-US/firefox/new/
This discussion has been closed.
Meet your Ambassadors

🚀 Getting Started

Hi new member!

Our Getting Started Guide will help you get the most out of the Forum

Categories

  • All Categories
  • 351.1K Banking & Borrowing
  • 253.2K Reduce Debt & Boost Income
  • 453.6K Spending & Discounts
  • 244.1K Work, Benefits & Business
  • 599.1K Mortgages, Homes & Bills
  • 177K Life & Family
  • 257.4K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 16.1K Discuss & Feedback
  • 37.6K Read-Only Boards

Is this how you want to be seen?

We see you are using a default avatar. It takes only a few seconds to pick a picture.