Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

help please Im going down with the ship


  • Please log in to reply
5 replies to this topic

#1 joe the shmoe

joe the shmoe

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:DFW
  • Local time:06:03 PM

Posted 25 November 2013 - 07:34 PM

First McAfee was turning the firewall off every five minutes, now McAfee is uninstalling regularly.  

Something is definitely wrong I just cant figure it our.  Windows 7 Samsung 300V3A

I did run aAutorun and saw some very disturbing things is there.

Needless to say McAfee is of little help and anything that I research are long drwn out processes that make me feel more foolish than I actually am

 

I respect you'll for all that you do for others.

I don't know bleep from Shinola and I really need assistance



BC AdBot (Login to Remove)

 


#2 jhayz

jhayz

  • BC Advisor
  • 6,922 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:03 AM

Posted 25 November 2013 - 07:43 PM

:welcome: joe to Bleeping Computer Community :)

Follow the instructions according to their order.

:step1: Please post your computer model next time. Please remove Mcafee software product by reading from this link.

 

:step2: Download SecurityCheck.exe from Here

. Run SecurityCheck and follow the instruction from inside the code box.
. When the scan is finished, a notepad will automatically open as check.txt
   Please copy and paste the contents here on your next reply.

 

:step3: Download Speccy and then install the program.  To post and publish a snapshot of your   PC.. In the Menu bar, click File -> Publish Snapshot
. Click Yes > then Copy to Clipboard
. On your next reply, right-click on a empty space and click Paste on reply box then click Post.

 

:step4: Download MiniToolBox and run the program. Select
List Last 10 Event Viewers, List Installed Programs and List Users, Partitions and Memory Size then click Go.
A notepad will open then copy-paste the report on your next reply.

 

:step5: Download then runFarbar Service Scanner and checkmark all boxes.Click Scan and then a Notepad text will open. Copy-Paste the report on your next reply.


Tekken
 


#3 joe the shmoe

joe the shmoe
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:DFW
  • Local time:06:03 PM

Posted 06 December 2013 - 02:19 PM

computer model and information:

Samsung System Model 300V3A/300V4A/300V5A

Security Check Results:

Results of screen317's Security Check version 0.99.77 
 Windows 7 Service Pack 1 x64 (UAC is enabled) 
 Internet Explorer 11 
``````````````Antivirus/Firewall Check:``````````````
 Windows Firewall Enabled! 
McAfee Anti-Virus and Anti-Spyware  
 WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
 Malwarebytes Anti-Malware version 1.75.0.1300 
 Java 7 Update 45 
 Adobe Flash Player 11.9.900.152 
 Adobe Reader XI 
 Mozilla Firefox (25.0.1)
````````Process Check: objlist.exe by Laurent```````` 
 McAfee VirusScan mcods.exe 
 McAfee Online Backup MOBKbackup.exe  
 iolo Common Lib ioloServiceManager.exe
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C: 0%
````````````````````End of Log``````````````````````

Speecy

http://speccy.piriform.com/results/poOpbCuQZu1kZj7uQq2vbMA

 

Mini Toolbox

MiniToolBox by Farbar  Version: 13-07-2013
Ran by joel (administrator) on 06-12-2013 at 12:53:55
Running from "C:\Users\joel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZVXRQ01B"
Microsoft Windows 7 Home Premium  Service Pack 1 (X64)
Boot Mode: Normal
***************************************************************************

========================= Event log errors: ===============================

Application errors:
==================
Error: (12/06/2013 00:56:20 AM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "1".Error in manifest or policy file "2" on line 3.
The manifest file root element must be assembly.

Error: (12/05/2013 09:34:40 PM) (Source: Application Error) (User: )
Description: Faulting application name: PSIA.exe, version: 3.0.0.9015, time stamp: 0x5277789f
Faulting module name: ntdll.dll, version: 6.1.7601.18247, time stamp: 0x521ea8e7
Exception code: 0xc0000005
Fault offset: 0x000332b0
Faulting process id: 0x2b4
Faulting application start time: 0xPSIA.exe0
Faulting application path: PSIA.exe1
Faulting module path: PSIA.exe2
Report Id: PSIA.exe3

Error: (12/05/2013 09:31:05 PM) (Source: Application Hang) (User: )
Description: The program psi.exe version 3.0.0.9015 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 1644

Start Time: 01cef2335d7b9f17

Termination Time: 62

Application Path: C:\Program Files (x86)\Secunia\PSI\psi.exe

Report Id: c619f541-5e26-11e3-82b5-dca9710c8338

Error: (12/05/2013 09:28:53 PM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface.  hr = 0x80070005, Access is denied.
.
This is often caused by incorrect security settings in either the writer or requestor process.

Operation:
   Gathering Writer Data

Context:
   Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
   Writer Name: System Writer
   Writer Instance ID: {fd7a8800-8a1f-4a00-a76d-c02aaebd7883}

Error: (12/05/2013 06:35:50 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.

Details:
AddWin32ServiceFiles: Unable to back up image of service McAfee Application Installer Cleanup (0026121386127314) since QueryServiceConfig API failed

System Error:
The system cannot find the file specified.
.

Error: (12/05/2013 06:35:06 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.

Details:
AddWin32ServiceFiles: Unable to back up image of service McAfee Application Installer Cleanup (0026121386127314) since QueryServiceConfig API failed

System Error:
The system cannot find the file specified.
.

Error: (12/05/2013 06:34:42 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.

Details:
AddWin32ServiceFiles: Unable to back up image of service McAfee Application Installer Cleanup (0026121386127314) since QueryServiceConfig API failed

System Error:
The system cannot find the file specified.
.

System errors:
=============
Error: (12/05/2013 09:26:26 PM) (Source: Service Control Manager) (User: )
Description: IHA_MessageCenter%%1053

Error: (12/05/2013 09:26:26 PM) (Source: Service Control Manager) (User: )
Description: 30000IHA_MessageCenter

Error: (12/05/2013 09:25:56 PM) (Source: Service Control Manager) (User: )
Description: DYMO PnP Service%%1053

Error: (12/05/2013 09:25:56 PM) (Source: Service Control Manager) (User: )
Description: 30000DYMO PnP Service

Error: (12/05/2013 07:06:58 PM) (Source: Service Control Manager) (User: )
Description: 30000mfecore

Error: (12/05/2013 07:06:51 PM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (12/05/2013 07:05:37 PM) (Source: DCOM) (User: )
Description: {6F722974-5E92-11E1-9F50-001676586DF8}

Microsoft Office Sessions:
=========================
Error: (12/06/2013 00:56:20 AM) (Source: SideBySide)(User: )
Description: C:\Program Files\WinZip\adxloader.dll.ManifestC:\Program Files\WinZip\adxloader.dll.Manifest2

