autoruns reports missing files

Page 2 of 3 FirstFirst 123 LastLast

  1. Posts : 426
    Windows 10 64-bit Ver 1909, OS build 18363.535
    Thread Starter
       #11

    Okay, here's the hijackthis log output. The thing is, like I mentioned, the 4 files I'm concerned with at the top of the thread - the 4 that show up as "missing" in autoruns - are not listed in hijackthis. So I don't know if the log will help figure out what to do about those 4 codec files. But the hijcakthis report does show a whole bunch of other files as missing, most of which are not missing at all. So I don't know how to read this report I guess. Hopefully somebody here can help me make sense of this.

    Logfile of Trend Micro HijackThis v2.0.5
    Scan saved at 1:04:20 AM, on 10/1/2016
    Platform: Unknown Windows (WinNT 6.02.1008)
    MSIE: Internet Explorer v11.0 (11.00.10586.0589)


    Boot mode: Normal

    Running processes:
    C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
    C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
    C:\Program Files (x86)\DriveGLEAM\drivegleam.exe
    C:\Users\Mark\AppData\Local\FluxSoftware\Flux\flux.exe
    C:\Program Files (x86)\Internet Download Manager\IDMan.exe
    C:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\SBRcni.exe
    C:\Program Files (x86)\Yahoo!\Widgets\YahooWidgets.exe
    C:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\CTJckCfg.exe
    C:\Program Files\AVAST Software\Avast\avastui.exe
    C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe
    C:\PROGRA~2\DUMETE~1\DUMeter.exe
    C:\Program Files (x86)\Skillbrains\lightshot\5.4.0.1\Lightshot.exe
    C:\Program Files (x86)\CyberPower PowerPanel Personal Edition\pppeuser.exe
    C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
    C:\Programs\Hijack This\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google Advanced Search
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com - Hotmail, Outlook, Skype, Bing, Latest News, Photos Videos
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com - Hotmail, Outlook, Skype, Bing, Latest News, Photos Videos
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    F2 - REG:system.ini: UserInit=
    O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll
    O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll
    O4 - HKLM\..\Run: [UpdReg] C:\Windows\UpdReg.EXE
    O4 - HKLM\..\Run: [Sound Blaster Recon3Di SBX Control Panel] "C:\Program Files (x86)\Creative\Sound Blaster Recon3Di\Sound Blaster Recon3Di Control Panel\SBRcni.exe" /r
    O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
    O4 - HKLM\..\Run: [Malwarebytes Anti-Exploit] C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe
    O4 - HKLM\..\Run: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
    O4 - HKLM\..\Run: [Lightshot] C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe
    O4 - HKLM\..\Run: [PowerDVD16Agent] "C:\Program Files (x86)\CyberLink\PowerDVD16\PowerDVD16Agent.exe"
    O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
    O4 - HKLM\..\Run: [East-Tec east-tec Eraser Scheduler Agent] C:\Program Files (x86)\east-tec Eraser\etSCHAgent.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
    O4 - HKLM\..\Run: [east-tec Eraser Risk Monitor] C:\Program Files (x86)\east-tec Eraser\etRiskMonitor.exe
    O4 - HKLM\..\Run: [PowerPanel Personal Edition User Interaction] C:\Program Files (x86)\CyberPower PowerPanel Personal Edition\pppeuser.exe
    O4 - HKLM\..\RunOnce: [EasyTuneEngineService] C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\EngineRunOnce.exe
    O4 - HKLM\..\RunOnce: [SIV] C:\Program Files (x86)\GIGABYTE\SIV\sivro.exe
    O4 - HKLM\..\RunOnce: [PreRun] C:\Program Files (x86)\GIGABYTE\AppCenter\PreRun.exe
    O4 - HKLM\..\RunOnce: [DualBiosRescue] C:\Program Files (x86)\GIGABYTE\GigabyteFirmwareUpdateUtility\dbrro.exe
    O4 - HKCU\..\Run: [SpybotPostWindows10UpgradeReInstall] "C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe"
    O4 - HKCU\..\Run: [DriveGLEAM] "C:\Program Files (x86)\DriveGLEAM\drivegleam.exe" /STARTUP
    O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
    O4 - HKCU\..\Run: [DuckCapture] "C:\Program Files (x86)\DuckLink\DuckCapture\DuckCapture.exe" /autorun
    O4 - HKCU\..\Run: [f.lux] "C:\Users\Mark\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
    O4 - HKCU\..\Run: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot
    O4 - HKCU\..\Run: [DU Meter] "C:\Program Files (x86)\DU Meter\DUMeter.exe" /autostart
    O4 - Startup: Yahoo! Widgets.lnk = C:\Program Files (x86)\Yahoo!\Widgets\YahooWidgets.exe
    O4 - Global Startup: Killer Network Manager.lnk = C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe
    O8 - Extra context menu item: Download all links with IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm
    O8 - Extra context menu item: Download with IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm
    O8 - Extra context menu item: En&queue current page with BID - file://C:\Program Files (x86)\Bulk Image Downloader\iemenu\iebidqueue.htm
    O8 - Extra context menu item: Enqueue link tar&get with BID - file://C:\Program Files (x86)\Bulk Image Downloader\iemenu\iebidlinkqueue.htm
    O8 - Extra context menu item: Open &link target with BID - file://C:\Program Files (x86)\Bulk Image Downloader\iemenu\iebidlink.htm
    O8 - Extra context menu item: Open current page with BI&D - file://C:\Program Files (x86)\Bulk Image Downloader\iemenu\iebid.htm
    O8 - Extra context menu item: Open current page with BID Link Explorer - file://C:\Program Files (x86)\Bulk Image Downloader\iemenu\iebidlinkexplorer.htm
    O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files (x86)\Yahoo!\Common\Yinsthelper.dll
    O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
    O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
    O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
    O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
