Jump to content

Search the Community

Showing results for tags 'facebook'.

  • Search By Tags

    Type tags separated by commas.
  • Search By Author

Content Type


Forums

  • Announcements
    • Malwarebytes News
    • Beta Testing Program
  • Malware Removal Help
    • Windows Malware Removal Help & Support
    • Mac Malware Removal Help & Support
    • Mobile Malware Removal Help & Support
    • Malware Removal Self-Help Guides
  • Malwarebytes for Home Support
    • Malwarebytes for Windows Support Forum
    • Malwarebytes for Mac Support Forum
    • Malwarebytes for Android Support Forum
    • Malwarebytes for iOS Support
    • Malwarebytes Privacy
    • Malwarebytes Browser Guard
    • False Positives
    • Comments and Suggestions
  • Malwarebytes for Business Support
    • Malwarebytes Endpoint Protection
    • Malwarebytes Incident Response (includes Breach Remediation)
    • Malwarebytes Endpoint Security
    • Malwarebytes Business Products Comments and Suggestions
  • Malwarebytes Tools and Other Products
    • Malwarebytes AdwCleaner
    • Malwarebytes Junkware Removal Tool Support
    • Malwarebytes Anti-Rootkit BETA Support
    • Malwarebytes Techbench USB (Legacy)
    • Malwarebytes Secure Backup discontinued
    • Other Tools
    • Malwarebytes Tools Comments and Suggestions
  • General Computer Help and Security Updates
    • BSOD, Crashes, Kernel Debugging
    • General Windows PC Help
  • Research Center
    • Newest Rogue-Ransomware Threats
    • Newest Malware Threats
    • Newest Mobile Threats
    • Newest IP or URL Threats
    • Newest Mac Threats
    • Report Scam Phone Numbers
  • General
    • General Chat
    • Forums Announcements & Feedback

Find results in...

Find results that contain...


Date Created

  • Start

    End


Last Updated

  • Start

    End


Filter by number of...

