[kenomikes]

Hi,


Update, ESET can just finished, I plugged in with Ethernet, took about 5 hours, but here's the log.

Said found 5 threats.


Thx, Mike


ESETSmartInstaller@High as CAB hook log:
OnlineScanner64.ocx - registred OK
OnlineScanner.ocx - registred OK
# version=8
# iexplore.exe=9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)
# OnlineScanner.ocx=1.0.0.6844
# api_version=3.0.2
# EOSSerial=c14bd8aa4203924280aa7354e9fac8c1
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2012-12-09 02:34:16
# local_time=2012-12-08 09:34:16 (-0500, Eastern Standard Time)
# country="United States"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776574 100 94 37216247 106563906 0 0
# scanned=1771
# found=0
# cleaned=0
# scan_time=285
esets_scanner_update returned -1 esets_gle=53251
esets_scanner_update returned -1 esets_gle=53251
# version=8
# iexplore.exe=9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)
# OnlineScanner.ocx=1.0.0.6844
# api_version=3.0.2
# EOSSerial=c14bd8aa4203924280aa7354e9fac8c1
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2012-12-09 12:47:40
# local_time=2012-12-09 07:47:40 (-0500, Eastern Standard Time)
# country="United States"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776574 100 94 37253051 106600710 0 0
# scanned=23839
# found=1
# cleaned=0
# scan_time=29728
C:\Program Files (x86)\intellidownload\torrent.exe Win32/BundleInstaller application (unable to clean) C34A30F9E0C5D534CB9F2209345EB3545AD49F34 I
# version=8
# iexplore.exe=9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)
# OnlineScanner.ocx=1.0.0.6844
# api_version=3.0.2
# EOSSerial=c14bd8aa4203924280aa7354e9fac8c1
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2012-12-09 01:05:47
# local_time=2012-12-09 08:05:47 (-0500, Eastern Standard Time)
# country="United States"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776574 100 94 37254138 106601797 0 0
# scanned=1771
# found=0
# cleaned=0
# scan_time=374
esets_scanner_update returned -1 esets_gle=53251
esets_scanner_update returned -1 esets_gle=53251
# version=8
# iexplore.exe=9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)
# OnlineScanner.ocx=1.0.0.6844
# api_version=3.0.2
# EOSSerial=c14bd8aa4203924280aa7354e9fac8c1
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2012-12-09 10:23:12
# local_time=2012-12-09 05:23:12 (-0500, Eastern Standard Time)
# country="United States"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776574 100 94 37287583 106635242 0 0
# scanned=137524
# found=5
# cleaned=0
# scan_time=20858
C:\Program Files (x86)\intellidownload\torrent.exe Win32/BundleInstaller application (unable to clean) C34A30F9E0C5D534CB9F2209345EB3545AD49F34 I
C:\Users\Liv\Downloads\50_shades_of_grey_trilogy_Fast.exe Win32/BundleInstaller application (unable to clean) 28BD61B1177FC5D7755C2D5F135D12567EA5D2AE I
C:\Users\Liv\Downloads\Fifty_Shades_of_Grey.exe Win32/Adware.1ClickDownload.G application (unable to clean) FF52E47A9C4B6417C124681E03258D78FD137F40 I
C:\Users\Liv\Downloads\iLividSetupV1 (1).exe Win32/Toolbar.SearchSuite application (unable to clean) 7F6599BC40D23DAD0AB0BCA60D48BF991BD79D82 I
C:\Users\Liv\Downloads\iLividSetupV1.exe Win32/Toolbar.SearchSuite application (unable to clean) 7F6599BC40D23DAD0AB0BCA60D48BF991BD79D82 I

Edited by kenomikes, 09 December 2012 - 05:50 PM.

[Advertisements]

Hi,

Panda scan log. FYI, connection was dropping constantly earlier today, but working fine last hour, now just lost it again.

Thx,

MIke




;***********************************************************************************************************************************************************************************
ANALYSIS: 2012-12-09 19:03:46
PROTECTIONS: 1
MALWARE: 20
SUSPECTS: 0
;***********************************************************************************************************************************************************************************
PROTECTIONS
Description Version Active Updated
;===================================================================================================================================================================================
Microsoft Security Essentials Yes Yes
;===================================================================================================================================================================================
MALWARE
Id Description Type Active Severity Disinfectable Disinfected Location
;===================================================================================================================================================================================
00139060 Cookie/Casalemedia TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\ecwmvf3d.txt
00139060 Cookie/Casalemedia TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\j1mqbv14.txt
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\fmgysqvm.txt
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\low\7ad7zfbb.txt
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\izj7vdx3.txt
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\qfsslrtj.txt
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\pqo4mugi.txt
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\4h4bka3y.txt
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\fdb6c55i.txt
00145457 Cookie/FastClick TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\5uaj7ln9.txt
00145457 Cookie/FastClick TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\low\2jjtqgg2.txt
00145457 Cookie/FastClick TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\tw53u7we.txt
00145457 Cookie/FastClick TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\n67mlxes.txt
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\qst1wkg6.txt
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\nojl92ab.txt
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\cebfuvjr.txt
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\l8x2kmjb.txt
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\1ggcm732.txt
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\8vj09s9o.txt
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\00rf3r2s.txt
00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\low\f7j22740.txt
00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\kszcm51w.txt
00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\qsjhxpi7.txt
00167642 Cookie/Com.com TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\low\liv@com[1].txt
00167704 Cookie/Xiti TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\xso020jq.txt
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\2l6oz067.txt
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\i30wsf6h.txt
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\low\r8fegyxx.txt
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\3ncnsao9.txt
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\506pxirq.txt
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\fmrfjl87.txt
00168061 Cookie/Apmebf TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\sgc20wdh.txt
00168061 Cookie/Apmebf TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\low\usalu9bw.txt
00168061 Cookie/Apmebf TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\1y6tb1qi.txt
00168076 Cookie/BurstNet TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\wc2d34a3.txt
00168076 Cookie/BurstNet TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\n4cr6obi.txt
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\8d5sjk7q.txt
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\g6znv1kk.txt
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\u5d65tt3.txt
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\phzb277v.txt
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\3m6943af.txt
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\low\5jhs018q.txt
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\l3p9stas.txt
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\low\y765tinn.txt
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\u3gpjg01.txt
00168106 Cookie/Weborama TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\ioo2tzh1.txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\g18qhnxr.txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\kosh6uz8.txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\vlt0qp7j.txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\dz6kvekf.txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\low\1a9fjw6n.txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\byjx2u6a.txt
00170304 Cookie/WebtrendsLive TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\xqs4o1nj.txt
00170495 Cookie/PointRoll TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\a67vco2e.txt
00170495 Cookie/PointRoll TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\low\[email protected][2].txt
00170556 Cookie/RealMedia TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\61aisa01.txt
00171982 Cookie/QuestionMarket TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\stk550kb.txt
00171982 Cookie/QuestionMarket TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\63shknnz.txt
00171982 Cookie/QuestionMarket TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\kcyw2ekg.txt
00171982 Cookie/QuestionMarket TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\48tflmvm.txt
00172221 Cookie/Zedo TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\p3faln0a.txt
00194327 Cookie/Go TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\ozdy6hed.txt
;===================================================================================================================================================================================
SUSPECTS
Sent Location
;===================================================================================================================================================================================
;===================================================================================================================================================================================
VULNERABILITIES
Id Severity Description
;===================================================================================================================================================================================
;===================================================================================================================================================================================

Edited by kenomikes, 09 December 2012 - 07:23 PM.

[kenomikes]

Hi,

Panda scan log. FYI, connection was dropping constantly earlier today, but working fine last hour, now just lost it again.

