Windows 7 New Tabs Babylon search .

[Tercr6]

I had some company over easter weekend and one guest installed this babylon toolbar,etc. It appears I have accomplished removing most of it all except when I open new tabs , I have babylon search.

I ran my protections and scans and removed what trogens it found.

I ran uninstall in add/remove,revo didn't show it.

I reset my search provider and removed Babylon.

I reset my homepage but when I click open additional tabs, I have babylon seach.

I searched the web and it appears others have the same issues that I have tried their solutions to no avail.

Anyone familiar with this beast ?

This is what MalwareBytes found.

Malwarebytes Anti-Malware 1.60.1.1000
www.malwarebytes.org

Database version: v2012.04.08.06

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 8.0.7601.17514
General :: GENERAL-PC [administrator]

4/8/2012 4:28:43 PM
mbam-log-2012-04-08 (16-28-43).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 174203
Time elapsed: 6 minute(s), 10 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 5
HKCR\CLSID\{CA4520F3-AE13-4FB1-A513-58E23991C86D} (Trojan.Downloader) -> Quarantined and deleted successfully.
HKCR\gencrawler_gc.GenCrawler (Trojan.Downloader) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\Browser Helper Objects\{CA4520F3-AE13-4FB1-A513-58E23991C86D} (Trojan.Downloader) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext \Settings\{CA4520F3-AE13-4FB1-A513-58E23991C86D} (Trojan.Downloader) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext \Stats\{CA4520F3-AE13-4FB1-A513-58E23991C86D} (Trojan.Downloader) -> Quarantined and deleted successfully.

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 2
C:\Users\General\AppData\Roaming\Media Finder\Extensions\gencrawler_gc.dll (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Users\General\AppData\Local\Temp\is-FS5BJ.tmp\MF.exe (Adware.Agent) -> Quarantined and deleted successfully.

(end)

[Chari]

I removed Babylon tool bar with Revo uninstaller - Advanced option and then I had to reset the homepage in IE and Firefox.

[MMFELL]

Run the scan again BUT do a full scan not a quick one.

[Sunny]

You might also run a scan with Spybot. Often Spybot will find items not found by Malwarebytes and vise-versa.
Don' install the tea-timer feature. Just the basic program. Update it and run a full scan.

[Tercr6]

I have another issue now may or may not be related.

I have no sound in windows Media Player 12 for Win 7 playing a DVD.

Sound is fine otherwise and DVDs do play in VLC.

Any thoughts on that ?

I will update and run the scans.

[billm65]

I have no sound in windows Media Player 12 for Win 7 playing a DVD.


Did you check the sound level in WMP? You have to open it and check at the bottom.

[Tercr6]

Originally Posted by billm65

I have no sound in windows Media Player 12 for Win 7 playing a DVD.


Did you check the sound level in WMP? You have to open it and check at the bottom.

Yes ,it's 1/2 way.

[MMFELL]

Lets fix one problem at a time. What about the MBAM scan results.

[Tercr6]

Originally Posted by MMFELL

Lets fix one problem at a time. What about the MBAM scan results.

Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org

Database version: v2012.04.11.04

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 8.0.7601.17514
General :: GENERAL-PC [administrator]

4/11/2012 12:18:24 PM
mbam-log-2012-04-11 (12-18-24).txt

Scan type: Full scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 237998
Time elapsed: 36 minute(s), 20 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

[Tercr6]

Originally Posted by Sunny

You might also run a scan with Spybot. Often Spybot will find items not found by Malwarebytes and vise-versa.
Don' install the tea-timer feature. Just the basic program. Update it and run a full scan.

Thanks I use to use this program years ago and never gave it a thought .

It did find them and on a second scan turned up clean.

See attachment for forst scan.

I only found the way to print in .pdf It has to be zoomed ,at least in Nitro Reader.

There is still no sound playing Media and DVDs in Media Player.

[MMFELL]

The attachment shows nothing done - did you tell spybot to fix the problem?

Also redo the MBAM scan but P2P enabled.

[Tercr6]

Originally Posted by MMFELL

The attachment shows nothing done - did you tell spybot to fix the problem?

Also redo the MBAM scan but P2P enabled.

Yes, I forgot to add that .

I did state that the second scan turned up clean .

I also ran Stinger ,and no issues were found , and ran MSE again.

[Tercr6]

Originally Posted by MMFELL

The attachment shows nothing done - did you tell spybot to fix the problem?

Also redo the MBAM scan but P2P enabled.

MWB's results.

Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org

Database version: v2012.04.12.05

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 8.0.7601.17514
General :: GENERAL-PC [administrator]

4/12/2012 12:01:56 PM
mbam-log-2012-04-12 (12-01-56).txt

Scan type: Full scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM | P2P
Scan options disabled:
Objects scanned: 237399
Time elapsed: 35 minute(s), 9 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

[Crash Override]

Now run a ddsscan by sUBs. Get it from http://www.bleepingcomputer.com/download/anti-virus/dds

Copy and Paste BOTH logs.

