playloud

Thank you ever so much. It seems that problem is gone You rock

Good evening, My Chrome is showing this russian (I suppose) word every time I try to search for something along with altered results on what I'm searching for. My results do show for a split second but they get replaced with the others and somewhere between the lines it reads "Загрузка..." I ran the Farbar recovery scan and these are the texts Please help? Thank you

FRST.txt Addition.txt

ALRIGHT, thank you so much again

Ok Mr C, did the scan, here's the log Farbar Service Scanner Version: 28-08-2013Ran by play loud (administrator) on 06-09-2013 at 11:14:15Running from "C:\Documents and Settings\play loud\Επιφάνεια εργασίας"Microsoft Windows XP Professional Service Pack 3 (X86)Boot Mode: Normal**************************************************************** Internet Services:============ Connection Status:==============Localhost is accessible.LAN connected.Google IP is accessible.Google.com is accessible.Yahoo.com is accessible. Windows Firewall:============= Firewall Disabled Policy: ==================[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]"EnableFirewall"=DWORD:0 System Restore:============Srservice Service is not running. Checking service configuration:The start type of Srservice service is OK.The ImagePath of Srservice service is OK.The ServiceDll of Srservice service is OK. sr Service is not running. Checking service configuration:The start type of sr service is set to Disabled. The default start type is Boot.The ImagePath of sr: "\SystemRoot\system32\DRIVERS\sr.sys". System Restore Disabled Policy: ========================[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]"DisableSR"=DWORD:1 Security Center:============ Windows Update:============ Windows Autoupdate Disabled Policy: ============================ File Check:========C:\windows\system32\dhcpcsvc.dll[2008-05-09 11:57] - [2008-04-14 22:59] - 0128000 ____N (Microsoft Corporation) 94C7EE99425BC8342D2991A915D8A8A9 C:\windows\system32\Drivers\afd.sys => MD5 is legitC:\windows\system32\Drivers\netbt.sys => MD5 is legitC:\windows\system32\Drivers\tcpip.sys => MD5 is legitC:\windows\system32\Drivers\ipsec.sys => MD5 is legitC:\windows\system32\dnsrslvr.dll[2004-09-07 15:00] - [2009-04-20 20:18] - 0046080 ____N (Microsoft Corporation) F99BE5941B69DC781C1C5A5D71280469 C:\windows\system32\ipnathlp.dll[2004-09-07 15:00] - [2008-04-14 22:59] - 0335360 ____N (Microsoft Corporation) 522873DF0FFD34FB1A8AF7D7E276727E C:\windows\system32\netman.dll[2004-09-07 15:00] - [2008-04-14 22:59] - 0198144 ____N (Microsoft Corporation) A443996504A45CDF60CBA800DCB14420 C:\windows\system32\wbem\WMIsvc.dll[2006-08-17 21:47] - [2008-04-14 23:00] - 0145408 ____N (Microsoft Corporation) 075EC50CA60F1B4EE576886BEF72AB21 C:\windows\system32\srsvc.dll[2006-08-17 21:48] - [2008-04-14 23:00] - 0171520 ____N (Microsoft Corporation) BB9B6E360FF1A701A7920AA798A335BF C:\windows\system32\Drivers\sr.sys[2008-05-09 11:56] - [2008-04-14 22:32] - 0073472 ____N (Microsoft Corporation) A41AC0D87DC3054DB716F1456C84391C C:\windows\system32\wscsvc.dll[2004-09-07 15:00] - [2008-04-14 23:00] - 0080896 ____N (Microsoft Corporation) 1A5DDC44B0AB7C40C13796DB7DB82989 C:\windows\system32\wbem\WMIsvc.dll[2006-08-17 21:47] - [2008-04-14 23:00] - 0145408 ____N (Microsoft Corporation) 075EC50CA60F1B4EE576886BEF72AB21 C:\windows\system32\wuauserv.dll[2006-08-17 21:48] - [2008-04-14 23:00] - 0006656 ____N (Microsoft Corporation) 6F55057EE883AC1675F31242B6DD6EF3 C:\windows\system32\qmgr.dll[2008-05-09 11:58] - [2008-04-14 22:59] - 0409088 ____N (Microsoft Corporation) ABDC5CF759C736DFBFEB031FDC01E303 C:\windows\system32\es.dll[2004-09-07 15:00] - [2008-07-07 23:28] - 0253952 ____N (Microsoft Corporation) C35DF6D336EBCB2F5E8D817A531BA666 C:\windows\system32\cryptsvc.dll[2004-09-07 15:00] - [2008-04-14 22:59] - 0062464 ____N (Microsoft Corporation) F50F73977012F0F5CF807451B79B6736 C:\windows\system32\svchost.exe[2004-09-07 15:00] - [2008-04-14 23:01] - 0014336 ____N (Microsoft Corporation) 274E9C78C12EBF74DC56B2BF64312F34 C:\windows\system32\rpcss.dll[2004-09-07 15:00] - [2009-02-09 13:52] - 0401408 ____N (Microsoft Corporation) B5F06957525D494D2C261B5739367524 C:\windows\system32\services.exe[2008-05-09 11:57] - [2009-02-09 14:23] - 0111104 ____N (Microsoft Corporation) 2A0BB5C67281C423F8D7D6B7D79699AC Extra List:=======Avgtdix(20) DigiNet(19) Gpc(3) IPSec(5) NetBT(6) pctgntdi(22) pctNdisMP(21) PSched(7) Tcpip(4) 0x1700000005000000010000000200000003000000040000005A0000001600000014000000060000000700000008000000090000000A0000000B0000000C0000000D0000000E0000000F0000001000000011000000120000001300000015000000IpSec Tag value is correct. **** End of log ****