    O23 - Service: Adobe Genuine Software Integrity Service (AGSService) - Adobe Systems, Incorporated - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
    O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
    O23 - Service: AppleChargerSrv - Unknown owner - C:\Windows\system32\AppleChargerSrv.exe (file missing)
    O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
    O23 - Service: COMODO Internet Security Helper Service (CmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
    O23 - Service: COMODO Virtual Service Manager (cmdvirth) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
    O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
    O23 - Service: @oem15.inf,%Creative.CTHdaSvcDesc%;SB Recon3D Service (CtHdaSvc) - Creative Technology Ltd - C:\Windows\sysWow64\CtHdaSvc.exe
    O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
    O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
    O23 - Service: DU Meter Service (DUMeterSvc) - Hagel Technologies Ltd. - C:\Program Files (x86)\DU Meter\DUMeterSvc.exe
    O23 - Service: EasyTune Engine (EasyTuneEngineService) - GIGA-BYTE TECHNOLOGY CO., LTD. - C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\EasyTuneEngineService.exe
    O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
    O23 - Service: Energy Server Service WILLAMETTE (ESRV_SVC_WILLAMETTE) - Unknown owner - C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe
    O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
    O23 - Service: GIGABYTE Adjust (gadjservice) - Unknown owner - C:\Program Files (x86)\GIGABYTE\AppCenter\AdjustService.exe
    O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
    O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    O23 - Service: Ashampoo HDD Control 3 Service (HDDC3Service) - Unknown owner - C:\Program Files (x86)\Ashampoo\Ashampoo HDD Control 3 Corporate\HDDC3Service.exe
    O23 - Service: Hardware Monitor Record service (HwmRecordService) - GIGA-BYTE TECHNOLOGY CO., LTD. - C:\Program Files (x86)\GIGABYTE\SIV\HwmRecordService.exe
    O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
    O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
    O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
    O23 - Service: Intel(R) PROSet Monitoring Service - Unknown owner - C:\Windows\system32\IProsetMonitor.exe (file missing)
    O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: Killer Service V2 - Rivet Networks - C:\Program Files\Killer Networking\Network Manager\KillerService.exe
    O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
    O23 - Service: Logitech Gaming Registry Service (LogiRegistryService) - Logitech Inc. - C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
    O23 - Service: Malwarebytes Anti-Exploit Service (MbaeSvc) - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe
    O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
    O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
    O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: NitroPDFReaderDriverCreatorReadSpool5 (NitroReaderDriverReadSpool5) - Nitro PDF Software - C:\Program Files\Nitro\Reader 5\NitroPDFReaderDriverService5x64.exe
    O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
    O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
    O23 - Service: OcButtonService - GIGA-BYTE TECHNOLOGY CO., LTD. - C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\OcButtonService.exe
    O23 - Service: PowerPanel Personal Edition Service (ppped) - Cyber Power Systems, Inc. - C:\Program Files (x86)\CyberPower PowerPanel Personal Edition\ppped.exe
    O23 - Service: QSetSchedulerService - East-Tec - C:\Program Files (x86)\east-tec Eraser\etSCHService.exe
    O23 - Service: QSetUpdateService - East-Tec - C:\Program Files (x86)\east-tec Eraser\etUpdateService.exe
    O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: ScsiAccess - Unknown owner - C:\Program Files (x86)\Photodex\ProShow Gold\ScsiAccess.exe
    O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
    O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
    O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
    O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\Windows\System32\SensorDataService.exe (file missing)
    O23 - Service: ShadowExplorer Service (sesvc) - ShadowExplorer.com - About - C:\Program Files (x86)\ShadowExplorer\sesvc.exe
    O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
    O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
    O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe
    O23 - Service: Intel(R) System Usage Report Service SystemUsageReportSvc_WILLAMETTE (SystemUsageReportSvc_WILLAMETTE) - Unknown owner - C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe
    O23 - Service: Thunderbolt(TM) Service (ThunderboltService) - Intel Corporation - C:\Program Files (x86)\Intel\Thunderbolt Software\tbtsvc.exe
    O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\Windows\system32\TieringEngineService.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
    O23 - Service: USB Safely Remove Assistant (USBSafelyRemoveService) - Crystal Rich Ltd - C:\Program Files (x86)\USB Safely Remove\USBSRService.exe
    O23 - Service: User Energy Server Service WILLAMETTE (USER_ESRV_SVC_WILLAMETTE) - Unknown owner - C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe
    O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
    O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
    O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
    O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
    O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
    O23 - Service: Winstep Xtreme Service - Unknown owner - C:\Program.exe (file missing)
    O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
    O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
    O23 - Service: Intel(R) Extreme Tuning Utility Service (XTU3SERVICE) - Intel(R) Corporation - C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe

    --
    End of file - 16729 bytes
      My Computer


  2. Posts : 426
    Windows 10 64-bit Ver 1909, OS build 18363.535
    Thread Starter
       #12

    To add to that, here are the files it's claiming are "files missing" from the above log. Note that almost all of them are "unknown owner":

    hijack this - file missing - unknown owner (not really missing)
    --------------------------
    C:\Windows\System32\alg.exe
    C:\Windows\System32\AppleChargerSrv.exe
    C:\Windows\System32\lsass.exe (multiple listings)
    C:\Windows\System32\FXSSVC.exe
    C:\Windows\System32\IEEtwCollector.exe
    C:\Windows\System32\IProsetMonitor
    C:\Windows\System32\msdtc.exe
    C:\Windows\System32\nvvsvc.exe
    C:\Windows\System32\Locator.exe
    C:\Windows\System32\SensorDataService.exe
    C:\Windows\System32\snmptrap.exe
    C:\Windows\System32\spoolsv.exe
    C:\Windows\System32\sppsvc.exe
    C:\Windows\System32TieringEngineService.exe
    C:\Windows\System32\UI0Detect.exe
    C:\Windows\System32\vds.exe
    C:\Windows\System32\vssvc.exe
    C:\Windows\System32\wbengine.exe
    C:\Windows\System32\wbem\WmiAPSrv.exe
    C:\Windows\System32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
    C:\Windows\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe

    All of those files are actually right where they say they should be. They are not missing. Why does hijackthis report them missing?

    These files in the log are actually missing:

    Actually Missing:
    -----------------
    C:\Windows\Program Files (x86)\Windows Defender\NisSrv.exe
    C:\Windows\Program Files (x86)\Windows Defender\MsMpEng.exe
    C:\Windows\Program Files (x86)\Windows Media Player\wmpnetwk.exe
    SDWinLogon.dll missing from Spybot Program Files directory



    I checked each one and those 4 files are not in the listed directory.

    So I have the 4 missing codec files that autoruns reports, that are really missing, and then the above files from hijackthis. Not sure if any of this is even important. The few files that really are missing from the hijackthis report are from Windows Media Player and Windows Defender (and Spybot), but maybe those files aren't always supposed to be present? Also keep in mind that my PC is new and unused except for installing and uninstalling my software. I haven't run any registry cleaners or wiping utilities of any kind yet.

    EDIT: I was also just reading that it's common for hijackthis to report missing files that aren't really missing. A trusted advisor from malwarebytes posted this advice to somebody on their forums:

    "Those (file missing) notations are normal when HJT is ran on a Windows 7 system." I'm guessing that applies to Windows 10 also. And dslreports advises, "When you see (file missing) in other sections, it may really NOT be missing. You will see it in the 09's and the 023s especially. The only time you should fix the (file missing) in those sections is IF AND ONLY IF you see a *bad* file there.". So I'm not going to worry about those files because they aren't missing.

    The only files I'm concerned about are the 4 I reported in my first post:

    Autorun entry: VIDC.l420 Image Path: File not found: emYUV.dll
    Autorun entry: VIDC.YUY2 Image Path: File not found: emYUV.dll
    Autorun entry: VIDC.VP80 Image Path: File not found: vp8vfw.dll
    Autorun entry: vidc.XVID Image Path: File not found: xvidvfw.dll

    and the 4 I listed above under "actually missing".
    Last edited by rivre; 01 Oct 2016 at 02:59.
      My Computer


  3. Posts : 426
    Windows 10 64-bit Ver 1909, OS build 18363.535
    Thread Starter
       #13

    I'm still stuck here and would like to know what to do about these missing files. Any suggestions?
      My Computer


  4. Posts : 426
    Windows 10 64-bit Ver 1909, OS build 18363.535
    Thread Starter
       #14

    I fear this thread has gotten clogged up and now nobody is helping. Bottom line:

    Autoruns lists these 4 missing codec files:

    Autorun entry: VIDC.l420 Image Path: File not found: emYUV.dll
    Autorun entry: VIDC.YUY2 Image Path: File not found: emYUV.dll
    Autorun entry: VIDC.VP80 Image Path: File not found: vp8vfw.dll
    Autorun entry: vidc.XVID Image Path: File not found: xvidvfw.dll

    HIjackthis lists these missing files (Checked and indeed missing):

    C:\Windows\Program Files (x86)\Windows Defender\NisSrv.exe
    C:\Windows\Program Files (x86)\Windows Defender\MsMpEng.exe
    C:\Windows\Program Files (x86)\Windows Media Player\wmpnetwk.exe
    SDWinLogon.dll missing from Spybot Program Files directory


    I just want to know if these missing files can be easily replaced, or what software would replace them, or if these files are even needed.
      My Computer


  5. Posts : 4,201
    Windows 10 Pro x64 Latest RP
       #15

    rivre said:
    Thanks everyone. So how do I replace those files though? I don't know what software originally put them there, or are they part of Windows. Should I delete the entries from autoruns? I'm afraid to do that not knowing what will happen.



    When you say repair install, you mean put the Windows 10 USB thumb drive that I originally used to install Windows back in and do a repair install from there? Geez, I have a lot of software installed now and set up perfectly just the way I want. And the PC is literally brand new except for me installing all my software on it. I haven't even used it yet other than setting up software. I'm nervous to do a re-install and mess up who knows how many programs along the way. Is this safe to my existing software? The thought of re-installing scares me and seems rather drastic for a couple missing codecs. Won't that wipe away all my various Windows settings and configurations? How about registry keys for my registered software, like software that requires registering with license keys? Will those break? How about my screensavers and other assorted applications, like burning software, etc.? All my software is set up perfectly and it took weeks to get it to this point. I really don't like the idea of a repair install for a couple missing codec files - I'm just afraid too many other installed programs may suddenly break.

    I already ran sfc /scannow and there were no problems found. If they were part of Windows, wouldn't sfc /scannow have detected the missing files and replaced them?

