csrss.exe in Task Manager No User Name or Description


  1. uwatecdiving
    Posts : 2
    Windows 7 Home 64 bit
       New #1

    csrss.exe in Task Manager No User Name or Description


    My computer is slowing down and I despite having the following antivirus and anti malware I think my computer is infected. I have
    Avast
    Spybot Search and Destroy
    Malwarebytes

    On an old thread on this forum I followed the instructions for locating where on my computer is this csrss.exe file, when I right click on Properties or Open file nothing happens.
    I downloaded the Farbar Recovery Scan Tool and have attached the two files 1 FRST.txt and Addition.txt

    Can someone help me with cleaning up this mess please.
    Many thanks
    csrss.exe in Task Manager No User Name or Description Attached Files
      My Computer
    Quote Quote

  3. essenbe
    Posts : 26,869
    Windows 11 Pro
       New #2

    uwatecdiving, I am going to request that this thread be moved to the security section. They a better able to deal with those Security issues than we are. https://www.sevenforums.com/system-security/
      My Computer
    Quote Quote

  4. Tookeri
    Posts : 1,049
    Windows 7 Pro 32
       New #3

    Task Manager won't show the user name and description for system processes until you click "Show processes from all users". Does that help?
    Scan it on https://www.virustotal.com/ and see what 50+ antivirus products says about it.

    A couple of "The Spybot-S&D 2 Scanner Service service failed to start due to the following error: %%1053". So maybe that isn't working properly.
      My Computer
    Quote Quote

  6. Tookeri
    Posts : 1,049
    Windows 7 Pro 32
       New #4

    Scanning for rootkits isn't enabled by default in Malwarebytes, so you could give that a try if you haven't already.
      My Computer
    Quote Quote

  7. Tookeri
    Posts : 1,049
    Windows 7 Pro 32
       New #5

    I'm don't use/know the Farbar program but the log says:

    S2 *etadpug; "C:\Program Files (x86)\Google\Desktop\Install\{161fccea-4b53-3c3a-989f-ca9fc363bdea}\ \...\???\{161fccea-4b53-3c3a-989f-ca9fc363bdea}\GoogleUpdate.exe" < <==== ATTENTION (ZeroAccess)

    If that means you're infected with ZeroAccess, wait for someone else to help you. Here's more info: Possible Zeroaccess infection: denied access to MSE, update error
      My Computer
    Quote Quote

  8. uwatecdiving
    Posts : 2
    Windows 7 Home 64 bit
    Thread Starter
       New #6

