It started a few months ago with me being locked out of all of the security permissions of my files. I went through and changed them to where I have admin. privlages. Then I shut down the computer one day and didn't turn it on again for about 3 or 4 weeks because I was using my laptop. Eventually I turned on the PC again and it booted up no problem but it wouldn't shut up for a long time.... i.e. the hard drive stayed busy for about 5 min after turning on. When I went to shut it down it had the icon notifying me that updates were going to be installed before shutting down. When I booted up the PC the next day it informed me that windows was configuring the updates and not to turn off the computer. 1 thousand 3 hundred and something updates.... WOW!!! O.K. it updates and it boots up just fine until the next day.... Computer turns on .... loads windows.... Welcome screen.... (Everything is going fine....) Bam! No Desktop!!! Just black screen with arrow. Only way to start programs is through Task Manager. I start searching the internet for answers as to why I am getting the Black Screen and read that it could be recently added updates so I delete all of the updates that were added the day before. That didn't work so the next idea I read was that the video display was incorrectly set. That didn't solve it. I shut down the computer and go to bed. Wake up in the morning and I have lost ability to go online. Computer is not reading the modem at all. So I look around and find that all services have been disabled on the computer. I go through and start all services one by one and now I can get online again. I noticed that I can not change permissions on files now because of "TrustedInstaller" has total control over the security. Looked online and found that I may be starting to see enemy's where there are no enemy's.... meaning- I guess TrustedInstaller is suppose to be there and has been there but I just never paid attention to it before???? Right???? I can boot into safe mode but I still have black screen instead of desktop... I have run Malwarebytes Anti-Malware on full system scan and It found nothing. Ran Combo fix and after that the desktop backround came back but no icons or start menu or task bar but when computer restarted the backround disappeared again. Ran Malwarebytes Anti-Malware again with accepting the trial full version and it found 6 objects to get rid of. That didn't help! I am running Windows 7 Ultimate Latest browser of Chrome I have installed Firefox but don't use it unless I need to because of conflicts with websites I have Iexplorer and Iexplorer 64-bit Yes we watch alot of **** online ovguide.com Download alot of movies from letmewatchthis.ch Had Microsoft Security Essentials installed but have uninstalled it. Have Malwarebytes Anti-Malware installed and regularly update and scan When I download programs I always do custom installs so I can uncheck the added toolbars they want to install. Probably went overboard on the info but I seriously need help with this PLEASE!!!!! One more thing.... I use to have Java 4 installed but I uninstalled all java then restarted the computer and did a clean install of the latest Java 7. Now when I try and play a game on pogo or yahoo I get the stupid message that I don't have java and I need to reinstall. That could be because something had gotten turned off and I didn't notice.... I don't know... Please Help!!!
I posted this on another forum and someone made the following suggestions:
Let us work together to resolve this issue.
Heres what you can try:
Method 1: If you are able to boot to a stable desktop, using the Task Manager, then perform Clean Boot.
To help troubleshoot error messages and other issues, you can start Windows by using a minimal set of drivers and startup programs. This kind of startup is known as a "clean boot." A clean boot helps eliminate software conflicts. Here is the link for your reference to perform clean boot.
http://support.microsoft.com/kb/929135
Note: Please go through the section: How to reset the computer to start as usual after troubleshooting with clean boot of the KB article to boot the computer in normal startup after fixing the issue.
Method 2: Boot the computer into the Last Known Good Configuration.
Last Known Good Configuration is a Windows startup option that uses the most recent system settings that worked correctly.
Using Last Known Good Configuration
http://windows.microsoft.com/en-us/windows7/using-last-known-good-configuration
Important: System Restore will not revert any of the non-system files like documents, email, music, etc. to a previous state. These types files are completely unaffected by System Restore. If your intention with this tool was to recover a deleted non-system file, try using a file recovery program instead of System Restore.
You can refer to this link to learn how to reset security permissions:
http://answers.microsoft.com/en-us/windows/forum/windows_7-security/how-to-restore-default-security-permissions/ab58f918-da72-42c0-ba71-161d52b73d46
Please get back to us with the status of the issue.
This is the response to those suggestions:
Method 1: No Luck!
I tried shutting off half of the services, then tried the other half and then tried all. There were a couple of things that I did notice but I'm not sure if it means anything.
1. There were two services names both of them listed with Manufacturer Google Inc.
Google Update Service (gupdate)
Google Update Service (gupdatem)
2. Under the General tab there is the normal startup, diagnostic, and the selective startup. No matter what I did it would not allow me to do a diagnostic. As soon as I hit apply one of two things would happen: Program not responding or the selection dot would move back to selective startup.