Error: (12/05/2013 09:34:40 PM) (Source: Application Error)(User: )
Description: PSIA.exe3.0.0.90155277789fntdll.dll6.1.7601.18247521ea8e7c0000005000332b02b401cef232f356797cC:\Program Files (x86)\Secunia\PSI\PSIA.exeC:\windows\SysWOW64\ntdll.dll5678a423-5e27-11e3-82b5-dca9710c8338

Error: (12/05/2013 09:31:05 PM) (Source: Application Hang)(User: )
Description: psi.exe3.0.0.9015164401cef2335d7b9f1762C:\Program Files (x86)\Secunia\PSI\psi.exec619f541-5e26-11e3-82b5-dca9710c8338

Error: (12/05/2013 09:28:53 PM) (Source: VSS)(User: )
Description: 0x80070005, Access is denied.

Operation:
   Gathering Writer Data

Context:
   Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
   Writer Name: System Writer
   Writer Instance ID: {fd7a8800-8a1f-4a00-a76d-c02aaebd7883}

Error: (12/05/2013 06:35:50 PM) (Source: Microsoft-Windows-CAPI2)(User: )
Description:
Details:
AddWin32ServiceFiles: Unable to back up image of service McAfee Application Installer Cleanup (0026121386127314) since QueryServiceConfig API failed

System Error:
The system cannot find the file specified.

Error: (12/05/2013 06:35:06 PM) (Source: Microsoft-Windows-CAPI2)(User: )
Description:
Details:
AddWin32ServiceFiles: Unable to back up image of service McAfee Application Installer Cleanup (0026121386127314) since QueryServiceConfig API failed

System Error:
The system cannot find the file specified.

Error: (12/05/2013 06:34:42 PM) (Source: Microsoft-Windows-CAPI2)(User: )
Description:
Details:
AddWin32ServiceFiles: Unable to back up image of service McAfee Application Installer Cleanup (0026121386127314) since QueryServiceConfig API failed

System Error:
The system cannot find the file specified.

CodeIntegrity Errors:
===================================
  Date: 2013-11-27 16:56:44.438
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume16\SamsungRecovery\SamsungData\DataBackup#(2013-10-03.011809)\C Drive\Windows\winsxs\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22379_none_c014624816718091\appidapi.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-11-27 16:56:44.329
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume16\SamsungRecovery\SamsungData\DataBackup#(2013-10-03.011809)\C Drive\Windows\winsxs\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22379_none_c014624816718091\appidapi.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-11-27 16:56:44.219
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume16\SamsungRecovery\SamsungData\DataBackup#(2013-10-03.011809)\C Drive\Windows\winsxs\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22379_none_c014624816718091\appidapi.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-11-27 16:56:44.126
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume16\SamsungRecovery\SamsungData\DataBackup#(2013-10-03.011809)\C Drive\Windows\winsxs\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22379_none_c014624816718091\appidapi.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-11-27 16:56:43.985
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume16\SamsungRecovery\SamsungData\DataBackup#(2013-10-03.011809)\C Drive\Windows\winsxs\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22280_none_c0008ddc1681bb4c\appidapi.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-11-27 16:56:43.876
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume16\SamsungRecovery\SamsungData\DataBackup#(2013-10-03.011809)\C Drive\Windows\winsxs\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22280_none_c0008ddc1681bb4c\appidapi.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-11-27 16:56:43.783
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume16\SamsungRecovery\SamsungData\DataBackup#(2013-10-03.011809)\C Drive\Windows\winsxs\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22280_none_c0008ddc1681bb4c\appidapi.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-11-27 16:56:43.673
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume16\SamsungRecovery\SamsungData\DataBackup#(2013-10-03.011809)\C Drive\Windows\winsxs\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22280_none_c0008ddc1681bb4c\appidapi.dll because the set of per-page image hashes could not be found on the system.

  Date: 2013-11-27 16:44:24.060
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume16\SamsungRecovery\SamsungData\DataBackup#(2013-10-03.011809)\C Drive\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22379_none_b5bfb7f5e210be96\appid.sys because the set of per-page image hashes could not be found on the system.

