Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

I've tried all I can think to do. Now it's up to the professionals.


  • This topic is locked This topic is locked
30 replies to this topic

#16 Splatle

Splatle
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:09:28 AM

Posted 19 August 2012 - 09:00 PM

Here you go. I think we're on the home stretch.



Results of screen317's Security Check version 0.99.44
Windows 7 x64 (UAC is enabled)
Out of date service pack!!
Internet Explorer 9
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
avast! Antivirus
McAfee Anti-Virus and Anti-Spyware
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
Spybot - Search & Destroy
Malwarebytes Anti-Malware version 1.62.0.1300
Java™ 6 Update 29
Java version out of Date!
Adobe Reader X (10.1.4)
````````Process Check: objlist.exe by Laurent````````
AVAST Software Avast AvastSvc.exe
AVAST Software Avast AvastUI.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 0%
````````````````````End of Log``````````````````````





# AdwCleaner v1.801 - Logfile created 08/19/2012 at 21:57:58
# Updated 14/08/2012 by Xplode
# Operating system : Windows 7 Home Premium (64 bits)
# User : Jay - COMPUTER
# Boot Mode : Normal
# Running from : C:\Users\Jay\Desktop\adwcleaner.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****

Folder Found : C:\ProgramData\AVG Secure Search
Folder Found : C:\Program Files (x86)\Common Files\AVG Secure Search

***** [Registry] *****


***** [Registre - GUID] *****


***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16421

[OK] Registry is clean.

*************************

AdwCleaner[R1].txt - [6716 octets] - [16/08/2012 17:47:36]
AdwCleaner[S1].txt - [4880 octets] - [17/08/2012 19:42:25]
AdwCleaner[R2].txt - [898 octets] - [19/08/2012 21:57:07]
AdwCleaner[R3].txt - [830 octets] - [19/08/2012 21:57:58]

########## EOF - C:\AdwCleaner[R3].txt - [957 octets] ##########

BC AdBot (Login to Remove)

 


#17 nasdaq

nasdaq

  • Malware Response Team
  • 38,926 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:09:28 AM

Posted 20 August 2012 - 07:28 AM

For your security install Windows 7 Service pack 1.

http://windows.microsoft.com/en-US/windows7/install-windows-7-service-pack-1
===

Secure your system by updating 3rd party programs.

Your version of Java is outdated and needs to be updated to take advantage of fixes that have eliminated security vulnerabilities.

Check your present version and update as recommended.
https://www.java.com/en/download/installed.jsp

If present remove the old version(s) of Java using the Add/Remove Programs applet.


Java™ 6 Update 29


===

Are you able to run this tool?
AdwCleaner

#18 Splatle

Splatle
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:09:28 AM

Posted 21 August 2012 - 06:46 PM

For the life of me i can't get windows to update. Even when i go to the direct download page it doesn't give me the option to download the english version of the service pack.

I was able to update Jave after uninstalling previous versions.


The warning pop-ups on Avast have stopped.


# AdwCleaner v1.801 - Logfile created 08/21/2012 at 19:42:54
# Updated 14/08/2012 by Xplode
# Operating system : Windows 7 Home Premium (64 bits)
# User : Jay - COMPUTER
# Boot Mode : Normal
# Running from : C:\Users\Jay\Desktop\adwcleaner.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****

Folder Found : C:\ProgramData\AVG Secure Search
Folder Found : C:\Program Files (x86)\Common Files\AVG Secure Search

***** [Registry] *****

Key Found : HKCU\Software\Softonic
[x64] Key Found : HKCU\Software\Softonic

***** [Registre - GUID] *****


***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16421

[OK] Registry is clean.

