How safe is running Zoek 5.0.0.0

[marysilver]

Download, install declining trial and run a full scan with SUPERAntiSpyware. Later in Preferences turn it off at Startup.

Type msconfig in Start Search box, in msconfig>Startup and msconfig>Services (after Hiding all MS Service) uncheck everything except your AV and synch. I would use a free lightweight AV like MSE until you determine what's causing trouble.

In each of your browsers, on the Tools tab select Add-On's or Extensions and disable all except Shockwave Flash.

I have some time tomorrow afternoon if you want to install TeamViewer Download at all defaults and private message back to me Your ID and password, leave it open on Desktop. I can connect and go over your install for you from top to bottom.

Thank you! That is very generous. Really above and beyond what I was expecting!

I'm doing a SUPERAntiSpyware scan now.

Sorry I missed you today. Tomorrow I'm busy during the day. As far as I'm concerned, whenever it is convenient for you. I'm in no rush. I may also have a talk with my family to make sure they are comfortable giving out the password etc. so as to avoid disagreements after the fact.

 

[cottonball]

marysilver,

As far as I remember, the password is something you create specifically for using TeamViewer. You will not be providing the password you use for private matters, etc. gregrocker will correct me if this is wrong.

Here is some info:
How to connect to your PC remotely with TeamViewer | Internet News | TechRadar

 

[derekimo]

It will generate the password at the time you open it in the allow remote control section.

The ID stays the same but a new password is generated each session.

 

[marysilver]

marysilver,

As far as I remember, the password is something you create specifically for using TeamViewer. You will not be providing the password you use for private matters, etc. gregrocker will correct me if this is wrong.

Here is some info:
How to connect to your PC remotely with TeamViewer | Internet News | TechRadar

OK thanks!

I want to see if I understand this correctly. Would gregrocker be able to see all the files on my computer using TeamViewer?

Today my CD "D drive" appeared out of nowhere!!!!! I even forgot the computer came with a D drive. All it had was a C drive for months.....

 

[marysilver]

I'm just wondering if "Core networking" "Microsoft DirectPlay Helper" "Network Discovery" "P2P of service to Orbit Downloader" and "Remote Assistance" should be allowed through Windows Firewall?

Are any of the above security threats?

 

[marysilver]

I just ran AdwCleaner and it found 'Optimizer Pro Crash Monitor' and SwvUpdater. I deleted them.

Here is the log:

# AdwCleaner v4.200 - Logfile created 02/04/2015 at 06:31:56
# Updated 29/03/2015 by Xplode
# Database : 2015-03-29.1 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : 13 - 13-PC
# Running from : C:\Users\13\Downloads\adwcleaner_4.200.exe
# Option : Cleaning

***** [ Services ] *****

[#] Service Deleted : SWUpdater
[#] Service Deleted : 051cdb72

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\ytd video downloader
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ytd video downloader
Folder Deleted : C:\Program Files (x86)\Babylon
Folder Deleted : C:\Program Files (x86)\BabylonToolbar
Folder Deleted : C:\Program Files (x86)\Conduit
Folder Deleted : C:\Program Files (x86)\GreenTree Applications
Folder Deleted : C:\Program Files (x86)\orbitdownloader
Folder Deleted : C:\Users\13\AppData\Local\SwvUpdater
Folder Deleted : C:\Users\13\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\13\AppData\LocalLow\Toolbar4
Folder Deleted : C:\Users\13\AppData\Roaming\Common\LuaRT
Folder Deleted : C:\Users\13\AppData\Roaming\DataMgr
Folder Deleted : C:\Users\13\AppData\Roaming\fbDownloader
Folder Deleted : C:\Users\13\AppData\Roaming\Intermediate
Folder Deleted : C:\Users\13\AppData\Roaming\SCheck
Folder Deleted : C:\Users\13\AppData\Roaming\Sixth
Folder Deleted : C:\Users\13\AppData\Roaming\Snz
Folder Deleted : C:\Users\13\AppData\Roaming\SSync
Folder Deleted : C:\Users\13\AppData\Roaming\catalina – print savings
Folder Deleted : C:\Users\13\AppData\Roaming\itesing
Folder Deleted : C:\Users\13\AppData\Roaming\ProgSense
Folder Deleted : C:\Users\13\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\catalina – print savings
File Deleted : C:\Windows\System32\drivers\netfilter64.sys
File Deleted : C:\Users\13\AppData\Roaming\Mozilla\Firefox\Profiles\it54m6dw.default-1376247180239\searchplugins\search.xml
File Deleted : C:\Users\13\AppData\Roaming\Mozilla\Firefox\Profiles\uq75u6u3.default-1376247360423\user.js

***** [ Scheduled tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\superfish.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.superfish.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\MenuExt\&Download by Orbit
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\MenuExt\&Grab video by Orbit
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Do&wnload selected by Orbit
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Down&load all by Orbit
Key Deleted : HKLM\SOFTWARE\Classes\AppID\BabylonHelper.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\TbCommonUtils.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\TbHelper.EXE
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils
Key Deleted : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils.1
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager.1
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager.1
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbRequest
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbRequest.1
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbTask
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbTask.1
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper.1
Key Deleted : HKLM\SOFTWARE\37EE3489-84C3-4573-BC84-F6F7DCC25F25
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3227981
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3241284
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{6536801B-F50C-449B-9476-093DFD3789E3}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{AD25754E-D76C-42B3-A335-2F81478B722F}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{000123B4-9B42-4900-B3F7-F4B073EFC214}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1663C10B-0D55-438D-8496-19A3DBAEC0E4}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1C950DE5-D31E-42FB-AFB9-91B0161633D8}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3BDF4CE9-E81D-432B-A55E-9F0570CE811F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3F1D494B-0CEF-4468-96C9-386E2E4DEC90}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7854F00C-DC77-477E-A10E-603F48442D3B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A9A56B8E-2DEB-4ED3-BC92-1FA450BCE1A5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE338F6D-5A7C-4D1D-86E3-C618532079B5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C339D489-FABC-41DD-B39D-276101667C70}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C55BBCD6-41AD-48AD-9953-3609C48EACC7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D89031C2-10DA-4C90-9A62-FCED012BC46B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E393F82-2644-4AB6-B994-1AD39D6C59EE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A0880527-DC28-4EBB-BA27-D22102F22A9F}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{BCDDE143-FAE3-4C57-B22B-C4E8678CFDC0}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{000123B4-9B42-4900-B3F7-F4B073EFC214}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{000123B4-9B42-4900-B3F7-F4B073EFC214}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C55BBCD6-41AD-48AD-9953-3609C48EACC7}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{000123B4-9B42-4900-B3F7-F4B073EFC214}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C55BBCD6-41AD-48AD-9953-3609C48EACC7}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4250488A-CB24-0893-C066-B1AEA57BCFF2}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{C55BBCD6-41AD-48AD-9953-3609C48EACC7}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9E393F82-2644-4AB6-B994-1AD39D6C59EE}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\filescout
Key Deleted : HKCU\Software\Orbit
Key Deleted : HKCU\Software\Protector
Key Deleted : HKCU\Software\SimpleFiles
Key Deleted : HKCU\Software\ProgSense
Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Key Deleted : HKLM\SOFTWARE\Conduit
Key Deleted : HKLM\SOFTWARE\Orbit
Key Deleted : HKLM\SOFTWARE\SimpleFiles
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DealBulldog Toolbar Toolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Orbit_is1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{37331C16-3E97-4A20-80D8-BFB43AB0E2FB}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\00E944CB89111313EAF35A0553F547F9
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\53F55AF3F4049ED3FA6EA6F88E414E24
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E4BF4B11615E03C97732FD581AB607
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CE3DDAB2D152683FBCEB4866BCD2B0F
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AF6CE16AFEA5C9A39B766468A8B35C21
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FB1E44269B58F433A8C8E671E37CFDCF
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\blekko.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\fbdownloader.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ixquick.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\search.fbdownloader.com
Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - *.local

***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17689

Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs]

-\\ Mozilla Firefox v37.0 (x86 en-US)


*************************

AdwCleaner[R0].txt - [11028 bytes] - [02/04/2015 06:28:57]
AdwCleaner[S0].txt - [10814 bytes] - [02/04/2015 06:31:56]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [10874  bytes] ##########

 

[marysilver]

Is another software that is simliar to Junkware Removal Tool? One of my anti-virus detectors keeps placing it in quarantine every time I try to run it. Is Junkware Removal Tool save to use? I think it may help solve my internet problems.....

Junkware Removal Tool is a powerful utility, which will remove "virus" extensions from Internet Explorer, Firefox and Google Chrome.

When I searching on youtube, some of videos that are next to each other all look the same. The same still image on completely different videos! Only when I scan my mouse over the video does the real video "still image" show up.

 

[gregrocker]

I would not use any Toolbar, Junkware Removal Tool or Orbit Downloader. Babylon and Conduit are serious infections. All of those found by AdwCleaner should have been removed. Were they? I'd also install SUPERAntiSpyware - Downloads to get a second opinion because it seems you're choking on adware.

What AV are you using?

What is enabled in your browsers under Add-On's or Extensions? Disable all but Shockwave Flash.

 

[marysilver]

"All of those found by AdwCleaner should have been removed. Were they?" I removed everything besides one program that I use all the time. Panda also tried to remove it. I'm wondering if it was better to copy and save that software/program off the computer. Then deleted it and then copy it back on the computer without the viruses.

Panda anti virus pro was the one that removed Junkware Removal Tool. I've been using SUPERAntiSpyware and Malwarebytes.

For Add-On's or Extensions what about McAfee Security Scan, Adblock Plus, QuickJava, and Adobe Acrobat?

Is "ask to activate" good enough?

 

[marysilver]

Curious why you think Junkware Removal Tool isn't good?

Junkware Removal Tool Download

 

[marysilver]

:info: Please download Malwarebytes Anti-Rootkit:
Download > Malwarebytes Anti-Rootkit Download
•Save to your Desktop.
•Double-click the icon to start the tool.
(Warning! Malwarebytes Anti-Rootkit needs to be run from an account with Administrator rights.)
•In the Introduction screen, click: Next
•On the Update Database screen, click Update to download the latest definitions, and then click: Next
•Once the update is complete select Next, and click: Scan
•When the scan is finished, if no malware is found select: Exit
•If malware is detected, check all items and click: Cleanup
•Reboot your computer.

:ar: Please open the MBAR folder and provide the content of the following reports in your reply:
mbar-log-{date} (xx-xx-xx).txt
system-log.txt
.

Is it possible for Malwarebytes Anti-Rootkit to just scan the program files?


I'm trying to run the normal Malwarebytes and two times this comes up:

malwarebytes was unable to load the anti-rootkit driver
error code 20025

 

[cottonball]

Is it possible for Malwarebytes Anti-Rootkit to just scan the program files?

Not that I am aware of.

On the error code 20025:

Please download mbam-clean.exe:
http://downloads.malwarebytes.org/file/mbam_clean
Save to the Desktop.
Close all open applications and temporarily shutdown your antivirus to avoid any conflicts when running the tool.
Locate the file mbam-clean.exe, double-click to run it, and follow the onscreen prompts.
When asked to restart the computer, allow it to do so (important).

After the computer restarts, ensure that your antivirus is enabled!

Now, reinstall the latest version of Malwarebytes Anti-Malware:
https://www.malwarebytes.org/getmbam
Save the file to your Desktop
Double-click it to begin installation.
Uncheckthe Trial checkmark near the end of the installation.
Make sure you check for Updates at the end of the installation as well.

Make sure you re-enable your Anti-Virus application.

After installation, try to update and run a rootkit scan.

Let us know if this corrects the error problem.


.

 

[gregrocker]

"All of those found by AdwCleaner should have been removed. Were they?" I removed everything besides one program that I use all the time. Panda also tried to remove it. I'm wondering if it was better to copy and save that software/program off the computer. Then deleted it and then copy it back on the computer without the viruses.

Panda anti virus pro was the one that removed Junkware Removal Tool. I've been using SUPERAntiSpyware and Malwarebytes.

For Add-On's or Extensions what about McAfee Security Scan, Adblock Plus, QuickJava, and Adobe Acrobat?

Is "ask to activate" good enough?

I would uninstall anything that's McAfee which is always trouble, the worst. I would not have Java installed unless a trusted program asks for it. Adobe Acrobat is not needed by most, just Flash and possibly Reader.

As to Junkware Removal Tool if it was good we would have heard about it. This is the lifelong home of Windows 7, besides being the top tech forums in all of web history.

 

[marysilver]

Thank you to both of you.

What's interesting is the main problems started on the computer about the time McAfee Security Scan was installed.

McAfee Security Scan won't let me uninstall it. Should I use Revo Uninstaller Pro?

 

[gregrocker]

Do you have a System Restore point available from before the time you installed the Mucafee?

If not, You can use Revo but set a System Restore point before you use it.

 

[marysilver]

Do you have a System Restore point available from before the time you installed the Mucafee?

If not, You can use Revo but set a System Restore point before you use it.

Thanks!

No System Restore point before then. It only goes back a couple days.

 

[marysilver]

This may be THE problem.

I just checked out this part of the computer called "Services". An example:

http://www.theeldergeek.com/windows_7/service_block_level_engine_backup.htm

A bunch of services are stopped. Some might be important.

If someone can list the important services to "Start" then a few of my computer problems may be resolved?

Can I go through and start all the services just to see if it helps the computer?

 

[marysilver]

I think my "Computer Browser" in services is missing from the computer:

C:\Windows\System32\svchost.exe -k netsvcs

I tried to start it and it had an error message.

Is there anyway to get these services back without a factory reset or deleting everything from my computer?

I might have other "services" missing too. When the virus attacked, I was deleted files left and right trying to stop the virus from taking over the computer. I deleted anything that looked suspicious. svchost caused problems in the past, so I may have deleted all the svchost. I didn't have time to research file names. The computer acted normal, so I never went back to check....

 

[marysilver]

The Block Level Backup Engine Service won't stay "Started". It goes back to stopped.

I'm missing Diagnostic Service Host too....update, I think it's there now.

Do I need microsoft net framework NGEN service started? It is stopped and when I try to run it an error message appears.

All my Listener Adapters are missing and deleted. For example "Net.Pipe Listener Adapter". Are they important?

TPM Base Services won't allow me to start it.

NVIDIA Update Service Daemon won't start.

 

[cottonball]

McAfee Security Scan uninstall:
How do I uninstall McAfee Security Scan Plus?


Restore default Services:
http://www.sevenforums.com/tutorials/236709-services-restore-default-services-windows-7-a.html

If the Service needs to be Started, it will show Started/Manual. or, Started/Automatic, etc.