Hi,
I need advice. Hijackthis told me bit defender dll's are bad and to be removed. I post a (very) detailed history of my worries and scans, just in case you need more details to understand what is the problem. If not, the two hijackthis runs I made are:
http://hjt.networktechs.com/parse.php?log=320865
http://hjt.networktechs.com/parse.php?log=321219
I never neglected firewalls, anti-spies, anti-viruses, never ever visited any suspicious site, this really turns me mad.
I really, truly appreciate any help, particularly because, I know it is not an easy problem (read below).
*****Details****
Recently, I noticed my pc got slow (big suprise!). Also, when I was turning off the computer, every now and then, just before it turned of (the blueish screen which says "windows is shutting down") a message box appeared saying "smc.exe cannot access memory at xxx" where xxx is some numbers and letters (a memory adress, righth?). As I once run daemon tools on my computer, I worried that some rootkit based infection might have occured, or that bitdefender and sygate firewalls (smc.exe is sygate process) had a conflict.
I tried to make a diagnostic using software I have back then (AVG anti-virus free, BitDefender, Ad-aware, Spybot, sygate firewall). As usual (as my previous scans), BitDefender found nothing, Spybot found StatCounter (and something else I dont remember the name), Ad-aware found a tracking cookie from Toshiba (my laptop is a Toshiba). I run hijackthis and used the automatic parser of iamnotageek (at that time, i was not aware of the readmebeforeposting, so I just run it on normal windows). It found nothing interesting, i recognized all of the process.
I was not satisfied, I installed Kaspersky Internet Security. I never got it to run! I mean it installed, it started, etc. but I never finished any analysis the computer jammed. I uninstalled.
I installed spyeraser and avg anti-spyware. Spyeraser found several things, I deleted them (by the way, system restore was activated). As soon as I deleted them, the active guard of spyeraser generated a message saying that some things tried to add themselves to trusted sites, and that appinit_dll tried to add some unknown dll. I blocked and spyeraser gave an error message and shut down. I relaunched spyeraser, it told me about appinit_dll. I checked n the internet, and found out that this file was usually harmless. I allowed to see what would happen.
Well, nothing happend (that I noticed).
Avg spyware updated with difficulty, I run a scan. Found some things which I deleted (system restore was still on and windows not on safe mode; I know i know). Nothing changed except that the day after spyeraser could not load its active guard, which, when I tried to run, shut down.
Then I noticed something odd. Bit defender (bdss.exe) was consuming all the CPU power, around 80-99 per cent. It did not do that before. At first, I thought that some maleware has infected my pc and that bdss tried to locate it or something.
Then I run hijackthis (still with system restore activated and windows normal session). The automatic parser told me that many bitdefender dll's were "Bad, always to be removed" jsut like a dll called WPDShServiceObj.dll. You may find the log here:
http://hjt.networktechs.com/parse.php?log=320865
Then, after some search on the forum, I found out how to run hijackthis properly and I followed step by step. I run avg spyware, windows defender, microsoft maleware removal tool, atf cleaner, etc. within the order indicated, disabling system restore, and in safe mode when indicated as in ReadMeBeforePosting. I renamed hijacthis to hjkscan which is located in program files. here is the log:
http://hjt.networktechs.com/parse.php?log=321219
As you see, it just indicated WPDShServiceObj.dll as bad and to be removed. On some other forum I learned that this is used by windows media player 11 beta. The bdss dll's were no more signaled to be bad.
But bdss still starts suddenly to go wild every now and then (not any scheduled scans), spyeraser still find the same type of spyware (casinoroyal, etc. ) and after removing them indicated somthing tried to add itself to internet explorer then exits with error. Avg spyware, spybot, microsoft defender, avg anti-rootkit, microsoft maleware removal and bitdefender scans find nothing.
The only thing that I notice is that bitdefender dll's do not have an owner.
And I have no clue what to do. By the way, I never use internet explorer, but only the most recent version of firefox.
Should I uninstall bitdefender or media player 11 beta?
Reply With Quote