*************************

AdwCleaner[R1].txt - [6716 octets] - [16/08/2012 17:47:36]
AdwCleaner[S1].txt - [4880 octets] - [17/08/2012 19:42:25]
AdwCleaner[R2].txt - [898 octets] - [19/08/2012 21:57:07]
AdwCleaner[R3].txt - [957 octets] - [19/08/2012 21:57:58]
AdwCleaner[R4].txt - [969 octets] - [21/08/2012 19:42:54]

########## EOF - C:\AdwCleaner[R4].txt - [1096 octets] ##########

#19 nasdaq

nasdaq

  • Malware Response Team
  • 38,926 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:09:28 AM

Posted 22 August 2012 - 08:55 AM

Remove the AdWare.

  • Please close all open programs and internet browsers.
  • Double click on adwcleaner.exe to run the tool.
  • Click on Delete.
  • Confirm each time with OK.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the content of that logfile in your reply.
  • You can find the logfile at C:\AdwCleaner[Sn].txt as well - n is the order number.
===

Let see if we can find a solution to the Windows update.

Please download Farbar Service Scanner and run it on the computer with the issue.
  • Make sure the following options are checked:
    • Internet Services
    • Windows Firewall
    • System Restore
    • Security Center/Action center
    • Windows Update
    • Windows Defender
  • Press "Scan".
  • It will create a log (FSS.txt) in the same directory the tool is run.
  • Please copy and paste the log to your reply.


#20 Splatle

Splatle
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:09:28 AM

Posted 25 August 2012 - 09:34 AM

Sorry for the extended absence. Below are the two logs you requested.

# AdwCleaner v1.801 - Logfile created 08/25/2012 at 09:44:06
# Updated 14/08/2012 by Xplode
# Operating system : Windows 7 Home Premium (64 bits)
# User : Jay - COMPUTER
# Boot Mode : Normal
# Running from : C:\Users\Jay\Desktop\adwcleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

Folder Deleted : C:\ProgramData\AVG Secure Search
Deleted on reboot : C:\Program Files (x86)\Common Files\AVG Secure Search

***** [Registry] *****

Key Deleted : HKCU\Software\Softonic

***** [Registre - GUID] *****


***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16421

[OK] Registry is clean.

*************************

AdwCleaner[R1].txt - [6716 octets] - [16/08/2012 17:47:36]
AdwCleaner[S1].txt - [4880 octets] - [17/08/2012 19:42:25]
AdwCleaner[R2].txt - [898 octets] - [19/08/2012 21:57:07]
AdwCleaner[R3].txt - [957 octets] - [19/08/2012 21:57:58]
AdwCleaner[R4].txt - [1095 octets] - [21/08/2012 19:42:54]
AdwCleaner[S2].txt - [994 octets] - [25/08/2012 09:44:06]

########## EOF - C:\AdwCleaner[S2].txt - [1121 octets] ##########




Farbar Service Scanner Version: 06-08-2012
Ran by Jay (administrator) on 25-08-2012 at 10:32:07
Running from "C:\Users\Jay\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L3I674PR"
Microsoft Windows 7 Home Premium (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo IP is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Action Center:
============

Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is OK.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend: "%ProgramFiles(x86)%\Windows Defender\mpsvc.dll".


Windows Defender Disabled Policy:
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys
[2012-02-15 07:53] - [2011-12-27 23:59] - 0499200 ____A (Microsoft Corporation) DB9D6C6B2CD95A9CA414D045B627422E

C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys
[2012-05-10 19:22] - [2012-03-30 07:09] - 1895280 ____A (Microsoft Corporation) 624C5B3AA4C99B3184BB922D9ECE3FF0

C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll
[2009-07-13 20:09] - [2009-07-13 21:41] - 0824832 ____A (Microsoft Corporation) AECAB449567D1846DAD63ECE49E893E3

C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll
[2009-07-13 19:36] - [2009-07-13 21:41] - 0170496 ____A (Microsoft Corporation) 765A27C3279CE11D14CB9E4F5869FCA5

C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll
[2012-06-13 22:19] - [2012-04-24 01:59] - 0182272 ____A (Microsoft Corporation) F02786B66375292E58C8777082D4396D

C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****

#21 nasdaq

nasdaq

  • Malware Response Team
  • 38,926 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:09:28 AM

Posted 25 August 2012 - 12:42 PM

Check the settings for the BITS (Background Intelligent Transfer Service).