Method 2: Last Known Good Configuration didn't work either.... I had already tried that but did it
again anyways.
Method 3: System restore.....
I bought this PC from a friend and it has never been able to successfully do a system restore sense I have owned it. The system makes restore points but says that, "System restore failed... and nothing has been changed."
I followed the link you gave me for resetting security permissions but It warned me that the article was not for the operating system that I am running so I tried to download the Microsoft Fix It program that it suggested and it downloaded .... lol... ( I have to laugh at this) but when I tried to run it I received this message:
We're sorry, you do not have the correct permission to run this program
The program dos not support the "run as" feature. To
resolve this problem, log onto Windows as an Admin.
or as a User who has Admin. level Credentials.
Thought I was logged on as Admin. but I went ahead and switched users but I am the only user so I
restarted the computer and tried again and got the same message. Tried to change permissions on it and was denied. Looked into the Credentials part of it and didn't change anything, just looked because I am unfamiliar with it. Here is what it said though...
Windows Credentials
No Windows Credentials
Certificate-Based Credentials
No Certificates
Generic Credentials
virtualapp/didlogical Modified: Today
Internet or Network address: virtualapp/didlogical
User name: 02ybpqqqlkzo
Password: *******
Persistence: Local Machine
So no change yet.... Sorry it has taken me so long to get back to you on this. I appreciate any help you or anyone can give me on this.
Now it has been a week and I haven't had any other suggestions
I have run trendmicro HouseCall, I have tried Malwarebytes Anti-Malware again, ComboFix again, the computer won't let me run a lot of things cause it says that I don't have permission even though I am signed in as Admin.
Here is my hijackthis scan log:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:13:34 PM, on 5/31/2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16576)
Boot mode: Safe mode with network support
Running processes:
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Users\BeenHadd\Desktop\2013\HijackThis.exe
C:\Windows\SysWOW64\DllHost.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrec ordplugin.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: FlashCatchBHO Class - {88618A96-6D8A-42E7-B932-9073D5B2080F} - C:\Program Files (x86)\FlashCatch\flashcatch.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Qwest 11n Wireless WPS Tool] C:\Program Files (x86)\Qwest 11n Wireless WPS Tool\WpsCenterV.exe
O4 - HKCU\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
O4 - HKCU\..\RunOnce: [Application Restart #0] C:\Program Files\Internet Explorer\iexplore.exe -restart /WERRESTART
O4 - HKCU\..\RunOnce: [Application Restart #1] C:\Program Files\Internet Explorer\iexplore.exe -restart /WERRESTART
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Application Layer Gateway Service (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Auto Install Eject CD Service (AutoInstallEJCD) - Unknown owner - C:\Users\BeenHadd\AppData\Local\Temp\RarSFX0\AutoInstallEJCDSVC.exe (file missing)
O23 - Service: Encrypting File System (EFS) (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: CNG Key Isolation (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Process Monitor (LVPrcS64) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Distributed Transaction Coordinator (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Netlogon - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Protected Storage (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Remote Procedure Call (RPC) Locator (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Security Accounts Manager (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SNMP Trap (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Print Spooler (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: Software Protection (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Interactive Services Detection (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Credential Manager (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Virtual Disk (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: Volume Shadow Copy (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: Windows Activation Technologies Service (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: Block Level Backup Engine Service (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: WMI Performance Adapter (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: Windows Media Player Network Sharing Service (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 7362 bytes
Please someone help me it is getting progressively worse everyday.
I posted this on another forum and someone made the following suggestions:
Let us work together to resolve this issue.
Heres what you can try:
Method 1: If you are able to boot to a stable desktop, using the Task Manager, then perform Clean Boot.
To help troubleshoot error messages and other issues, you can start Windows by using a minimal set of drivers and startup programs. This kind of startup is known as a "clean boot." A clean boot helps eliminate software conflicts. Here is the link for your reference to perform clean boot.
http://support.microsoft.com/kb/929135
Note: Please go through the section: How to reset the computer to start as usual after troubleshooting with clean boot of the KB article to boot the computer in normal startup after fixing the issue.
Method 2: Boot the computer into the Last Known Good Configuration.
Last Known Good Configuration is a Windows startup option that uses the most recent system settings that worked correctly.