[Tercr6]

Originally Posted by Crash Override

Now run a ddsscan by sUBs. Get it from http://www.bleepingcomputer.com/download/anti-virus/dds

Copy and Paste BOTH logs.

Hope this is both logs , only one window popped up.

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.7601.17514 BrowserJavaVersion: 1.6.0_31
Run by General at 12:46:26 on 2012-04-12
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.1534.620 [GMT -4:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\rundll32.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\Nitro PDF\Reader\NitroPDFReaderDriverService2.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\explorer.exe
C:\Windows\system32\Macromed\Flash\FlashUtil32_11_ 2_202_228_ActiveX.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\conhost.exe
.
============== Pseudo HJT Report ===============
.
uURLSearchHooks: H - No File
uURLSearchHooks: H - No File
uURLSearchHooks: H - No File
BHO: HelperObject Class: {00c6482d-c502-44c8-8409-fce54ad9c208} - c:\program files\techsmith\snagit 7\SnagItBHO.dll
BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.7.7227.1100\s wg.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
TB: SnagIt: {8ff5e183-abde-46eb-b09e-d2aab95cabe3} - c:\program files\techsmith\snagit 7\SnagItIEAddin.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
TB: {8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} - No File
TB: {1392B8D2-5C05-419F-A8F6-B9F15A596612} - No File
TB: {2B171655-A69C-5C18-B693-6CB5DC269D41} - No File
TB: {71576546-354D-41C9-AAE8-31F2EC22BF0D} - No File
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [MSC] "c:\program files\microsoft security client\msseces.exe" -hide -runkey
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
uPolicies-system: DisableChangePassword = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
mPolicies-system: HideFastUserSwitching = 0 (0x0)
IE: &ieSpell Options - c:\program files\iespell\iespell.dll/SPELLOPTION.HTM
IE: Check &Spelling - c:\program files\iespell\iespell.dll/SPELLCHECK.HTM
IE: Download with &Media Finder - c:\program files\media finder\hook.html
IE: FVDToolbar Add Page - c:\program files\fvd suite\addons\ie\FVDToolbar.dll/IECONTEXT.DLL.HTM
IE: Lookup on Merriam Webster - file://c:\program files\iespell\Merriam Webster.HTM
IE: Lookup on Wikipedia - file://c:\program files\iespell\wikipedia.HTM
IE: {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - res://c:\program files\iespell\iespell.dll/SPELLCHECK.HTM
IE: {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - res://c:\program files\iespell\iespell.dll/SPELLOPTION.HTM
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {816BE035-1450-40D0-8A3B-BA7825A83A77} - hxxp://support.lenovo.com/Resources/Lenovo/AutoDetect/Lenovo_AutoDetect2.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
TCP: Interfaces\{CAD76B19-E5D5-4D25-9351-EECC9BDF571E} : DhcpNameServer = 192.168.254.254 192.168.254.254
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
Hosts: 127.0.0.1 www.spywareinfo.com
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\general\appdata\roaming\mozilla\firefox\p rofiles\cijpx7fp.default\
FF - prefs.js: network.proxy.type - 0
FF - plugin: c:\program files\google\update\1.3.21.111\npGoogleUpdate3.dll
FF - plugin: c:\program files\java\jre6\bin\plugin2\npdeployJava1.dll
FF - plugin: c:\program files\java\jre6\bin\plugin2\npjp2.dll
FF - plugin: c:\program files\microsoft silverlight\4.1.10111.0\npctrlui.dll
FF - plugin: c:\program files\nitro pdf\reader\npdf.dll
FF - plugin: c:\program files\nitro pdf\reader\npnitromozilla.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_2_20 2_228.dll
.
============= SERVICES / DRIVERS ===============
.
R1 lenovo.smi;Lenovo System Interface Driver;c:\windows\system32\drivers\smiif32.sys [2008-5-12 13480]
R1 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2010-10-25 165648]
R1 MpKsl8bffb439;MpKsl8bffb439;c:\programdata\microso ft\microsoft antimalware\definition updates\{00c93ede-5267-4c0e-accb-344c38d11459}\MpKsl8bffb439.sys [2012-4-12 29904]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2011-7-22 12880]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2011-7-12 67664]
R2 !SASCORE;SAS Core Service;c:\program files\superantispyware\SASCore.exe [2011-8-11 116608]
R2 NitroReaderDriverReadSpool2;NitroPDFReaderDriverCr eatorReadSpool2;c:\program files\nitro pdf\reader\NitroPDFReaderDriverService2.exe [2011-12-20 196904]
R3 appliandMP;appliandMP;c:\windows\system32\drivers\ appliand.sys [2011-8-10 28256]
R3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\drivers\MpNWMon.sys [2010-10-25 43392]