Thx,

MIke




;***********************************************************************************************************************************************************************************
ANALYSIS: 2012-12-09 19:03:46
PROTECTIONS: 1
MALWARE: 20
SUSPECTS: 0
;***********************************************************************************************************************************************************************************
PROTECTIONS
Description Version Active Updated
;===================================================================================================================================================================================
Microsoft Security Essentials Yes Yes
;===================================================================================================================================================================================
MALWARE
Id Description Type Active Severity Disinfectable Disinfected Location
;===================================================================================================================================================================================
00139060 Cookie/Casalemedia TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\ecwmvf3d.txt
00139060 Cookie/Casalemedia TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\j1mqbv14.txt
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\fmgysqvm.txt
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\low\7ad7zfbb.txt
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\izj7vdx3.txt
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\qfsslrtj.txt
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\pqo4mugi.txt
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\4h4bka3y.txt
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\fdb6c55i.txt
00145457 Cookie/FastClick TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\5uaj7ln9.txt
00145457 Cookie/FastClick TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\low\2jjtqgg2.txt
00145457 Cookie/FastClick TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\tw53u7we.txt
00145457 Cookie/FastClick TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\n67mlxes.txt
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\qst1wkg6.txt
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\nojl92ab.txt
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\cebfuvjr.txt
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\l8x2kmjb.txt
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\1ggcm732.txt
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\8vj09s9o.txt
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\00rf3r2s.txt
00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\low\f7j22740.txt
00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\kszcm51w.txt
00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\qsjhxpi7.txt
00167642 Cookie/Com.com TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\low\liv@com[1].txt
00167704 Cookie/Xiti TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\xso020jq.txt
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\2l6oz067.txt
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\i30wsf6h.txt
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\low\r8fegyxx.txt
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\3ncnsao9.txt
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\506pxirq.txt
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\fmrfjl87.txt
00168061 Cookie/Apmebf TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\sgc20wdh.txt
00168061 Cookie/Apmebf TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\low\usalu9bw.txt
00168061 Cookie/Apmebf TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\1y6tb1qi.txt
00168076 Cookie/BurstNet TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\wc2d34a3.txt
00168076 Cookie/BurstNet TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\n4cr6obi.txt
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\8d5sjk7q.txt
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\g6znv1kk.txt
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\u5d65tt3.txt
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\phzb277v.txt
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\3m6943af.txt
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\low\5jhs018q.txt
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\l3p9stas.txt
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\low\y765tinn.txt
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\u3gpjg01.txt
00168106 Cookie/Weborama TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\ioo2tzh1.txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\g18qhnxr.txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\kosh6uz8.txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\vlt0qp7j.txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\dz6kvekf.txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\low\1a9fjw6n.txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\byjx2u6a.txt
00170304 Cookie/WebtrendsLive TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\xqs4o1nj.txt
00170495 Cookie/PointRoll TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\a67vco2e.txt
00170495 Cookie/PointRoll TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\low\[email protected][2].txt
00170556 Cookie/RealMedia TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\61aisa01.txt
00171982 Cookie/QuestionMarket TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\stk550kb.txt
00171982 Cookie/QuestionMarket TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\63shknnz.txt
00171982 Cookie/QuestionMarket TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\kcyw2ekg.txt
00171982 Cookie/QuestionMarket TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\48tflmvm.txt
00172221 Cookie/Zedo TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\p3faln0a.txt
00194327 Cookie/Go TrackingCookie No 0 Yes No c:\users\liv\appdata\roaming\microsoft\windows\cookies\ozdy6hed.txt
;===================================================================================================================================================================================
SUSPECTS
Sent Location
;===================================================================================================================================================================================
;===================================================================================================================================================================================
VULNERABILITIES
Id Severity Description
;===================================================================================================================================================================================
;===================================================================================================================================================================================

Edited by kenomikes, 09 December 2012 - 07:23 PM.

[Dakeyras]

Hi.

Update, ESET can just finished, I plugged in with Ethernet, took about 5 hours, but here's the log.

Fair play.

Panda scan log. FYI, connection was dropping constantly earlier today, but working fine last hour, now just lost it again.

OK provide myself with a update once ran the below custom OTL script and checked for updates.

Also do you have any form of Sony Vaio media disks that may contain driver software etc and or something Atheros WiFi related etc if we need to use?

Custom OTL Script:

• Right-click OTL.exe and select Run as Administrator to start the program.
• Copy the lines from the quote-box(do not copy the word quote) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):

:Commands
[CreateRestorePoint]

:Files
ipconfig /flushdns /c
C:\Program Files (x86)\intellidownload
C:\Users\Liv\Downloads\50_shades_of_grey_trilogy_Fast.exe
C:\Users\Liv\Downloads\Fifty_Shades_of_Grey.exe
C:\Users\Liv\Downloads\iLividSetupV1 (1).exe
C:\Users\Liv\Downloads\iLividSetupV1.exe

:Commands
[EmptyTemp]

• Return to OTL, right-click in the Custom Scans/Fixes window (under the cyan bar) and choose Paste.
• Then click the red Run Fix button.
• Let the program run unhindered.
• If OTL asks to reboot your computer, allow it to do so. The report should appear in Notepad after the reboot.

Note: The logfile can also be located C: >> _OTL >> MovedFiles >> DD/DD/DD TT/TT.txt <-- denotes date/time log created.

Next:

Download and install FileHippo Update Checker from here.

Once installed >> Click on Start(Windows 7 Orb) >> All Programs >> right-click on Update Checker and select Run as Administrator >> a browser window will open after the scan is complete.

Download any updates detected to the desktop >> uninstall anything that requires updating via Programs and Features in the Control Panel.

Re-install the updated software...then delete the installers and empty the Recycle Bin.

Note: When I give the all clear my advice would be to consider keeping FileHippo Update Checker installed. Then periodically use it to check for any updates as having certain software outdated is a potential for malware to gain a foothold and exploit a system etc.

[kenomikes]

OTL first

All processes killed
========== COMMANDS ==========
Restore point Set: OTL Restore Point
========== FILES ==========
< ipconfig /flushdns /c >
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:\Users\Liv\Desktop\cmd.bat deleted successfully.
C:\Users\Liv\Desktop\cmd.txt deleted successfully.
C:\Program Files (x86)\intellidownload folder moved successfully.
C:\Users\Liv\Downloads\50_shades_of_grey_trilogy_Fast.exe moved successfully.
C:\Users\Liv\Downloads\Fifty_Shades_of_Grey.exe moved successfully.
C:\Users\Liv\Downloads\iLividSetupV1 (1).exe moved successfully.
C:\Users\Liv\Downloads\iLividSetupV1.exe moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Liv
->Temp folder emptied: 4326607 bytes
->Temporary Internet Files folder emptied: 48224956 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 2361 bytes

User: Public
->Temp folder emptied: 0 bytes

User: TEST
->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 799099 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 51445 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 51.00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 12102012_171241

Files\Folders moved on Reboot...
C:\Users\Liv\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
File\Folder C:\Users\Liv\AppData\Local\Temp\~DF5182235AD5020EAC.TMP not found!
File\Folder C:\Users\Liv\AppData\Local\Temp\~DF66B4FCA2A8B5D797.TMP not found!
File\Folder C:\Users\Liv\AppData\Local\Temp\~DF6A71FB6B08393911.TMP not found!
File\Folder C:\Users\Liv\AppData\Local\Temp\~DF6AE6F6215303A19C.TMP not found!
File\Folder C:\Users\Liv\AppData\Local\Temp\~DF6F0E2B40EFB00C62.TMP not found!
File\Folder C:\Users\Liv\AppData\Local\Temp\~DF7CAC6C9F012D3458.TMP not found!
File\Folder C:\Users\Liv\AppData\Local\Temp\~DF9432382355B6B394.TMP not found!
File\Folder C:\Users\Liv\AppData\Local\Temp\~DF95B908426B151107.TMP not found!
File\Folder C:\Users\Liv\AppData\Local\Temp\~DFA4F62894D6F54A3F.TMP not found!
File\Folder C:\Users\Liv\AppData\Local\Temp\~DFC1C4D64BA8FA2F34.TMP not found!
C:\Users\Liv\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\AntiPhishing\ED8654D5-B9F0-4DD9-B3E8-F8F560086FDF.dat moved successfully.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

[Dakeyras]

Acknowledged.

[kenomikes]

Hi,

There's 8 updates per Hippo, I did Itunes and Oovoo as you explained above, no problem doing that. But PC is extremely unstable tonight losing connection, not resolving easily. FYI, it wasn't finding my Wifi connection which is in a room downstairs, but it did find my wifes cell (Mytouch) which is right next to me, so I connected via that and thats how I'm typing this. Takes too long to download updates via the cell connnection. I can't use the ethernet connection tonight. Can I continue updating the rest later?

Edit #2: Now I have a good connection and almost finished with all updates.

So it's finding a wireless connection closer than the main Home network downstairs, and not losing it. I could take laptop downstairs to see if it picks up the Home again for a test. But I want to post this first.

Edit: And now I'm connected upstairs again after disconnecting cell signal, and connecting to main wifi.



Also, FYI, you mentioned drivers before, Vaio has a security update and some new software (ex. Vaio Smart Network Update, VAIO Easy Connect update, and others) on the taskbar under Vaio updates ready to install. Suggestions?

Thx,

Mike

Edited by kenomikes, 11 December 2012 - 08:29 AM.

[kenomikes]

Hi,

OK, computer up to date with all FileHippo update programs. I have done nothing with VaAIO updates/new software.


Also, no Sony media disks.