Using Last Known Good Configuration
http://windows.microsoft.com/en-us/windows7/using-last-known-good-configuration
Important: System Restore will not revert any of the non-system files like documents, email, music, etc. to a previous state. These types files are completely unaffected by System Restore. If your intention with this tool was to recover a deleted non-system file, try using a file recovery program instead of System Restore.
You can refer to this link to learn how to reset security permissions:
http://answers.microsoft.com/en-us/windows/forum/windows_7-security/how-to-restore-default-security-permissions/ab58f918-da72-42c0-ba71-161d52b73d46
Please get back to us with the status of the issue.
This is the response to those suggestions:
Method 1: No Luck!
I tried shutting off half of the services, then tried the other half and then tried all. There were a couple of things that I did notice but I'm not sure if it means anything.
1. There were two services names both of them listed with Manufacturer Google Inc.
Google Update Service (gupdate)
Google Update Service (gupdatem)
2. Under the General tab there is the normal startup, diagnostic, and the selective startup. No matter what I did it would not allow me to do a diagnostic. As soon as I hit apply one of two things would happen: Program not responding or the selection dot would move back to selective startup.
Method 2: Last Known Good Configuration didn't work either.... I had already tried that but did it
again anyways.
Method 3: System restore.....
I bought this PC from a friend and it has never been able to successfully do a system restore sense I have owned it. The system makes restore points but says that, "System restore failed... and nothing has been changed."
I followed the link you gave me for resetting security permissions but It warned me that the article was not for the operating system that I am running so I tried to download the Microsoft Fix It program that it suggested and it downloaded .... lol... ( I have to laugh at this) but when I tried to run it I received this message:
We're sorry, you do not have the correct permission to run this program
The program dos not support the "run as" feature. To
resolve this problem, log onto Windows as an Admin.
or as a User who has Admin. level Credentials.
Thought I was logged on as Admin. but I went ahead and switched users but I am the only user so I
restarted the computer and tried again and got the same message. Tried to change permissions on it and was denied. Looked into the Credentials part of it and didn't change anything, just looked because I am unfamiliar with it. Here is what it said though...
Windows Credentials
No Windows Credentials
Certificate-Based Credentials
No Certificates
Generic Credentials
virtualapp/didlogical Modified: Today
Internet or Network address: virtualapp/didlogical
User name: 02ybpqqqlkzo
Password: *******
Persistence: Local Machine
So no change yet.... Sorry it has taken me so long to get back to you on this. I appreciate any help you or anyone can give me on this.
Now it has been a week and I haven't had any other suggestions
I have run trendmicro HouseCall, I have tried Malwarebytes Anti-Malware again, ComboFix again, the computer won't let me run a lot of things cause it says that I don't have permission even though I am signed in as Admin.
Here is my hijackthis scan log:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:13:34 PM, on 5/31/2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16576)
Boot mode: Safe mode with network support
Running processes:
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Users\BeenHadd\Desktop\2013\HijackThis.exe
C:\Windows\SysWOW64\DllHost.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrec ordplugin.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: FlashCatchBHO Class - {88618A96-6D8A-42E7-B932-9073D5B2080F} - C:\Program Files (x86)\FlashCatch\flashcatch.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Qwest 11n Wireless WPS Tool] C:\Program Files (x86)\Qwest 11n Wireless WPS Tool\WpsCenterV.exe
O4 - HKCU\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
O4 - HKCU\..\RunOnce: [Application Restart #0] C:\Program Files\Internet Explorer\iexplore.exe -restart /WERRESTART
O4 - HKCU\..\RunOnce: [Application Restart #1] C:\Program Files\Internet Explorer\iexplore.exe -restart /WERRESTART
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Application Layer Gateway Service (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Auto Install Eject CD Service (AutoInstallEJCD) - Unknown owner - C:\Users\BeenHadd\AppData\Local\Temp\RarSFX0\AutoInstallEJCDSVC.exe (file missing)
O23 - Service: Encrypting File System (EFS) (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: CNG Key Isolation (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Process Monitor (LVPrcS64) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Distributed Transaction Coordinator (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Netlogon - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Protected Storage (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Remote Procedure Call (RPC) Locator (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Security Accounts Manager (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SNMP Trap (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Print Spooler (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: Software Protection (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Interactive Services Detection (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Credential Manager (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Virtual Disk (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: Volume Shadow Copy (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: Windows Activation Technologies Service (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: Block Level Backup Engine Service (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: WMI Performance Adapter (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: Windows Media Player Network Sharing Service (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 7362 bytes
Please someone help me it is getting progressively worse everyday.