    I have now deleted Spybot Search and Destroy as it looks like it may be infected. I have turned on the Rootkit scan on Malwarebytes and ran another scan but it did not bring up anything. On an older post which in this forum I found some tools to try which I did and it did delete a few things. I have run the DDS programme which shows all the programmes that are installed. I am sure my internet is being hijacked but do not know how to fix it. Below is the report.
    DDS (Ver_2012-11-20.01) - NTFS_AMD64
    Internet Explorer: BrowserJavaVersion: 10.67.2
    Run by user at 23:04:36 on 2014-09-06
    Microsoft Windows 7 Home Premium 6.1.7601.1.1252.34.1033.18.7863.5721 [GMT 1:00]
    .
    AV: avast! Antivirus *Enabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
    SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    SP: avast! Antivirus *Enabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
    FW: avast! Antivirus *Disabled* {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
    .
    ============== Running Processes ===============
    .
    C:\Windows\system32\lsm.exe
    C:\Windows\system32\svchost.exe -k DcomLaunch
    C:\Windows\system32\svchost.exe -k RPCSS
    C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
    C:\Windows\system32\svchost.exe -k LocalService
    C:\Windows\system32\svchost.exe -k netsvcs
    C:\Windows\system32\svchost.exe -k NetworkService
    C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
    C:\Windows\system32\WLANExt.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Windows\System32\spoolsv.exe
    C:\Windows\system32\taskhost.exe
    C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
    C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe
    C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
    C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Program Files\Alwil Software\Avast5\avastui.exe
    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
    C:\Windows\System32\svchost.exe -k HPZ12
    C:\Program Files\Common Files\Nitro PDF\Professional\6.0\NitroPDFDriverServicex64.exe
    C:\Windows\SysWOW64\NLSSRV32.EXE
    C:\Program Files (x86)\Online Games Manager\ogmservice.exe
    C:\Windows\System32\svchost.exe -k HPZ12
    C:\Windows\system32\svchost.exe -k imgsvc
    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
    C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
    C:\Windows\system32\EscSvc64.exe
    C:\Windows\system32\wbem\wmiprvse.exe
    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
    C:\Windows\system32\SearchIndexer.exe
    C:\Program Files\Windows Media Player\wmpnetwk.exe
    C:\Windows\system32\wbem\unsecapp.exe
    C:\Windows\System32\svchost.exe -k LocalServicePeerNet
    C:\Windows\System32\svchost.exe -k secsvcs
    C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe
    C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe
    C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
    C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
    C:\Windows\System32\cscript.exe
    .
    ============== Pseudo HJT Report ===============
    .
    uSearch Bar = hxxp://www.google.com/ie
    uSearch Page = hxxp://www.google.com
    uDefault_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0c0a&m=aspire_5742&r=27360211r955l0454z1h5v47j21314
    mDefault_Page_URL = hxxp://www.google.com
    uProxyOverride = 127.0.0.1
    uSearchURL,(Default) = hxxp://www.google.com/search/?q=%s
    mSearchAssistant = about:blank
    uURLSearchHooks: {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - <orphaned>
    uURLSearchHooks: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - <orphaned>
    mWinlogon: Userinit = userinit.exe,
    BHO: E-Web Print: {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll
    BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
    BHO: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
    BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
    TB: E-Web Print: {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll
    EB: <No Name>: {555D4D79-4BD2-4094-A395-CFC534424A05} - LocalServer32 - <no file>