Good morning Mr C, I turned on my computer today and TA DAAAA Security Center Is back on. It all seems fine now.... Should I do the thing with the reg files anyway or just not bother? Thank you SO much anyway

Service Scanner log Farbar Service Scanner Version: 28-08-2013Ran by play loud (administrator) on 04-09-2013 at 17:47:07Running from "C:\Documents and Settings\play loud\Επιφάνεια εργασίας"Microsoft Windows XP Professional Service Pack 3 (X86)Boot Mode: Normal**************************************************************** Internet Services:============ Connection Status:==============Localhost is accessible.LAN connected.Google IP is accessible.Google.com is accessible.Yahoo.com is accessible. Windows Firewall:=============sharedaccess Service is not running. Checking service configuration:The start type of sharedaccess service is OK.The ImagePath of sharedaccess service is OK.The ServiceDll of sharedaccess service is OK.Checking LEGACY_sharedaccess: ATTENTION!=====> Unable to open LEGACY_sharedaccess\0000 registry key. The key does not exist. Firewall Disabled Policy: =================="HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\\EnableFirewall" registry value does not exist. System Restore:============ System Restore Disabled Policy: ======================== Security Center:============ wscsvc Service is not running. Checking service configuration:The start type of wscsvc service is OK.The ImagePath of wscsvc service is OK.The ServiceDll of wscsvc service is OK.Checking LEGACY_wscsvc: ATTENTION!=====> Unable to open LEGACY_wscsvc\0000 registry key. The key does not exist. Windows Update:============wuauserv Service is not running. Checking service configuration:The start type of wuauserv service is OK.The ImagePath of wuauserv service is OK.The ServiceDll of wuauserv service is OK.Checking LEGACY_wuauserv: ATTENTION!=====> Unable to open LEGACY_wuauserv\0000 registry key. The key does not exist. BITS Service is not running. Checking service configuration:The start type of BITS service is set to Demand. The default start type is Auto.The ImagePath of BITS service is OK.The ServiceDll of BITS service is OK.Checking LEGACY_BITS: ATTENTION!=====> Unable to open LEGACY_BITS\0000 registry key. The key does not exist. Windows Autoupdate Disabled Policy: ============================ File Check:========C:\windows\system32\dhcpcsvc.dll[2008-05-09 11:57] - [2008-04-14 22:59] - 0128000 ____N (Microsoft Corporation) 94C7EE99425BC8342D2991A915D8A8A9 C:\windows\system32\Drivers\afd.sys => MD5 is legitC:\windows\system32\Drivers\netbt.sys => MD5 is