I'm at work now with the laptop, won't connect to a public wifi here so far.

Can answer any questions via another computer though.

Thx,

Mike

Edited by kenomikes, 11 December 2012 - 08:39 AM.

[Dakeyras]

Hi.

Vaio has a security update and some new software (ex. Vaio Smart Network Update, VAIO Easy Connect update, and others) on the taskbar under Vaio updates ready to install. Suggestions?

I see no problem with applying these updates but technically they are not essential unless any of the Vaio related software is used etc.

In the meantime run the below scan for me please as follows...

Next:

Please download SINO by Artellos.

• Save SINO to a place you can remember and run SINO.exe. (If you downloaded the ZIP version you will need to extract it first)
• Then please check the following checkboxes:
  
  

  System Info
  Services
  Boot Check
  Tasklist
  Startup Items
  Event Log
  Ipconfig
  Ping
  Netstat
  Hosts file
  Shares
  Routing Table

• Once checked, hit the Run Scan! button and wait for the program to finish the scan.
• A notepad window will pop up. Please copy all of the content into your next reply.

Note: If you try to interact with the program once it’s started scanning it might appear to hang. The scan however will continue.

[kenomikes]

Hi,

Thx,

Mike



System Investigator by Olrik
Log Created On: 1715_11-12-2012
SINO Version: 3.1.0.0

Total RAM: 4043 MB | Free RAM: 2509 MB | Pagefile Size: 4043 MB
C: | 409995 MB out of 466236 MB Free | Local Fixed Disk
E: | None | CD-ROM Disc
Q: | None | Local Fixed Disk

<<<< System Information >>>>

Computer Name: LIV-VAIO
Username: Liv
Language Setting: ENU
Windows Directory: C:\Windows
Windows Version: Windows 7 Service Pack 1
UAC Status: On

<<<< Tasklist >>>>

[System Idle Process] - Process ID: 0
[System] - Process ID: 4
[smss.exe] - Process ID: 336
[C:\Windows\system32\csrss.exe] - Process ID: 460
[C:\Windows\system32\wininit.exe] - Process ID: 560
[C:\Windows\system32\csrss.exe] - Process ID: 584
[C:\Windows\system32\winlogon.exe] - Process ID: 632
[C:\Windows\system32\services.exe] - Process ID: 672
[C:\Windows\system32\lsass.exe] - Process ID: 680
[C:\Windows\system32\lsm.exe] - Process ID: 692
[C:\Windows\system32\svchost.exe] - Process ID: 784
[C:\Windows\system32\svchost.exe] - Process ID: 868
[c:\Program Files\Microsoft Security Client\MsMpEng.exe] - Process ID: 936
[C:\Windows\System32\svchost.exe] - Process ID: 424
[C:\Windows\System32\svchost.exe] - Process ID: 500
[C:\Windows\system32\svchost.exe] - Process ID: 524
[C:\Windows\system32\svchost.exe] - Process ID: 980
[C:\Windows\system32\svchost.exe] - Process ID: 1044
[C:\Windows\system32\svchost.exe] - Process ID: 1204
[C:\Windows\System32\spoolsv.exe] - Process ID: 1440
[C:\Windows\system32\svchost.exe] - Process ID: 1504
[C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe] - Process ID: 1608
[C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE] - Process ID: 1776
[C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe] - Process ID: 1800
[C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe] - Process ID: 1944
[C:\Program Files\Bonjour\mDNSResponder.exe] - Process ID: 2032
[C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE] - Process ID: 1528
[C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE] - Process ID: 1332
[C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe] - Process ID: 1876
[C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe] - Process ID: 2000
[C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe] - Process ID: 2224
[C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe] - Process ID: 2336
[C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE] - Process ID: 2376
[C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe] - Process ID: 2412
[C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe] - Process ID: 2488
[C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe] - Process ID: 2688
[C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe] - Process ID: 2716
[C:\Windows\SysWOW64\DllHost.exe] - Process ID: 2792
[C:\Windows\SysWOW64\DllHost.exe] - Process ID: 2860
[C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE] - Process ID: 2072
[C:\Windows\system32\SearchIndexer.exe] - Process ID: 3040
[c:\Program Files\Microsoft Security Client\NisSrv.exe] - Process ID: 3008
[C:\Windows\system32\wbem\wmiprvse.exe] - Process ID: 3256
[C:\Windows\system32\svchost.exe] - Process ID: 3648
[C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe] - Process ID: 3760
[C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe] - Process ID: 3820
[C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe] - Process ID: 4072
[C:\Program Files\Sony\VAIO Smart Network\VSNService.exe] - Process ID: 3096
[C:\Program Files\Windows Media Player\wmpnetwk.exe] - Process ID: 2088
[C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe] - Process ID: 2344
[C:\Windows\system32\taskeng.exe] - Process ID: 3424
[C:\Windows\system32\Dwm.exe] - Process ID: 1012
[C:\Windows\system32\taskhost.exe] - Process ID: 2112
[C:\Windows\Explorer.EXE] - Process ID: 3508
[C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe] - Process ID: 3432
[C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe] - Process ID: 3612
[C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe] - Process ID: 2092
[C:\Program Files\Synaptics\SynTP\SynTPEnh.exe] - Process ID: 1784
[C:\Program Files\Microsoft Security Client\msseces.exe] - Process ID: 180
[C:\Windows\System32\igfxtray.exe] - Process ID: 2160
[C:\Windows\System32\hkcmd.exe] - Process ID: 3592
[C:\Windows\System32\igfxpers.exe] - Process ID: 396
[C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE] - Process ID: 4172
[C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe] - Process ID: 4380
[C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe] - Process ID: 4484
[C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe] - Process ID: 4492
[C:\Program Files\Synaptics\SynTP\SynTPHelper.exe] - Process ID: 4564
[C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe] - Process ID: 4688
[C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe] - Process ID: 4708
[C:\Program Files (x86)\Ask.com\Updater\Updater.exe] - Process ID: 4724
[C:\Program Files (x86)\iTunes\iTunesHelper.exe] - Process ID: 4732
[C:\Windows\system32\svchost.exe] - Process ID: 4876
[C:\Program Files\iPod\bin\iPodService.exe] - Process ID: 4944
[C:\Windows\system32\taskeng.exe] - Process ID: 4156
[C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe] - Process ID: 124
[C:\Program Files (x86)\DDNi\Oasis\VAIO Messenger.exe] - Process ID: 3144
[C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe] - Process ID: 4316
[C:\Program Files\Sony\VAIO Care\VCsystray.exe] - Process ID: 3228
[C:\Program Files\Sony\VAIO Care\VCService.exe] - Process ID: 1052
[C:\Program Files\Sony\VAIO Care\VCAgent.exe] - Process ID: 4908
[C:\Windows\System32\vds.exe] - Process ID: 2440
[C:\Program Files\Sony\VAIO Update 5\VUAgent.exe] - Process ID: 5080
[C:\Windows\system32\svchost.exe] - Process ID: 4412
[C:\Program Files\Sony\VAIO Care\Admload.exe] - Process ID: 2768
[C:\Windows\System32\svchost.exe] - Process ID: 5544
[C:\Program Files\Sony\VAIO Care\VCPerfService.exe] - Process ID: 5996
[C:\Program Files\Sony\VAIO Care\listener.exe] - Process ID: 6028
[C:\Windows\system32\DllHost.exe] - Process ID: 5228
[C:\Program Files (x86)\Internet Explorer\iexplore.exe] - Process ID: 3400
[C:\Program Files (x86)\Internet Explorer\iexplore.exe] - Process ID: 5200
[C:\Program Files (x86)\Internet Explorer\iexplore.exe] - Process ID: 4264
[C:\Windows\system32\WLANExt.exe] - Process ID: 4180
[C:\Windows\system32\conhost.exe] - Process ID: 4548
[audiodg.exe] - Process ID: 3788
[C:\Users\Liv\AppData\Local\Temp\SINO\SINO.exe] - Process ID: 3512
[C:\Windows\system32\SearchProtocolHost.exe] - Process ID: 5272
[C:\Windows\system32\SearchFilterHost.exe] - Process ID: 4696
[C:\Windows\sysWOW64\wbem\wmiprvse.exe] - Process ID: 5160
[C:\Windows\system32\wbem\wmiprvse.exe] - Process ID: 800

<<<< Startup Items >>>>

[OneNote 2010 Screen Clipper and Launcher.lnk] - <Startup> - C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
[cAudioFilterAgent] - <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run> - C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe
[SynTPEnh] - <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run> - %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
[MSC] - <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run> - "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
[IgfxTray] - <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run> - C:\Windows\system32\igfxtray.exe
[HotKeysCmds] - <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run> - C:\Windows\system32\hkcmd.exe
[Persistence] - <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run> - C:\Windows\system32\igfxpers.exe

