Jump to content

help: can't use malwarebytes

frankurb

By frankurb
in Resolved Malware Removal Logs

 Share

Recommended Posts

frankurb

frankurb

Posted
  • Author
Posted

I' ve just done what you say. Here is the result.

No don't purchase fix all program they don't ever do what they say.

Thank you for the advice.

----------------------------------------------------------------------------

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS]

"StateIndex"=dword:00000001

"FilesNotToBackupFilterCorrected"=dword:00000001

Link to post
Share on other sites
kahdah

kahdah

Posted
Posted

Ok let's look into another registry entry.

Please go to Start>Run type in Notepad.

Copy what is in the code box below into the open Notepad window.

Change the "Save As Type" to "All Files". Save it as fixthis.bat on your Desktop.

@Echo off

regedit /e look.txt "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS"
start notepad look.txt

Then please double click on fixthis.bat a window will open and close quickly.This is normal.

Please post the contents of the Notepad document that opens.

Link to post
Share on other sites
frankurb

frankurb

Posted
  • Author
Posted

Ok. This is the output.

-----------------------------------------------------------------------------------------------

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS]

"Type"=dword:00000020

"Start"=dword:00000003

"ErrorControl"=dword:00000001

"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\

74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\

00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2d,00,\

6b,00,20,00,6e,00,65,00,74,00,73,00,76,00,63,00,73,00,00,00

"DisplayName"="Servizio trasferimento intelligente in background"

"DependOnService"=hex(7):52,00,70,00,63,00,73,00,73,00,00,00,00,00

"DependOnGroup"=hex(7):00,00

"ObjectName"="LocalSystem"

"Description"="Trasferisce file in background sfruttando larghezza di banda inutilizzata. Se il servizio

Link to post
Share on other sites
kahdah

kahdah

Posted
Posted

I see nothing out of place in anything on your computer.

I am however sure that some program is causing that error finding it however is like a needle in a haystack.

If it doesn't do it when in safe mode then something that loads with Windows normally causes it.

Give this a shot go to Start > Run type in msconfig then hit ok.

Choose selective startup then hit ok to save the changes.

This will basically disable everything that loads up normally with Windows.

If it doesn't happen then then go back to msconfig and choose start normally then hit ok to save.

It will error out once more then open msconfig again and start unselecting items in the startup tab that are booting with Windows.

Do one at a time to see which program it is that is causing it.

If one being deselected doesn't improve the situation then go to the next one in the list and so on.

After this process it will find the culprit.

I would print this page before attempting the steps as once in selective startup it will not allow you to get online until it is set back to normal startup.

Let me know how it goes.

Link to post
Share on other sites
frankurb

frankurb

Posted
  • Author
Posted

Ok, now i know the culprit. His name is "Windows Driver Foundation - User-mode Driver Framework".

Fortunately, the survey was very rapid. I saw the problem was with one of the Services, not the startup elements. After disabling all services the error message didn't appear. There were however 92 possible culprits, so I did a sort of binary search, enabling half of the remaining elements at each new startup. So at the seventh time it was identified.

Now what is the best thing I can do? I suppose I can permanently disable the charged service, although I don't know what kind of service it is and if it is important.

Have you any suggestion?

Thanks again.

Francesco

Link to post
Share on other sites
kahdah

kahdah

Posted
Posted

Tell me what the startup type is it should be manual for this service.

To check that you can go to Start > run then type in services.msc and hit ok.

Scroll down until you see that service and set it to manual if it is not already.

Reboot and see if you get any errors after that.

Link to post
Share on other sites
henhenversion

henhenversion

Posted
Posted
Great you are welcome :)

hi,can you help me? actually the problem is almost the same as above when i used svchost fix wizard,

i followed your instruction and the 1st result is:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS]

"StateIndex"=dword:00000001

and the 2nd is:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS]

"Type"=dword:00000020

"Start"=dword:00000002

"ErrorControl"=dword:00000001

"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\

74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\

00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2d,00,\

6b,00,20,00,6e,00,65,00,74,00,73,00,76,00,63,00,73,00,00,00

"DisplayName"="Background Intelligent Transfer Service"

"DependOnService"=hex(7):52,00,70,00,63,00,53,00,73,00,00,00,00,00

"DependOnGroup"=hex(7):00,00

"ObjectName"="LocalSystem"

"Description"="Transfers data between clients and servers in the background. If BITS is disabled, features such as Windows Update will not work correctly."

"FailureActions"=hex:00,00,00,00,00,00,00,00,00,00,00,00,03,00,00,00,68,e3,0c,\

00,01,00,00,00,60,ea,00,00,01,00,00,00,60,ea,00,00,01,00,00,00,60,ea,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Parameters]

"ServiceDll"=hex(2):43,00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,\

00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,71,00,6d,00,\

67,00,72,00,2e,00,64,00,6c,00,6c,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Security]

"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\

00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\

00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\

05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\

20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\

00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\

00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Enum]

"0"="Root\\LEGACY_BITS\\0000"

"Count"=dword:00000001

"NextInstance"=dword:00000001

th before,i'm getting desperate to try t fix this prob

Link to post
Share on other sites
  • 3 weeks later...
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.