R3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\drivers\netw5v32.sys [2009-6-10 4231168]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\drivers\NisDrvWFP.sys [2011-4-27 65024]
R3 NisSrv;Microsoft Network Inspection;c:\program files\microsoft security client\antimalware\NisSrv.exe [2011-4-27 208944]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\ v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2011-5-1 136176]
S2 RoxLiveShare10;LiveShare P2P Server 10;"c:\program files\common files\roxio shared\10.0\sharedcom\roxliveshare10.exe" --> c:\program files\common files\roxio shared\10.0\sharedcom\RoxLiveShare10.exe [?]
S2 SBSDWSCService;SBSD Security Center Service;c:\program files\spybot - search & destroy\SDWinSec.exe [2012-4-12 1153368]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\macromed\flash\FlashPl ayerUpdateService.exe [2012-3-28 253600]
S3 appliand;Applian Network Service;c:\windows\system32\drivers\appliand.sys [2011-8-10 28256]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
S3 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2011-5-1 136176]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominipor t.sys [2011-5-2 15872]
S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUs bFlt.sys [2011-5-2 52224]
SUnknown mfevtp;mfevtp; [x]
.
=============== Created Last 30 ================
.
2012-04-12 15:14:19 14664 ----a-w- c:\windows\stinger.sys
2012-04-12 15:13:50 159608 ----a-w- c:\windows\system32\mfevtps.exe.0a99.deleteme
2012-04-12 15:13:29 -------- d-----w- c:\program files\stinger
2012-04-12 14:13:20 56200 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\{00c93ede-5267-4c0e-accb-344c38d11459}\offreg.dll
2012-04-12 14:13:19 29904 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\{00c93ede-5267-4c0e-accb-344c38d11459}\MpKsl8bffb439.sys
2012-04-12 14:12:10 6582328 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\{00c93ede-5267-4c0e-accb-344c38d11459}\mpengine.dll
2012-04-12 12:33:38 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2012-04-12 12:33:38 -------- d-----w- c:\program files\Spybot - Search & Destroy
2012-04-11 17:47:18 -------- d-----w- c:\program files\K-Lite Codec Pack
2012-04-11 14:28:36 -------- d-----w- c:\users\general\appdata\local\ElevatedDiagnostics
2012-04-10 17:35:41 5120 ----a-w- c:\windows\system32\wmi.dll
2012-04-10 17:35:41 19824 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2012-04-10 17:35:40 172544 ----a-w- c:\windows\system32\wintrust.dll
2012-04-10 17:35:40 159232 ----a-w- c:\windows\system32\imagehlp.dll
2012-04-08 03:10:19 -------- d-----w- c:\users\general\appdata\roaming\Media Finder
2012-03-29 00:37:04 70304 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-03-29 00:37:04 418464 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-03-28 22:37:18 -------- d-----w- c:\programdata\AVAST Software
2012-03-28 19:44:26 -------- d-----w- c:\program files\Windows Media Components
2012-03-28 19:33:59 84616 ----a-w- c:\windows\StkUnist.exe
2012-03-28 19:33:59 25608 ----a-w- c:\windows\system32\drivers\StkCSam.sys
2012-03-17 11:52:49 -------- d-----w- c:\users\general\appdata\local\Brice_Lambson
2012-03-17 11:52:11 -------- d-----w- c:\program files\Image Resizer for Windows
2012-03-17 11:52:09 -------- d-----w- c:\programdata\Package Cache
2012-03-14 12:11:22 2343424 ----a-w- c:\windows\system32\win32k.sys
2012-03-14 12:11:21 8192 ----a-w- c:\windows\system32\rdrmemptylst.exe
2012-03-14 12:11:21 58880 ----a-w- c:\windows\system32\rdpwsx.dll
2012-03-14 12:11:21 129536 ----a-w- c:\windows\system32\rdpcorekmts.dll
2012-03-14 12:11:19 1077248 ----a-w- c:\windows\system32\DWrite.dll
2012-03-14 12:11:16 919040 ----a-w- c:\windows\system32\rdpcorets.dll
2012-03-14 12:11:16 826880 ----a-w- c:\windows\system32\rdpcore.dll
2012-03-14 12:11:16 24576 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2012-03-14 12:11:16 183808 ----a-w- c:\windows\system32\drivers\rdpwd.sys
.
==================== Find3M ====================
.
2012-04-04 19:56:40 22344 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-04-01 22:48:44 29 ----a-w- c:\windows\system32\TempWmicBatchFile.bat
2012-02-28 05:38:52 981504 ----a-w- c:\windows\system32\wininet.dll
2012-02-28 03:52:27 1638912 ----a-w- c:\windows\system32\mshtml.tlb
2012-02-15 13:42:55 472808 ----a-w- c:\windows\system32\deployJava1.dll
2012-01-31 12:44:05 237072 ------w- c:\windows\system32\MpSigStub.exe
.
============= FINISH: 12:47:34.14 ===============

[Tercr6]

http://www.sevenforums.com/sound-aud...tml#post454033

See # 2

Go To Control Panel > Hardware and Sound > Sound > Right click on Speakers > Properties > Advanced > Uncheck : "Allow applications to take exclusive control of this device".