    Any advice?
    Have a read at the options here ...

    Repair Install Windows 10 with an In-place Upgrade - Windows 10 Forums

    this should allow you to fully refresh your system, and add any actual missing Windows 10 files, without losing all the work you have put in installing and setting up your applications :)

    In addition have a look at Macrium Reflect Free to image your system before you start ...

    Macrium Reflect - Backup Restore - Windows 10 Forums
      My Computers


  6. Posts : 426
    Windows 10 64-bit Ver 1909, OS build 18363.535
    Thread Starter
       #16

    I know how to do a repair installation. The whole point is this seems a risky thing to do for a few missing codec files and wmp and defender files. I have not yet had anybody even confirm if these files are necessary or even belong on the system normally. Maybe they were put there by some media software that I have removed?

    I do not want to do a repair install and risk breaking some of my installed software (registry keys. etc.) only to discover that these files are not installed with Windows anyways. That would be ridiculous to do a repair installation if these files aren't even going to get re-installed, because this PC is brand new and working fine other than a few missing file entries.

    Are these files I listed on your PC?

    C:\Windows\Program Files (x86)\Windows Defender\NisSrv.exe
    C:\Windows\Program Files (x86)\Windows Defender\MsMpEng.exe
    C:\Windows\Program Files (x86)\Windows Media Player\wmpnetwk.exe

    How about the 4 codec files? Why would I do a repair install if these files aren't even going to be installed as part of the repair? How do I know they will? As I stated earlier, I already did a sfc /scannow and it reported no problems. Can't I just re-install windows media player and/or defender if I want to replace those files? A repair install sounds like overkill for a PC that works fine. I just went through a major Windows update yesterday that took an hour.
      My Computer


  7. Posts : 4,201
    Windows 10 Pro x64 Latest RP
       #17

    Windows Media player is available ...

    https://support.microsoft.com/en-gb/...s-media-player

    But have not found any downloads from Microsoft ( they assume your system will include it ), there are some download locations offering the full installer such as softronic etc but i do not recommend these sites due to the addition of other software, you may be happy to try these oof course

    This page ...

    Windows 10 – Windows Defender - Microsoft

    includes a checker for defender which could be of use to you

    I have checked the old control panel and the Add Remove windows Features sub menu and this does not include Defender so the old trick of disabling and then re-enabling will not work, (it may help with the Media Player as this is still included) type control panel when the start menu is present to get to the old Control Panel
      My Computers


  8. Posts : 4,201
    Windows 10 Pro x64 Latest RP
       #18

    I add and remove software regularly and get similar errors in autoruns, I've always just removed the entry, and I've never had any issues ( I leave them for a few weeks to ensure no issues arise before removing them )
      My Computers


  9. Posts : 4,201
    Windows 10 Pro x64 Latest RP
       #19

    Forgot to say, the files are not on my system
      My Computers


  10. Posts : 426
    Windows 10 64-bit Ver 1909, OS build 18363.535
    Thread Starter
       #20

    Thanks for these tips, Barman58. This is what I need - a specific fix for a few missing files, not a sledgehammer approach.

    I went into add/remove programs, disabled Windows Media Player, and rebooted. It uninstalled the Windows Media Player folder from Program Files (x86). I then re-enabled Windows Media Player the same way, then rebooted, and it re-installed Windows Media Player in Program Files (x86). The file wmpnetwk.exe is still not in there. So I'm guessing whatever file this is, it isn't needed? Does anyone have that file in their Windows Media Player folder?

    As far as Defender, I clicked the link you posted, and all it does it tell me I'm already protected if I have Windows 10. The site says to uninstall other virus programs and Windows Defender will automatically be enabled. I checked my settings and Windows Defender is off - it says real-time protection is "handled by another AV program". I have Avast free installed because I like the interface and I'm used to it. I guess if a 3rd party AV is installed and running, Defender is automatically turned off. I didn't know that.

    So then should I just ignore the 2 missing Defender files? Currently I'm not using Defender anyways so I guess it's unimportant but I'd still like to know what happened to them or if they are normally there.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 10:22.
Find Us




Windows 10 Forums