Page 13 of 17 FirstFirst ... 31112131415 ... LastLast
  1.    18 Nov 2015 #121
    Join Date : Apr 2015
    Posts : 13,001
    W10Prox64

    Quote Originally Posted by Writer View Post
    Concerning Windows Defender:

    I could not do anything by going to the Windows Defender Desktop App.

    I went to Task Manager, scrolled down a bit to "Windows Defender Service." The "Stop" option is "grayed out." I clicked on it anyway, then I clicked on "Start." The first time I tried this, it read "starting." But it didn't start. A small window came up that said the following:
    The status of all of the apps listed at the Task Manager is either "running" or "stopped." The fact that "starting" appeared briefly indicates that an attempt was made to start Defender. Your initial conclusion appears to have been correct: malicious software from a Trojan Virus disabled Defender.

    I'll now take a look at the other options that you presented.
    Yep, okay. Hope the registry change will work, because I am not sure how to correct this otherwise, since the sfc /scannow showed no integrity violations. May have to call in some help for this issue.

    In the meantime, I will be unavailable for a couple of hours. I have asked @lx07 to assist with the DLL error using the other program he mentioned. Okay? He is very knowledgeable.

    And if he has any ideas on the Defender problem, please try his suggestions.
      My ComputerSystem Spec
  2.    18 Nov 2015 #122
    Join Date : Jul 2015
    Posts : 3,822
    10 Pro

    Quote Originally Posted by simrick View Post
    I have asked @lx07 to assist with the DLL error using the other program he mentioned.
    Hello @Writer, please have a look at the post #110 in this thread.

    I have contracted a Virus that shows many Ads - Post 110

    If you've any questions let me know but it should be quite straightforward.

    • Download Autoruns from here Autoruns for Windows
    • Unzip the downloaded file
    • Run autoruns.exe
    • Under the "Everything" tab search for the string AppData\Local\PluginBus\xBin\PluginBus.dll in the image path (shown in the picture earlier). You can use crtl + F to help with that.
    • If found right click on that line and select delete.
    • Reboot and message should be gone.

    I'll think about Defender but nothing springs immediately to mind.
      My ComputerSystem Spec
  3.    18 Nov 2015 #123
    Join Date : Sep 2015
    Posts : 66
    Windows 10
    Thread Starter

    Thanks for the information @lx07; I'll try to do your suggestion concerning the DLL Error. I'll post if I do it, or post if there's something I don't understand.
      My ComputerSystem Spec
  4.    18 Nov 2015 #124
    Join Date : Jul 2015
    Posts : 3,822
    10 Pro

    Quote Originally Posted by Writer View Post
    Thanks for the information @lx07; I'll try to do your suggestion concerning the DLL Error. I'll post if I do it, or post if there's something I don't understand.
    Good luck I've been following this thread for the last couple of days - just didn't have much to add before. You do seem to be making good progress...
      My ComputerSystem Spec
  5.    18 Nov 2015 #125
    Join Date : Sep 2015
    Posts : 66
    Windows 10
    Thread Starter

    For @lx07: I downloaded "Autoruns for Windows" and under the "Everything" tab, I found the DLL string (appdata/local/plugins etc. I deleted it and then rebooted, but the DLL Error window still appeared.

    I went back to Autoruns to see if it was still gone, and it is not there. Looks like a real mystery.
      My ComputerSystem Spec
  6.    18 Nov 2015 #126
    Join Date : Sep 2015
    Posts : 66
    Windows 10
    Thread Starter

    Under Task Manager, Open Services, I double-clicked on "Windows Defender Network Inspection Service" and under "Startup Type" is says "Manual."

    I double-clicked on "Windows Defender Service Properties" and under "Startup Type" it also says "Manual."

    In the example that you gave me, the second one should read "Automatic."

    Finding: the two don't match your examples, and Defender is still not running.
      My ComputerSystem Spec
  7.    18 Nov 2015 #127
    Join Date : Sep 2015
    Posts : 66
    Windows 10
    Thread Starter

    I opened the Registry. I clicked on Windows Defender and several items appeared in the right pane. However, the two that you specified did not appear: Disable Antispyware and Disable Antivirus.

