Jump to content

PaulAllen

Honorary Members
  • Posts

    206
  • Joined

  • Last visited

Posts posted by PaulAllen

  1. I was just wondering whats to stop something nasty being backed up alongside everything else. I was covering all malware being backed up by mistake is there something that stops this happening? I'm just curious that's all. It was a broad spectrum question I'm not good at technical jargon as you can tell. 

    Thanks Dave

  2. I think over all its great. 3 things I think would help it the first being on the dash board screen next to the scan now button would be an update button I know you can click current and it updates or have them auto. I'm sure I can't be alone in liking to manually update all my av's and stuff on home pc.'s. The second it would be great if when first loading mbam it had an option to enhance windows firewall. The 3rd a dash board you can sign into with all your mbam products on it so you can sort your own problems when mbam says to many instillation on this cd you can look see what it is installed on and de-uninstall it from these items this would also save support from my emails lol.

    Thanks mbam overall it's very good and hope you all at mbam have a great christmas. Thanks for all your help :)

  3. UPDATE

    Ok I downloaded MBAR while i waited and got these 6

     

    Registry Keys Detected: 6
    HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\MRT.exe (Trojan.Agent) -> Delete on reboot. [f14c0b32bdbfb4824a8305efce35bc44]
    HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\MsMpEng.exe (Security.Hijack) -> Delete on reboot. [b885211c3c4079bda541629210f3dd23]
    HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\svchost.exe (Security.Hijack) -> Delete on reboot. [2d10ae8f8eeeb77f9571e3142fd421df]
    HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\MRT.exe (Trojan.Agent) -> Delete on reboot. [93aaf647aece9a9cdfee985cd62d946c]
    HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\MsMpEng.exe (Security.Hijack) -> Delete on reboot. [41fc9aa3740890a63da9bc38a45fcb35]
    HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\svchost.exe (Security.Hijack) -> Delete on reboot. [fd407ac36c1078bea561718632d1bd43]
     

  4. Below is a post i did in another forum relating to my problem the helper there said it may be malware so I thought I'd come here and get checked out by experts before doing anything else.

    Thank you

    Paul

     

     

    "Hello I have a boot problem at first i thought it was the old drive going so I replaced the drive reinstalled the os and everything worked ok that day.

    Nest day went to boot new drive and exactly the same as the old drive happened

    File:\Boot\BCD

    The boot configuration data for your pc is missing or corrupt.

     

    Here is what I have tried so far.

    Use instillation disk went into the part at the start with cmd prompt and typed

     bootrec /fixmbr

    bootrec /fixboot

     

    attrib -r -s -h c\:boot\bcd

     

    del c:\boot\bcd

     

    bcdboot c:\windows

     

    bootrec /rebuildbcd

     

    None of this works.

    I can get into the operating system and once in it's ok and the even weirder thing once it is open it will reboot just fine shutdown and then turn back on just fine but leave it over night off and the next day it's got problems.

     

    It couldn't be the cmos could it?"

     

     

  5. I was having a go with rkill and it shows this is it anything bad or just because I'm running it in windows 10? They seem legit files just incorrect image path and service dll. I googled it but came up blank apart from what the file is, nothing showed why the wrong path/service.

    Thank you for any help provided :)

     * AJRouter => %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted [Incorrect ImagePath]
     * WpnService => %systemroot%\system32\svchost.exe -k netsvcs [Incorrect ImagePath]

     * vmicrdv => %SystemRoot%\System32\icsvcext.dll [Incorrect ServiceDLL]
     * vmicvss => %SystemRoot%\System32\icsvcext.dll [Incorrect ServiceDLL]

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.