<<<< MS Services >>>>

Application Experience (AeLookupSvc) - Running [Manual | Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k netsvcs
Application Information (Appinfo) - Running [Manual | Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k netsvcs
Windows Audio Endpoint Builder (AudioEndpointBuilder) - Running [Auto | Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
Windows Audio (AudioSrv) - Running [Auto | Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
Base Filtering Engine (BFE) - Running [Auto | Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
Background Intelligent Transfer Service (BITS) - Running [Auto | Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k netsvcs
Bonjour Service (Bonjour Service) - Running [Auto | Stoppable | Not_Pausable] - "C:\Program Files\Bonjour\mDNSResponder.exe"
Computer Browser (Browser) - Running [Manual | Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k netsvcs
Cryptographic Services (CryptSvc) - Running [Auto | Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k NetworkService
DCOM Server Process Launcher (DcomLaunch) - Running [Auto | Not_Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k DcomLaunch
DHCP Client (Dhcp) - Running [Auto | Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted
DNS Client (Dnscache) - Running [Auto | Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k NetworkService
Diagnostic Policy Service (DPS) - Running [Auto | Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork
Extensible Authentication Protocol (EapHost) - Running [Manual | Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k netsvcs
Windows Event Log (eventlog) - Running [Auto | Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
COM+ Event System (EventSystem) - Running [Auto | Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k LocalService
Function Discovery Provider Host (fdPHost) - Running [Manual | Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k LocalService
Function Discovery Resource Publication (FDResPub) - Running [Manual | Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
Windows Font Cache Service (FontCache) - Running [Auto | Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
Windows Presentation Foundation Font Cache 3.0.0.0 (FontCache3.0.0.0) - Running [Manual | Stoppable | Not_Pausable] - C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
Group Policy Client (gpsvc) - Running [Auto | Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k GPSvcGroup
HomeGroup Listener (HomeGroupListener) - Running [Manual | Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
HomeGroup Provider (HomeGroupProvider) - Running [Manual | Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
IKE and AuthIP IPsec Keying Modules (IKEEXT) - Running [Auto | Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k netsvcs
IP Helper (iphlpsvc) - Running [Auto | Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k NetSvcs
CNG Key Isolation (KeyIso) - Running [Manual | Stoppable | Not_Pausable] - C:\Windows\system32\lsass.exe
Server (LanmanServer) - Running [Auto | Stoppable | Pausable] - C:\Windows\system32\svchost.exe -k netsvcs
Workstation (LanmanWorkstation) - Running [Auto | Stoppable | Pausable] - C:\Windows\System32\svchost.exe -k NetworkService
TCP/IP NetBIOS Helper (lmhosts) - Running [Auto | Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted
Multimedia Class Scheduler (MMCSS) - Running [Auto | Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k netsvcs
Windows Firewall (MpsSvc) - Running [Auto | Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
Microsoft Antimalware Service (MsMpSvc) - Running [Auto | Stoppable | Not_Pausable] - "c:\Program Files\Microsoft Security Client\MsMpEng.exe"
Network Connections (Netman) - Running [Manual | Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
Network List Service (netprofm) - Running [Manual | Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k LocalService
Network Location Awareness (NlaSvc) - Running [Auto | Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k NetworkService
Network Store Interface Service (nsi) - Running [Auto | Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k LocalService
Peer Networking Identity Manager (p2pimsvc) - Running [Manual | Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k LocalServicePeerNet
Peer Networking Grouping (p2psvc) - Running [Manual | Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k LocalServicePeerNet
Plug and Play (PlugPlay) - Running [Auto | Not_Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k DcomLaunch
Peer Name Resolution Protocol (PNRPsvc) - Running [Manual | Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k LocalServicePeerNet
IPsec Policy Agent (PolicyAgent) - Running [Manual | Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
Power (Power) - Running [Auto | Not_Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k DcomLaunch
User Profile Service (ProfSvc) - Running [Auto | Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k netsvcs
Remote Access Connection Manager (RasMan) - Running [Manual | Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k netsvcs
RPC Endpoint Mapper (RpcEptMapper) - Running [Auto | Not_Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k RPCSS
Remote Procedure Call (RPC) (RpcSs) - Running [Auto | Not_Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k rpcss
Security Accounts Manager (SamSs) - Running [Auto | Not_Stoppable | Not_Pausable] - C:\Windows\system32\lsass.exe
Task Scheduler (Schedule) - Running [Auto | Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k netsvcs
Secondary Logon (seclogon) - Running [Auto | Stoppable | Pausable] - C:\Windows\system32\svchost.exe -k netsvcs
System Event Notification Service (SENS) - Running [Auto | Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k netsvcs
Shell Hardware Detection (ShellHWDetection) - Running [Auto | Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k netsvcs
Print Spooler (Spooler) - Running [Auto | Stoppable | Not_Pausable] - C:\Windows\System32\spoolsv.exe
SSDP Discovery (SSDPSRV) - Running [Manual | Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
Secure Socket Tunneling Protocol Service (SstpSvc) - Running [Manual | Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k LocalService
Windows Image Acquisition (WIA) (stisvc) - Running [Auto | Stoppable | Pausable] - C:\Windows\system32\svchost.exe -k imgsvc
Superfetch (SysMain) - Running [Auto | Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Telephony (TapiSrv) - Running [Manual | Stoppable | Pausable] - C:\Windows\System32\svchost.exe -k NetworkService
Themes (Themes) - Running [Auto | Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k netsvcs
Distributed Link Tracking Client (TrkWks) - Running [Auto | Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
UPnP Device Host (upnphost) - Running [Manual | Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
Desktop Window Manager Session Manager (UxSms) - Running [Auto | Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
Virtual Disk (vds) - Running [Manual | Stoppable | Not_Pausable] - C:\Windows\System32\vds.exe
Diagnostic Service Host (WdiServiceHost) - Running [Manual | Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k LocalService
WinHTTP Web Proxy Auto-Discovery Service (WinHttpAutoProxySvc) - Running [Manual | Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k LocalService
Windows Management Instrumentation (Winmgmt) - Running [Auto | Stoppable | Pausable] - C:\Windows\system32\svchost.exe -k netsvcs
WLAN AutoConfig (Wlansvc) - Running [Auto | Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Windows Live ID Sign-in Assistant (wlidsvc) - Running [Auto | Stoppable | Not_Pausable] - "C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
Windows Media Player Network Sharing Service (WMPNetworkSvc) - Running [Auto | Stoppable | Not_Pausable] - "C:\Program Files\Windows Media Player\wmpnetwk.exe"
Security Center (wscsvc) - Running [Auto | Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
Windows Search (WSearch) - Running [Auto | Stoppable | Not_Pausable] - C:\Windows\system32\SearchIndexer.exe /Embedding
Windows Update (wuauserv) - Running [Auto | Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k netsvcs
Windows Driver Foundation - User-mode Driver Framework (wudfsvc) - Running [Auto | Not_Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Application Layer Gateway Service (ALG) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\System32\alg.exe
Application Identity (AppIDSvc) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
ASP.NET State Service (aspnet_state) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
ActiveX Installer (AxInstSV) (AxInstSV) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k AxInstSVGroup
BitLocker Drive Encryption Service (BDESVC) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k netsvcs
Bluetooth Support Service (bthserv) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k bthsvcs
Certificate Propagation (CertPropSvc) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k netsvcs
Microsoft .NET Framework NGEN v2.0.50727_X86 (clr_optimization_v2.0.50727_32) - Stopped [Disabled | Not_Stoppable | Not_Pausable] - C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
COM+ System Application (COMSysApp) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
Disk Defragmenter (defragsvc) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k defragsvc
Wired AutoConfig (dot3svc) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Encrypting File System (EFS) (EFS) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\System32\lsass.exe
Windows Media Center Receiver Service (ehRecvr) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\ehome\ehRecvr.exe
Windows Media Center Scheduler Service (ehSched) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\ehome\ehsched.exe
Fax (Fax) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\system32\fxssvc.exe
Human Interface Device Access (hidserv) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Health Key and Certificate Management (hkmsvc) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k netsvcs
Windows CardSpace (idsvc) - Stopped [Manual | Not_Stoppable | Not_Pausable] - "C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe"
PnP-X IP Bus Enumerator (IPBusEnum) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
KtmRm for Distributed Transaction Coordinator (KtmRm) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k NetworkServiceAndNoImpersonation
Link-Layer Topology Discovery Mapper (lltdsvc) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k LocalService
Media Center Extender Service (Mcx2Svc) - Stopped [Disabled | Not_Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
Distributed Transaction Coordinator (MSDTC) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\System32\msdtc.exe
Microsoft iSCSI Initiator Service (MSiSCSI) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k netsvcs
Windows Installer (msiserver) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\system32\msiexec.exe /V
Network Access Protection Agent (napagent) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k NetworkService
Netlogon (Netlogon) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\system32\lsass.exe
Net.Tcp Port Sharing Service (NetTcpPortSharing) - Stopped [Disabled | Not_Stoppable | Not_Pausable] - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
Office Source Engine (ose) - Stopped [Manual | Not_Stoppable | Not_Pausable] - "C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE"
Program Compatibility Assistant Service (PcaSvc) - Stopped [Disabled | Not_Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Performance Logs & Alerts (pla) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork
PNRP Machine Name Publication Service (PNRPAutoReg) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k LocalServicePeerNet
Protected Storage (ProtectedStorage) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\system32\lsass.exe
Quality Windows Audio Video Experience (QWAVE) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
Remote Access Auto Connection Manager (RasAuto) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k netsvcs
Routing and Remote Access (RemoteAccess) - Stopped [Disabled | Not_Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k netsvcs
Remote Registry (RemoteRegistry) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k regsvc
Remote Procedure Call (RPC) Locator (RpcLocator) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\system32\locator.exe
Smart Card (SCardSvr) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
Smart Card Removal Policy (SCPolicySvc) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k netsvcs
Windows Backup (SDRSVC) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k SDRSVC
Adaptive Brightness (SensrSvc) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
Remote Desktop Configuration (SessionEnv) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k netsvcs
Internet Connection Sharing (ICS) (SharedAccess) - Stopped [Auto | Not_Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k netsvcs
SNMP Trap (SNMPTRAP) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\System32\snmptrap.exe
Software Protection (sppsvc) - Stopped [Auto | Not_Stoppable | Not_Pausable] - C:\Windows\system32\sppsvc.exe
SPP Notification Service (sppuinotify) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k LocalService
Microsoft Software Shadow Copy Provider (swprv) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k swprv
Tablet PC Input Service (TabletInputService) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
TPM Base Services (TBS) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation
Remote Desktop Services (TermService) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k NetworkService
Thread Ordering Server (THREADORDER) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k LocalService
Windows Modules Installer (TrustedInstaller) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\servicing\TrustedInstaller.exe
Interactive Services Detection (UI0Detect) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\system32\UI0Detect.exe
Credential Manager (VaultSvc) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\system32\lsass.exe
Volume Shadow Copy (VSS) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\system32\vssvc.exe
Windows Time (W32Time) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k LocalService
Block Level Backup Engine Service (wbengine) - Stopped [Manual | Not_Stoppable | Not_Pausable] - "C:\Windows\system32\wbengine.exe"
Windows Biometric Service (WbioSrvc) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k WbioSvcGroup
Windows Connect Now - Config Registrar (wcncsvc) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation
Windows Color System (WcsPlugInService) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k wcssvc
Diagnostic System Host (WdiSystemHost) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
WebClient (WebClient) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k LocalService
Windows Event Collector (Wecsvc) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k NetworkService
Problem Reports and Solutions Control Panel Support (wercplsupport) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k netsvcs
Windows Error Reporting Service (WerSvc) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k WerSvcGroup
Windows Defender (WinDefend) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k secsvcs
Windows Remote Management (WS-Management) (WinRM) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\System32\svchost.exe -k NetworkService
WMI Performance Adapter (wmiApSrv) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\system32\wbem\WmiApSrv.exe
Parental Controls (WPCSvc) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted
Portable Device Enumerator Service (WPDBusEnum) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
WWAN AutoConfig (WwanSvc) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

