I recently downloaded and ran Malwarebytes and it found nothing, as has every other anti-malware program I have. Still, I am seeing strange things on the PC.

Event viewer shows that 4 files have failed the hash check
dllhost.exe
tcpip.sys
wpshelper.sys
wpsdrvnt.sys

I also had Spybot and Adaware installed yet the Vista security center did not recognize Spybot as being installed but did see Adaware. I uninstalled Spybot and reinstalled it but the run-in-paranoid option is no longer offered. Only SEP and Adaware are recognized as being installed by the Vista Security Center.


Vista Security Center reports that Symantec Endpoint Protection is out of date. Event Viewer shows that the live update for SEP has failed, even though SEP reports a successful update.

MS Office 2007 Enterprise is installed and activated yet, everytime I launch an app, a popup asks to activate the program. If I go to the program and check, it shows that it is activated and if you try to launch activation from within the program, it fails.

Does this sound like an infection? How can I verify the validity of the files that failed hash?

I'm not familiar with Vista, but it sounds suspicious. Note that Spybot warns of conflict with Ad-Aware, although I haven't had any problems on XP. There was also a conflict with Symantec Endpoint and Ad-Aware. However, I don't think those conflicts would explain the hash check or security center problems.

Read the instructions in my signature about posting a log in the HijackThis forum. Copy/paste or link to this thread to describe the problem, and somebody there can help you with diagnosis and malware removal.