BleepingComputer.com: Bad Image

Jump to content

Forum Guidelines

Posted Image Read the following topic before creating a new topic in this forum. It contains instructions on the what we would like you to post, which will enable us to help you more quickly.

Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help


Posted Image Unfortunately, with the amount of logs we receive per day, the average response time is 5 days. I want to assure you, though, that your topic will be looked at and responded to. So please be patient.


Posted Image DO NOT RUN ComboFix unless requested to.


Posted Image Only members of the Malware Response Team or Moderators are allowed to help people with logs. Anyone else should refrain from posting to another user's log.


Posted Image When posting a log please put the type of infection you have in the topic title. IE: Winfixer, Virtumonde, WinTools, WebSearch, Home Search Assistant, etc.


Posted Image Do not bump your topic. We try to resolve logs on a first come/first served basis. By bumping your log you will be pushed back in line due to the new date of your bump.
Page 1 of 1
  • You cannot start a new topic
  • This topic is locked

Bad Image Virus?

#1 User is offline   Daddles 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 2
  • Joined: 31-October 11

Posted 31 October 2011 - 04:32 AM

Hi

I have a very irritating problem with my pc which operates on XP.

This problem started shortly after I installed software for a new USB wireless network adapter and also installing Adaware (which now closes down after approx 30secs).
Every time I open a program (and when programs open on start up), I get this window saying-

(The name of the program) - Bad Image
The application or DLL H:\PROGRA~1\Datamngr|IEBHO.dll is not a valid Windows image. Please check this against your installation diskette.

This doesn't prevent the program from opening but sometime the Windows error reporting prompt appears.

I've used numerous antimalware programs including AVG, McAfee, Panda, Adaware(which now won't run), which have found some malware but haven't solved the issue.

Any suggestions would be much appreciated.

Daddles.