Joined

  • Start

    End


Group


AIM


MSN


Website URL


ICQ


Yahoo


Jabber


Location


Interests

Found 17 results

  1. Before the pandemic, I was an infrequent Facebook user. Now I keep up with chruch functions such as streaming Sunday worship services at Facebook. More recently a friend suggested I use Facebook Messenger to stay in touch with my nieces and nephews with whom I'm unable to visit face-to-face now. In the middle of setting up Messenger, Facebook locked my account. I've google'd a bunch of sites that describe how to unlock the account. The various "solutions" all end up with this page. I click continue and it just gives me the red circle. I realize I should be asking Facbook these questions, but that isn't possible since I'm locked out. I guess mainly what I'm hoping for by posting here is that someone has had a similar problem and learned that Facebook was not friendly with the Malwarebytes extension. TIA for any suggestions. SweetTasha.
  2. Hi, I'm not sure if this is correct place to post. I bought this laptop computer in 2016, but didn't start using it regularly until 2019/2020. In 2019 from about April until July, I used it for a part-time work-from-home survey job. Then, early this year I started using it exclusively when Windows 7 became obsolete. The laptop runs slow, and this isn't something that started after an update. It just seems to keep getting slower. Sometimes it seems particularly slow when using the internet or specific websites (like FaceBook, etc). Btw, I usually use MS Edge browser. Rarely do I use the Chrome browser. When I had that survey job last year, I had to use Firefox, which has since been deleted from this computer. Other times, the computer is slow in opening apps or files...or even slow to open task manager when I hit 'CTRL' + 'ALT' + 'DELETE'. I know there are a lot of MS apps on my computer that I don't even use. Not sure if they have anything to do with it. And, I don't know for sure how to ensure my non-MS apps are up-to-date. I used to use Avast (not premium, just free), and it would notify me if an app was out-of-date. My previous laptop with the Windows 7 (and way less storage, etc) ran much faster. Could you either help me figure this out, or send me to a more appropriate forum/website? And after this issue is resolved, are there guidelines for Windows 10 settings? Thank you, Julie
  3. The night of the 17th, I was using the Facebook app while suddenly a download in progress icon appeared in the status bar. I pulled down the notifications screen just in time to catch a glimpse of the word "attackers" followed by a bunch of symbols like $ before it disappeared. I could not find anything in the downloads folder list, ESET premium that was monitoring my phone and all downloads hadn't even detected it, and I tried in vain to search online using only the selected phrases I had managed to glimpse. Then by sheer luck, today, I managed to find a thread on this problem with the full details. The message had been "attackers on <b>%1$s</b> might atte..." with a download in progress while using Facebook app. Which I assume is completed as "might attempt to steal your information" or something. I tried using this phrase to search about it on Google, and while nothing specific to this problem came up, a list of generic information results on various types of network attacks, DDos, man in the middle and zero day attacks came up, which has me really worried. I am still using the phone as is, I really don't know much about technology related things. Please advise me what I should do now, if I should just turn off the phone or something. The person in the other thread said he had reset his phone and the problem had reappeared when he had signed into Facebook again, so now I'm not sure if a simple factory reset will help and I will probably need to install a custom ROM or something. I'm using Android 7.0 in a Samsung Galaxy J7 Prime. I got a software update to Oreo just an hour earlier and I wonder if updating the software will help remove whatever malware/spyware/hacking application got installed. Please help, I am logged into all my accounts through this phone and it's already been like 4 days since the message first appeared damage control is needed. Thank you very much. If you know anything, anything, please let me know it's very urgent.
  4. For a few months I was unable to access my newsfeed (Home) on Facebook. I asked FB, but they offered no help. I installed and ran Malwarebytes, and it fixed the problem! Evidently some malware was overloading my cache, and this fixed it!
  5. Okay, im sorry if this doesn't go under the right topic, its the closest to my problem. I accidently downloaded a backdoor agent by accident & it infected my pc with a bunch of other crap. I used Malwarebytes & its in quarantine for 2 years now. Everything has been back to normal. 6 months ago my Facebook was hacked advertising glasses, I changed my password & logged out of all devices which solved the problem. Is this the Backdoor agent key logging & someone used my account? I ran a quick scan & found PUPs that are harmless. Please forgive me but Im honestly paranoid. Im only 16 & im sorry if im in the wrong topic. Please help its my fault i know.
  6. I was reading my Facebook feed using Firefox (v56, 64bit) and saw a story about the Clemson coach and so I clicked on the story. A new tab opened up and then the browser suddenly looked like there was a problem with the video card, the PC speaker started making a constant shrill noise, and a web login (similar to what you'd see with IIS or Apache) showed on my screen. I went to task manager, killed Firefox and disconnected my connection to the Internet. I then started Malware Bytes, reconnected to the Internet long enough to get the updates, then disconnected again and ran a custom scan on the whole drive (with scan for rootkits enabled). The scan came back clean and so I ran an Avira scan (Free version) and it ran for several hours and didn't find anything. Finally, I booted into safe mode and re-ran a MalWareBytes scan and once again, it came up with no detections. I'm always one to err on the side of caution, but I really don't want to reload WIndows. I am on a Dell Vostro with 4 GB of memory, 750GB HDD, Windows 10 (Updates current), Avira Security Suite (Updates Current), MalwareBytes 3 (Updates Current) Strange behavior on a website always makes me anxious about having downloaded some payload. Any suggestions? Move forward with caution or reload?
  7. I accidentally infected my computer last week. I immediately updated Malwarebytes, unplugged my ethernet and completed a scan. Many items were removed as you will see in my initial scan. I restarted my computer and performed the scan again but a pattern appear no matter how many times I restarted my computer. PUP.Optional.Trotux is always found and reappears. My taskbar is largely non-responsive apart from my ability to close and open windows e.g. Windows 10 start button, volume control and the notifications button are all inactive. If I try and use them nothing happens and occasionally a Windows 10 system sound is made if I keep trying. This Windows 10 system sound is also made at random intervals whilst I use my computer. The 'Photos' app doesn't open, if I'm viewing a photo for instance. I'm required to use another program. Another user's account has appeared on the logon screen. This account is a local administator, cannot be deleted and has the same limited taskbar functionality that my user account does. I am still an administrator but appear to be more restricted in the overall hierarchy than the other local administrator. Despite clearing Chrome's settings, clearing all browser data, reinstalling the browser - it uses an automated system to login to my Facebook account. I have attached my logs from Farbar, along with my initial virus scan after getting the virus, and finally the standard virus scan I receive now that the problems above still occur despite PUP.Optional.Trotux reappearing. Any guidance would be very much appreciated JF - FRST.txt JF - Addition.txt LOG after first scan following virus.txt LOG of a typical scan now.txt
  8. Hi, I have been facing a lot of redirecting problems on my google chrome for Mac OS X El Captain 10.11.2 on an iMac. 1. If I type to search any parameter in the omnibox with google, no redirection occurs and google search results appear normally 2. If I click on any of the link in the search results, the website first opens and then gets redirected 3. If I visit a particular website by entering the URL in the omnibox, the website opens and then gets redirected. 4. However if I click on "Stop/X" before the entire page loads, it does not get redirected and browsing on the website normally works just fine, with other links on the page opening without any redirection 5. Sites such as those for flights etc, open a new tab with some russian porn sites etc. In most cases the redirection first goes to: hxxps://repmbuycurl.com/v/c8480152-a938-11e5-93e6-01506583babe/c/77da5c6f-980d-11e5-b565-02f6361de079/?i=1&s=af5399fa-a86a-11e5-833a-1150407b5816&r=repmbuycurl.com&rcid=5FRy4hbTzbu_HJvp86sJ-Qc_i7PGKJpj_fKatOmC1t9xKwSV4XNWsDJ0FB7F8PiWhfube7DAgkI&d=1|0|-330|0|1|1|||2560x1440|74-d8cbb4b0|1|0|10 Followed by hxxp://topoffers.click/r/d3f6ec66-a938-11e5-a707-115062c5523a/1/ and finally lands on facebook.com with my profile page opening up I have done the following 1. Installed malwarebytes, run a scan - it did show some malware, which was cleaned and the iMac was restarted 2. Chrome browser settings were reset (after resetting for that period the browser worked just fine, however next day it was back) 3. Malwarebytes shows there is NO more malware 4. I deleted chrome and all the .plist and other entries from my library, and reinstalled chrome but the same matter exists 5. Safari is not affected by the same and I can browse normally on safari 6. I isolated the router and firewall to check if they have an internal problem, and used another internet connection, however the problem is still there 7. It occurs with authentic websites such as mailchimp etc. 8. Even ran an antivirus scan with avast but the results were all negative. 9. Please note all extensions have been removed as well. Please advise how can I solve this problem? (Edited by moderator to break the links.)
  9. Ok I am a Facebook user, started playing R2 Games such as "Wartune", or "Winterfrost Legacy" and my antivirus says I have malware now, cant remove it. First of all I dont understand how Facebook can allow this company to infect users computers. What should I do to remove the malware?
  10. About a month ago I started getting a Mircosoft certificate error on my Facebook page.. I just clicked on show content without thinking about it (dumb).. Then a week ago I got a pop up saying they needed to check if the name I use there is valid. I clicked "ask again". Tonight it did. And I am shocked at what they are asking for. This must be a hack and scam but I've not found anything on the net. I ran Malbyte and it did remove one Trojan. I restarted but am still getting the same pop up. Here is what it looks like. Anyone know if this is legit or can help me? Thank You. **** Submit Your Documents We ask everyone on Facebook to use the name they go by in everyday life so friends know who they're connecting with. Please provide identification that displays the name you'd like to confirm and use publicly on Facebook. Keep in mind that if you confirm a name other than the one currently on your profile, the name on your profile may be automatically updated with the name you confirm. Learn more about why we require ID verification and the different types of ID we accept below. What types of ID does Facebook accept?. You can confirm your identity in 1 of 3 ways. When submitting documentation, please cover up any personal information we don't need to verify your identity (ex: credit card number, Social Security number). We encrypt people’s connections to Facebook by default, including IDs you send to us. We delete your ID information after verification is complete. Option 1 We will accept any government-issued ID that contains your name and date of birth. Examples include: ■ Birth certificate ■ Driver’s license ■ Passport ■ Marriage certificate ■ Official name change paperwork ■ Personal or vehicle insurance card ■ Non-driver's government ID (ex: disability, SNAP card, national ID card) ■ Green card, residence permit or immigration papers ■ Tribal identification or status card ■ Voter ID card Option 2 You can provide two different forms of ID from the following list (ex: a bank statement and a library card, but not two bank statements). The names on your IDs must match each other, and one of the IDs must include a photo or date of birth that matches the information on your profile. Below are some examples of IDs we'll accept: ■ Bank statement ■ Bus card ■ Check ■ Credit card ■ Employment verification ■ Library card ■ Mail ■ Magazine subscription stub ■ Medical record ■ Membership ID (ex: pension card, union membership, work ID, professional ID) ■ Paycheck stub ■ Permit ■ School card ■ School record ■ Social Security card ■ Utility bill ■ Yearbook photo (actual scan or photograph of the page in your yearbook) Option 3 If you don’t have an ID that shows your authentic name as well as your photo or date of birth, you can provide two forms of ID from Option 2 above, and then provide a government ID that includes a date of birth or photo that matches the information on your profile. We won't add the name or other information from the government ID to your account. Last edited about 2 months ago **** Thanks again for help!
  11. any help or insight will be greatly appreciated I got baited into getting malware on my fb account. They posted things on my friends and groups walls without my consent. I cant find this app on my app list but it can be seen on my activity log I cant delete the comments and posts made by this malware pics of the loading screen before i open my activity log on FB () and the log itself () attached this is the site where i was malwared http://claim-riotpoints.blogspot.com/ <- pc newb, downloading bitdefender and avast at the moment pls help, THX
  12. When attempting to login to the Malwarebytes forum with Facebook, I get the following error: Error App Not Setup: The developers of this app have not set up this app properly for Facebook Login.
  13. Hello, A family member has downloaded this executable file while browsing Facebook: Profile Viewer - 5.exe. Then has tried to run it, clicked the "Run" button when prompted by Windows 7, but nothing has seemed to happen. However, the executable has installed a program named "Update" which seems to be posting on Facebook it's download links. I removed the program via "Programs and Features" in the Control panel of Windows, but would like to scan for additional files left. One of the reasons is because Google Chrome now displays ads in the bottom left corner (something similar like here http://forums.malwar...pic=116729). I installed AdBlock plus which is dealing well with the problem, but it doesn't eliminate it's source. I have avast Internet Security and Malwarebytes Anti-malware PRO installed, but only avast is running in the background. Both programs reported neither infected executable file (the one that was downloaded), nor any infected files (with the quick scans). This is why I came across this forum and in particular, http://forums.malwar...topic=9573. Please note that uTorrent is rarely running. I'm posting DDS.txt: And Attach.txt: I'll be very thankful if You could give me some insight whether there is an issue and if yes, I'd like to get directions on how to deal with it. Thank you very much!
  14. I placed MB on Facebook , to follow it and read that Java had a problem and I was just wondering , why I was promted to download Java in order to get in to the Malwarebytes Forum on Feb 12 , 2013? I am not sure I understood what I read in FB , but did download Java and then was able to log in to MB
  15. PLEASE HELP! i just got this virus which has blocked all of these sites ! and i cannot use those sites anymore! i used malwarebytes and it didnt help!!! PLEASE GIVE ME A SOLUTION! whenever i go to these sites , they redirect me to this! please view the image!
  16. Post Merged We look for post with 0 replies, so when you reply to your own topic, we assume you're being helped. Please be patient, someone will assist you as soon as possible. I have been trying to block Facebook on my wife computer (per her request) for a little over a week now. Every time I update the host file and add 127.0.0.1 www.facebook.com to the host file. Every time I do this it blocks facebook for a period of time. Then eventually the line is removed automatically by something and she is able to access facebook again. This is sketchy as stuff and I am not the only one experiencing this. http://www.bleepingc...opic435876.html http://forum.avira.c...threadID=126207 http://www.techsuppo...sts-620204.html Whatever is causing this needs to be investigated further. I have tried everything, setting the host file to read only permissions, adding facebook.com multiple times. Whatever is deleting it is looking specifically for facebook.com and removing the line. Take a look. Friday I edit the host file to look like this, # Copyright © 1993-2009 Microsoft Corp. # # This is a sample HOSTS file used by Microsoft TCP/IP for Windows. # # This file contains the mappings of IP addresses to host names. Each # entry should be kept on an individual line. The IP address should # be placed in the first column followed by the corresponding host name. # The IP address and the host name should be separated by at least one # space. # # Additionally, comments (such as these) may be inserted on individual # lines or following the machine name denoted by a '#' symbol. # # For example: # # 102.54.94.97 rhino.acme.com # source server # 38.25.63.10 x.acme.com # x client host # localhost name resolution is handled within DNS itself. # 127.0.0.1 localhost # ::1 localhost # Block Facebook 127.0.0.1 static.ak.fbcdn.net 127.0.0.1 www.facebook.com 127.0.0.1 www.facebook.com 127.0.0.1 www.static.ak.fbcdn.net 127.0.0.1 login.facebook.com 127.0.0.1 www.facebook.com 127.0.0.1 www.facebook.com 127.0.0.1 www.login.facebook.com 127.0.0.1 fbcdn.net 127.0.0.1 www.fbcdn.net 127.0.0.1 fbcdn.com 127.0.0.1 www.facebook.com 127.0.0.1 www.facebook.com 127.0.0.1 www.fbcdn.com 127.0.0.1 static.ak.connect.facebook.com 127.0.0.1 www.static.ak.connect.facebook.com And Monday it will look like this # Copyright © 1993-2009 Microsoft Corp. # # This is a sample HOSTS file used by Microsoft TCP/IP for Windows. # # This file contains the mappings of IP addresses to host names. Each # entry should be kept on an individual line. The IP address should # be placed in the first column followed by the corresponding host name. # The IP address and the host name should be separated by at least one # space. # # Additionally, comments (such as these) may be inserted on individual # lines or following the machine name denoted by a '#' symbol. # # For example: # # 102.54.94.97 rhino.acme.com # source server # 38.25.63.10 x.acme.com # x client host # localhost name resolution is handled within DNS itself. # 127.0.0.1 localhost # ::1 localhost # Block Facebook 127.0.0.1 static.ak.fbcdn.net 127.0.0.1 www.static.ak.fbcdn.net 127.0.0.1 login.facebook.com 127.0.0.1 www.login.facebook.com 127.0.0.1 fbcdn.net 127.0.0.1 www.fbcdn.net 127.0.0.1 fbcdn.com 127.0.0.1 www.fbcdn.com 127.0.0.1 static.ak.connect.facebook.com 127.0.0.1 www.static.ak.connect.facebook.com I see no processes running related to Facebook. Nothing suspicious in the task scheduler. My wife claims that she is able to get in by clicking links in emails from Facebook but all links appear to be from facebook.com so they should have failed from the beginning. I appreciate any support. Hope to hear some ideas from your community soon. Thx! ---------- Begin Log--------- I have tried to clean unique identifiers from this related to work and usernames. . DDS (Ver_2011-08-26.01) - NTFSx86 Internet Explorer: 8.0.7601.17514 BrowserJavaVersion: 1.6.0_33 Run by username at 23:10:03 on 2012-08-27 Microsoft Windows 7 Enterprise 6.1.7601.1.1252.1.1033.18.1908.232 [GMT -4:00] . AV: McAfee VirusScan Enterprise *Enabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} SP: McAfee VirusScan Enterprise Antispyware Module *Enabled/Updated* {3D54B793-665E-3129-9103-206115370C8A} FW: McAfee Host Intrusion Prevention Firewall *Enabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C} . ============== Running Processes =============== . C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\ibmpmsvc.exe C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\WUDFHost.exe C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k WbioSvcGroup C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe C:\PROGRA~1\Lenovo\HOTKEY\tpnumlk.exe c:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe C:\Program Files\marimba\tuner\Tuner.exe C:\Program Files\McAfee\Host Intrusion Prevention\FireSvc.exe C:\Program Files\McAfee\Host Intrusion Prevention\HIPSCore\HIPSvc.exe C:\Windows\system32\svchost.exe -k HsfXAudioService C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe C:\Program Files\Intel\Intel® Management Engine Components\LMS\LMS.exe C:\Program Files\IBM\Lotus\Notes\nsd.exe c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe C:\Program Files\McAfee\Common Framework\FrameworkService.exe C:\Program Files\McAfee\VirusScan Enterprise\vstskmgr.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe C:\Windows\system32\mfevtps.exe C:\Program Files\IBM\Lotus\Notes\ntmulti.exe C:\Program Files\ VPN CLIENT\NvcSvcMgr.exe C:\Program Files\SupportSoft_Amer_i_7\bin\sprtsvc.exe C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe C:\Program Files\SupportSoft_Amer_i_7\bin\tgsrvc.exe C:\Windows\system32\rundll32.exe C:\Program Files\McAfee\Common Framework\naPrdMgr.exe C:\Program Files\McAfee\VirusScan Enterprise\mfeann.exe C:\Windows\system32\conhost.exe C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Windows\System32\svchost.exe -k secsvcs C:\Program Files\ThinkVantage Fingerprint Software\upeksvr.exe C:\PROGRA~1\Lenovo\HOTKEY\tpnumlkd.exe C:\Windows\system32\taskhost.exe C:\Program Files\marimba\tuner\.marimba\marimba\ch.25\data\sum.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe C:\Program Files\McAfee\Common Framework\UdaterUI.exe C:\Program Files\McAfee\Host Intrusion Prevention\FireTray.exe C:\Windows\System32\igfxpers.exe C:\Windows\system32\igfxsrvc.exe C:\Windows\System32\igfxtray.exe C:\Windows\System32\hkcmd.exe C:\Program Files\McAfee\Common Framework\McTray.exe C:\Windows\system32\SearchIndexer.exe C:\Program Files\SupportSoft_Amer_i_7\bin\sprtcmd.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE C:\Program Files\Intel\Intel® Management Engine Components\IMSS\PrivacyIconClient.exe C:\Program Files\Intel\Intel® Management Engine Components\UNS\UNS.exe C:\Windows\system32\calc.exe C:\Program Files\IBM\Lotus\Notes\NLNOTES.EXE C:\Program Files\IBM\Lotus\Notes\framework\rcp\eclipse\plugins\com.ibm.rcp.base_6.2.2.20101202-0021\win32\x86\notes2.exe C:\Program Files\IBM\Lotus\Notes\ntaskldr.EXE C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\plugin-container.exe c:\PROGRA~1\mcafee\SITEAD~1\saui.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\Program Files\Microsoft Office\Office12\WINWORD.EXE C:\Program Files\Microsoft Office\Office12\EXCEL.EXE C:\Program Files\marimba\tuner\lib\minituner.exe C:\Program Files\Microsoft Office\Office12\WINPROJ.EXE C:\Users\username\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\username\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\username\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\username\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\username\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\username\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\username\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\username\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\username\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\username\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\username\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\username\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Users\username\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\username\AppData\Local\Google\Chrome\Application\chrome.exe C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe C:\Users\username\AppData\Local\Temp\is-OCR82.tmp\mbam-setup.tmp C:\Windows\system32\SearchProtocolHost.exe C:\Windows\system32\SearchFilterHost.exe C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe C:\Windows\system32\conhost.exe C:\Windows\system32\wbem\wmiprvse.exe . ============== Pseudo HJT Report =============== . uStart Page = https://c3..com/ uDefault_Page_URL = https://c3..com uInternet Settings,ProxyOverride = <local> uURLSearchHooks: Coupons.com Toolbar: {37153479-1976-43c3-a1ee-557513977b64} - c:\program files\coupons.com\prxtbCou0.dll mURLSearchHooks: Coupons.com Toolbar: {37153479-1976-43c3-a1ee-557513977b64} - c:\program files\coupons.com\prxtbCou0.dll BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: Coupons.com Toolbar: {37153479-1976-43c3-a1ee-557513977b64} - c:\program files\coupons.com\prxtbCou0.dll BHO: Java™ Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll BHO: scriptproxy: {7db2d5a0-7241-4e79-b68d-6309f01c5231} - c:\program files\common files\mcafee\systemcore\ScriptSn.20120704161559.dll BHO: McAfee SiteAdvisor BHO: {b164e929-a1b6-4a06-b104-2cd0e90a88ff} - c:\progra~1\mcafee\sitead~1\mcieplg.dll BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll TB: Coupons.com Toolbar: {37153479-1976-43c3-a1ee-557513977b64} - c:\program files\coupons.com\prxtbCou0.dll TB: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll uRun: [Google Update] "c:\users\username\appdata\local\google\update\GoogleUpdate.exe" /c uRunOnce: [-ENG-IE8Updates-1.0-GBL-R2] "c:\program files\-eng-ie8updates-1.0-gbl-r2\IE8Update_Act.vbs" mRun: [<NO NAME>] mRun: [iJNetworkScanUtility] c:\program files\canon\canon ij network scan utility\CNMNSUT.exe mRun: [McAfeeUpdaterUI] "c:\program files\mcafee\common framework\udaterui.exe" /StartedFromRunKey mRun: [McAfee Host Intrusion Prevention Tray] "c:\program files\mcafee\host intrusion prevention\FireTray.exe" mRun: [Persistence] c:\windows\system32\igfxpers.exe mRun: [NVC] "c:\program files\ vpn client\Nvc.exe" -autostart mRun: [iMSS] "c:\program files\intel\intel® management engine components\imss\PIconStartup.exe" mRun: [igfxTray] c:\windows\system32\igfxtray.exe mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe mRun: [Everything] "c:\program files\everything\Everything.exe" -startup mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe" mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe" mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime mRun: [supportSoft_Amer_i_7] "c:\program files\supportsoft_amer_i_7\bin\sprtcmd.exe" /P SupportSoft_Amer_i_7 mRun: [shStatEXE] "c:\program files\mcafee\virusscan enterprise\SHSTAT.EXE" /STANDALONE mRun: [synTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe mRunOnce: [Malwarebytes Anti-Malware] c:\program files\malwarebytes' anti-malware\mbamgui.exe /install /silent StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\mcafee~1.lnk - c:\program files\mcafee security scan\2.0.181\SSScheduler.exe uPolicies-explorer: NoWindowsUpdate = 1 (0x1) uPolicies-explorer: GreyMSIAds = 1 (0x1) uPolicies-explorer: TaskbarNoNotification = 0 (0x0) mPolicies-explorer: NoPublishingWizard = 1 (0x1) mPolicies-explorer: NoWebServices = 1 (0x1) mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0) mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3) mPolicies-system: EnableInstallerDetection = 0 (0x0) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) mPolicies-system: FilterAdministratorToken = 1 (0x1) mPolicies-system: dontdisplaylockeduserid = 3 (0x3) mPolicies-system: LogonType = 0 (0x0) dPolicies-explorer: NoFileMenu = 1 (0x1) dPolicies-explorer: NoFileUrl = 1 (0x1) dPolicies-explorer: NoToolsMenu = 1 (0x1) dPolicies-explorer: NoWindowsUpdate = 1 (0x1) IE: E&xport to Microsoft Excel - c:\progra~1\micros~1\office12\EXCEL.EXE/3000 IE: Send image to &Bluetooth Device... - c:\program files\thinkpad\bluetooth software\btsendto_ie_ctx.htm IE: Send page to &Bluetooth Device... - c:\program files\thinkpad\bluetooth software\btsendto_ie.htm IE: {c95fe080-8f5d-11d2-a20b-00aa003c157a} IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\program files\thinkpad\bluetooth software\btsendto_ie.htm IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~1\office12\REFIEBAR.DLL Trusted Zone: bipac.net Trusted Zone: idea-central.net DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab TCP: DhcpNameServer = 192.168.2.1 TCP: Interfaces\{696E3B6C-6B22-475A-9739-52DB479C9256} : DhcpNameServer = 192.168.2.1 TCP: Interfaces\{696E3B6C-6B22-475A-9739-52DB479C9256}\34963736F68433231363 : DhcpNameServer = 10.1.10.1 TCP: Interfaces\{696E3B6C-6B22-475A-9739-52DB479C9256}\C41646C656370235F6570737 : DhcpNameServer = 192.168.2.1 TCP: Interfaces\{696E3B6C-6B22-475A-9739-52DB479C9256}\E4544574541425 : DhcpNameServer = 192.168.1.1 Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll Notify: igfxcui - igfxdev.dll Notify: psfus - c:\program files\thinkvantage fingerprint software\psqlpwd.dll LSA: Notification Packages = scecli c:\program files\thinkvantage fingerprint software\psqlpwd.dll mASetup: {3A00BDE2-D512-4D0A-8A9E-52E842431F7D} - c:\program files\-eng-ie8_updates-1.0-gbl-r1\IE8Update_Act.vbs mASetup: ADBFIX - c:\program files\patches\stub\ADB_Stub.EXE mASetup: -ENG-IE8Updates-1.0-GBL-R2 - "c:\program files\-eng-ie8updates-1.0-gbl-r2\IE8Update_Act.vbs" mASetup: ENG-SetMailtoLotusNotes-1.0-GBL-R1 - "c:\windows\system32\cmd.exe" /c "reg add hkcu\software\microsoft\windows\shell\associations\urlassociations\mailto\UserChoice /v Progid /d Notes.mailto /f" mASetup: OFFIX - c:\program files\patches\stub\OFF-FIX-STUB.EXE . ================= FIREFOX =================== . FF - ProfilePath - c:\users\username\appdata\roaming\mozilla\firefox\profiles\zyudn6re.default\ FF - prefs.js: browser.search.selectedEngine - Secure Search FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=mcafee&p= FF - prefs.js: network.proxy.type - 0 FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll FF - plugin: c:\program files\java\jre6\bin\plugin2\npjp2.dll FF - plugin: c:\program files\mcafee\siteadvisor\NPMcFFPlg32.dll FF - plugin: c:\program files\microsoft silverlight\5.1.10516.0\npctrlui.dll FF - plugin: c:\users\username\appdata\local\google\update\1.3.21.115\npGoogleUpdate3.dll FF - plugin: c:\users\username\appdata\roaming\mozilla\plugins\npatgpc.dll FF - plugin: c:\users\username\appdata\roaming\mozilla\plugins\npgoogletalk.dll FF - plugin: c:\users\username\appdata\roaming\mozilla\plugins\npgtpo3dautoplugin.dll FF - plugin: c:\windows\system32\npdeployJava1.dll FF - plugin: c:\windows\system32\npmproxy.dll . ============= SERVICES / DRIVERS =============== . R3 e1kexpress;Intel® PRO/1000 PCI Express Network Connection Driver K;c:\windows\system32\drivers\e1k6232.sys [2011-2-1 214696] R3 FirehkMP;FirehkMP;c:\windows\system32\drivers\firehk.sys [2011-2-1 44680] R3 HIPK;McAfee Inc. HIPK;c:\windows\system32\drivers\HIPK.sys [2011-2-1 107960] R3 HIPPSK;McAfee Inc. HIPPSK;c:\windows\system32\drivers\HIPPSK.sys [2011-2-1 38680] R3 HIPQK;McAfee Inc. HIPQK;c:\windows\system32\drivers\HIPQK.sys [2011-2-1 35552] S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888] S3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys [2011-2-1 45352] S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\drivers\btwl2cap.sys [2011-2-1 29472] S3 Firehk;McAfee NDIS Intermediate Filter;c:\windows\system32\drivers\firehk.sys [2011-2-1 44680] . =============== Created Last 30 ================ . 2012-08-28 03:09:55 40776 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2012-08-27 11:50:52 -------- d-----w- c:\users\username\appdata\roaming\smkits 2012-08-22 15:25:25 2345984 ----a-w- c:\windows\system32\win32k.sys 2012-08-22 15:21:51 41984 ----a-w- c:\windows\system32\browcli.dll 2012-08-22 15:21:51 102912 ----a-w- c:\windows\system32\browser.dll 2012-08-22 15:21:26 769024 ----a-w- c:\windows\system32\localspl.dll 2012-08-20 17:04:50 40328 ----a-w- c:\windows\system32\HIPIS0e011b5.dll 2012-08-20 13:05:56 -------- d-----w- c:\windows\system32\SPReview 2012-08-20 11:53:59 198144 ----a-w- c:\windows\system32\sysclass.dll 2012-08-20 11:51:04 -------- d-----w- c:\windows\system32\EventProviders 2012-08-20 11:47:55 123904 ----a-w- c:\windows\system32\poqexec.exe 2012-08-16 15:51:05 56200 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{9a69a146-b4c8-42c1-a1a3-8bbc57ef09e6}\offreg.dll 2012-08-16 15:49:59 6891424 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{9a69a146-b4c8-42c1-a1a3-8bbc57ef09e6}\mpengine.dll 2012-08-16 15:49:58 -------- d-----w- C:\15b02a4ca90d6d3cfc48adf930e3 2012-07-31 17:52:06 1461992 ----a-w- c:\windows\system32\WdfCoInstaller01009.dll 2012-07-31 17:52:03 122128 ----a-w- c:\windows\system32\SynTPCo9.dll 2012-07-31 17:52:02 323344 ----a-w- c:\windows\system32\drivers\SynTP.sys 2012-07-31 17:52:02 175376 ----a-w- c:\windows\system32\SynTPAPI.dll 2012-07-31 17:52:01 1048576 ----a-w- c:\windows\system32\syndata.bin 2012-07-31 17:52:00 400656 ----a-w- c:\windows\system32\SynCOM.dll 2012-07-31 17:52:00 249104 ----a-w- c:\windows\system32\SynCtrl.dll 2012-07-31 17:50:56 -------- d-----w- C:\DRIVERS . ==================== Find3M ==================== . 2012-08-20 12:53:07 152576 ----a-w- c:\windows\system32\msclmd.dll 2012-08-09 05:43:30 143040 ----a-w- c:\windows\system32\KevlarSigs.dll 2012-07-15 18:52:16 476936 ----a-w- c:\windows\system32\npdeployJava1.dll 2012-07-15 18:52:15 472840 ----a-w- c:\windows\system32\deployJava1.dll 2012-07-05 20:19:36 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2012-07-05 20:19:36 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2012-07-04 20:13:38 164840 ----a-w- c:\windows\system32\drivers\mfewfpk.sys 2012-07-04 20:13:37 87808 ----a-w- c:\windows\system32\drivers\mferkdet.sys 2012-07-04 20:13:37 74848 ----a-w- c:\windows\system32\MfeOtlkAddin.dll 2012-07-04 20:13:37 461864 ----a-w- c:\windows\system32\drivers\mfehidk.sys 2012-07-04 20:13:37 22816 ----a-w- c:\windows\system32\MFEOtlk.dll 2012-07-04 20:13:37 148520 ----a-w- c:\windows\system32\mfevtps.exe 2012-07-04 20:13:36 9344 ----a-w- c:\windows\system32\drivers\mfeclnk.sys 2012-07-04 20:13:36 59288 ----a-w- c:\windows\system32\drivers\mfebopk.sys 2012-07-04 20:13:36 180072 ----a-w- c:\windows\system32\drivers\mfeavfk.sys 2012-07-04 20:13:36 119968 ----a-w- c:\windows\system32\drivers\mfeapfk.sys 2012-07-03 17:46:44 22344 ----a-w- c:\windows\system32\drivers\mbam.sys 2012-06-27 05:53:07 981504 ----a-w- c:\windows\system32\wininet.dll 2012-06-27 04:10:55 1638912 ----a-w- c:\windows\system32\mshtml.tlb 2012-06-07 00:59:42 1070152 ----a-w- c:\windows\system32\MSCOMCTL.OCX 2012-06-06 05:05:52 1390080 ----a-w- c:\windows\system32\msxml6.dll 2012-06-06 05:05:52 1236992 ----a-w- c:\windows\system32\msxml3.dll 2012-06-06 05:03:06 805376 ----a-w- c:\windows\system32\cdosys.dll 2012-06-02 22:12:32 2422272 ----a-w- c:\windows\system32\wucltux.dll 2012-06-02 22:12:13 88576 ----a-w- c:\windows\system32\wudriver.dll 2012-06-02 19:19:42 171904 ----a-w- c:\windows\system32\wuwebv.dll 2012-06-02 19:12:20 33792 ----a-w- c:\windows\system32\wuapp.exe 2012-06-02 04:45:04 67440 ----a-w- c:\windows\system32\drivers\ksecdd.sys 2012-06-02 04:45:03 134000 ----a-w- c:\windows\system32\drivers\ksecpkg.sys 2012-06-02 04:40:59 369336 ----a-w- c:\windows\system32\drivers\cng.sys 2012-06-02 04:40:39 225280 ----a-w- c:\windows\system32\schannel.dll 2012-06-02 04:39:10 219136 ----a-w- c:\windows\system32\ncrypt.dll 2012-05-31 16:25:14 237072 ------w- c:\windows\system32\MpSigStub.exe . ============= FINISH: 23:14:03.74 =============== Sorry for the small font, I copied from a previous thread that was in the wrong topic. In case my original post was too small I have been trying to block Facebook on my wife computer (per her request) for a little over a week now. Every time I update the host file and add 127.0.0.1 www.facebook.com to the host file. Every time I do this it blocks facebook for a period of time. Then eventually the line is removed automatically by something and she is able to access facebook again. This is sketchy as stuff and I am not the only one experiencing this. http://www.bleepingc...opic435876.html http://forum.avira.c...threadID=126207 http://www.techsuppo...sts-620204.html Whatever is causing this needs to be investigated further. I have tried everything, setting the host file to read only permissions, adding facebook.com multiple times. Whatever is deleting it is looking specifically for facebook.com and removing the line. Take a look. Friday I edit the host file to look like this, # Copyright © 1993-2009 Microsoft Corp. # # This is a sample HOSTS file used by Microsoft TCP/IP for Windows. # # This file contains the mappings of IP addresses to host names. Each # entry should be kept on an individual line. The IP address should # be placed in the first column followed by the corresponding host name. # The IP address and the host name should be separated by at least one # space. # # Additionally, comments (such as these) may be inserted on individual # lines or following the machine name denoted by a '#' symbol. # # For example: # # 102.54.94.97 rhino.acme.com # source server # 38.25.63.10 x.acme.com # x client host # localhost name resolution is handled within DNS itself. # 127.0.0.1 localhost # ::1 localhost # Block Facebook 127.0.0.1 static.ak.fbcdn.net 127.0.0.1 www.facebook.com 127.0.0.1 www.facebook.com 127.0.0.1 www.static.ak.fbcdn.net 127.0.0.1 login.facebook.com 127.0.0.1 www.facebook.com 127.0.0.1 www.facebook.com 127.0.0.1 www.login.facebook.com 127.0.0.1 fbcdn.net 127.0.0.1 www.fbcdn.net 127.0.0.1 fbcdn.com 127.0.0.1 www.facebook.com 127.0.0.1 www.facebook.com 127.0.0.1 www.fbcdn.com 127.0.0.1 static.ak.connect.facebook.com 127.0.0.1 www.static.ak.connect.facebook.com And Monday it will look like this # Copyright © 1993-2009 Microsoft Corp. # # This is a sample HOSTS file used by Microsoft TCP/IP for Windows. # # This file contains the mappings of IP addresses to host names. Each # entry should be kept on an individual line. The IP address should # be placed in the first column followed by the corresponding host name. # The IP address and the host name should be separated by at least one # space. # # Additionally, comments (such as these) may be inserted on individual # lines or following the machine name denoted by a '#' symbol. # # For example: # # 102.54.94.97 rhino.acme.com # source server # 38.25.63.10 x.acme.com # x client host # localhost name resolution is handled within DNS itself. # 127.0.0.1 localhost # ::1 localhost # Block Facebook 127.0.0.1 static.ak.fbcdn.net 127.0.0.1 www.static.ak.fbcdn.net 127.0.0.1 login.facebook.com 127.0.0.1 www.login.facebook.com 127.0.0.1 fbcdn.net 127.0.0.1 www.fbcdn.net 127.0.0.1 fbcdn.com 127.0.0.1 www.fbcdn.com 127.0.0.1 static.ak.connect.facebook.com 127.0.0.1 www.static.ak.connect.facebook.com I see no processes running related to Facebook. Nothing suspicious in the task scheduler. My wife claims that she is able to get in by clicking links in emails from Facebook but all links appear to be from facebook.com so they should have failed from the beginning. I appreciate any support. Hope to hear some ideas from your community soon. Thx!
  17. Facebook redirects to mediaplex.com on IE9, but facebook still works when I use Chrome. Malwarebytes and Avast did not find any viruses/infected files. DDS . DDS (Ver_2011-08-26.01) - NTFSAMD64 Internet Explorer: 9.0.8112.16421 Run by Angeline Xiong at 16:13:21 on 2012-07-12 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.4044.1400 [GMT -7:00] . AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C} AV: Norton Internet Security *Disabled/Outdated* {63DF5164-9100-186D-2187-8DC619EFD8BF} SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} SP: Norton Internet Security *Disabled/Outdated* {D8BEB080-B73A-17E3-1B37-B6B462689202} FW: Norton Internet Security *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4} . ============== Running Processes =============== . C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Program Files\IDT\WDM\STacSV64.exe C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\Hpservice.exe C:\Program Files\WTouch\WTouchService.exe C:\Windows\system32\WUDFHost.exe C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\system32\WLANExt.exe C:\Program Files\AVAST Software\Avast\AvastSvc.exe C:\Windows\system32\conhost.exe C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k WbioSvcGroup C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe C:\Program Files\IDT\WDM\AESTSr64.exe C:\Windows\SysWOW64\ezSharedSvcHost.exe C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe C:\Windows\system32\svchost.exe -k imgsvc C:\Windows\system32\Pen_Tablet.exe C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Windows\system32\SearchIndexer.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe C:\Windows\SYSTEM32\WISPTIS.EXE C:\Windows\system32\taskhost.exe C:\Windows\SYSTEM32\WISPTIS.EXE C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe C:\Program Files\WTouch\WTouchUser.exe C:\Windows\system32\WTablet\Pen_TabletUser.exe C:\Program Files (x86)\HP SimplePass 2011\TouchControl.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\Pen_Tablet.exe C:\Program Files (x86)\HP SimplePass 2011\BioMonitor.exe C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe C:\Windows\system32\wbem\unsecapp.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Windows\System32\hkcmd.exe C:\Windows\System32\igfxpers.exe C:\Program Files\IDT\WDM\sttray64.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Windows\System32\StikyNot.exe C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe C:\Windows\system32\taskeng.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files\AVAST Software\Avast\AvastUI.exe C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpConnectionManager.exe C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe C:\Program Files (x86)\CyberLink\Shared files\brs.exe C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe C:\Windows\System32\svchost.exe -k LocalServicePeerNet C:\Windows\System32\svchost.exe -k secsvcs C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe C:\Windows\system32\DllHost.exe C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe C:\Program Files (x86)\Hewlett-Packard\Shared\hpCaslNotification.exe C:\Windows\system32\svchost.exe -k SDRSVC C:\Program Files (x86)\Skype\Phone\Skype.exe C:\Windows\system32\taskhost.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_265_ActiveX.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Windows\SysWOW64\ctfmon.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Windows\system32\DllHost.exe C:\Windows\system32\DllHost.exe C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\conhost.exe C:\Windows\SysWOW64\cscript.exe . ============== Pseudo HJT Report =============== . uURLSearchHooks: H - No File mWinlogon: Userinit=C:\Windows\system32\userinit.exe BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll BHO: Symantec NCO BHO: {602adb0e-4aff-4217-8aa1-95dac4dfa408} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll BHO: Symantec Intrusion Prevention: {6d53ec84-6aae-4787-aeee-f4628f01010c} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\IPS\IPSBHO.DLL BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL BHO: TrueSuite Website Log On: {8590886e-ec8c-43c1-a32c-e4c2b0b6395b} - C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll BHO: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL BHO: Bing Bar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll TB: Norton Toolbar: {7febefe3-6b19-4349-98d2-ffb09d4b49ca} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll TB: Bing Bar: {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" TB: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll TB: {50FAFAF0-70A9-419D-A109-FA4B4FFD4E37} - No File uRun: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun uRun: [AdobeBridge] uRun: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe uRun: [Google Update] "C:\Users\Angeline Xiong\AppData\Local\Google\Update\GoogleUpdate.exe" /c mRun: [iAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe mRun: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" mRun: [HPConnectionManager] C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe mRun: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" mRun: [<NO NAME>] mRun: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" mRun: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui mRun: [bCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices mRun: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe mRun: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe mRun: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" mRun: [bDRegion] C:\Program Files (x86)\Cyberlink\Shared files\brs.exe mRun: [switchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe mRun: [AdobeCS5.5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin StartupFolder: C:\Users\ANGELI~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\ONENOT~1.LNK - C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE mPolicies-explorer: NoActiveDesktop = 1 (0x1) mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1) mPolicies-explorer: EnableShellExecuteHooks = 1 (0x1) mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5) mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) mPolicies-system: HideFastUserSwitching = 0 (0x0) IE: Add to Evernote 4.0 - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 IE: Se&nd to OneNote - C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105 IE: {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll Trusted Zone: case.edu\studentaffairs Trusted Zone: charmsoffice.com\www Trusted Zone: facebook.com Trusted Zone: facebook.com\www Trusted Zone: gaiaonline.com\www Trusted Zone: grooveshark.com Trusted Zone: grooveshark.com\www DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab TCP: DhcpNameServer = 192.168.1.1 208.67.222.222 208.67.220.220 TCP: Interfaces\{62EEDA19-CA09-44CA-9A42-797995F1FABF} : NameServer = 208.67.222.222,208.67.220.220 TCP: Interfaces\{62EEDA19-CA09-44CA-9A42-797995F1FABF} : DhcpNameServer = 192.168.1.1 208.67.222.222 208.67.220.220 TCP: Interfaces\{76930F41-7A57-4BF0-BC22-9093D9B1EF20} : NameServer = 208.67.222.222,208.67.220.220 TCP: Interfaces\{76930F41-7A57-4BF0-BC22-9093D9B1EF20} : DhcpNameServer = 192.168.1.1 208.67.222.222 208.67.220.220 TCP: Interfaces\{76930F41-7A57-4BF0-BC22-9093D9B1EF20}\7516B616027716B616 : NameServer = 208.67.222.222,208.67.220.220 TCP: Interfaces\{76930F41-7A57-4BF0-BC22-9093D9B1EF20}\7516B616027716B616 : DhcpNameServer = 192.168.1.1 208.67.222.222 208.67.220.220 TCP: Interfaces\{76930F41-7A57-4BF0-BC22-9093D9B1EF20}\C696E6B6379737 : NameServer = 208.67.222.222,208.67.220.220 TCP: Interfaces\{76930F41-7A57-4BF0-BC22-9093D9B1EF20}\C696E6B6379737 : DhcpNameServer = 192.168.1.1 68.105.28.12 68.105.29.12 Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL mASetup: {2D46B6DC-2207-486B-B523-A557E6D54B47} - C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll BHO-X64: AcroIEHelperStub - No File BHO-X64: Symantec NCO BHO: {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll BHO-X64: Symantec NCO BHO - No File BHO-X64: Symantec Intrusion Prevention: {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\IPS\IPSBHO.DLL BHO-X64: Symantec Intrusion Prevention - No File BHO-X64: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL BHO-X64: TrueSuite Website Log On: {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll BHO-X64: TSBHO Class - No File BHO-X64: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll BHO-X64: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll BHO-X64: SkypeIEPluginBHO - No File BHO-X64: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL BHO-X64: URLRedirectionBHO - No File BHO-X64: Bing Bar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" BHO-X64: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll TB-X64: Norton Toolbar: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll TB-X64: Bing Bar: {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" TB-X64: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll TB-X64: {50FAFAF0-70A9-419D-A109-FA4B4FFD4E37} - No File mRun-x64: [iAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe mRun-x64: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" mRun-x64: [HPConnectionManager] C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe mRun-x64: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe mRun-x64: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" mRun-x64: [(Default)] mRun-x64: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" mRun-x64: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui mRun-x64: [bCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices mRun-x64: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe mRun-x64: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe mRun-x64: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" mRun-x64: [bDRegion] C:\Program Files (x86)\Cyberlink\Shared files\brs.exe mRun-x64: [switchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe mRun-x64: [AdobeCS5.5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin IE-X64: {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 SEH-X64: Groove GFS Stub Execution Hook: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL . ============= SERVICES / DRIVERS =============== . R0 SymDS;Symantec Data Store;C:\Windows\system32\drivers\NISx64\1207020.003\SYMDS64.SYS --> C:\Windows\system32\drivers\NISx64\1207020.003\SYMDS64.SYS [?] R0 SymEFA;Symantec Extended File Attributes;C:\Windows\system32\drivers\NISx64\1207020.003\SYMEFA64.SYS --> C:\Windows\system32\drivers\NISx64\1207020.003\SYMEFA64.SYS [?] R1 aswSnx;aswSnx;C:\Windows\system32\drivers\aswSnx.sys --> C:\Windows\system32\drivers\aswSnx.sys [?] R1 aswSP;aswSP;C:\Windows\system32\drivers\aswSP.sys --> C:\Windows\system32\drivers\aswSP.sys [?] R1 BHDrvx64;BHDrvx64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\BASHDefs\20101123.003\BHDrvx64.sys [2011-10-22 953904] R1 IDSVia64;IDSVia64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\IPSDefs\20101201.001\IDSviA64.sys [2011-10-22 476792] R1 SymIRON;Symantec Iron Driver;C:\Windows\system32\drivers\NISx64\1207020.003\Ironx64.SYS --> C:\Windows\system32\drivers\NISx64\1207020.003\Ironx64.SYS [?] R1 SymNetS;Symantec Network Security WFP Driver;C:\Windows\system32\Drivers\NISx64\1207020.003\SYMNETS.SYS --> C:\Windows\system32\Drivers\NISx64\1207020.003\SYMNETS.SYS [?] R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys --> C:\Windows\system32\DRIVERS\vwififlt.sys [?] R2 AdobeARMservice;Adobe Acrobat Update Service;C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-1-3 63928] R2 AESTFilters;Andrea ST Filters Service;C:\Program Files\IDT\WDM\AESTSr64.exe [2011-12-4 89600] R2 aswFsBlk;aswFsBlk;C:\Windows\system32\drivers\aswFsBlk.sys --> C:\Windows\system32\drivers\aswFsBlk.sys [?] R2 aswMonFlt;aswMonFlt;\??\C:\Windows\system32\drivers\aswMonFlt.sys --> C:\Windows\system32\drivers\aswMonFlt.sys [?] R2 avast! Antivirus;avast! Antivirus;C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-7-9 44808] R2 ezSharedSvc;Easybits Services for Windows;C:\Windows\System32\ezSharedSvcHost.exe [2011-8-24 514232] R2 FPLService;TrueSuiteService;C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe [2011-8-25 260424] R2 HP Support Assistant Service;HP Support Assistant Service;C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe [2011-9-9 86072] R2 HPClientSvc;HP Client Services;C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe [2010-10-11 346168] R2 HPDrvMntSvc.exe;HP Quick Synchronization Service;C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-9-1 227896] R2 hpsrv;HP Service;C:\Windows\system32\Hpservice.exe --> C:\Windows\system32\Hpservice.exe [?] R2 HPWMISVC;HPWMISVC;C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2011-7-11 26680] R2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-10-22 13592] R2 IconMan_R;IconMan_R;C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2011-12-4 2413056] R2 jhi_service;Intel® Identity Protection Technology Host Interface Service;C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe [2011-2-24 212944] R2 NIS;Norton Internet Security;C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\ccsvchst.exe [2012-6-11 130008] R2 PSI_SVC_2_x64;Protexis Licensing V2 x64;C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [2010-11-30 336824] R2 RoxioNow Service;RoxioNow Service;C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe [2010-11-26 399344] R2 Skype C2C Service;Skype C2C Service;C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-6-19 3048136] R2 TabletServicePen;TabletServicePen;C:\Windows\system32\Pen_Tablet.exe --> C:\Windows\system32\Pen_Tablet.exe [?] R2 UNS;Intel® Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2011-10-22 2656280] R2 WTouchService;WTouch Service;C:\Program Files\WTouch\WTouchService.exe [2011-12-28 127784] R3 clwvd;CyberLink WebCam Virtual Driver;C:\Windows\system32\DRIVERS\clwvd.sys --> C:\Windows\system32\DRIVERS\clwvd.sys [?] R3 EraserUtilRebootDrv;EraserUtilRebootDrv;C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2011-10-22 132656] R3 hpCMSrv;HP Connection Manager 4.0 Service;C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe [2011-2-15 1071160] R3 IntcDAud;Intel® Display Audio;C:\Windows\system32\DRIVERS\IntcDAud.sys --> C:\Windows\system32\DRIVERS\IntcDAud.sys [?] R3 MEIx64;Intel® Management Engine Interface;C:\Windows\system32\DRIVERS\HECIx64.sys --> C:\Windows\system32\DRIVERS\HECIx64.sys [?] R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;C:\Windows\system32\DRIVERS\nusb3hub.sys --> C:\Windows\system32\DRIVERS\nusb3hub.sys [?] R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;C:\Windows\system32\DRIVERS\nusb3xhc.sys --> C:\Windows\system32\DRIVERS\nusb3xhc.sys [?] R3 osppsvc;Office Software Protection Platform;C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-1-9 4925184] R3 RSPCIESTOR;Realtek PCIE CardReader Driver;C:\Windows\system32\DRIVERS\RtsPStor.sys --> C:\Windows\system32\DRIVERS\RtsPStor.sys [?] R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\system32\DRIVERS\Rt64win7.sys --> C:\Windows\system32\DRIVERS\Rt64win7.sys [?] S2 CLKMSVC10_38F51D56;CyberLink Product - 2011/12/04 13:46:31;C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [2011-2-24 241648] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576] S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-6-5 160944] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-3-29 250056] S3 BBSvc;Bing Bar Update Service;C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-3-1 183560] S3 GamesAppService;GamesAppService;C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072] S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-1-21 30963576] S3 SrvHsfHDA;SrvHsfHDA;C:\Windows\system32\DRIVERS\VSTAZL6.SYS --> C:\Windows\system32\DRIVERS\VSTAZL6.SYS [?] S3 SrvHsfV92;SrvHsfV92;C:\Windows\system32\DRIVERS\VSTDPV6.SYS --> C:\Windows\system32\DRIVERS\VSTDPV6.SYS [?] S3 SrvHsfWinac;SrvHsfWinac;C:\Windows\system32\DRIVERS\VSTCNXT6.SYS --> C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [?] S3 SwitchBoard;Adobe SwitchBoard;C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-2-19 517096] S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?] S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\system32\drivers\TsUsbGD.sys --> C:\Windows\system32\drivers\TsUsbGD.sys [?] S3 wacmoumonitor;Wacom Mode Helper;C:\Windows\system32\DRIVERS\wacmoumonitor.sys --> C:\Windows\system32\DRIVERS\wacmoumonitor.sys [?] S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\system32\Wat\WatAdminSvc.exe --> C:\Windows\system32\Wat\WatAdminSvc.exe [?] S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184] . =============== Created Last 30 ================ . 2012-07-12 19:12:58 -------- d-----w- C:\Users\Angeline Xiong\AppData\Local\ElevatedDiagnostics 2012-07-12 15:38:43 9013136 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D87519D1-62F6-4F0B-B35E-15AA76FCF609}\mpengine.dll 2012-07-12 13:36:36 3148800 ----a-w- C:\Windows\System32\win32k.sys 2012-07-12 00:30:34 -------- d-----w- C:\Users\Angeline Xiong\AppData\Roaming\Malwarebytes 2012-07-12 00:30:12 -------- d-----w- C:\ProgramData\Malwarebytes 2012-07-12 00:30:11 24904 ----a-w- C:\Windows\System32\drivers\mbam.sys 2012-07-12 00:30:11 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware 2012-07-08 08:49:03 -------- d-----w- C:\Users\Angeline Xiong\riotsGamesLogs 2012-06-21 12:21:27 2622464 ----a-w- C:\Windows\System32\wucltux.dll 2012-06-21 12:21:06 99840 ----a-w- C:\Windows\System32\wudriver.dll 2012-06-21 12:20:35 36864 ----a-w- C:\Windows\System32\wuapp.exe 2012-06-21 12:20:35 186752 ----a-w- C:\Windows\System32\wuwebv.dll 2012-06-20 20:36:07 -------- d-----w- C:\Users\Angeline Xiong\AppData\Roaming\IDT 2012-06-17 19:02:26 -------- d-----w- C:\Users\Angeline Xiong\AppData\Roaming\LolClient . ==================== Find3M ==================== . 2012-07-11 18:21:26 70344 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl 2012-07-11 18:21:26 426184 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe 2012-07-03 16:21:52 958400 ----a-w- C:\Windows\System32\drivers\aswSnx.sys 2012-07-03 16:21:52 71064 ----a-w- C:\Windows\System32\drivers\aswMonFlt.sys 2012-07-03 16:21:52 54072 ----a-w- C:\Windows\System32\drivers\aswRdr2.sys 2012-07-03 16:21:32 41224 ----a-w- C:\Windows\avastSS.scr 2012-06-06 06:06:16 2004480 ----a-w- C:\Windows\System32\msxml6.dll 2012-06-06 06:06:16 1881600 ----a-w- C:\Windows\System32\msxml3.dll 2012-06-06 06:02:54 1133568 ----a-w- C:\Windows\System32\cdosys.dll 2012-06-06 05:05:52 1390080 ----a-w- C:\Windows\SysWow64\msxml6.dll 2012-06-06 05:05:52 1236992 ----a-w- C:\Windows\SysWow64\msxml3.dll 2012-06-06 05:03:06 805376 ----a-w- C:\Windows\SysWow64\cdosys.dll 2012-06-02 05:50:10 458704 ----a-w- C:\Windows\System32\drivers\cng.sys 2012-06-02 05:48:16 95600 ----a-w- C:\Windows\System32\drivers\ksecdd.sys 2012-06-02 05:48:16 151920 ----a-w- C:\Windows\System32\drivers\ksecpkg.sys 2012-06-02 05:45:31 340992 ----a-w- C:\Windows\System32\schannel.dll 2012-06-02 05:44:21 307200 ----a-w- C:\Windows\System32\ncrypt.dll 2012-06-02 04:40:42 22016 ----a-w- C:\Windows\SysWow64\secur32.dll 2012-06-02 04:40:39 225280 ----a-w- C:\Windows\SysWow64\schannel.dll 2012-06-02 04:39:10 219136 ----a-w- C:\Windows\SysWow64\ncrypt.dll 2012-06-02 04:34:09 96768 ----a-w- C:\Windows\SysWow64\sspicli.dll 2012-05-04 11:06:22 5559664 ----a-w- C:\Windows\System32\ntoskrnl.exe 2012-05-04 10:03:53 3968368 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe 2012-05-04 10:03:50 3913072 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe 2012-05-01 05:40:20 209920 ----a-w- C:\Windows\System32\profsvc.dll 2012-04-28 03:55:21 210944 ----a-w- C:\Windows\System32\drivers\rdpwd.sys 2012-04-26 05:41:56 77312 ----a-w- C:\Windows\System32\rdpwsx.dll 2012-04-26 05:41:55 149504 ----a-w- C:\Windows\System32\rdpcorekmts.dll 2012-04-26 05:34:27 9216 ----a-w- C:\Windows\System32\rdrmemptylst.exe 2012-04-24 05:37:37 184320 ----a-w- C:\Windows\System32\cryptsvc.dll 2012-04-24 05:37:37 140288 ----a-w- C:\Windows\System32\cryptnet.dll 2012-04-24 05:37:36 1462272 ----a-w- C:\Windows\System32\crypt32.dll 2012-04-24 04:36:42 140288 ----a-w- C:\Windows\SysWow64\cryptsvc.dll 2012-04-24 04:36:42 1158656 ----a-w- C:\Windows\SysWow64\crypt32.dll 2012-04-24 04:36:42 103936 ----a-w- C:\Windows\SysWow64\cryptnet.dll . ============= FINISH: 16:13:40.26 =============== Attach . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-08-26.01) . Microsoft Windows 7 Home Premium Boot Device: \Device\HarddiskVolume1 Install Date: 11/26/2011 1:11:59 PM System Uptime: 7/12/2012 12:45:06 PM (4 hours ago) . Motherboard: Hewlett-Packard | | 1802 Processor: Intel® Core™ i7-2670QM CPU @ 2.20GHz | CPU1 | 2201/1333mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 579 GiB total, 521.566 GiB free. D: is FIXED (NTFS) - 17 GiB total, 1.845 GiB free. E: is CDROM () F: is FIXED (NTFS) - 1397 GiB total, 1195.681 GiB free. . ==== Disabled Device Manager Items ============= . ==== System Restore Points =================== . RP120: 6/26/2012 1:31:57 PM - Windows Update RP121: 7/3/2012 4:59:00 AM - Windows Update RP122: 7/6/2012 2:33:03 AM - Windows Modules Installer RP123: 7/6/2012 2:41:35 AM - Windows Modules Installer RP124: 7/6/2012 11:36:04 AM - Windows Update RP125: 7/10/2012 9:51:54 AM - Windows Update RP126: 7/11/2012 9:24:25 PM - Windows Modules Installer RP127: 7/11/2012 9:42:38 PM - Windows Modules Installer RP128: 7/12/2012 6:30:59 AM - Windows Update RP129: 7/12/2012 12:35:22 PM - Windows Update . ==== Installed Programs ====================== . Adobe AIR Adobe Community Help Adobe Dreamweaver CS5.5 Adobe Flash Player 11 ActiveX Adobe Flash Player 11 Plugin Adobe Flash Professional CS5.5 Adobe Illustrator CS5.1 Adobe Reader X (10.1.3) Adobe Shockwave Player 11.5 Adobe Widget Browser Agatha Christie - Peril at End House avast! Free Antivirus Bamboo Bejeweled 2 Deluxe Bejeweled 3 Bing Bar Blackhawk Striker 2 Blasterball 3 Blio Bounce Symphony Build-a-lot 2 Cake Mania Chuzzle Deluxe CyberLink PowerDVD CyberLink YouCam D3DX10 Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition Diner Dash 2 Restaurant Rescue Dora's World Adventure Energy Star Digital Logo ESU for Microsoft Windows 7 Evernote v. 4.2.2 Farm Frenzy FATE - The Traitor Soul Google Chrome Hewlett-Packard ACLM.NET v1.1.2.0 HP Connection Manager HP Customer Experience Enhancements HP Documentation HP DVB-T TV Tuner 8.0.64.43 HP Games HP MovieStore HP On Screen Display HP Power Manager HP Quick Launch HP Setup HP Setup Manager HP SimplePass 2011 HP Software Framework HP Support Assistant IDT Audio Intel® Control Center Intel® Identity Protection Technology 1.1.2.0 Intel® Management Engine Components Intel® Processor Graphics Intel® Rapid Storage Technology Java Auto Updater Java™ 6 Update 29 Junk Mail filter update League of Legends Mah Jong Medley Malwarebytes Anti-Malware version 1.62.0.1300 Mesh Runtime Microsoft Office 2010 Microsoft Office Access MUI (English) 2010 Microsoft Office Access Setup Metadata MUI (English) 2010 Microsoft Office Excel MUI (English) 2010 Microsoft Office Groove MUI (English) 2010 Microsoft Office InfoPath MUI (English) 2010 Microsoft Office OneNote MUI (English) 2010 Microsoft Office Outlook MUI (English) 2010 Microsoft Office PowerPoint MUI (English) 2010 Microsoft Office Professional Plus 2010 Microsoft Office Proof (English) 2010 Microsoft Office Proof (French) 2010 Microsoft Office Proof (Spanish) 2010 Microsoft Office Proofing (English) 2010 Microsoft Office Publisher MUI (English) 2010 Microsoft Office Shared MUI (English) 2010 Microsoft Office Shared Setup Metadata MUI (English) 2010 Microsoft Office Word MUI (English) 2010 Microsoft Silverlight Microsoft SQL Server 2005 Compact Edition [ENU] Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft WSE 3.0 Runtime Microsoft_VC80_ATL_x86 Microsoft_VC80_CRT_x86 Microsoft_VC80_MFC_x86 Microsoft_VC80_MFCLOC_x86 Microsoft_VC90_ATL_x86 Microsoft_VC90_CRT_x86 Microsoft_VC90_MFC_x86 Microsoft_VC90_MFCLOC_x86 MSVCRT MSVCRT_amd64 MSXML 4.0 SP2 (KB954430) MSXML 4.0 SP2 (KB973688) Mystery P.I. - Stolen in San Francisco Namco All-Stars PAC-MAN Norton Internet Security Pando Media Booster Penguins! Plants vs. Zombies - Game of the Year PlayReady PC Runtime x86 Poker Superstars III Polar Bowler Polar Golfer Realtek Ethernet Controller Driver Realtek PCIE Card Reader Recovery Manager Renesas Electronics USB 3.0 Host Controller Driver RoxioNow Player Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636) Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078) Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121) Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405) Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827) Skype Click to Call Skype™ 5.9 Slingo Supreme Update for Microsoft .NET Framework 4 Client Profile (KB2468871) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) Update for Microsoft Office 2010 (KB2494150) Update for Microsoft Office 2010 (KB2553092) Update Installer for WildTangent Games App VIP Access SDK (1.0.1.2) Virtual Villagers 4 - The Tree of Life WebTablet IE Plugin WebTablet Netscape Plugin Wheel of Fortune 2 WildTangent Games App (HP Games) Windows Live Communications Platform Windows Live Essentials Windows Live Installer Windows Live Mail Windows Live Mesh Windows Live Mesh ActiveX Control for Remote Connections Windows Live Messenger Windows Live Movie Maker Windows Live Photo Common Windows Live Photo Gallery Windows Live PIMT Platform Windows Live SOXE Windows Live SOXE Definitions Windows Live UX Platform Windows Live UX Platform Language Pack Windows Live Writer Windows Live Writer Resources Zuma Deluxe . ==== Event Viewer Messages From Past Week ======== . 7/9/2012 8:10:39 PM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\DR9. 7/9/2012 8:00:22 PM, Error: Service Control Manager [7031] - The Windows Font Cache Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service. 7/9/2012 8:00:22 PM, Error: Service Control Manager [7031] - The UPnP Device Host service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 100 milliseconds: Restart the service. 7/9/2012 8:00:22 PM, Error: Service Control Manager [7031] - The SSDP Discovery service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 100 milliseconds: Restart the service. 7/9/2012 8:00:22 PM, Error: Service Control Manager [7031] - The Function Discovery Resource Publication service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service. 7/8/2012 5:01:49 PM, Error: Schannel [36888] - The following fatal alert was generated: 10. The internal error state is 10. 7/8/2012 12:26:03 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the ShellHWDetection service. 7/5/2012 9:24:41 PM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\DR7. 7/5/2012 4:52:24 PM, Error: volsnap [14] - The shadow copies of volume F: were aborted because of an IO failure on volume F:. 7/5/2012 4:52:15 PM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\DR4. 7/5/2012 4:17:13 AM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\DR1. 7/12/2012 6:30:21 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the NIS service. 7/12/2012 6:30:21 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the HPClientSvc service. 7/12/2012 12:51:23 PM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80242016: Update for Windows 7 for x64-based Systems (KB2703157). 7/11/2012 8:17:38 PM, Error: Tcpip [4199] - The system detected an address conflict for IP address 192.168.1.101 with the system having network hardware address 00-11-95-E6-17-A9. Network operations on this system may be disrupted as a result. 7/11/2012 3:30:10 PM, Error: bowser [8003] - The master browser has received a server announcement from the computer HELENAHAO-HP that believes that it is the master browser for the domain on transport NetBT_Tcpip_{76930F41-7A57-4BF0-BC22-9093D9B1EF20}. The master browser is stopping or an election is being forced. 7/11/2012 11:15:14 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WinDefend service. 7/10/2012 9:20:40 AM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Live ID Sign-in Assistant service to connect. 7/10/2012 9:20:40 AM, Error: Service Control Manager [7000] - The Windows Live ID Sign-in Assistant service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 7/10/2012 9:17:45 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the upnphost service. 7/10/2012 9:17:42 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the HPWMISVC service. 7/10/2012 9:17:10 AM, Error: Service Control Manager [7000] - The SSDP Discovery service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 7/10/2012 9:17:05 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the SSDPSRV service. 7/10/2012 9:13:22 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the SDRSVC service. 7/10/2012 7:06:45 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WTouchService service. 7/10/2012 10:37:44 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the WSearch service. . ==== End Of File ===========================
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.