<<<< Non-MS Services >>>>

SAS Core Service (!SASCORE) - Running [Auto | Stoppable | Not_Pausable] - "C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE"
Adobe Acrobat Update Service (AdobeARMservice) - Running [Auto | Stoppable | Not_Pausable] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
Apple Mobile Device (Apple Mobile Device) - Running [Auto | Stoppable | Not_Pausable] - "C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
Client Virtualization Handler (cvhsvc) - Running [Auto | Stoppable | Not_Pausable] - "C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE"
EpsonBidirectionalService (EpsonBidirectionalService) - Running [Auto | Stoppable | Not_Pausable] - C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe
EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) - Running [Auto | Stoppable | Pausable] - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE
EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - Running [Auto | Stoppable | Pausable] - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
Intel® Rapid Storage Technology (IAStorDataMgrSvc) - Running [Auto | Stoppable | Not_Pausable] - "C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe"
IconMan_R (IconMan_R) - Running [Auto | Stoppable | Not_Pausable] - "C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe"
iPod Service (iPod Service) - Running [Manual | Stoppable | Not_Pausable] - "C:\Program Files\iPod\bin\iPodService.exe"
Intel® Management and Security Application Local Management Service (LMS) - Running [Auto | Stoppable | Not_Pausable] - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
Microsoft Network Inspection (NisSrv) - Running [Manual | Stoppable | Not_Pausable] - "c:\Program Files\Microsoft Security Client\NisSrv.exe"
PMBDeviceInfoProvider (PMBDeviceInfoProvider) - Running [Auto | Stoppable | Not_Pausable] - "C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe"
VAIO Care Performance Service (SampleCollector) - Running [Auto | Stoppable | Pausable] - "C:\Program Files\Sony\VAIO Care\VCPerfService.exe" "/service" "/sstates" "/sampleinterval=5000" "/procinterval=5" "/dllinterval=120" "/counter=\Processor(_Total)\% Processor Time:1/counter=\PhysicalDisk(_Total)\Disk Bytes/sec:1" "/counter=\Network Interface(*)\Bytes Total/sec:1" "/expandcounter=\Processor Information(*)\Processor Frequency:1" "/expandcounter=\Processor(*)\% Idle Time:1" "/expandcounter=\Processor(*)\% C1 Time:1" "/expandcounter=\Processor(*)\% C2 Time:1" "/expandcounter=\Processor(*)\% C3 Time:1" "/expandcounter=\Processor(*)\% Processor Time:1" "/directory=C:\ProgramData\Sony Corporation\VAIO Care\inteldata"
Application Virtualization Client (sftlist) - Running [Auto | Stoppable | Not_Pausable] - "C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe"
Application Virtualization Service Agent (sftvsa) - Running [Manual | Stoppable | Not_Pausable] - "C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe"
CamMonitor (uCamMonitor) - Running [Auto | Stoppable | Not_Pausable] - C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
Intel® Management and Security Application User Notification Service (UNS) - Running [Auto | Stoppable | Not_Pausable] - "C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe"
VAIO Event Service (VAIO Event Service) - Running [Auto | Stoppable | Not_Pausable] - "C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe"
VCService (VCService) - Running [Manual | Stoppable | Not_Pausable] - "C:\Program Files\Sony\VAIO Care\VCService.exe"
VSNService (VSNService) - Running [Auto | Stoppable | Not_Pausable] - "C:\Program Files\Sony\VAIO Smart Network\VSNService.exe"
VUAgent (VUAgent) - Running [Manual | Stoppable | Not_Pausable] - "C:\Program Files\Sony\VAIO Update 5\VUAgent.exe"
ArcSoft Connect Daemon (ACDaemon) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Microsoft .NET Framework NGEN v2.0.50727_X64 (clr_optimization_v2.0.50727_64) - Stopped [Disabled | Not_Stoppable | Not_Pausable] - C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
Microsoft .NET Framework NGEN v4.0.30319_X86 (clr_optimization_v4.0.30319_32) - Stopped [Auto | Not_Stoppable | Not_Pausable] - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
Microsoft .NET Framework NGEN v4.0.30319_X64 (clr_optimization_v4.0.30319_64) - Stopped [Auto | Not_Stoppable | Not_Pausable] - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
Intel® Content Protection HECI Service (cphs) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\SysWow64\IntelCpHeciSvc.exe
Windows Live Family Safety Service (fsssvc) - Stopped [Manual | Not_Stoppable | Not_Pausable] - "C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe"
Microsoft SharePoint Workspace Audit Service (Microsoft SharePoint Workspace Audit Service) - Stopped [Manual | Not_Stoppable | Not_Pausable] - "C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE" /auditservice
Net.Msmq Listener Adapter (NetMsmqActivator) - Stopped [Disabled | Not_Stoppable | Not_Pausable] - "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe" -NetMsmqActivator
Net.Pipe Listener Adapter (NetPipeActivator) - Stopped [Disabled | Not_Stoppable | Not_Pausable] - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
Net.Tcp Listener Adapter (NetTcpActivator) - Stopped [Disabled | Not_Stoppable | Not_Pausable] - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
Oasis2Service (Oasis2Service) - Stopped [Auto | Not_Stoppable | Not_Pausable] - "C:\Program Files (x86)\DDNi\Oasis2Service\Oasis2Service.exe"
Office Software Protection Platform (osppsvc) - Stopped [Manual | Not_Stoppable | Not_Pausable] - "C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
Performance Counter DLL Host (PerfHost) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\SysWow64\perfhost.exe
VAIO Content Importer (SOHCImp) - Stopped [Manual | Not_Stoppable | Not_Pausable] - "C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe"
VAIO Device Searcher (SOHDs) - Stopped [Manual | Not_Stoppable | Not_Pausable] - "C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe"
VAIO Entertainment Common Service (SpfService) - Stopped [Manual | Not_Stoppable | Not_Pausable] - "C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe"
VAIO Content Folder Watcher (VCFw) - Stopped [Manual | Not_Stoppable | Not_Pausable] - "C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe"
VAIO Content Metadata Intelligent Analyzing Manager (VcmIAlzMgr) - Stopped [Manual | Not_Stoppable | Not_Pausable] - "C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe"
VAIO Content Metadata Intelligent Network Service Manager (VcmINSMgr) - Stopped [Manual | Not_Stoppable | Not_Pausable] - "C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe"
VAIO Content Metadata XML Interface (VcmXmlIfHelper) - Stopped [Manual | Not_Stoppable | Not_Pausable] - "C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe"
Windows Activation Technologies Service (WatAdminSvc) - Stopped [Manual | Not_Stoppable | Not_Pausable] - C:\Windows\system32\Wat\WatAdminSvc.exe