Click the start button then click RUN...
Type in services.msc then ok

Scroll down the list to Background Intelligent Transfer Service and double click it to open the properties box.
On the general tab, the start up type should be set to manual or automatic.
Click the Log On tab, "log on as:" should be Local system account.
Below that in the hardware profile box under service, it should say enabled, if not click the enable button.
Apply and ok, then exit services.

=*=

Check the Windows updates now.

#22 Splatle

Splatle
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:09:28 AM

Posted 27 August 2012 - 08:52 PM

I was able to get into the BITS. Start up type was set as manual I changed it to Automatic. The "log on as" was already set as you described. There was no hardware profile box under any of the tabs. Should i be looking in a different place?

#23 nasdaq

nasdaq

  • Malware Response Team
  • 38,926 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:09:28 AM

Posted 28 August 2012 - 08:11 AM

There was no hardware profile box under any of the tabs. Should i be looking in a different place?


Then you do not have or need a profile. ( I do not have one.)

Try this change the setting to : Automatic (delay start)
Click apply.

Restart the computer.

Try the update now?

If still no joy Change the setting to Automatic click the apply button and again restart the computer.

This will reset the registry setting and may correct the situation.

Keep me posted.

#24 Splatle

Splatle
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:09:28 AM

Posted 29 August 2012 - 07:22 PM

Tried Auto delay and regular Auto. No luck either way

#25 nasdaq

nasdaq

  • Malware Response Team
  • 38,926 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:09:28 AM

Posted 30 August 2012 - 10:33 AM

Please download Seven.zip file from here: http://www.smartestc...y-network-keys/
Unzip the file to a temporary folder your desktop.

These files will be extracted:
afd.reg
bit.reg
bfe.reg
mpssvc.reg
nsiproxy.reg
sdrsvc.reg
tdx.reg
wscsvc.reg
windefend.reg
wuauserv.reg

legacy_afd.reg
legacy_bfe.reg
Legacy_bit.reg
legacy_mpssvc.reg
legacy_nsiproxy.reg
legacy_sdrsvc.reg
legacy_tdx.reg
Legacy_windefend.reg
legacy_wscsvc.reg
legacy_wuauserv.reg

start_services.bat


Double-click each one of these 2 .reg files in turn and click Yes to add it to the Registry

bit.reg
Legacy_bit.reg


Allow registry merge.
When the 2 file have been executed.

Restart computer.

Try the update now.

#26 Splatle

Splatle
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:09:28 AM

Posted 01 September 2012 - 07:26 AM

I was able to install the bits.reg but not the legacy.bits.reg.


Still no dice on the install of the windows update.

#27 nasdaq

nasdaq

  • Malware Response Team
  • 38,926 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:09:28 AM

Posted 01 September 2012 - 08:22 AM

Please download MiniToolBox to Desktop and run it.

Check mark the following boxe:
  • List last 10 Event Viewer log
Click Go and copy/paste the log (Result.txt) into your next post.

#28 Splatle

Splatle
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:09:28 AM

Posted 01 September 2012 - 07:56 PM

MiniToolBox by Farbar Version: 23-07-2012
Ran by Jay (administrator) on 01-09-2012 at 20:55:23
Microsoft Windows 7 Home Premium (X64)
Boot Mode: Normal
***************************************************************************

========================= Event log errors: ===============================

Application errors:
==================
Error: (09/01/2012 06:33:00 PM) (Source: Application Error) (User: )
Description: Faulting application name: iexplore.exe, version: 9.0.8112.16448, time stamp: 0x4fecf1b7
Faulting module name: msxml3.dll, version: 8.110.7600.17036, time stamp: 0x4fcee42c
Exception code: 0xc0000005
Fault offset: 0x0002e64f
Faulting process id: 0x1540
Faulting application start time: 0xiexplore.exe0
Faulting application path: iexplore.exe1
Faulting module path: iexplore.exe2
Report Id: iexplore.exe3

Error: (09/01/2012 06:05:15 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT AUTHORITY)NT AUTHORITY
Description: Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code.

