Jump to content

Not sure if these are false positives, or my computer is riddled with problems.


Recommended Posts

I run malwarebytes every second day or so, and at max it will pick up on one or so problems,

I ran a quick scan this morning and had over 60 hits most from system32 files id consider important and not a threat.

Is my pc riddled with malware or are these false positives?

I don't know whether to remove or ignore...

I ran the scan twice the second time in developer mode, with the same results....

Save log attached...

Please help!

Regards,

Walter

MBAM-log-2013-04-11 (17-36-43).txt

Link to post
Share on other sites

  • Root Admin

It looks like maybe your antivirus or other security software may be blocking ours and creating a false positive by blocking our driver.

Let me have you run the following and we'll see if we can track down what's going on.

Please create an mbam-check log:

  • Download mbam-check.exe from here and save it to your desktop
  • Double-click on mbam-check.exe to run it, it should then open a log file
  • Please do not copy and paste the entire contents of the log into your next post, instead please attach the log CheckResults.txt file which should now be located on your desktop to your next post

Next, Please run the following scanner and send back the logs.

Download DDS from one of the locations below and save to your Desktop

dds.scr

dds.com

Temporarily disable any script blocker if your Anti-Virus/Anti-Malware has it.

How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs

Once downloaded you can disconnect from the Internet and disable your Ant-Virus temporarily if needed.

Then double click dds.scr or dds.com to run the tool, on Vista or Win 7 right click and select Run as administrator

Click the Run button if prompted with an Open File - Security Warning dialog box.

A black DOS console should open and run for a moment.


    When done, DDS will open two (2) logs:
  1. DDS.txt
  2. Attach.txt

  • Save both reports to your desktop
  • Please include the following logs in your next reply: DDS.txt and Attach.txt
    You can ignore the note about zipping the Attach.txt file in most cases.

Thanks

Link to post
Share on other sites

  • Root Admin

You should probably follow the advice below and have one of the Experts review your computer for a possible infection for free.

Not sure that it is infected but you do have a LOT of errors in the Event Logs section which is not good.

I would suggest following the advice from the topic here Available Assistance for Possibly Infected Computers and having one of the Experts assist you with looking into your issue.

==== Event Viewer Messages From Past Week ========
.
9/04/2013 3:21:35 AM, Error: Service Control Manager [7030] - The Microsoft Office Diagnostics Service service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
8/04/2013 3:16:28 AM, Error: Service Control Manager [7000] - The Steam Client Service service failed to start due to the following error: The process cannot access the file because it is being used by another process.
8/04/2013 3:01:59 AM, Error: Service Control Manager [7030] - The Windows Search service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
8/04/2013 3:01:58 AM, Error: Service Control Manager [7030] - The SwitchBoard service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
8/04/2013 3:01:57 AM, Error: Service Control Manager [7030] - The Steam Client Service service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
8/04/2013 3:01:56 AM, Error: Service Control Manager [7030] - The Office Source Engine service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
8/04/2013 3:01:54 AM, Error: Service Control Manager [7030] - The Windows Installer service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
8/04/2013 12:49:11 AM, Error: Service Control Manager [7030] - The Mozilla Maintenance Service service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
8/04/2013 12:49:10 AM, Error: Service Control Manager [7030] - The InstallDriver Table Manager service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
8/04/2013 12:49:08 AM, Error: Service Control Manager [7030] - The Google Update Service (gupdate) service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
8/04/2013 12:49:04 AM, Error: Service Control Manager [7030] - The COM+ System Application service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
8/04/2013 12:49:03 AM, Error: Service Control Manager [7030] - The Microsoft .NET Framework NGEN v4.0.30319_X86 service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
8/04/2013 12:49:03 AM, Error: Service Control Manager [7030] - The Microsoft .NET Framework NGEN v2.0.50727_X86 service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
8/04/2013 12:49:01 AM, Error: Service Control Manager [7030] - The Adobe Flash Player Update Service service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
8/04/2013 12:04:48 PM, Error: Microsoft-Windows-DistributedCOM [10016] - The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {9BA05972-F6A8-11CF-A442-00A0C90A8F39} and APPID {9BA05972-F6A8-11CF-A442-00A0C90A8F39} to the user E-PC\UpdatusUser SID (S-1-5-21-1923247727-615109722-1313713318-1003) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
8/04/2013 12:02:27 PM, Error: Service Control Manager [7000] - The SwitchBoard service failed to start due to the following error: The process cannot access the file because it is being used by another process.
4/04/2013 10:37:41 PM, Error: bowser [8003] - The master browser has received a server announcement from the computer DENIKA-LAPTOP that believes that it is the master browser for the domain on transport NetBT_Tcpip_{B20C0792-7384-4962-882A-78E7FDFE8F0C}. The master browser is stopping or an election is being forced.
11/04/2013 5:07:44 PM, Error: Microsoft-Windows-DistributedCOM [10000] - Unable to start a DCOM Server: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}. The error: "2" Happened while starting this command: C:\Windows\SysWOW64\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
11/04/2013 3:20:04 AM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the SwitchBoard service to connect.
11/04/2013 3:20:04 AM, Error: Service Control Manager [7000] - The SwitchBoard service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
11/04/2013 2:08:29 PM, Error: Microsoft-Windows-DNS-Client [1012] - There was an error while attempting to read the local hosts file.
11/04/2013 2:00:38 PM, Error: Microsoft-Windows-DistributedCOM [10000] - Unable to start a DCOM Server: {06622D85-6856-4460-8DE1-A81921B41C4B}. The error: "2" Happened while starting this command: C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}
11/04/2013 1:55:33 PM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Steam Client Service service to connect.
11/04/2013 1:55:33 PM, Error: Service Control Manager [7000] - The Steam Client Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
10/04/2013 9:18:01 PM, Error: Microsoft-Windows-DistributedCOM [10000] - Unable to start a DCOM Server: {BB46F03E-7CD2-489F-8F95-BB950F395FDB}. The error: "2" Happened while starting this command: C:\Windows\SysWOW64\DllHost.exe /Processid:{16D99191-6280-4B33-A2F5-04805A0FC582}
10/04/2013 3:41:03 PM, Error: Microsoft-Windows-DistributedCOM [10000] - Unable to start a DCOM Server: {E2B3C97F-6AE1-41AC-817A-F6F92166D7DD}. The error: "2" Happened while starting this command: C:\Windows\SysWOW64\DllHost.exe /Processid:{E2B3C97F-6AE1-41AC-817A-F6F92166D7DD}
10/04/2013 1:18:37 AM, Error: Microsoft-Windows-Diagnostics-Networking [5300] - An error occurred. The Network Diagnostics Framework failed to complete the repair phase of operation. A Windows Error Report was generated. [2147942487]
.
==== End Of File ===========================

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.