  Date: 2013-11-27 16:44:23.967
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume16\SamsungRecovery\SamsungData\DataBackup#(2013-10-03.011809)\C Drive\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22379_none_b5bfb7f5e210be96\appid.sys because the set of per-page image hashes could not be found on the system.

=========================== Installed Programs ============================

???? ??? Windows Live (Version: 15.4.3502.0922)
???? Windows Live (Version: 15.4.3502.0922)
?????? ??????? ?? Windows Live (Version: 15.4.3502.0922)
???????? ?????????? Windows Live (Version: 15.4.3502.0922)
?????????? Windows Live (Version: 15.4.3502.0922)
??????????? ?? Windows Live (Version: 15.4.3502.0922)
„Windows Live Essentials“ (Version: 15.4.3502.0922)
„Windows Live Mail“ (Version: 15.4.3502.0922)
„Windows Live Messenger“ (Version: 15.4.3502.0922)
„Windows Live“ fotogalerija (Version: 15.4.3502.0922)
Adobe Flash Player 11 ActiveX (Version: 11.9.900.152)
Adobe Flash Player 11 Plugin (Version: 11.9.900.152)
Adobe Reader XI (11.0.05) (Version: 11.0.05)
Agatha Christie - Death on the Nile (Version: 2.2.0.82)
Apple Software Update (Version: 2.1.3.127)
AT&T Communication Manager (Version: 9.2.359.7)
Bejeweled 2 Deluxe (Version: 2.2.0.95)
Bing Bar (Version: 7.2.241.0)
BlackBerry Backup Extractor (Version: 1.1.8.0)
BlackBerry Desktop Software 7.1 (Version: 7.1.0.41)
BlackBerry Device Software v7.0.0 for the BlackBerry 9810 smartphone (Version: 7.0.0.583 (Platform 5.0.0.736))
BlackBerry Device Software v7.1.0 for the BlackBerry 9810 smartphone (Version: 7.1.0.694 (Platform 5.1.0.507))
Bonjour (Version: 3.0.0.10)
BufferChm (Version: 140.0.298.000)
Build-a-lot (Version: 2.2.0.82)
CCleaner (Version: 4.08)
Chuzzle Deluxe (Version: 2.2.0.82)
CyberLink Media Suite (Version: 8.0.2227)
CyberLink Media+ Player10 (Version: 10.0.1110.00)
CyberLink MediaShow (Version: 5.0.1130a)
CyberLink Power2Go (Version: 6.1.3802)
CyberLink PowerDirector (Version: 8.0.3306)
CyberLink YouCam (Version: 3.1.4013)
D3DX10 (Version: 15.4.2368.0902)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
Destinations (Version: 140.0.0.0)
Diner Dash 2 Restaurant Rescue (Version: 2.2.0.82)
DocProc (Version: 140.0.185.000)
DYMO Label v.8 (Version: 8.5.0.1751)
Easy Content Share (Version: 1.0)
Easy Migration (Version: 1.0)
EasyFileShare (Version: 1.0.12)
Epson Connect
Epson Customer Participation (Version: 1.0.0.0)
Epson Download Navigator (Version: 1.0.1)
Epson Event Manager (Version: 2.50.0001)
Epson FAX Utility (Version: 1.20.00)
EPSON Scan
EPSON WorkForce 545 Series Printer Uninstall
EpsonNet Print (Version: 2.4j)
ETDWare PS/2-X64 10.0.7.2_WHQL (Version: 10.0.7.2)
Farm Frenzy (Version: 2.2.0.82)
Fotogalerija Windows Live (Version: 15.4.3502.0922)
Galeria de Fotografias do Windows Live (Version: 15.4.3502.0922)
Galería fotográfica de Windows Live (Version: 15.4.3502.0922)
Galeria fotografii uslugi Windows Live (Version: 15.4.3502.0922)
Galerie de photos Windows Live (Version: 15.4.3502.0922)
Galerie foto Windows Live (Version: 15.4.3502.0922)
Glary Utilities Pro 2.56.0.1822 (Version: 2.56.0.1822)
Glary Utilities PRO 3.9.4 (Version: 3.9.4.144)
Google Toolbar for Internet Explorer (Version: 1.0.0)
Google Toolbar for Internet Explorer (Version: 7.5.4601.54)
Google Update Helper (Version: 1.3.22.3)
HP Imaging Device Functions 14.5 (Version: 14.5)
HP Update (Version: 5.002.006.003)
hpg5590 (Version: 140.000.000.000)
iCloud (Version: 3.0.2.163)
IHA_MessageCenter (Version: 1.9.1)
Insaniquarium Deluxe (Version: 2.2.0.82)
Intel® Control Center (Version: 1.2.1.1007)
Intel® Management Engine Components (Version: 7.0.0.1144)
Intel® Processor Graphics (Version: 8.15.10.2622)
Intel® PROSet/Wireless Software for Bluetooth® Technology (Version: 1.1.0.0537)
Intel® PROSet/Wireless WiFi Software (Version: 14.2.1000)
Intel® Rapid Storage Technology (Version: 10.1.5.1001)
iolo technologies' System Mechanic Premium (Version: 12.0.0)
Java 7 Update 45 (Version: 7.0.450)
Java Auto Updater (Version: 2.1.9.8)
John Deere Drive Green (Version: 2.2.0.82)
Junk Mail filter update (Version: 15.4.3502.0922)
Kensington Share Central  (Version: 1.23)
Malwarebytes Anti-Malware version 1.75.0.1300 (Version: 1.75.0.1300)
McAfee Online Backup (Version: 1.16.4.0)
McAfee Total Protection (Version: 12.8.856)
McAfee Virtual Technician (Version: 7.1.0.2483)
Mesh Runtime (Version: 15.4.5722.2)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Mouse and Keyboard Center (Version: 2.2.173.0)