<<<< bcdedit >>>>


<<<< Last 5 Application Errors or Warnings >>>>

Computer Name: Liv-VAIO | ID: 1000 | Source: Application Error | Type: Error | Date: 11-12-12 15:18:46 | Log: Application
Message: SINO couldn't read the message due to a System Error.
Computer Name: Liv-VAIO | ID: 100 | Source: CVHSVC | Type: Error | Date: 11-12-12 15:11:33 | Log: Application
Message: Information only.

(Patch task for {90140011-0066-0409-0000-0000000FF1CE}): DownloadLatest Failed: There are currently no active network connections. Background Intelligent Transfer Service (BITS) will try again when an adapter is connected.




Computer Name: Liv-VAIO | ID: 100 | Source: CVHSVC | Type: Warning | Date: 11-12-12 15:11:33 | Log: Application
Message: Information only.

Failed to complete bits job


Computer Name: Liv-VAIO | ID: 10 | Source: WinMgmt | Type: Error | Date: 11-12-12 15:3:2 | Log: Application
Message: <The description for Event ID ( 10 ) in Source ( u'WinMgmt' ) could not be found. It contains the following insertion string(s):u'//./root/CIMV2, SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99, 0x80041003'.>
Computer Name: Liv-VAIO | ID: 3057 | Source: Application Virtualization Client | Type: Warning | Date: 11-12-12 15:1:32 | Log: Application
Message: {tid=A08}
The Application Virtualization Client Core initialized correctly.

Installed Product:



Version: 4.6.1.10263

Install Path: C:\Program Files (x86)\Microsoft Application Virtualization Client

Global Data Directory: C:\ProgramData\Microsoft\Application Virtualization Client\

Machine Name:

LIV-VAIO

Operating System: Windows 7 64-bit Service Pack 1.0 Build 7601

OSD Command:


<<<< Last 5 System Errors or Warnings >>>>

Computer Name: Liv-VAIO | ID: 1014 | Source: Microsoft-Windows-DNS-Client | Type: Warning | Date: 11-12-12 17:9:14 | Log: System
Message: Name resolution for the name teredo.ipv6.microsoft.com timed out after none of the configured DNS servers responded.


Computer Name: Liv-VAIO | ID: 1014 | Source: Microsoft-Windows-DNS-Client | Type: Warning | Date: 11-12-12 17:8:26 | Log: System
Message: Name resolution for the name isatap.home timed out after none of the configured DNS servers responded.


Computer Name: Liv-VAIO | ID: 10002 | Source: Microsoft-Windows-WLAN-AutoConfig | Type: Warning | Date: 11-12-12 17:7:12 | Log: System
Message: WLAN Extensibility Module has stopped.



Module Path: C:\Program Files (x86)\Atheros WiFi Driver Installation\AthIhvWlanExt.dll




Computer Name: Liv-VAIO | ID: 10002 | Source: Microsoft-Windows-WLAN-AutoConfig | Type: Warning | Date: 11-12-12 17:4:52 | Log: System
Message: WLAN Extensibility Module has stopped.



Module Path: C:\Program Files (x86)\Atheros WiFi Driver Installation\AthIhvWlanExt.dll




Computer Name: Liv-VAIO | ID: 1014 | Source: Microsoft-Windows-DNS-Client | Type: Warning | Date: 11-12-12 17:4:27 | Log: System
Message: Name resolution for the name artellos.com timed out after none of the configured DNS servers responded.


<<<< Special Events >>>>

There were no special events found

<<<< Ipconfig >>>>

Windows IP Configuration

Host Name . . . . . . . . . . . . : Liv-VAIO
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : home

Ethernet adapter Local Area Connection:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . : home
Description . . . . . . . . . . . : Atheros AR8151 PCI-E Gigabit Ethernet Controller (NDIS 6.20)
Physical Address. . . . . . . . . : 78-84-3C-A2-A5-A7
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter Wireless Network Connection:

Connection-specific DNS Suffix . : home
Description . . . . . . . . . . . : Atheros AR9285 Wireless Network Adapter
Physical Address. . . . . . . . . : 94-39-E5-9A-21-20
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::f4b7:18c3:59cd:d9ec%11(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.1.8(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Tuesday, December 11, 2012 5:10:58 PM
Lease Expires . . . . . . . . . . : Wednesday, December 12, 2012 5:10:58 PM
Default Gateway . . . . . . . . . : 192.168.1.1
DHCP Server . . . . . . . . . . . : 192.168.1.1
DHCPv6 IAID . . . . . . . . . . . : 244595173
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-16-0F-B3-C9-94-39-E5-9A-21-20
DNS Servers . . . . . . . . . . . : 192.168.1.1
NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter isatap.home:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . : home
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter isatap.ri.cox.net:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 11:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft 6to4 Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Teredo Tunneling Pseudo-Interface:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2001:0:9d38:6ab8:31:3373:b59e:4e2f(Preferred)
Link-local IPv6 Address . . . . . : fe80::31:3373:b59e:4e2f%14(Preferred)
Default Gateway . . . . . . . . . : ::
NetBIOS over Tcpip. . . . . . . . : Disabled


<<<< Pinging >>>>

OpenDNS Domain Test
Pinging to www.opendns.com [67.215.92.210]:
Response - 78ms
Response - 78ms
Response - 77ms
Response - 78ms
Packets: Sent = 4, Received = 4, Lost = 0
Minimum = 77ms - Maximum = 78ms

OpenDNS IP Test
Pinging to 208.69.38.150 [208.69.38.150]:
Response - 78ms
Response - 77ms
Response - 78ms
Response - 78ms
Packets: Sent = 4, Received = 4, Lost = 0
Minimum = 77ms - Maximum = 78ms

Kaspersky Domain Test
Pinging to www.kaspersky.com [195.27.252.18]:
Response - 108ms
Response - 94ms
Response - 94ms
Response - 94ms
Packets: Sent = 4, Received = 4, Lost = 0
Minimum = 94ms - Maximum = 108ms

Kaspersky IP Test
Pinging to 195.27.181.10 [195.27.181.10]:
Response - 93ms
Response - 92ms
Response - 94ms
Response - 93ms
Packets: Sent = 4, Received = 4, Lost = 0
Minimum = 92ms - Maximum = 94ms

YouTube Domain Test
Pinging to www.youtube.com [74.125.226.200]:
Response - 14ms
Response - None
Response - 16ms
Response - 14ms
Packets: Sent = 4, Received = 3, Lost = 1
Minimum = 14ms - Maximum = 16ms

YouTube IP Test
Pinging to 66.102.9.136 [66.102.9.136]:
Response - None
Response - None
Response - None
Response - None
Packets: Sent = 4, Received = 0, Lost = 4
Minimum = 0ms - Maximum = 0ms

localhost Test
Pinging to 127.0.0.1 [127.0.0.1]:
Response - 0ms
Response - 0ms
Response - 0ms
Response - 0ms
Packets: Sent = 4, Received = 4, Lost = 0
Minimum = 0ms - Maximum = 0ms