Here is the HJT log- (Also attached)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 09:15:40, on 26/10/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
H:\WINDOWS\System32\smss.exe
H:\WINDOWS\system32\winlogon.exe
H:\WINDOWS\system32\services.exe
H:\WINDOWS\system32\lsass.exe
H:\Program Files\Emsisoft Anti-Malware\a2service.exe
H:\WINDOWS\system32\nvsvc32.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\system32\svchost.exe
H:\Program Files\Panda Security\Panda Antivirus Pro 2012\TPSrv.exe
H:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe
H:\PROGRAM FILES\PANDA SECURITY\PANDA ANTIVIRUS PRO 2012\WebProxy.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\system32\spoolsv.exe
H:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
H:\Program Files\AVG\AVG2012\avgfws.exe
H:\Program Files\AVG\AVG2012\avgwdsvc.exe
H:\Program Files\Bonjour\mDNSResponder.exe
H:\WINDOWS\system32\CTsvcCDA.exe
H:\WINDOWS\system32\fsproflt.exe
H:\WINDOWS\System32\svchost.exe
H:\Program Files\Kodak\AiO\Center\EKAiOHostService.exe
H:\Program Files\Common Files\LightScribe\LSSrvc.exe
H:\Program Files\M-Audio OmniStudio USB\Install\OmniInst.exe
H:\Program Files\Panda Security\Panda Antivirus Pro 2012\PsCtrls.exe
H:\Program Files\Panda Security\Panda Antivirus Pro 2012\PavFnSvr.exe
H:\Program Files\Panda Security\Panda Antivirus Pro 2012\PsImSvc.exe
H:\Program Files\Panda Security\Panda Antivirus Pro 2012\PskSvc.exe
H:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
H:\Program Files\Common Files\Seagate\Schedule2\schedul2.exe
H:\WINDOWS\System32\svchost.exe
H:\WINDOWS\system32\Tablet.exe
H:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
H:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\8.0.1\ToolbarUpdater.exe
H:\WINDOWS\system32\SearchIndexer.exe
H:\Program Files\Panda Security\Panda Antivirus Pro 2012\pavsrvx86.exe
H:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
H:\Program Files\Panda Security\Panda Antivirus Pro 2012\AVENGINE.EXE
H:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
H:\WINDOWS\system32\WTablet\TabUserW.exe
H:\WINDOWS\system32\Tablet.exe
H:\WINDOWS\Explorer.EXE
H:\WINDOWS\sttray.exe
H:\Program Files\Seagate\DiscWizard\DiscWizardMonitor.exe
H:\Program Files\Seagate\DiscWizard\TimounterMonitor.exe
H:\Program Files\Common Files\Seagate\Schedule2\schedhlp.exe
H:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
H:\Program Files\My Lockbox\mylbx.exe
H:\Program Files\AVG\AVG2012\avgtray.exe
H:\Program Files\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
H:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EKIJ5000MUI.exe
H:\Program Files\Panda Security\Panda Antivirus Pro 2012\APVXDWIN.EXE
H:\WINDOWS\system32\ctfmon.exe
H:\Program Files\Messenger\msmsgs.exe
H:\Program Files\Windows Media Player\WMPNSCFG.exe
H:\Program Files\BLUENEXT\BN-WD54G Wireless Utility\Installer\WINXP\BWCU.exe
H:\Program Files\McAfee Security Scan\3.0.229\SSScheduler.exe
H:\Program Files\Windows Desktop Search\WindowsSearch.exe
H:\Program Files\M-Audio OmniStudio USB\OmniTask.exe
H:\Program Files\Mozilla Firefox\firefox.exe
H:\Program Files\Mozilla Firefox\plugin-container.exe
H:\WINDOWS\system32\msiexec.exe
H:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe
H:\Program Files\AVG\AVG2012\avgui.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/pivotstickfigure/{73E27396-1BC4-48A4-9087-145B290139BC}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - H:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll
R3 - URLSearchHook: KKTBCatch Class - {DAB46A0D-8939-4056-B80C-028DCE8999EF} - H:\PROGRA~1\KINGKO~1\Capture\KKCATC~1.DLL
R3 - URLSearchHook: BitTorrentBar Toolbar - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - H:\Program Files\BitTorrentBar\prxtbBit2.dll
R3 - URLSearchHook: ToolbarURLSearchHook Class - {CA3EB689-8F09-4026-AA10-B9534C691CE0} - H:\Program Files\Pivot Stickfigure Toolbar\tbhelper.dll
F2 - REG:system.ini: UserInit=H:\WINDOWS\system32\userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - H:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - H:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - H:\Program Files\AVG\AVG2012\avgssie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - H:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL
O2 - BHO: BitTorrentBar - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - H:\Program Files\BitTorrentBar\prxtbBit2.dll
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - H:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - H:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: FlashGetBHO - {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} - H:\Documents and Settings\Tony\Application Data\FlashGetBHO\FlashGetBHO3.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - H:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL
O2 - BHO: KKTB Helper - {DAB46A0D-8939-4056-B80C-028DCE8999EF} - H:\PROGRA~1\KINGKO~1\Capture\KKCATC~1.DLL
O2 - BHO: SMTTB2009 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - H:\Program Files\Pivot Stickfigure Toolbar\tbcore3.dll
O3 - Toolbar: King Kong - {2E6F4C13-49FB-4DF3-B601-030D1D470E32} - H:\PROGRA~1\KINGKO~1\Capture\KKBROW~1.DLL
O3 - Toolbar: (no name) - {99079a25-328f-4bd4-be04-00955acaa0a7} - (no file)
O3 - Toolbar: BitTorrentBar Toolbar - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - H:\Program Files\BitTorrentBar\prxtbBit2.dll
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - H:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll
O3 - Toolbar: Pivot Stickfigure Toolbar - {338B4DFE-2E2C-4338-9E41-E176D497299E} - H:\Program Files\Pivot Stickfigure Toolbar\tbcore3.dll
O4 - HKLM\..\Run: [IDTSysTrayApp] sttray.exe
O4 - HKLM\..\Run: [DiscWizardMonitor.exe] H:\Program Files\Seagate\DiscWizard\DiscWizardMonitor.exe
O4 - HKLM\..\Run: [AcronisTimounterMonitor] H:\Program Files\Seagate\DiscWizard\TimounterMonitor.exe
O4 - HKLM\..\Run: [Seagate Scheduler2 Service] "H:\Program Files\Common Files\Seagate\Schedule2\schedhlp.exe"
O4 - HKLM\..\Run: [Conime] %windir%\system32\conime.exe
O4 - HKLM\..\Run: [PDVDDXSrv] "H:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe"
O4 - HKLM\..\Run: [mylbx] H:\Program Files\My Lockbox\mylbx.exe /a
O4 - HKLM\..\Run: [Adobe ARM] "H:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [BCSSync] "H:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [AVG_TRAY] "H:\Program Files\AVG\AVG2012\avgtray.exe"
O4 - HKLM\..\Run: [RIMBBLaunchAgent.exe] H:\Program Files\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
O4 - HKLM\..\Run: [EKIJ5000StatusMonitor] H:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EKIJ5000MUI.exe
O4 - HKLM\..\Run: [QuickTime Task] "H:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE H:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [APVXDWIN] "H:\Program Files\Panda Security\Panda Antivirus Pro 2012\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [SCANINICIO] "H:\Program Files\Panda Security\Panda Antivirus Pro 2012\Inicio.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] H:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "H:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [WMPNSCFG] H:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] H:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] H:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-1659004503-813497703-725345543-1006\..\Run: [CTFMON.EXE] H:\WINDOWS\system32\ctfmon.exe (User 'Arlen')