Microsoft Office Access MUI (English) 2010 (Version: 14.0.7015.1000)
Microsoft Office Access Setup Metadata MUI (English) 2010 (Version: 14.0.7015.1000)
Microsoft Office Excel MUI (English) 2010 (Version: 14.0.7015.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000)
Microsoft Office OneNote MUI (English) 2010 (Version: 14.0.7015.1000)
Microsoft Office Outlook MUI (English) 2010 (Version: 14.0.7015.1000)
Microsoft Office PowerPoint MUI (English) 2010 (Version: 14.0.7015.1000)
Microsoft Office Professional 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (Spanish) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proofing (English) 2010 (Version: 14.0.7015.1000)
Microsoft Office Publisher MUI (English) 2010 (Version: 14.0.7015.1000)
Microsoft Office Shared 64-bit MUI (English) 2010 (Version: 14.0.7015.1000)
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010 (Version: 14.0.7015.1000)
Microsoft Office Shared MUI (English) 2010 (Version: 14.0.7015.1000)
Microsoft Office Shared Setup Metadata MUI (English) 2010 (Version: 14.0.7015.1000)
Microsoft Office Single Image 2010 (Version: 14.0.7015.1000)
Microsoft Office Word MUI (English) 2010 (Version: 14.0.7015.1000)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Mozilla Firefox 25.0.1 (x86 en-US) (Version: 25.0.1)
Mozilla Maintenance Service (Version: 25.0.1)
MSVCRT (Version: 15.4.2862.0708)
MSVCRT_amd64 (Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
Multimedia POP (Version: 1.0)
NVIDIA Display Control Panel (Version: 6.14.12.6754)
NVIDIA Graphics Driver 267.54 (Version: 267.54)
NVIDIA Install Application (Version: 2.265.39.0)
NVIDIA Optimus 1.0.21 (Version: 1.0.21)
NVIDIA Update Components (Version: 1.0.21)
OCR Software by I.R.I.S. 14.5 (Version: 14.5)
Peggle (Version: 2.2.0.82)
Penguins! (Version: 2.2.0.82)
Picasa 3 (Version: 3.9)
Plants vs. Zombies (Version: 2.2.0.82)
Poczta uslugi Windows Live (Version: 15.4.3502.0922)
Podstawowe programy Windows Live (Version: 15.4.3502.0922)
Polar Golfer (Version: 2.2.0.82)
Pošta Windows Live (Version: 15.4.3502.0922)
Raccolta foto di Windows Live (Version: 15.4.3502.0922)
Realtek Ethernet Controller Driver (Version: 7.44.421.2011)
Realtek High Definition Audio Driver (Version: 6.0.1.6378)
S?????? f?t???af??? t?? Windows Live (Version: 15.4.3502.0922)
Samsung AnyWeb Print (Version: 2.0.67.1)
Samsung Control Center (Version: 1.0)
Samsung Printer Live Update
Samsung Recovery Solution 5 (Version: 5.0.1.3)
Samsung Support Center 1.0 (Version: 1.1.38)
Samsung Universal Print Driver (Version: 2.02.05.00:27)
Samsung Universal Scan Driver (Version: 1.2.5.0)
Samsung Update Plus (Version: 3.0.0.17)
Scan (Version: 14.0.1.0)
Scanjet 5590 (Version: 14.5)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition
Skype Click to Call (Version: 6.13.13771)
Skype™ 6.11 (Version: 6.11.102)
Speccy (Version: 1.24)
Tweaking.com - Registry Backup (Version: 1.6.8)
Tweaking.com - Windows Repair (All in One) (Version: 2.1.0)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition
Update for Microsoft Word 2010 (KB2827323) 32-Bit Edition
User Guide (Version: 1.0)
VLC media player 2.1.1 (Version: 2.1.1)
Vz In-Home Agent (Version: 9.0.42.0)
WebReg (Version: 140.0.297.017)
WildTangent Games (Version: 1.0.1.5)
WildTangent ORB Game Console
Windows Live ?? (Version: 15.4.3502.0922)
Windows Live ?? ??? (Version: 15.4.3502.0922)
Windows Live ??? (Version: 15.4.3502.0922)
Windows Live ??? (Version: 15.4.3508.1109)
Windows Live ???? (Version: 15.4.3502.0922)
Windows Live Communications Platform (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3502.0922)
Windows Live fotoattelu galerija (Version: 15.4.3502.0922)
Windows Live Fotogaléria (Version: 15.4.3502.0922)
Windows Live Fotogalerie (Version: 15.4.3502.0922)
Windows Live Foto-galerija (Version: 15.4.3502.0922)
Windows Live Fotogalleri (Version: 15.4.3502.0922)
Windows Live Fotograf Galerisi (Version: 15.4.3502.0922)
Windows Live Fotótár (Version: 15.4.3502.0922)
Windows Live Galeria de Fotos (Version: 15.4.3502.0922)
Windows Live Galerija fotografija (Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0)
Windows Live Installer (Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3508.1109)
Windows Live Mail (Version: 15.4.3502.0922)
Windows Live Mesh (Version: 15.4.3502.0922)
Windows Live Messenger (Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (Version: 15.4.3502.0922)
Windows Live Photo Common (Version: 15.4.3502.0922)
Windows Live Photo Gallery (Version: 15.4.3502.0922)
Windows Live PIMT Platform (Version: 15.4.3508.1109)