<<<< Netstat >>>>

Active Connections

Proto Local Address Foreign Address State PID
TCP 0.0.0.0:135 0.0.0.0:0 LISTENING 868
RpcSs
[System]
TCP 0.0.0.0:445 0.0.0.0:0 LISTENING 4
Can not obtain ownership information
TCP 0.0.0.0:554 0.0.0.0:0 LISTENING 2088
WMPNetworkSvc
[System]
TCP 0.0.0.0:2869 0.0.0.0:0 LISTENING 4
Can not obtain ownership information
TCP 0.0.0.0:2968 0.0.0.0:0 LISTENING 4688
[EEventManager.exe]
TCP 0.0.0.0:5357 0.0.0.0:0 LISTENING 4
Can not obtain ownership information
TCP 0.0.0.0:8000 0.0.0.0:0 LISTENING 4
Can not obtain ownership information
TCP 0.0.0.0:10243 0.0.0.0:0 LISTENING 4
Can not obtain ownership information
TCP 0.0.0.0:49152 0.0.0.0:0 LISTENING 560
[System]
TCP 0.0.0.0:49153 0.0.0.0:0 LISTENING 424
eventlog
[System]
TCP 0.0.0.0:49154 0.0.0.0:0 LISTENING 524
Schedule
[System]
TCP 0.0.0.0:49155 0.0.0.0:0 LISTENING 680
[System]
TCP 0.0.0.0:49157 0.0.0.0:0 LISTENING 672
[System]
TCP 0.0.0.0:49158 0.0.0.0:0 LISTENING 1440
Spooler
[System]
TCP 127.0.0.1:5354 0.0.0.0:0 LISTENING 2032
Bonjour Service
[System]
TCP 127.0.0.1:5354 127.0.0.1:49156 ESTABLISHED 2032
Bonjour Service
[System]
TCP 127.0.0.1:27015 0.0.0.0:0 LISTENING 1944
[AppleMobileDeviceService.exe]
TCP 127.0.0.1:27015 127.0.0.1:49161 ESTABLISHED 1944
[AppleMobileDeviceService.exe]
TCP 127.0.0.1:49156 127.0.0.1:5354 ESTABLISHED 1944
[AppleMobileDeviceService.exe]
TCP 127.0.0.1:49161 127.0.0.1:27015 ESTABLISHED 4732
[iTunesHelper.exe]
TCP 192.168.1.8:139 0.0.0.0:0 LISTENING 4
Can not obtain ownership information
TCP 192.168.1.8:49270 69.163.234.194:80 TIME_WAIT 0
TCP [::]:135 [::]:0 LISTENING 868
RpcSs
[System]
TCP [::]:445 [::]:0 LISTENING 4
Can not obtain ownership information
TCP [::]:554 [::]:0 LISTENING 2088
WMPNetworkSvc
[System]
TCP [::]:2869 [::]:0 LISTENING 4
Can not obtain ownership information
TCP [::]:3587 [::]:0 LISTENING 5544
p2pimsvc
[System]
TCP [::]:5357 [::]:0 LISTENING 4
Can not obtain ownership information
TCP [::]:8000 [::]:0 LISTENING 4
Can not obtain ownership information
TCP [::]:10243 [::]:0 LISTENING 4
Can not obtain ownership information
TCP [::]:49152 [::]:0 LISTENING 560
[System]
TCP [::]:49153 [::]:0 LISTENING 424
eventlog
[System]
TCP [::]:49154 [::]:0 LISTENING 524
Schedule
[System]
TCP [::]:49155 [::]:0 LISTENING 680
[System]
TCP [::]:49157 [::]:0 LISTENING 672
[System]
TCP [::]:49158 [::]:0 LISTENING 1440
Spooler
[System]
UDP 0.0.0.0:500 *:* 524
IKEEXT
[System]
UDP 0.0.0.0:2968 *:* 4688
[EEventManager.exe]
UDP 0.0.0.0:3544 *:* 524
iphlpsvc
[System]
UDP 0.0.0.0:3702 *:* 1044
EventSystem
[System]
UDP 0.0.0.0:3702 *:* 3648
FDResPub
[System]
UDP 0.0.0.0:3702 *:* 1044
EventSystem
[System]
UDP 0.0.0.0:3702 *:* 3648
FDResPub
[System]
UDP 0.0.0.0:4500 *:* 524
IKEEXT
[System]
UDP 0.0.0.0:5004 *:* 2088
WMPNetworkSvc
[System]
UDP 0.0.0.0:5005 *:* 2088
WMPNetworkSvc
[System]
UDP 0.0.0.0:5355 *:* 1204
Dnscache
[System]
UDP 0.0.0.0:49152 *:* 1608
[eEBSVC.exe]
UDP 0.0.0.0:49153 *:* 1608
[eEBSVC.exe]
UDP 0.0.0.0:49154 *:* 1608
[eEBSVC.exe]
UDP 0.0.0.0:49155 *:* 1608
[eEBSVC.exe]
UDP 0.0.0.0:49156 *:* 1608
[eEBSVC.exe]
UDP 0.0.0.0:49157 *:* 1608
[eEBSVC.exe]
UDP 0.0.0.0:49160 *:* 2032
Bonjour Service
[System]
UDP 0.0.0.0:50846 *:* 1044
EventSystem
[System]
UDP 0.0.0.0:59328 *:* 3648
FDResPub
[System]
UDP 127.0.0.1:1900 *:* 3648
SSDPSRV
[System]
UDP 127.0.0.1:49158 *:* 1944
[AppleMobileDeviceService.exe]
UDP 127.0.0.1:49159 *:* 1944
[AppleMobileDeviceService.exe]
UDP 127.0.0.1:49164 *:* 4732
[iTunesHelper.exe]
UDP 127.0.0.1:49165 *:* 4732
[iTunesHelper.exe]
UDP 127.0.0.1:50332 *:* 3648
SSDPSRV
[System]
UDP 127.0.0.1:58873 *:* 5200
[iexplore.exe]
UDP 127.0.0.1:61344 *:* 3400
[iexplore.exe]
UDP 127.0.0.1:63837 *:* 4264
[iexplore.exe]
UDP 192.168.1.8:137 *:* 4
Can not obtain ownership information
UDP 192.168.1.8:138 *:* 4
Can not obtain ownership information
UDP 192.168.1.8:1900 *:* 3648
SSDPSRV
[System]
UDP 192.168.1.8:5353 *:* 2032
Bonjour Service
[System]
UDP 192.168.1.8:50331 *:* 3648
SSDPSRV
[System]
UDP 192.168.1.8:52364 *:* 524
iphlpsvc
[System]
UDP [::]:500 *:* 524
IKEEXT
[System]
UDP [::]:3540 *:* 5544
p2pimsvc
[System]
UDP [::]:3702 *:* 1044
EventSystem
[System]
UDP [::]:3702 *:* 1044
EventSystem
[System]
UDP [::]:3702 *:* 3648
FDResPub
[System]
UDP [::]:3702 *:* 3648
FDResPub
[System]
UDP [::]:4500 *:* 524
IKEEXT
[System]
UDP [::]:5004 *:* 2088
WMPNetworkSvc
[System]
UDP [::]:5005 *:* 2088
WMPNetworkSvc
[System]
UDP [::]:5355 *:* 1204
Dnscache
[System]
UDP [::]:49161 *:* 2032
Bonjour Service
[System]
UDP [::]:50847 *:* 1044
EventSystem
[System]
UDP [::]:59329 *:* 3648
FDResPub
[System]
UDP [::1]:1900 *:* 3648
SSDPSRV
[System]
UDP [::1]:5353 *:* 2032
Bonjour Service
[System]
UDP [::1]:50330 *:* 3648
SSDPSRV
[System]
UDP [fe80::f4b7:18c3:59cd:d9ec%11]:546 *:* 424
Dhcp
[System]
UDP [fe80::f4b7:18c3:59cd:d9ec%11]:1900 *:* 3648
SSDPSRV
[System]
UDP [fe80::f4b7:18c3:59cd:d9ec%11]:50329 *:* 3648
SSDPSRV
[System]

<<<< Routing Table >>>>

===========================================================================
Interface List
12...78 84 3c a2 a5 a7 ......Atheros AR8151 PCI-E Gigabit Ethernet Controller (NDIS 6.20)
11...94 39 e5 9a 21 20 ......Atheros AR9285 Wireless Network Adapter
1...........................Software Loopback Interface 1
16...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
15...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
13...00 00 00 00 00 00 00 e0 Microsoft 6to4 Adapter
14...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.8 25
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
192.168.1.0 255.255.255.0 On-link 192.168.1.8 281
192.168.1.8 255.255.255.255 On-link 192.168.1.8 281
192.168.1.255 255.255.255.255 On-link 192.168.1.8 281
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.1.8 281
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.1.8 281
===========================================================================
Persistent Routes:
None

IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
14 58 ::/0 On-link
1 306 ::1/128 On-link
14 58 2001::/32 On-link
14 306 2001:0:9d38:6ab8:31:3373:b59e:4e2f/128
On-link
11 281 fe80::/64 On-link
14 306 fe80::/64 On-link
14 306 fe80::31:3373:b59e:4e2f/128
On-link
11 281 fe80::f4b7:18c3:59cd:d9ec/128
On-link
1 306 ff00::/8 On-link
14 306 ff00::/8 On-link
11 281 ff00::/8 On-link
===========================================================================
Persistent Routes:
None

<<<< Hosts File >>>>

The HOSTS file is 27 Bytes in size.