Error: (09/01/2012 06:05:15 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT AUTHORITY)NT AUTHORITY
Description: The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.

Error: (09/01/2012 05:59:45 PM) (Source: Application Error) (User: )
Description: Faulting application name: iexplore.exe, version: 9.0.8112.16448, time stamp: 0x4fecf1b7
Faulting module name: msxml3.dll, version: 8.110.7600.17036, time stamp: 0x4fcee42c
Exception code: 0xc0000005
Fault offset: 0x0002e64f
Faulting process id: 0x13e0
Faulting application start time: 0xiexplore.exe0
Faulting application path: iexplore.exe1
Faulting module path: iexplore.exe2
Report Id: iexplore.exe3

Error: (09/01/2012 05:58:35 PM) (Source: Application Error) (User: )
Description: Faulting application name: svchost.exe_IKEEXT, version: 6.1.7600.16385, time stamp: 0x4a5bc3c1
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x000000000007000a
Faulting process id: 0x184
Faulting application start time: 0xsvchost.exe_IKEEXT0
Faulting application path: svchost.exe_IKEEXT1
Faulting module path: svchost.exe_IKEEXT2
Report Id: svchost.exe_IKEEXT3

Error: (09/01/2012 05:58:05 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 5051406

Error: (09/01/2012 05:58:05 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 5051406

Error: (09/01/2012 05:58:05 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (09/01/2012 04:34:57 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 63493

Error: (09/01/2012 04:34:57 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 63493


System errors:
=============
Error: (09/01/2012 06:01:20 PM) (Source: Service Control Manager) (User: )
Description: The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Management Instrumentation service, but this action failed with the following error:
%%1056

Error: (09/01/2012 06:01:20 PM) (Source: Service Control Manager) (User: )
Description: The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Multimedia Class Scheduler service, but this action failed with the following error:
%%1056

Error: (09/01/2012 06:01:20 PM) (Source: Service Control Manager) (User: )
Description: The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the IKE and AuthIP IPsec Keying Modules service, but this action failed with the following error:
%%1056

Error: (09/01/2012 06:01:20 PM) (Source: Service Control Manager) (User: )
Description: The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Computer Browser service, but this action failed with the following error:
%%1056

Error: (09/01/2012 06:00:20 PM) (Source: Service Control Manager) (User: )
Description: The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Update service, but this action failed with the following error:
%%1056

Error: (09/01/2012 06:00:20 PM) (Source: Service Control Manager) (User: )
Description: The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Server service, but this action failed with the following error:
%%1056

Error: (09/01/2012 05:59:20 PM) (Source: Service Control Manager) (User: )
Description: The Windows Update service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.

Error: (09/01/2012 05:59:20 PM) (Source: Service Control Manager) (User: )
Description: The Windows Management Instrumentation service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.

Error: (09/01/2012 05:59:20 PM) (Source: Service Control Manager) (User: )
Description: The Themes service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.

Error: (09/01/2012 05:59:20 PM) (Source: Service Control Manager) (User: )
Description: The Shell Hardware Detection service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.