O4 - HKUS\S-1-5-21-1659004503-813497703-725345543-1007\..\Run: [CTFMON.EXE] H:\WINDOWS\system32\ctfmon.exe (User 'Rory')
O4 - HKUS\S-1-5-21-1659004503-813497703-725345543-1008\..\Run: [CTFMON.EXE] H:\WINDOWS\system32\ctfmon.exe (User 'tod')
O4 - HKUS\S-1-5-21-1659004503-813497703-725345543-500\..\Run: [CTFMON.EXE] H:\WINDOWS\System32\CTFMON.EXE (User 'Administrator')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] H:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [KodakHomeCenter] "H:\Program Files\Kodak\AiO\Center\AiOHomeCenter.exe" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] H:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [KodakHomeCenter] "H:\Program Files\Kodak\AiO\Center\AiOHomeCenter.exe" (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = H:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: M-Audio OmniStudio USB Control Panel Launcher.lnk = H:\Program Files\M-Audio OmniStudio USB\OmniTask.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = H:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: BN-WD54G Wireless Utility.lnk = H:\Program Files\BLUENEXT\BN-WD54G Wireless Utility\Installer\WINXP\BWCU.exe
O4 - Global Startup: McAfee Security Scan Plus.lnk = H:\Program Files\McAfee Security Scan\3.0.229\SSScheduler.exe
O4 - Global Startup: Windows Search.lnk = H:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: Download all by FlashGet3 - H:\Documents and Settings\Tony\Application Data\FlashGetBHO\GetAllUrl.htm
O8 - Extra context menu item: Download by FlashGet3 - H:\Documents and Settings\Tony\Application Data\FlashGetBHO\GetUrl.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://H:\PROGRA~1\MICROS~3\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://H:\PROGRA~1\MICROS~3\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: 使用快车3下载 - H:\Documents and Settings\Tony\Application Data\FlashGetBHO\GetUrl.htm
O8 - Extra context menu item: 使用快车3下载当前视频 - H:\Documents and Settings\Tony\Application Data\FlashGetBHO\GetFlvUrl.htm
O8 - Extra context menu item: 使用快车3下载全部链接 - H:\Documents and Settings\Tony\Application Data\FlashGetBHO\GetAllUrl.htm
O8 - Extra context menu item: 使用快车3下载全部视频 - H:\Documents and Settings\Tony\Application Data\FlashGetBHO\GetAllFlvUrl.htm
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - H:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - H:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - H:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - H:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - H:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - H:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - H:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - H:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - H:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - H:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1281457601952
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - H:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - H:\Program Files\AVG\AVG2012\avgpp.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - H:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - H:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\8.0.1\ViProtocol.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - H:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: H:\PROGRA~1\WI371A~1\Datamngr\datamngr.dll H:\PROGRA~1\WI371A~1\Datamngr\IEBHO.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - H:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - H:\WINDOWS\System32\browseui.dll
O23 - Service: Emsisoft Anti-Malware 6.0 - Service (a2AntiMalware) - Emsi Software GmbH - H:\Program Files\Emsisoft Anti-Malware\a2service.exe
O23 - Service: Adobe LM Service - Adobe Systems - H:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - H:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AVG Security Toolbar Service - Unknown owner - H:\Program Files\AVG\AVG10\Toolbar\ToolbarBroker.exe
O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - H:\Program Files\AVG\AVG2012\avgfws.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - H:\Program Files\AVG\AVG2012\AVGIDSAgent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - H:\Program Files\AVG\AVG2012\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - H:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - H:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: FSPro Filter Service (fsproflt) - FSPro Labs - H:\WINDOWS\system32\fsproflt.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - H:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - H:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: iPod Service - Apple Inc. - H:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kodak AiO Network Discovery Service - Eastman Kodak Company - H:\Program Files\Kodak\AiO\Center\EKAiOHostService.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft Limited - H:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - H:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - H:\Program Files\McAfee Security Scan\3.0.229\McCHSvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - H:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Omni Installer (OmniInstallerService) - M-Audio - H:\Program Files\M-Audio OmniStudio USB\Install\OmniInst.exe
O23 - Service: Panda Software Controller - Panda Security, S.L. - H:\Program Files\Panda Security\Panda Antivirus Pro 2012\PsCtrls.exe
O23 - Service: Panda Function Service (PAVFNSVR) - Unknown owner - H:\Program Files\Panda Security\Panda Antivirus Pro 2012\PavFnSvr.exe
O23 - Service: Panda On-Access Anti-Malware Service (PAVSRV) - Panda Security, S.L. - H:\Program Files\Panda Security\Panda Antivirus Pro 2012\pavsrvx86.exe
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Security S.L. - H:\Program Files\Panda Security\Panda Antivirus Pro 2012\PsImSvc.exe
O23 - Service: Panda PSK service (PskSvcRetail) - Panda Security, S.L. - H:\Program Files\Panda Security\Panda Antivirus Pro 2012\PskSvc.exe
O23 - Service: Rapport Management Service (RapportMgmtService) - Trusteer Ltd. - H:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe
O23 - Service: Seagate Scheduler2 Service (SgtSch2Svc) - Seagate - H:\Program Files\Common Files\Seagate\Schedule2\schedul2.exe
O23 - Service: TabletService - Wacom Technology, Corp. - H:\WINDOWS\system32\Tablet.exe
O23 - Service: TomTomHOMEService - TomTom - H:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: Panda TPSrv (TPSrv) - Panda Security, S.L. - H:\Program Files\Panda Security\Panda Antivirus Pro 2012\TPSrv.exe
O23 - Service: vToolbarUpdater - Unknown owner - H:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\8.0.1\ToolbarUpdater.exe