Windows Live Pošta (Version: 15.4.3502.0922)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (Version: 15.4.3502.0922)
Windows Live SOXE Definitions (Version: 15.4.3502.0922)
Windows Live Temel Parçalar (Version: 15.4.3502.0922)
Windows Live UX Platform (Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109)
Windows Live Writer (Version: 15.4.3502.0922)
Windows Live Writer Resources (Version: 15.4.3502.0922)
Windows Liven asennustyökalu (Version: 15.4.3502.0922)
Windows Liven sähköposti (Version: 15.4.3502.0922)
Windows Liven valokuvavalikoima (Version: 15.4.3502.0922)
WinZip 17.5 (Version: 17.5.10562)
Zuma Deluxe (Version: 2.2.0.95)

========================= Memory info: ===================================

Percentage of memory in use: 67%
Total physical RAM: 4009.55 MB
Available physical RAM: 1310.3 MB
Total Pagefile: 8017.27 MB
Available Pagefile: 4538.87 MB
Total Virtual: 4095.88 MB
Available Virtual: 3962.25 MB

========================= Partitions: =====================================

1 Drive c: () (Fixed) (Total:522.46 GB) (Free:460.35 GB) NTFS
2 Drive d: () (Fixed) (Total:51.67 GB) (Free:27.54 GB) NTFS
3 Drive e: (Oct 02 2013) (CDROM) (Total:0.03 GB) (Free:0 GB) UDF
9 Drive k: (Iomega HDD) (Fixed) (Total:931.51 GB) (Free:473.5 GB) NTFS
10 Drive l: (FreeAgent GoFlex Drive) (Fixed) (Total:465.76 GB) (Free:249.62 GB) NTFS
11 Drive m: (SEA_DISC) (Fixed) (Total:149.05 GB) (Free:114.43 GB) NTFS
12 Drive n: () (Fixed) (Total:140.85 GB) (Free:66.52 GB) NTFS
13 Drive o: (HP_RECOVERY) (Fixed) (Total:8.2 GB) (Free:8.09 GB) NTFS

========================= Users: ========================================

User accounts for \\JOEL-PC

Administrator            Guest                    joel                    
UpdatusUser             

**** End of log ****

 

Farbar Service Scanner:

Farbar Service Scanner Version: 05-12-2013
Ran by joel (administrator) on 06-12-2013 at 13:01:00
Running from "C:\Users\joel\Downloads"
Microsoft Windows 7 Home Premium  Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.

Windows Firewall:
=============

Firewall Disabled Policy:
==================

System Restore:
============

System Restore Disabled Policy:
========================

Action Center:
============

Windows Update:
============

Windows Autoupdate Disabled Policy:
============================

Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.

Windows Defender Disabled Policy:
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1

Other Services:
==============

File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe => MD5 is legit
C:\Windows\System32\wscsvc.dll => MD5 is legit
C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll => MD5 is legit
C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\System32\ipnathlp.dll => MD5 is legit
C:\Windows\System32\iphlpsvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit

**** End of log ****

 



#4 jhayz

jhayz

  • BC Advisor
  • 6,922 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:03 AM

Posted 06 December 2013 - 10:34 PM

Ok, let me know after removing Mcafee if the issue is resolved. :thumbup2:

 

Edit : I saw some registry cleaner software (Glary) installed/running on your system. Do not used any registry cleaners as they tend to do more harm than what they are advertised. Please remove it completely also then check the difference.


Edited by jhayz, 06 December 2013 - 10:36 PM.

Tekken
 


#5 joe the shmoe

joe the shmoe
  • Topic Starter

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:DFW
  • Local time:06:03 PM

Posted 11 December 2013 - 11:57 PM

hi friend

I did as you asked and I have the same problem   nothing has changed.  jl



#6 hamluis

hamluis

    Moderator


  • Moderator
  • 56,567 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:05:03 PM

Posted 12 December 2013 - 10:29 AM

It appears that Windows was reinstalled (for whatever reason) in October...no critical updates installed until Novemeber...and none since.  Installs reflect only a few of the known critical updates since SP3.

 

Is that correct?

 

That would make the system extremely vulnerable to malware, IMO.

 

Those code-integrity errors all point to your using a Samsung backup that is either corrupted/damaged or incomplete.  If you reinstalled via said backup and it has problems...those problems translate to your current system setup.

 

Did you reinstall via your backup...because you knew that you were infected?

 

Louis

 

 






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users