Did you check to see if the WD service has been Disabled ?
Are there any other anti-spyware programs installed ?
Is Windows Live OneCare installed ?

MowGreen [MVP 2003-2008]
===============
*-343-* FDNY
Never Forgotten
===============


kiwi wrote:

Quote:

Thanks MowGreen, Tried but Didn't work!

Hi Ugh,
I tried yr reccomendation...WMI repository was fine
Cheers


--
kiwi

Hi MowGreen,
Think I am out of synch with replies...but here goes

- Win defender, in the contrlpanel/services area is blank and when u
go Start service ...I get "Win could not start service on local comp
Error 2 "cannot find file specified"
- Have AVG8 installed. Have AVG8 on another computer running Vista
Home, no probs.
- Do not have Live One Care installed
Cheers


--
kiwi

Hi MowGreen,
Regarding missing file...
I can see svchost.exe in mt systen 32 files but I cannot see
svchost.exe -k secsvcs...which is what defender is asking for when it
starts up (it maybe part of svchost .exe?)
cheers


--
kiwi

kiwi wrote:

Quote:

Hi MowGreen, Regarding missing file... I can see svchost.exe in mt systen 32 files but I cannot see svchost.exe -k secsvcs...which is what defender is asking for when it starts up (it maybe part of svchost .exe?) cheers

Yes, it is 'part' of svchost. Suggest you run sfc /scannow to ensure
that all system files are intact: http://support.microsoft.com/kb/929833

Does AVG 8 contain a spyware component ? You may need to disable it in
order to allow WD to run properly ... if it's set up the same as on the
other PC, then you *should* not have to fiddle with it.
Note the *should*

MowGreen [MVP 2003-2008]
===============
*-343-* FDNY
Never Forgotten
===============

Hi MowGreen,
Scan result was @Windows Resource Protection did not find any Integrity
Violations."
Going to look at installing Event veiwer that Engle suggested

--
cheers, Kiwi


"MowGreen [MVP]" wrote:

Quote:

kiwi wrote: Hi MowGreen, Regarding missing file... I can see svchost.exe in mt systen 32 files but I cannot see svchost.exe -k secsvcs...which is what defender is asking for when it starts up (it maybe part of svchost .exe?) cheers Yes, it is 'part' of svchost. Suggest you run sfc /scannow to ensure that all system files are intact: http://support.microsoft.com/kb/929833 Does AVG 8 contain a spyware component ? You may need to disable it in order to allow WD to run properly ... if it's set up the same as on the other PC, then you *should* not have to fiddle with it. Note the *should* MowGreen [MVP 2003-2008] =============== *-343-* FDNY Never Forgotten ===============

Hi Engle and MowGreen.
Me again....I looked at Event Viewer (not sure what section to look)
and under microsoft/windows/code integrity/ there is 2 events that come
up as errors.
Theye are event 3002(recently) and event 3004 since new (FBIKB_NT.Sys
because file hash could not be found on system)
Microsoft say to repair system via windows disk but I have oem vista
installed and dont think I was given disk.....so how do I do this (via
F8 on boot?)
In event veiwer, should I look for anything else (assoc with win
defender...where?)
Thanks again.


--
kiwi

Hi Guys,
Here is a of hijackthis which shows some missing files (bottom of
list/system 32/vds.exe,wbem etc etc).......do you think this could be my
problem? and how do I fix these missing files (via Hijack???).
Hope you came help. CheersLogfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:24:04 PM, on 12/06/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal
Running processes:
c:\Program Files (x86)\Bioscrypt\VeriSoft\Bin\AsGHost.exe
C:\Program Files
(x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
'MSN.com' (http://go.microsoft.com/fwlink/?LinkId=69157)
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL
= 'Live Search' (http://go.microsoft.com/fwlink/?LinkId=54896)
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 'Live
Search' (http://go.microsoft.com/fwlink/?LinkId=54896)
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
'MSN.com' (http://go.microsoft.com/fwlink/?LinkId=69157)
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName
=
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper -
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common
Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) -
{22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files
(x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter -
{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files
(x86)\AVG\AVG8\avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -
C:\Program Files (x86)\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no
file)
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E}
- C:\PROGRA~2\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: Google Toolbar Helper -
{AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files
(x86)\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO -
{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files
(x86)\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: VeriSoft Access Manager -
{DF21F1DB-80C6-11D3-9483-B03D0EC10000} - c:\Program Files
(x86)\Bioscrypt\VeriSoft\Bin\ItIEAddIn.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} -
c:\program files (x86)\google\googletoolbar1.dll
O3 - Toolbar: AVG Security Toolbar -
{A057A204-BACC-4D26-9990-79A187E2698E} -
C:\PROGRA~2\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [swg] C:\Program Files
(x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows
Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe
oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows
Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel -
res://C:\PROGRA~2\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device... -
C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... -
C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
C:\Program Files (x86)\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console -
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files
(x86)\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} -
C:\Program Files (x86)\Skype\Toolbars\Internet
Explorer\SkypeIEPlugin.dll
O9 - Extra button: Send To Bluetooth -
{CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program
Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... -
{CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program
Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O13 - Gopher Prefix:
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data
Collection Control) -
https://support.microsoft.com/OAS/ActiveX/MSDcode.cab
O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} (HpProductDetection
Class) -
http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} -
C:\Program Files (x86)\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} -
C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown
owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files
(x86)\Common Files\Apple\Mobile Device
Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ,
s.r.o. - C:\PROGRA~2\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. -
C:\PROGRA~2\AVG\AVG8\avgwdsvc.exe
O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. -
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch
Buttons\Com4Qlb.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown
owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program
Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program
Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. -
C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel
Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage
Manager\IAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision
Corporation - C:\Program Files (x86)\Common
Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files
(x86)\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner -
C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service
(LightScribeService) - Hewlett-Packard Company - C:\Program Files
(x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner -
C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) -
Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300
(ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file
missing)
O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) -
Unknown owner - C:\Program Files
(x86)\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner
- C:\Program Files (x86)\HP\QuickPlay\Kernel\TV\QPSched.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files
(x86)\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) -
Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown
owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown
owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) -
Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) -
Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program
Files (x86)\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) -
Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown
owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown
owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) -
Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv)
- Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: WMPNetworkSvc - Unknown owner - (no file)
O23 - Service: Washer AutoComplete (wwSecSvc) - Webroot Software, Inc.
- C:\Windows\system32\wwSecure.exe
--
End of file - 9027 bytes