    EB: <No Name>: {555D4D79-4BD2-4094-A395-CFC534424A05} - LocalServer32 - <no file>
    EB: E-Web Print: {A60C1DC7-64B3-4AD9-8E67-035D11B8B2B0} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll
    uRun: [EPLTarget\P0000000000000000] C:\Windows\System32\spool\DRIVERS\x64\3\E_IATIIME.EXE /EPT "EPLTarget\P0000000000000000" /M "XP-202 203 206 Series"
    uRun: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    mRun: [AvastUI.exe] "C:\Program Files\Alwil Software\Avast5\AvastUI.exe" /nogui
    mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
    uPolicies-Explorer: NoDriveTypeAutoRun = dword:221
    mPolicies-Explorer: NoActiveDesktop = dword:1
    mPolicies-Explorer: NoActiveDesktopChanges = dword:1
    mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
    mPolicies-System: ConsentPromptBehaviorUser = dword:3
    mPolicies-System: EnableUIADesktopToggle = dword:0
    IE: Append Link Target to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
    IE: Append to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
    IE: Convert Link Target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
    IE: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
    IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
    .
    INFO: HKCU has more than 50 listed domains.
    If you wish to scan all of them, select the 'Force scan all domains' option.
    .
    .
    INFO: HKLM has more than 50 listed domains.
    If you wish to scan all of them, select the 'Force scan all domains' option.
    .
    DPF: {B785FA3C-1DE9-4D20-8396-613C486FE95E} - hxxps://www2.agenciatributaria.gob.es/es13/h/cactivex.cab
    DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
    TCP: NameServer = 80.58.61.250 80.58.61.254
    TCP: Interfaces\{11FB968E-5E21-4670-A62E-21A5D8B291D0} : DHCPNameServer = 80.58.61.250 80.58.61.254
    TCP: Interfaces\{11FB968E-5E21-4670-A62E-21A5D8B291D0}\75C414E4F50343 : DHCPNameServer = 192.168.1.1
    TCP: Interfaces\{11FB968E-5E21-4670-A62E-21A5D8B291D0}\75C414E4F533647364 : DHCPNameServer = 80.58.61.250 80.58.61.254
    TCP: Interfaces\{11FB968E-5E21-4670-A62E-21A5D8B291D0}\E4567727F657475627 : DHCPNameServer = 192.168.1.1
    Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
    AppInit_DLLs= c:\progra~2\google\google~3\go36f4~1.dll
    SSODL: WebCheck - <orphaned>
    x64-BHO: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll
    x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    x64-TB: avast! Online Security: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - LocalServer32 - <no file>
    x64-Run: [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
    .
    INFO: x64-HKLM has more than 50 listed domains.
    If you wish to scan all of them, select the 'Force scan all domains' option.
    .
    x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>
    x64-Notify: igfxcui - igfxdev.dll
    x64-SSODL: WebCheck - <orphaned>
    Hosts: 127.0.0.1 Spyware Info | Spyware Info
    .
    ============= SERVICES / DRIVERS ===============
    .
    R0 aswRvrt;avast! Revert;C:\Windows\System32\drivers\aswRvrt.sys [2013-11-22 65776]
    R0 aswVmm;avast! VM Monitor;C:\Windows\System32\drivers\aswVmm.sys [2013-11-22 224896]
    R0 PxHlpa64;PxHlpa64;C:\Windows\System32\drivers\PxHlpa64.sys [2012-9-24 56208]
    R1 aswSnx;aswSnx;C:\Windows\System32\drivers\aswsnx.sys [2011-4-9 1041168]
    R1 aswSP;aswSP;C:\Windows\System32\drivers\aswsp.sys [2011-2-15 427360]
    R1 mwlPSDFilter;mwlPSDFilter;C:\Windows\System32\drivers\mwlPSDFilter.sys [2009-6-3 22576]
    R1 mwlPSDNServ;mwlPSDNServ;C:\Windows\System32\drivers\mwlPSDNserv.sys [2009-6-3 20016]
    R1 mwlPSDVDisk;mwlPSDVDisk;C:\Windows\System32\drivers\mwlPSDVDisk.sys [2009-6-3 60464]
    R1 SASDIFSV;SASDIFSV;C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys [2011-7-22 14928]
    R1 SASKUTIL;SASKUTIL;C:\Program Files\SUPERAntiSpyware\saskutil64.sys [2011-7-12 12368]
    R2 ABBYY.Licensing.FineReader.Sprint.9.0;ABBYY FineReader 9.0 Sprint Licensing Service;C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [2009-5-14 759048]