--
End of file - 17822 bytes

Attached File(s)


#2 User is offline   miekiemoes 

  • Malware Killer Dog
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 19,327
  • Joined: 18-February 05
  • Gender:Female
  • Location:Belgium

Posted 01 November 2011 - 03:04 AM

Hi,

Start HijackThis and click scan.

Check the following entry in it:

O20 - AppInit_DLLs: H:\PROGRA~1\WI371A~1\Datamngr\datamngr.dll H:\PROGRA~1\WI371A~1\Datamngr\IEBHO.dll

Click Fix checked below.

Reboot.

Let me know if that fixed your issue.

Extra note, I notice from your log that there's more than 1 Antivirus installed. AVG & Panda
Never install more than one Antivirus and Firewall! Rather than giving you extra protection, it will decrease the reliability of it seriously!
The reason for this is that if both products have their automatic (Real-Time) protection switched on, your system may lock up due to both software products attempting to access the same file at the same time.
Also because more than one Antivirus and Firewall installed are not compatible with eachother, it can cause system performance problems and a serious system slowdown.

So you have to make a decision here and keep the Antivirus you prefer and uninstall the other one.
Then reboot after uninstalling.
AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help! My computer is slow---My Blog---Follow me on Twitter.
My help is ALWAYS FREE, but if you want to donate to help me continue my fight against malware -- click here!
Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.

#3 User is offline   Daddles 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 2
  • Joined: 31-October 11

Posted 02 November 2011 - 07:37 AM

Thank you so much Miekiemoes, it did work and I'm so happy.

Thanks also for the advice on reducing my antivirus, I went a bit over the top trying to get rid of this problem. I've now uninstalled them all except for AVG.

Best regards

Tony.

#4 User is offline   miekiemoes 

  • Malware Killer Dog
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 19,327
  • Joined: 18-February 05
  • Gender:Female
  • Location:Belgium

Posted 02 November 2011 - 07:42 AM

Glad to hear your issue is resolved now :)
AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help! My computer is slow---My Blog---Follow me on Twitter.
My help is ALWAYS FREE, but if you want to donate to help me continue my fight against malware -- click here!
Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.

#5 User is offline   miekiemoes 

  • Malware Killer Dog
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 19,327
  • Joined: 18-February 05
  • Gender:Female
  • Location:Belgium

Posted 04 November 2011 - 07:09 AM

It appears that this issue is resolved, therefore I am closing the topic. If that is not the case and you need or wish to continue with this topic, please send me or any Moderator a Personal Message (PM) that you would like this topic re-opened.
AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help! My computer is slow---My Blog---Follow me on Twitter.
My help is ALWAYS FREE, but if you want to donate to help me continue my fight against malware -- click here!
Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • This topic is locked

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users