legitC:\windows\system32\Drivers\tcpip.sys => MD5 is legitC:\windows\system32\Drivers\ipsec.sys => MD5 is legitC:\windows\system32\dnsrslvr.dll[2004-09-07 15:00] - [2009-04-20 20:18] - 0046080 ____N (Microsoft Corporation) F99BE5941B69DC781C1C5A5D71280469 C:\windows\system32\ipnathlp.dll[2004-09-07 15:00] - [2008-04-14 22:59] - 0335360 ____N (Microsoft Corporation) 522873DF0FFD34FB1A8AF7D7E276727E C:\windows\system32\netman.dll[2004-09-07 15:00] - [2008-04-14 22:59] - 0198144 ____N (Microsoft Corporation) A443996504A45CDF60CBA800DCB14420 C:\windows\system32\wbem\WMIsvc.dll[2006-08-17 21:47] - [2008-04-14 23:00] - 0145408 ____N (Microsoft Corporation) 075EC50CA60F1B4EE576886BEF72AB21 C:\windows\system32\srsvc.dll[2006-08-17 21:48] - [2008-04-14 23:00] - 0171520 ____N (Microsoft Corporation) BB9B6E360FF1A701A7920AA798A335BF C:\windows\system32\Drivers\sr.sys[2008-05-09 11:56] - [2008-04-14 22:32] - 0073472 ____N (Microsoft Corporation) A41AC0D87DC3054DB716F1456C84391C C:\windows\system32\wscsvc.dll[2004-09-07 15:00] - [2008-04-14 23:00] - 0080896 ____N (Microsoft Corporation) 1A5DDC44B0AB7C40C13796DB7DB82989 C:\windows\system32\wbem\WMIsvc.dll[2006-08-17 21:47] - [2008-04-14 23:00] - 0145408 ____N (Microsoft Corporation) 075EC50CA60F1B4EE576886BEF72AB21 C:\windows\system32\wuauserv.dll[2006-08-17 21:48] - [2008-04-14 23:00] - 0006656 ____N (Microsoft Corporation) 6F55057EE883AC1675F31242B6DD6EF3 C:\windows\system32\qmgr.dll[2008-05-09 11:58] - [2008-04-14 22:59] - 0409088 ____N (Microsoft Corporation) ABDC5CF759C736DFBFEB031FDC01E303 C:\windows\system32\es.dll[2004-09-07 15:00] - [2008-07-07 23:28] - 0253952 ____N (Microsoft Corporation) C35DF6D336EBCB2F5E8D817A531BA666 C:\windows\system32\cryptsvc.dll[2004-09-07 15:00] - [2008-04-14 22:59] - 0062464 ____N (Microsoft Corporation) F50F73977012F0F5CF807451B79B6736 C:\windows\system32\svchost.exe[2004-09-07 15:00] - [2008-04-14 23:01] - 0014336 ____N (Microsoft Corporation) 274E9C78C12EBF74DC56B2BF64312F34 C:\windows\system32\rpcss.dll[2004-09-07 15:00] - [2009-02-09 13:52] - 0401408 ____N (Microsoft Corporation) B5F06957525D494D2C261B5739367524 C:\windows\system32\services.exe[2008-05-09 11:57] - [2009-02-09 14:23] - 0111104 ____N (Microsoft Corporation) 2A0BB5C67281C423F8D7D6B7D79699AC Extra List:=======Avgtdix(20) DigiNet(19) Gpc(3) IPSec(5) NetBT(6) pctgntdi(22) pctNdisMP(21) PSched(7) Tcpip(4) 0x1700000005000000010000000200000003000000040000005A0000001600000014000000060000000700000008000000090000000A0000000B0000000C0000000D0000000E0000000F0000001000000011000000120000001300000015000000IpSec Tag value is correct. **** End of log ****