    R2 aswHwid;avast! HardwareID;C:\Windows\System32\drivers\aswHwid.sys [2014-4-18 29208]
    R2 aswMonFlt;aswMonFlt;C:\Windows\System32\drivers\aswMonFlt.sys [2011-2-15 79184]
    R2 aswStm;aswStm;C:\Windows\System32\drivers\aswstm.sys [2013-12-27 92008]
    R2 avast! Antivirus;avast! Antivirus;C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2014-7-4 50344]
    R2 CodeMeter.exe;CodeMeter Runtime Server;C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe [2012-8-30 2568120]
    R2 EpsonScanSvc;Epson Scanner Service;C:\Windows\System32\escsvc64.exe [2014-3-24 135824]
    R2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-8-6 1809720]
    R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2014-8-6 860472]
    R2 NitroDriverReadSpool;NitroPDFDriverCreatorReadSpool;C:\Program Files\Common Files\Nitro PDF\Professional\6.0\NitroPDFDriverServicex64.exe [2011-1-31 341312]
    R2 nlsX86cc;NLS Service;C:\Windows\SysWOW64\NLSSRV32.EXE [2011-1-31 68928]
    R2 ogmservice;Online Games Manager;C:\Program Files (x86)\Online Games Manager\ogmservice.exe [2014-3-27 581568]
    R2 TurboB;Turbo Boost UI Monitor driver;C:\Windows\System32\drivers\TurboB.sys [2009-11-2 13784]
    R3 HECIx64;Intel(R) Management Engine Interface;C:\Windows\System32\drivers\HECIx64.sys [2010-7-13 56344]
    R3 Impcd;Impcd;C:\Windows\System32\drivers\Impcd.sys [2010-7-13 158976]
    R3 IntcDAud;Sonido Intel(R) para pantallas;C:\Windows\System32\drivers\IntcDAud.sys [2010-7-13 271872]
    R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;C:\Windows\System32\drivers\k57nd60a.sys [2010-5-15 384040]
    R3 MBAMProtector;MBAMProtector;C:\Windows\System32\drivers\mbam.sys [2014-8-6 25816]
    R3 MBAMSwissArmy;MBAMSwissArmy;C:\Windows\System32\drivers\MBAMSwissArmy.sys [2014-8-6 122584]
    R3 MBAMWebAccessControl;MBAMWebAccessControl;C:\Windows\System32\drivers\mwac.sys [2014-8-6 63704]
    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
    S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
    S3 androidusb;SAMSUNG Android Composite ADB Interface Driver;C:\Windows\System32\drivers\ssadadb.sys [2011-5-13 36328]
    S3 ggflt;SEMC USB Flash Driver Filter;C:\Windows\System32\drivers\ggflt.sys [2011-10-31 13352]
    S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;C:\Windows\System32\ieetwcollector.exe [2014-9-5 111616]
    S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\System32\drivers\RtsUStor.sys [2010-7-13 246376]
    S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);C:\Windows\System32\drivers\ssadbus.sys [2011-5-13 157672]
    S3 ssadmdfl;SAMSUNG Android USB Modem (Filter);C:\Windows\System32\drivers\ssadmdfl.sys [2011-5-13 16872]
    S3 ssadmdm;SAMSUNG Android USB Modem Drivers;C:\Windows\System32\drivers\ssadmdm.sys [2011-5-13 177640]
    S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);C:\Windows\System32\drivers\ssadserd.sys [2011-5-13 146920]
    S3 taphss6;Anchorfree HSS VPN Adapter;C:\Windows\System32\drivers\taphss6.sys [2014-5-17 42184]
    S3 tapSF0901;Spotflux Virtual Network Device Driver;C:\Windows\System32\drivers\tapSF0901.sys [2013-7-8 39104]
    S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2011-5-1 59392]
    S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2011-2-26 1255736]
    S4 !SASCORE;SAS Core Service;C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [2011-7-19 172344]
    S4 DsiWMIService;Dritek WMI Service;C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-7-25 321104]
    S4 ePowerSvc;Acer ePower Service;C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2010-10-1 868896]
    S4 GoogleDesktopManager-051210-111108;Administrador de Google Desktop 5.9.1005.12335;C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [2011-2-15 30192]
    S4 GREGService;GREGService;C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [2010-1-8 23584]
    S4 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-7-13 13336]
    S4 MWLService;MyWinLocker Service;C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [2010-5-27 305520]
    S4 NTI IScheduleSvc;NTI IScheduleSvc;C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2010-6-28 255744]
