Please post the complete results of your last MBAM scan for review.
To retrieve the Malwarebytes Anti-Malware scan log information, launch MBAM.
- Click the Logs Tab at the top.
- The log will be named by the date of scan in the following format: mbam-log-date(time).txt
-- If you have previously used MBAM, there may be several logs showing in the list. - Click on the log name to highlight it.
- Go to the bottom and click on Open.
- The log should automatically open in notepad as a text file.
- Go to Edit and choose Select all.
- Go back to Edit and choose Copy or right-click on the highlighted text and choose Copy from there.
- Come back to this thread, click Add Reply, then right-click and choose Paste.
- Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.
Logs are saved to the following locations:
-- XP: C:\Documents and Settings\<Username>\Application Data\Malwarebytes\Malwarebytes Anti-Malware\Logs\mbam-log-yyyy-mm-dd
-- Vista, Windows 7, 2008: C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\Logs\mbam-log-yyyy-mm-ddPlease download and scan with the
Kaspersky Virus Removal Tool from one of the links provided below and save it to your desktop.
Link 1Link 2Link 3Be sure to print out and read the instructions provided in:How to Install Kaspersky Virus Removal ToolHow to use the Kaspersky Virus Removal Tool to automatically remove viruses- Double-click the setup file (i.e. setup_9.0.0.722_22.01.2010_10-04.exe), select your language and install the utility.
Vista/Windows 7 users right-click and select Run As Administrator. - If you receive a UAC prompt asking if you would like to continue running the program, you should press the Continue button.
- At the 'Setup page', click Next, check the box to accept the license agreement and click Next twice more to extract the required files.
- Setup may recommend to scan the computer in Safe Mode. Click Ok.
- A window will open with a tab that says Autoscan. Click the green Start scan button on the Autoscan tab in the main window.
- If malware is detected, you will see the Scan Alert screen.
- Place a checkmark in the Apply to all box, and click Disinfect if the button is active.
- After the scan finishes, if any threats are left unneutralized in the Scan window (Red exclamation point), click the Neutralize all button.
- Place a checkmark in the Apply to all box, and click Disinfect if the button is active.
- If advised that a special disinfection procedure is required which demands system reboot, click the Ok button to close the window.
- In the Scan window click the Reports button, choose Critical events and select Save to save the results to a file (name it avptool.txt).
- Copy and paste the report results of any threats detected. Do not include the longer list marked Events.
- When finished, follow these instructions on How to uninstall Kaspersky Virus Removal Tool 2011.
-- If you cannot run this tool in normal mode, then try using it in "safe mode".IMPORTANT NOTE: You say your are using AVG, Avira and MS Security Essentials. Using more than one anti-virus program is
not advisable.
Why? The primary concern with doing so is due to
conflicts that can arise when they are running in real-time mode simultaneously and issues with Windows resource management.
Even if one of them is disabled for use as a stand-alone scanner, it can affect the other and cause conflicts. Anti-virus software components insert themselves into the operating systems core and
using more than one can cause instability, crash your computer, slow performance and waste system resources. When actively running in the background while connected to the Internet, they both may try to update their definition databases at the same time. As the programs compete for resources required to download the necessary files this often can result in sluggish system performance or unresponsive behavior.
Each anti-virus may interpret the activity of the other as
suspicious behavior and there is a greater chance of them alerting you to a "
False Positive". If one finds a virus or a suspicious file and then the other also finds the same, both programs will be competing over exclusive rights on dealing with that virus or suspicious file. Each anti-virus may attempt to remove the offending file and quarantine it at the same time resulting in a resource management issue as to which program gets permission to act first. If one anit-virus finds and quarantines the file before the other one does, then you encounter the problem of both wanting to scan each other's zipped or archived files and each reporting the other's quarantined contents. This can lead to a repetitive cycle of endless alerts that continually warn you that a threat has been found when that is not the case.
Anti-virus scanners use virus definitions to check for malware and these can include a
fragment of the virus code which may be recognized by other anti-virus programs as the virus itself. Because of this, many anti-virus vendors encrypt their definitions so that they do not trigger a false alarm when scanned by other security programs. Other vendors do not encrypt their definitions and they can trigger false alarms when detected by the resident anti-virus. Further,
dual installation is not always possible because most of the newer anti-virus programs will detect the presence of others and may insist they be removed prior to download and installation of another. If the installation does complete with another anti-virus already installed,
you may encounter issues like system freezing, unresponsiveness or similar symptoms while trying to use it.
To
avoid these problems, use only one anti-virus solution. Deciding which one to remove is your choice. Be aware that you may lose your subscription to that anti-virus program's virus definitions once you uninstall that software.
Anti-virus vendors recommend that you install and run only one anti-virus program at a timeYou can always supplement your anti-virus by performing an
Online Virus Scan.
Also, I'm running WinPatrol and every few minutes it keeps telling me that something called Watson Subscriber for SENS Network Notifications is trying to add itself to Startup.
Watson Subscriber for SENS (
System Event Notification Service) is related to
dwtrig20.exe and is used to launch Microsoft Error Reporting (DW20.exe). SENS is a Microsoft service that tracks system events related to Windows logon, network connection status, power changes, bandwidth, etc. It is also used when encountering errors while downloading database definition updates for MSE/Windows Defender so the user can send an error report to Microsoft for analysis.
Using SENS, an application can be notified when network connectivity changes, when available power decreases, when a user logs on/off or when there are changes in cache transmissions and bandwidth. SENS notifies COM+ of these events, which assigns them to any subscribing application (COM+ Event System subscribers). There are various ways to subscribe to SENS notifications. For a more technical explanation on how the SENS notification works, please refer to:
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.
Back to top