No, still no security center

Ok here's the log of combofix....... log.txt

Thank you so much for everything My pc runs smoother and faster now Only ONE thing I STILL can't get access to Windows Security

Did the check with SecurityCheck Results........... Results of screen317's Security Check version 0.99.73 Windows XP Service Pack 3 x86 Internet Explorer 8 ``````````````Antivirus/Firewall Check:`````````````` Windows Security Center service is not running! This report may not be accurate! Microsoft Security Essentials Antivirus up to date! (On Access scanning disabled!) `````````Anti-malware/Other Utilities Check:````````` Out of date HijackThis installed! xp-AntiSpy 3.98-2 Spybot - Search & Destroy HijackThis 2.0.2 TuneUp Utilities 2013 TuneUp Utilities Language Pack (en-US) TuneUp Utilities 2013 CCleaner Java 7 Update 25 Adobe Flash Player 11.7.700.202 Adobe Reader 10.1.7 Adobe Reader out of Date! Mozilla Firefox (23.0.1) Google Chrome 29.0.1547.62 ````````Process Check: objlist.exe by Laurent```````` AVG avgwdsvc.exe AVG avgrsx.exe AVG avgnsx.exe AVG avgemc.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C:: ````````````````````End of Log``````````````````````

Did the scan with MalwareBytes (with the setting for PUP as you mentioned on previous post and found nothing..... Here's the log mbam-log-2013-09-03 (19-16-42).txt

Here's the report log after the cleanup........ AdwCleanerS0.txt

Ok, did the scan with AdwCleaner but I don't want to remove something stupidly so here's the log BEFORE I clean anything Waiting for your advice PS. My Windows Security still don't work. I can't get access. I have installed the AVG protection to be safe though Thanx AdwCleanerR0.txt

Did The scan with RogueKiller, here are the results RKreport0_S_09022013_174042.txt

Ok, I ran the tdsskiller scan and here is the log attached here. I didn't seem to find malicious objects (or I missed them) TDSSKiller.2.9.2.0_02.09.2013_10.38.39_log.txt

Hmmmmm, ok I stayed on top of it for the whole scan, to see why it's restarting by itself and it goes to a point and it brings a blue screen and computer restarts by itself. I don't know if that's what happenned before aswell, since I wasn't present, but I recon it is. What now? Unfortunately I have to go to work. You can reply and I'll do the things as soon as I can get to my computer Thank you again

I ran Rootkit and left the room and when I came back my computer was restarting (without me doing it) Anyhow, I looked into the mbar folder and there was only a system-log txt wich I'm attaching here but NO mbar-log txt system-log.txt

That's my fixlog after I pressed Fix once at the Farbar. I didn't perform a new scan though.... Should I? Anyway, I'm up for the rookit now I'll be posting the results Fixlog.txt

Good morning (well, it's morning here in Greece now). Sorry for leaving yesterday, had to run to work. Anyhoo, these are the results from the scan of the Farbar Just something more. The thing that triggered me to start scanning and being suspicious is that Windows won't let me get in the Security area and won't open my Windows Firewall settings. Suppose it's got something to do with that?????? Thanx Addition.txt FRST.txt

Hello there, I also got a Zaccess problem that My Malwarebytes finds, removes and yet it's still there on the next scan I would like some help on that, but..... There's another problem since the language on Malwarebytes is in GREEK (where I'm from) and also the txt file (I attach an example of my latest scan log) Can this be solved? Thank you for the time and effort in advance MBAM-log-2013-08-30 (12-21-35).txt