There were 0 lines which refer to an external IP address.

<<<< Active Shares >>>>

Share: ADMIN$ - Path: C:\Windows
Share: Artisan 710(Network) - Path: Artisan 710(Network),LocalsplOnly
Share: C$ - Path: C:\
Share: IPC$ - Path:
Share: print$ - Path: C:\Windows\system32\spool\drivers
Share: Q$ - Path: Q:\
Share: Users - Path: C:\Users


------ End of File ------

[Dakeyras]

How is the WiFi connection/adapter now and the machine in general please ?

[kenomikes]

Hi,

It's spotty, works fine for awhile and then won't find the connection.

Not working now.

Thx,



Mike

[Dakeyras]

Hi.

It's spotty, works fine for awhile and then won't find the connection.

Not working now.

OK as it stands I do not think malware is the root cause here now. I can see when problems have occurred as in the connection loss/freezing with the WiFi adapter but not completely sure if it is either driver and or hardware related to be perfectly honest. So my sincere apologies I have been unable to rectify the main issue.

Anyway since I primarily only provide Anti-Malware support my best advice now would be too seek further assistance with this matter via the excellent IT Support Techs we have here in Geeks to Go.

With this in mind after following my below advice create a new topic in this part of the forum:-

Hardware, Components and Peripherals

And name it say Wifi Adapter Issie for example and point out it is not actually a networking problem per-say. Also by all means if you so wish include a link back to this topic and mention I advised you seek further/specific assistance.

This is this topics URL:-

http://www.geekstogo.com/forum/topic/324702-laptop-freezing/

Next:

Congratualtions your step daughter's computer appears to be malware free!

Now I have some tasks for your good self to carry out as part of a clean up process and some advice about online safety(the latter which is my generic for such and my friendly advise is your step daughter does read to prevent reinfection in the future etc).

Importance of Regular System Maintenance:

I advice you read both of the below listed topics as this will go a long way to keeping your Computer performing well.

Help! My computer is slow!

Also so is this:

What to do if your Computer is running slowly

Uninstall ComboFix:

• Click on Start >> Run... or depress the or the Windows key and R together) to bring up the Run.
• Now type in ComboFix /Uninstall into the and click OK.
• Note the space between the X and the /Uninstall, it needs to be there.
• 

Clean up with OTL:

• Right-click OTL and select Run as Administrator to start the program.
• Close all other programs apart from OTL as this step will require a reboot.
• On the OTL main screen, depress the CleanUp button.
• Say Yes to the prompt and then allow the program to reboot your computer.

The above process should clean up and remove the vast majority of scanners used and logs created etc.

Any left over merely delete yourself and empty the Recycle Bin.

Reset the System Restore points:

Create a new, clean System Restore point:-

• Right click on Computer and select Properties >> System protection >> Create.
• Give this restore point a descriptive name and click Create.
• When the new restore point is created click on OK >> close the System Properties window.

Note: Do not clear infected/old System Restore points before creating a new System Restore point first!

Flush Old System Restore points:-

• Next click Start(Windows 7 Orb) >> Run (or the Windows key and R together) to bring up the Run box and and copy and paste in:
  

  cleanmgr

• in the box and press OK.
• Select the system drive, C >> OK.
• Ensure the boxes for Recycle Bin, Temporary Files and Temporary Internet Files are checked, you can choose to check other boxes if you wish but they are not required.
• Click on Clean up system files >> Select the system drive, C >> OK.
• Now click on the More Options tab.
• Under:-

• System Restore and Shadow Copies
• Click on Clean up... >> Delete >> OK >> Delete Files.

Now some advice for on-line safety:

Malwarebyte's Anti-Malware:

This is a excellent application and I advise you keep this installed. Check for updates and run a scan at least once per week.

Other installed security software:

Your presently installed security application, Microsoft Security Essentials automatically checks for updates and downloads/installs them with every system reboot and or periodically if the machine is left running providing a internet connection is active.

I advise you also run a complete scan with this also once at least once per week.

Erunt:

Emergency Recovery Utility NT, I advice you keep this installed as a means to keep a complete backup of your registry and restore it when needed.

Myself I would actually create a new back up once per week as this along with System Restore may prove to be invaluable if something unforeseen occurs!

Keep your system updated:

Microsoft releases patches for Windows and other products regularly:

• Click on Start(Windows 7 Orb) >> All Programs >> Windows Update.
• In the navigation pane, click Check for updates.
• After Windows Update has finished checking for updates, click View available updates.
• Click to select the check box for any found, then click Install.
• When completed Reboot(restart) your computer if not prompted to do so.

Be careful when opening attachments and downloading files:

Never open email attachments, not even if they are from someone you know. If you need to open them, scan them with your antivirus program before opening.
Never open emails from unknown senders.
Beware of emails that warn about viruses that are spreading, especially those from antivirus vendors. These email addresses can be easily spoofed. Check the antivirus vendor websites to be sure.
Be careful of what you download. Only download files from known sources. Also, avoid cracked programs. If you need a particular program that costs too much for you, try finding free alternatives on Sourceforge or Pricelessware.

Stop malicious scripts:

Windows by default allow scripts (which is VBScript and JavaScript) to run and some of these scripts are malicious. Use Noscript by Symantec or Script Defender by AnalogX to handle these scripts.

Avoid Peer to Peer software:

P2P may be a great way to get lots of seemingly freeware, but it is a great way to get infected as well. There's no way to tell if the file being shared is infected. Worse still, some worms spread via P2P networks, infecting you as well. My advice is avoid these types of software applications.

Hosts File:

A Hosts file is like a phone book. You look up someone's name in the phone book before calling him/her. Similarly, your computer will look up the website's IP address before you can view the website.

Hosts file will replace your current Hosts file with another one containing well-known advertisement sites, spyware sites and other bad sites. This new Hosts file will protect you by re-directing these bad sites to 127.0.0.1.

Here are some Hosts files:

• MVPS Hosts File
• hpHosts

Only use one of the above!

Consider Installing WinPatrol:

WinPatrol alerts you about possible system hijacks, malware attacks and critical changes made to your computer without your permission.

Download it from here.

You can find information about how WinPatrol works here.

Next:

This is a very helpful/useful set of advice from Microsoft: Microsoft Safety & Security Center

Any questions? Feel free to ask, if not stay safe!

[kenomikes]

Hi Dakeyras,

Actually I'm not sure yet if you didn't fix everything. It's running great now at home (and last night after the last fixes), and today I had brought it to work (where we also have a public wifi) which is where I connected to this mmorning and had problems.

However, which I didn't find out until later, the public wifi was disabled for a few hours today. So maybe this is all fixed.

I'll give it a day or two to see if any connections problems occur, and will give you a quick post to let you know.

Appreciate all your hard work.

Thx again,

Mike

[kenomikes]

Hi Dakeyras,

Actually I'm not sure yet if you didn't fix everything. It's running great now at home (and last night after the last fixes), and today I had brought it to work (where we also have a public wifi) which is where I connected to this mmorning and had problems.

However, which I didn't find out until later, the public wifi was disabled for a few hours today. So maybe this is all fixed.

I'll give it a day or two to see if any connections problems occur, and will give you a quick post to let you know.

Appreciate all your hard work.

Thx again,

Mike

[kenomikes]

Hi Dakeyras,

Actually I'm not sure yet if you didn't fix everything. It's running great now at home (and last night after the last fixes), and today I had brought it to work (where we also have a public wifi) which is where I connected to this mmorning and had problems.

However, which I didn't find out until later, the public wifi was disabled for a few hours today. So maybe this is all fixed.

I'll give it a day or two to see if any connections problems occur, and will give you a quick post to let you know.

Appreciate all your hard work.

Thx again,

Mike