    S4 Sony Ericsson PCCompanion;Sony Ericsson PCCompanion;C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe [2011-10-31 155344]
    S4 TurboBoost;TurboBoost;C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2009-11-2 126352]
    S4 UNS;Intel(R) Management & Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-7-13 2320920]
    S4 Updater Service;Updater Service;C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2010-7-13 243232]
    .
    =============== File Associations ===============
    .
    FileExt: .js: jsfile=C:\Windows\System32\Notepad.exe %1 [default=Edit - 'Open' doesn't exist]
    ShellExec: FRONTPG.EXE: edit=C:\PROGRA~2\MICROS~2\Office\FRONTPG.EXE
    .
    =============== Created Last 30 ================
    .
    2014-09-06 20:35:56 19800 ----a-w- C:\Windows\System32\roboot64.exe
    2014-09-06 14:56:21 -------- d-----w- C:\Windows\ERUNT
    2014-09-06 14:30:23 536576 ----a-w- C:\Windows\SysWow64\sqlite3.dll
    2014-09-06 14:29:12 -------- d-----w- C:\AdwCleaner
    2014-09-06 13:25:48 -------- d-----w- C:\FRST
    2014-09-05 10:45:26 -------- d-sh--w- C:\Users\user\AppData\Local\EmieUserList
    2014-09-05 10:45:26 -------- d-sh--w- C:\Users\user\AppData\Local\EmieSiteList
    2014-08-20 16:58:28 -------- d-----r- C:\Users\user\Creative Cloud Files
    2014-08-20 16:47:48 -------- d-----w- C:\ProgramData\Package Cache
    2014-08-16 15:50:06 98216 ----a-w- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
    2014-08-09 19:17:29 10924376 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{1438AC90-F85A-406C-9354-E46CC54A13D4}\mpengine.dll
    .
    ==================== Find3M ====================
    .
    2014-09-06 21:56:22 122584 ----a-w- C:\Windows\System32\drivers\MBAMSwissArmy.sys
    2014-08-17 19:57:21 71344 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
    2014-08-17 19:57:21 699568 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
    2014-08-05 08:20:00 270496 ------w- C:\Windows\System32\MpSigStub.exe
    2014-07-04 16:30:29 92008 ----a-w- C:\Windows\System32\drivers\aswstm.sys
    2014-07-04 16:30:29 79184 ----a-w- C:\Windows\System32\drivers\aswMonFlt.sys
    2014-07-04 16:30:29 65776 ----a-w- C:\Windows\System32\drivers\aswRvrt.sys
    2014-07-04 16:30:29 224896 ----a-w- C:\Windows\System32\drivers\aswVmm.sys
    2014-07-04 16:30:29 1041168 ----a-w- C:\Windows\System32\drivers\aswsnx.sys
    2014-07-04 16:30:28 93568 ----a-w- C:\Windows\System32\drivers\aswRdr2.sys
    2014-07-04 16:30:28 29208 ----a-w- C:\Windows\System32\drivers\aswHwid.sys
    2014-07-04 16:30:24 43152 ----a-w- C:\Windows\avastSS.scr
    2010-05-21 14:31:08 93912 ----a-w- C:\Program Files (x86)\ElementsUpgrade.dll
    .
    ============= FINISH: 23:05:09.61 ===============
      My Computer
    Quote Quote

 

  Related Discussions
What's up group! Newbee here! Thanks for being available! This may be more 'virus related' and in the wrong group but i'll ask anyway... In Windows 7 > Task Manager, i have a Process under the Image Name column called csrss.exe. It has nothing listed under User and/or Description. All...
i need a program to start every startup of computer but this program need usernamme and password how i can do that please ? thanks in advance
Hi there, I am hoping someone can advise me on how to remove the old computer name from task manager. I have changed the name of the user account in user settings, but annoyingly the old name shows up in task manager. Any advice, appreciated. Thanks, Ben.:party:
hi ! is it possible to have an "Elevated Taskmanager" without UAC-prompt on a user-account ? for obvious security-reasons, i always run on a user-account, except when doing system maintenance. i want taskmanager to show everything, so it would be really nice if it was possible to create a...
how can i include (create) a description of a task when i create the task with schtasks? looked everywhere but did not find any info.... but it's got to be possible ; )
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

 © Designer Media Ltd
All times are GMT -5. The time now is 09:57.
Find Us