Microsoft Office Sessions:
=========================
Error: (09/01/2012 06:33:00 PM) (Source: Application Error)(User: )
Description: iexplore.exe9.0.8112.164484fecf1b7msxml3.dll8.110.7600.170364fcee42cc00000050002e64f154001cd88910418009cC:\Program Files (x86)\Internet Explorer\iexplore.exeC:\Windows\System32\msxml3.dllfbd81505-f484-11e1-b217-e303719dc414

Error: (09/01/2012 06:05:15 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT AUTHORITY)NT AUTHORITY
Description: WmiApRplWmiApRpl8F20300004D070000

Error: (09/01/2012 06:05:15 PM) (Source: Microsoft-Windows-LoadPerf)(User: NT AUTHORITY)NT AUTHORITY
Description: Performance1637070000000000000000000009030000

Error: (09/01/2012 05:59:45 PM) (Source: Application Error)(User: )
Description: iexplore.exe9.0.8112.164484fecf1b7msxml3.dll8.110.7600.170364fcee42cc00000050002e64f13e001cd887067f8d0f2C:\Program Files (x86)\Internet Explorer\iexplore.exeC:\Windows\System32\msxml3.dll56b8c849-f480-11e1-b217-e303719dc414

Error: (09/01/2012 05:58:35 PM) (Source: Application Error)(User: )
Description: svchost.exe_IKEEXT6.1.7600.163854a5bc3c1unknown0.0.0.000000000c0000005000000000007000a18401cd886c44289710C:\Windows\system32\svchost.exeunknown2d2d688e-f480-11e1-b217-e303719dc414

Error: (09/01/2012 05:58:05 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 5051406

Error: (09/01/2012 05:58:05 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 5051406

Error: (09/01/2012 05:58:05 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (09/01/2012 04:34:57 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 63493

Error: (09/01/2012 04:34:57 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 63493


**** End of log ****

#29 nasdaq

nasdaq

  • Malware Response Team
  • 38,926 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:09:28 AM

Posted 02 September 2012 - 10:07 AM

Error: (09/01/2012 05:59:45 PM) (Source: Application Error) (User: )
Description: Faulting application name: iexplore.exe, version: 9.0.8112.16448, time stamp: 0x4fecf1b7
Faulting module name: msxml3.dll, version: 8.110.7600.17036, time stamp: 0x4fcee42c
Exception code: 0xc0000005
Fault offset: 0x0002e64f
Faulting process id: 0x13e0
Faulting application start time: 0xiexplore.exe0
Faulting application path: iexplore.exe1
Faulting module path: iexplore.exe2
Report Id: iexplore.exe3

Error: (09/01/2012 05:58:35 PM) (Source: Application Error) (User: )
Description: Faulting application name: svchost.exe_IKEEXT, version: 6.1.7600.16385, time stamp: 0x4a5bc3c1
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x000000000007000a
Faulting process id: 0x184
Faulting application start time: 0xsvchost.exe_IKEEXT0
Faulting application path: svchost.exe_IKEEXT1
Faulting module path: svchost.exe_IKEEXT2
Report Id: svchost.exe_IKEEXT3


The culprit to me are in bold.

I suggest for now to run this scan.

I'd like us to scan your machine with ESET OnlineScan
  • Hold down Control and click on the following link to open ESET OnlineScan in a new window.
    ESET OnlineScan
  • Click the Posted Image button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
    • Click on Posted Image to download the ESET Smart Installer. Save it to your desktop.
    • Double click on the Posted Image icon on your desktop.
  • Check Posted Image
  • Click the Posted Image button.
  • Accept any security warnings from your browser.
  • Check Posted Image
  • Push the Start button.
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, push Posted Image
  • Push Posted Image, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  • Push the Posted Image button.
  • Push Posted Image

If that fails to find anything or malware then open a new topic in this Windows 7 Forum
http://www.bleepingcomputer.com/forums/forum167.html

An expert may be able to help you find a solution.

I will leave this topic open for 5 days. Should you need to return please do.

#30 Splatle

Splatle
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:09:28 AM

Posted 08 September 2012 - 08:17 AM

I ran eset last night. It found 33 items and removed 33 items. I'm running it again this morning to make sure everthing is clear.

Thanks again for you assistance.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users