--
kiwi

Hi Guys,
For your info....just ran hijackthis on my (other) PC and there is NO
missing files!
Are we onto something here?
cheers


--
kiwi

FALSE ALARM....Forget the last 2 posts PLEASE
I found a person who had missing files with Hijackthis and they found
that Hijack was not good for 64bit system and that missing files were
infact still in the system!
I checked my folders and indeed the missing files were still there!
I am giving up on windows defender now....thanks for all yr help
Cheers


--
kiwi

Hi Morty<br /><br />Yes, the usage of manage-bde.wsf is the right way.<br /><br /><br />Regards,<br />Dominik

Are the *exact same* programs and software installed on both systems ?

Please, do NOT post HJT logs here. If you want to post them, do so to a
Windows Defender forum such as :
http://www.bleepingcomputer.com/forums/index.php?showforum=66

Missing files in HJT are not uncommon.


MowGreen [MVP 2003-2008]
===============
*-343-* FDNY
Never Forgotten
===============


kiwi wrote:

Quote:

Hi Guys, For your info....just ran hijackthis on my (other) PC and there is NO missing files! Are we onto something here? cheers

You cannot change properties for CREATOR/OWNER because you are not the
creator of the program and you don't own it (you only own the end user
licence, not the actual software).
To fix this problem doesn't matter if you have UAC on or off.
Right click the folder you want to change go into securty, edit then go
to your user name and check the modify box.


--
breeto
------------------------------------------------------------------------
breeto's Profile: http://forums.techarena.in/member.php?userid=51724
View this thread: http://forums.techarena.in/showthread.php?t=756316

http://forums.techarena.in

ahaha I wondered what was going on as I just had a montly report from
one care saying it had found 2 suspcious files but I cant find out how
to find out what these two files are.

Can someone guide me to locating these?

kind regards

Gill


--
silverspider

Gill


am2 64x2 6000+ 800mhz
k9n platinum nvidia 570 sli
4 x 1gb ballistix pc6400 800mhz ram
msi nx7300td256eh
1000 watt psu w0132 thermaltake
1 x sata 80gb seagate barracuda st380815as
1 x sata 80gb maxtor tm380215as
1 x ata 200gb seagate barracuda st3200822a
operating system : windows vista ultimate 64bit sp1
1 x dvdrw sony aw-g170a

There is a method of bypassing UAC here:

http://www.vistax64.com/tutorials/162976-bypass-uac.html

Steven


--
dmex

*'' (http://www.VistaX64.com)
*

dmex;755532 Wrote:

Quote:

There is a method of bypassing UAC here: http://www.vistax64.com/tutorials/162976-bypass-uac.html Steven

Do you know if this will work for command prompt?

Thanks,
Murr


--
murr

murr;756274 Wrote:

Quote:

dmex;755532 Wrote: There is a method of bypassing UAC here: http://www.vistax64.com/tutorials/162976-bypass-uac.html Steven Do you know if this will work for command prompt? Thanks, Murr

Hi Murr,

Yes this works from Command Prompt, The Steps 9 and 10 are for making a
shortcut to the task sch command to launch the program you specify in
the first few steps and this can easily be used in command prompt or a
shell script.

Steven


--
dmex

*'' (http://www.VistaX64.com)
*

Solution:
1. Restart windows in safe mode.
2. Delete all files in the folder C:\WINDOWS by selecting the files and
then holding down the shift key while you press delete. (It may give you
an error message, just keep clicking continue).


--
XPS_Corey_182848

XPS_Corey_182848 <guest@unknown-email.com> wrote:

Quote:

Solution: 1. Restart windows in safe mode. 2. Delete all files in the folder C:\WINDOWS by selecting the files and then holding down the shift key while you press delete. (It may give you an error message, just keep clicking continue).

Thread is over a year old. Find something more recent to post to.

I had Norton2007 and the security center was running absulutly fine
simultaneously, as the firewall and the antivirus of norton is shown
under ' window security center' but after i installed McAfee the problem
started, the Window security center cant be started as the job is done
by McAfee Security center. I uninstalled the McAfee antivirus but
couldnt able to unistall the 'McAfee Security Center' and the 'Windows
security center is not starting up.
A help would be appreciated,
Vista is bad too.... beautiful graphics but lacks standard in task.


--
dawa747