    I exited the Registry.

    Windows Defender is still disabled.
      My ComputerSystem Spec
  8.    18 Nov 2015 #128
    Join Date : Jul 2015
    Posts : 3,822
    10 Pro

    Quote Originally Posted by Writer View Post
    I went back to Autoruns to see if it was still gone, and it is not there. Looks like a real mystery.
    Yes indeed, that is not good. Normally autoruns finds all startup items. Perhaps it is submitted by something else.

    Please go to Options tab and tick the 2 options as shown here

    Click image for larger version. 

Name:	Options.png 
Views:	1 
Size:	50.0 KB 
ID:	49127

    Then select "Scan options" and tick the 3 boxes shown here and then click on "Rescan"

    Click image for larger version. 

Name:	Scan options.PNG 
Views:	27 
Size:	16.9 KB 
ID:	49122

    It will pop-up a Virus-total terms and conditions website. You can close this, accept the terms and conditions and then wait for it to complete.

    It will check the signatures of all startup items and submit them to be checked. Wait until it has finished (it took about 45 seconds for me but I've not much installed).

    If anything appears under the "Virus Total" (indicated with the red arrow above) column please report back what the line says.

    If it is all blank as in the picture above let us know - in this case we'll need another strategy.
      My ComputerSystem Spec
  9.    18 Nov 2015 #129
    Join Date : Sep 2015
    Posts : 66
    Windows 10
    Thread Starter

    For @lx07 : I opened "Autoruns" and under "Options," I checked the boxes you indicated. I ran the scan and rescan, and the list that came up has 15 items listed under "Virus Total." They are labeled with the red numbers 1/54, 1/55, 1/56, and 1/57. The "Time Stamp" for all except one is in July of 2015. The other is "Time Stamped" in October of 2015.

    The publisher for all of the entries is (verified) Microsoft.
      My ComputerSystem Spec
  10.    18 Nov 2015 #130
    Join Date : Jul 2015
    Posts : 3,822
    10 Pro

    1/55 means it is false positive, as it is verified Microsoft. I'm sorry to say that this method of using Autoruns has not worked.

    I'm not expert enough in sorting out virus infections to know what else could be trying to launch this process but I will try to find out if I can.
      My ComputerSystem Spec

 
Page 13 of 17 FirstFirst ... 31112131415 ... LastLast


Similar Threads
Thread Forum
BEST Anti-Virus for Windows 10 Pro ??
I have been using Norton Anti-Virus for 10 years and Norton Security the past 3 years !! I actually bought a 3-User pack on a Super Sale Price (from Norton). My Wife uses on and I have one "unused" !! Since I Upgraded to WINDOWS 10 PRO I find...
AntiVirus, Firewalls and System Security
Malware or Virus?
I usually use downmagz.com to download magazines. Today, I went to there to get some mags and when I went to the download page I got a popup that said CableONE has blocked the website. Clicked OK and then a page came up with a blue screen and...
AntiVirus, Firewalls and System Security
Solved ?Question about virus behavior.
Hi all, story; I got a virus about 6 months ago,,around then,, I had a pro-virus program, and it found virus after virus,after virus,,,,uhh infected files,,, my question is; why didnt the virus program kill the "source of the virus"? was i...
AntiVirus, Firewalls and System Security
Help with a virus
Hi everyone, So here is my issue, I installed some software but it turned out to be a fake version of that software. It installed a ton of bloat and popups and all of that. When ever I uninstalled the software it would reinstall itself and it was a...
AntiVirus, Firewalls and System Security
VIRUS TOTAL Bookmarked
While Miles was helping some one in Eight Forums he made a recommendation for the user to scan a URL with an online scanner. An then it came to me, I should have Virus Total bookmarked. https://virustotalcloud.appspot.com/static/img/logo.png ...
AntiVirus, Firewalls and System Security
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 02:22.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums