Jump to content

Reboot gives iRQL_NOT_LESS_OR_EQUAL

Jai

By Jai
in Resolved Malware Removal Logs

 Share

Recommended Posts

Jai

Jai

Posted
Posted

Hi,

 

On reboot of my Windows 7 Enterprise machine, after entering my login information, I get the Blue dreaded screen from Microsoft stating IRQL_NOT_LESS_OR_EQUAL etc.

 

I attempted to solve the problem unsuccessfully:

Could login in Safe Mode with Networking mode.

Ran Eset Online Scanner.  It quarantined 5 files.

But reboot still gave the Blue screen.

Next, restored to the 'Automatic Restore Point' as of 12/20/13 (2 days back).

But reboot gave same the Blue Screen again.

 

Here are the outputs of dds.scr.  Please help and provide next steps to resolve this issue.

 

Thanks in advance.

 

dds.txt:

 

DDS (Ver_2012-11-20.01) - NTFS_x86 NETWORK
Internet Explorer: 8.0.7601.17514  BrowserJavaVersion: 1.6.0_21
Run by snayak at 17:30:23 on 2013-12-22
Microsoft Windows 7 Enterprise   6.1.7601.1.1252.1.1033.18.3241.2754 [GMT -6:00]
.
AV: McAfee VirusScan Enterprise *Enabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: McAfee VirusScan Enterprise Antispyware Module *Enabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
.
============== Running Processes ================
.
C:\windows\system32\wininit.exe
C:\windows\system32\lsm.exe
C:\windows\system32\mfevtps.exe
C:\windows\Explorer.EXE
C:\windows\system32\ctfmon.exe
C:\windows\system32\ntvdm.exe
C:\windows\system32\conhost.exe
C:\windows\system32\dllhost.exe
C:\windows\system32\conhost.exe
C:\windows\system32\wbem\wmiprvse.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\windows\System32\svchost.exe -k NetworkService
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
.
============== Pseudo HJT Report ===============
.

uSearch Bar = Preserve
dURLSearchHooks: {B922D405-6D13-4A2B-AE89-08A030DA4402} - <orphaned>
BHO: Lync Browser Helper: {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - c:\program files\microsoft lync\OCHelper.dll
BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - c:\program files\microsoft office\office14\GROOVEEX.DLL
BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre6\bin\ssv.dll
BHO: scriptproxy: {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\program files\common files\mcafee\systemcore\ScriptSn.20131120151641.dll
BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
BHO: Google Toolbar Notifier BHO: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - c:\program files\google\googletoolbarnotifier\5.7.9012.1008\swg.dll
BHO: McAfee SiteAdvisor BHO: {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\program files\mcafee\siteadvisor enterprise\McIEPlg.dll
BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - c:\program files\microsoft office\office14\URLREDIR.DLL
BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre6\bin\jp2ssv.dll
TB: Google Toolbar: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
TB: McAfee SiteAdvisor Toolbar: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\program files\mcafee\siteadvisor enterprise\McIEPlg.dll
TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
uRun: [OfficeSyncProcess] "c:\program files\microsoft office\office14\MSOSYNC.EXE"
mRun: [Apoint] c:\program files\delltpad\Apoint.exe
mRun: [igfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [FreeFallProtection] c:\program files\stmicroelectronics\accelerometerp11\FF_Protection.exe
mRun: [intelPROSet] "c:\program files\common files\intel\wirelesscommon\iFrmewrk.exe" /tf Intel PROSet/Wireless
mRun: [Dell Webcam Central] "c:\program files\dell webcam\dell webcam central\WebcamDell2.exe" /mode2
mRun: [RemoteControl9] "c:\program files\cyberlink\powerdvd9\PDVD9Serv.exe"
mRun: [PDVD9LanguageShortcut] "c:\program files\cyberlink\powerdvd9\language\Language.exe"
mRun: [RoxWatchTray] "c:\program files\common files\roxio shared\oem\12.0\sharedcom\RoxWatchTray12OEM.exe"
mRun: [Desktop Disc Tool] "c:\program files\roxio\oem\roxio burn\RoxioBurnLauncher.exe"
mRun: [AeXAgentLogon] c:\program files\altiris\altiris agent\AeXAgentActivate.exe /logon
mRun: [shStatEXE] "c:\program files\mcafee\virusscan enterprise\SHSTAT.EXE" /STANDALONE
mRun: [Communicator] "c:\program files\microsoft lync\communicator.exe" /fromrunkey
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [McAfeeUpdaterUI] "c:\program files\mcafee\common framework\udaterui.exe" /StartedFromRunKey
mRun: [bCSSync] "c:\program files\microsoft office\office14\BCSSync.exe" /DelayServices
mRun: [DameWare MRC Agent] c:\windows\system32\DWRCST.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\blueto~1.lnk - c:\program files\widcomm\bluetooth software\BTTray.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\dellsy~1.lnk - c:\program files\dell\dell system manager\DCPSysMgr.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\digita~1.lnk - c:\program files\digital line detect\DLG.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\snagit~1.lnk - c:\program files\techsmith\snagit 11\Snagit32.exe
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
uPolicies-Explorer: NoDrives = dword:0
mPolicies-Explorer: NoDrives = dword:0
mPolicies-Explorer: NoDriveTypeAutoRun = dword:255
mPolicies-System: ConsentPromptBehaviorAdmin = dword:0
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableLUA = dword:0
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - c:\program files\microsoft lync\OCHelper.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
Trusted Zone: expedia.be
Trusted Zone: expedia.co.uk
Trusted Zone: expedia.com
Trusted Zone: expedia.de
Trusted Zone: expedia.es
Trusted Zone: expedia.fr
Trusted Zone: expedia.it
Trusted Zone: expedia.nl
Trusted Zone: flowstar.net
Trusted Zone: sumtotalsystems.com









TCP: NameServer = 192.168.1.1
TCP: Interfaces\{26A60F0B-B233-4429-BFE9-E99B95AE3A6C} : DHCPNameServer = 172.21.10.2 172.26.1.10
TCP: Interfaces\{3ED62EB1-8E39-4877-95EB-04EED1AE741A} : DHCPNameServer = 192.168.1.1
TCP: Interfaces\{3ED62EB1-8E39-4877-95EB-04EED1AE741A}\64C4F475143435 : DHCPNameServer = 172.21.10.2 172.26.1.10
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files\common files\microsoft shared\office14\MSOXMLMF.DLL
Handler: bwfile-9684826 - {2DF0241D-8A6A-4E10-A11B-C2E432CF2A28} - c:\program files\passport_direct\9684826\program\GAPlugProtocol-9684826.dll
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\program files\mcafee\siteadvisor enterprise\McIEPlg.dll
Handler: qrev - {9DE24BAC-FC3C-42c4-9FC4-76B3FAFDBD90} - c:\program files\quest software\toad for oracle\RNetPin.dll
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\program files\mcafee\siteadvisor enterprise\McIEPlg.dll
Notify: igfxcui - igfxdev.dll
SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - c:\program files\microsoft office\office14\GROOVEEX.DLL
LSA: Security Packages =  kerberos msv1_0 schannel wdigest tspkg pku2u msoidssp
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\31.0.1650.63\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\snayak\appdata\roaming\mozilla\firefox\profiles\79znsqch.default\

FF - plugin: c:\progra~1\micros~1\office14\NPAUTHZ.DLL
FF - plugin: c:\progra~1\micros~1\office14\NPSPWRAP.DLL
FF - plugin: c:\program files\adobe\reader 11.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\google\update\1.3.22.3\npGoogleUpdate3.dll
FF - plugin: c:\program files\java\jre6\bin\npdeployJava1.dll
FF - plugin: c:\program files\java\jre6\bin\npjpi160_21.dll
FF - plugin: c:\program files\java\jre6\bin\npt.dll
FF - plugin: c:\program files\mcafee\siteadvisor enterprise\NPMcFFPlg.dll
FF - plugin: c:\program files\microsoft silverlight\5.1.20913.0\npctrlui.dll
FF - plugin: c:\users\snayak\appdata\local\citrix\plugins\104\npappdetector.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_9_900_170.dll
FF - ExtSQL: !HIDDEN! 1970-05-28 22:28; {395C2BBF-B747-D57B-B4FD-5DD52EB9E787}; -
.
============= SERVICES / DRIVERS ===============
.
R0 mfehidk;McAfee Inc. mfehidk;c:\windows\system32\drivers\mfehidk.sys [2012-6-1 481320]
R0 mfewfpk;McAfee Inc. mfewfpk;c:\windows\system32\drivers\mfewfpk.sys [2012-6-1 181968]
R0 stdcfltn;Disk Class Filter Driver for Accelerometer;c:\windows\system32\drivers\stdcfltn.sys [2012-5-23 17904]
R1 dwvkbd;DameWare Virtual Keyboard 32 bit Driver;c:\windows\system32\drivers\dwvkbd.sys [2007-2-15 26624]
R2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe [2012-6-1 160152]
R3 Acceler;Accelerometer Service;c:\windows\system32\drivers\accelern.sys [2012-5-23 44144]
R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2012-5-23 349736]
R3 MEI;Intel® Management Engine Interface ;c:\windows\system32\drivers\HECI.sys [2012-5-23 41216]
R3 NETwNs32;___ Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 32 Bit;c:\windows\system32\drivers\NETwNs32.sys [2012-5-23 7434240]
R3 O2MDRRDR;O2MDRRDR;c:\windows\system32\drivers\O2MDRw7.sys [2012-5-23 62440]
R3 O2SDJRDR;O2SDJRDR;c:\windows\system32\drivers\o2sdjw7.sys [2012-5-23 63848]
S1 WebMail_;WebMail_;c:\windows\system32\WebMail_.sys [2012-6-1 77760]
S2 AESTFilters;Andrea ST Filters Service;c:\program files\idt\wdm\AEstSrv.exe [2012-5-23 81920]
S2 BackWeb Plug-in - 9684826;Passport_Direct;c:\program files\passport_direct\9684826\program\ServiceWrapper-9684826.exe [2013-4-24 24615]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 dcpsysmgrsvc;Dell System Manager Service;c:\program files\dell\dell system manager\DCPSysMgrSvc.exe [2011-1-20 388464]
S2 HsfXAudioService;HsfXAudioService;c:\windows\system32\svchost.exe -k HsfXAudioService [2009-7-13 20992]
S2 JuniperAccessService;Juniper Unified Network Service;c:\program files\common files\juniper networks\juns\dsAccessService.exe [2010-8-16 198000]
S2 Lotus Notes Diagnostics;Lotus Notes Diagnostics;c:\program files\lotus\notes\nsd.exe [2009-9-29 3405192]
S2 McAfee SiteAdvisor Enterprise Service;McAfee SiteAdvisor Enterprise Service;c:\program files\mcafee\siteadvisor enterprise\McSACore.exe [2013-6-10 160800]
S2 McAfeeFramework;McAfee Framework Service;c:\program files\mcafee\common framework\FrameworkService.exe [2013-6-25 130080]
S2 McShield;McAfee McShield;c:\program files\common files\mcafee\systemcore\mcshield.exe [2012-6-1 167856]
S2 McTaskManager;McAfee Task Manager;c:\program files\mcafee\virusscan enterprise\vstskmgr.exe [2011-1-12 209760]
S2 msoidsvc;Microsoft Online Services Sign-in Assistant;c:\program files\common files\microsoft shared\microsoft online services\MSOIDSVC.EXE [2011-4-28 1577376]
S2 RoxWatch12;Roxio Hard Drive Watcher 12;c:\program files\common files\roxio shared\oem\12.0\sharedcom\RoxWatch12OEM.exe [2010-11-25 219632]
S2 SSPREnrollService;SSPREnrollService;c:\program files\passlogix\v-go sspr client\SSPREnrollService.exe [2010-10-27 128952]
S2 UNS;Intel® Management and Security Application User Notification Service;c:\program files\intel\intel® management engine components\uns\UNS.exe [2012-5-23 2594584]
S2 WebMail;WebMail;c:\windows\system32\webmail.exe -s --> c:\windows\system32\WebMail.exe -s [?]
S2 ZcfgSvc7;Intel® PROSet/Wireless ZeroConfig Service;c:\program files\intel\wifi\bin\ZCfgSvc7.exe [2010-12-23 577536]
S3 BTWAMPFL;BTWAMPFL;c:\windows\system32\drivers\btwampfl.sys [2012-5-23 302120]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\drivers\btwl2cap.sys [2012-5-23 33832]
S3 CtAudDrv;Provides advanced audio effects for audio devices.;c:\windows\system32\drivers\CtAudDrv.sys [2012-5-23 134144]
S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\drivers\CtClsFlt.sys [2012-5-23 144576]
S3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2011-4-11 62464]
S3 DwMirror;DwMirror;c:\windows\system32\drivers\DamewareMini.sys [2007-2-7 3712]
S3 IgniteService;IgniteService;c:\program files\ignitecds\IgniteService.exe [2012-6-1 90464]
S3 Impcd;Impcd;c:\windows\system32\drivers\Impcd.sys [2012-5-23 132480]
S3 IntcDAud;Intel® Display Audio;c:\windows\system32\drivers\IntcDAud.sys [2012-5-23 269824]
S3 mfeavfk;McAfee Inc. mfeavfk;c:\windows\system32\drivers\mfeavfk.sys [2012-6-1 218760]
S3 mfebopk;McAfee Inc. mfebopk;c:\windows\system32\drivers\mfebopk.sys [2012-6-1 63128]
S3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [2012-6-1 87816]
S3 O2MDFRDR;O2MDFRDR;c:\windows\system32\drivers\o2mdfw7.sys [2012-5-23 60904]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 15872]
S3 RoxMediaDB12OEM;RoxMediaDB12OEM;c:\program files\common files\roxio shared\oem\12.0\sharedcom\RoxMediaDB12OEM.exe [2010-11-25 1116656]
S3 StorSvc;Storage Service;c:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-13 20992]
S3 Synth3dVsc;Microsoft Virtual 3D Video Transport Driver;c:\windows\system32\drivers\Synth3dVsc.sys [2011-4-11 77184]
S3 tcm;tcm;c:\windows\system32\drivers\tcm.sys [2012-5-23 12952]
S3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys [2011-4-11 25600]
S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2010-11-20 52224]
S3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
S3 tsusbhub;Remote Deskotop USB Hub;c:\windows\system32\drivers\tsusbhub.sys [2011-4-11 112640]
S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\drivers\wdcsam.sys [2008-5-6 11520]
.
=============== Created Last 30 ================
.
2013-12-22 15:38:07 -------- d-----w- c:\users\snayak\appdata\local\YldcPack
2013-12-13 21:03:17 305152 ----a-w- c:\windows\system32\gdi32.dll
.
==================== Find3M  ====================
.
2013-12-11 18:14:11 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-12-11 18:14:11 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-10-12 02:04:18 981504 ----a-w- c:\windows\system32\wininet.dll
2013-10-12 01:15:03 1638912 ----a-w- c:\windows\system32\mshtml.tlb
2013-10-05 19:57:25 1168384 ----a-w- c:\windows\system32\crypt32.dll
.
============= FINISH: 17:31:28.62 ===============
 

 

attach.txt:

 

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 7 Enterprise
Boot Device: \Device\HarddiskVolume2
Install Date: 6/1/2012 1:38:34 PM
System Uptime: 12/22/2013 5:01:50 PM (0 hours ago)
.
Motherboard: Dell Inc. |  | 0KCT5J
Processor: Intel® Core i5-2520M CPU @ 2.50GHz | CPU 1 | 2494/100mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 298 GiB total, 214.004 GiB free.
D: is CDROM ()
E: is Removable
U: is NetworkDisk (CSC-CACHE) - 298 GiB total, 214.004 GiB free.
.
==== Disabled Device Manager Items =============
.
Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: McAfee NDIS Intermediate Filter Miniport
Device ID: ROOT\MFE_FIREHKMP\0004
Manufacturer: McAfee
Name: WAN Miniport (IPv6) - McAfee NDIS Intermediate Filter Miniport
PNP Device ID: ROOT\MFE_FIREHKMP\0004
Service: FirehkMP
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: Security Processor Loader Driver
Device ID: ROOT\LEGACY_SPLDR\0000
Manufacturer:
Name: Security Processor Loader Driver
PNP Device ID: ROOT\LEGACY_SPLDR\0000
Service: spldr
.
Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: McAfee NDIS Intermediate Filter Miniport
Device ID: ROOT\MFE_FIREHKMP\0000
Manufacturer: McAfee
Name: Broadcom NetXtreme 57xx Gigabit Controller - McAfee NDIS Intermediate Filter Miniport
PNP Device ID: ROOT\MFE_FIREHKMP\0000
Service: FirehkMP
.
Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: McAfee NDIS Intermediate Filter Miniport
Device ID: ROOT\MFE_FIREHKMP\0001
Manufacturer: McAfee
Name: Intel® Centrino® Advanced-N 6205 - McAfee NDIS Intermediate Filter Miniport
PNP Device ID: ROOT\MFE_FIREHKMP\0001
Service: FirehkMP
.
Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: McAfee NDIS Intermediate Filter Miniport
Device ID: ROOT\MFE_FIREHKMP\0002
Manufacturer: McAfee
Name: WAN Miniport (IP) - McAfee NDIS Intermediate Filter Miniport
PNP Device ID: ROOT\MFE_FIREHKMP\0002
Service: FirehkMP
.
Class GUID: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Description: Dell Wireless 375 Bluetooth Module
Device ID: USB\VID_413C&PID_8187\C01885D913AB
Manufacturer: Broadcom
Name: Dell Wireless 375 Bluetooth Module
PNP Device ID: USB\VID_413C&PID_8187\C01885D913AB
Service: BTHUSB
.
Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: McAfee NDIS Intermediate Filter Miniport
Device ID: ROOT\MFE_FIREHKMP\0003
Manufacturer: McAfee
Name: WAN Miniport (Network Monitor) - McAfee NDIS Intermediate Filter Miniport
PNP Device ID: ROOT\MFE_FIREHKMP\0003
Service: FirehkMP
.
==== System Restore Points ===================
.
RP210: 12/7/2013 12:00:04 AM - Scheduled Checkpoint
RP211: 12/13/2013 3:02:52 PM - Windows Update
RP212: 12/13/2013 3:03:49 PM - Windows Update
RP213: 12/13/2013 3:04:33 PM - Windows Update
RP214: 12/13/2013 3:05:19 PM - Windows Update
RP215: 12/20/2013 4:21:54 PM - Scheduled Checkpoint
.
==== Installed Programs ======================
.
32 Bit HP BiDi Channel Components Installer
7-Zip 9.20
AccelerometerP11
Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Adobe Reader XI (11.0.05)
Altiris Application Metering Agent
Altiris Client Task Agent
Altiris PC Transplant Capture Agent
Altiris Power Management Agent
Altiris Script Task Agent
Altiris Service Control Task Agent
Altiris Software Delivery Agent For Task Server
Altiris Software Delivery Solution Agent
Altiris Task Synchronization Agent
Cisco WebEx Meetings
Citrix Online Launcher
Conexant HDA D330 MDC V.92 Modem
Conversation Translator
CVE-2012-1889
CVE-2012-4969
CVE-2013-3893
CyberLink PowerDVD 9.5
DameWare Mini Remote Control Client Agent Service
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
Dell Backup and Recovery Manager
Dell System Manager
Dell Touchpad
Dell Webcam Central
Digital Line Detect
DirectX 9 Runtime
Export Notes v8.0.5.0 SP1
FileZilla Client 3.5.3
Flowserve Excel Add-ins
Flowserve Outlook Add-ins
Flowserve PowerPoint Add-ins
Flowserve Word Add-ins
Flowstar.net Client Files
Google Chrome
Google Toolbar for Internet Explorer
Google Update Helper
GoToMeeting 5.7.0.1172
IDT Audio
Intel PROSet Wireless
Intel® Control Center
Intel® Management Engine Components
Intel® Processor Graphics
Intel® PROSet/Wireless WiFi Software
Java Auto Updater
Java 6 Update 21
Juniper Installer Service
Juniper Networks Host Checker
Juniper Networks Network Connect 7.0.0
Juniper Networks Network Connect 7.4.0
Juniper Networks Setup Client Activex Control
Juniper Networks, Inc. Setup Client
Knowledge Xpert for PLSQL V9.0
Lotus Notes 8.5.1
Malwarebytes Anti-Malware version 1.75.0.1300
McAfee Agent
McAfee SiteAdvisor Enterprise
McAfee VirusScan Enterprise
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Extended
Microsoft Application Error Reporting
Microsoft Lync 2010
Microsoft Mouse and Keyboard Center
Microsoft Office Access MUI (English) 2010
Microsoft Office Access Setup Metadata MUI (English) 2010
Microsoft Office Excel MUI (English) 2010
Microsoft Office Groove MUI (English) 2010
Microsoft Office InfoPath MUI (English) 2010
Microsoft Office Live Meeting 2007
Microsoft Office OneNote MUI (English) 2010
Microsoft Office Outlook MUI (English) 2010
Microsoft Office PowerPoint MUI (English) 2010
Microsoft Office Professional Plus 2010
Microsoft Office Project 2007 Service Pack 2 (SP2)
Microsoft Office Project MUI (English) 2007
Microsoft Office Project Standard 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (English) 2010
Microsoft Office Proof (French) 2007
Microsoft Office Proof (French) 2010
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proof (Spanish) 2010
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing (English) 2010
Microsoft Office Publisher MUI (English) 2010
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared MUI (English) 2010
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2010
Microsoft Office Visio MUI (English) 2007
Microsoft Office Visio Standard 2007
Microsoft Office Word MUI (English) 2010
Microsoft Online Services Sign-in Assistant
Microsoft Silverlight
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Modem Diagnostic Tool
Mozilla Firefox 25.0.1 (x86 en-US)
Mozilla Maintenance Service
MSXML 4.0 SP2 (KB973688)
MSXML5: CVE-2012-1889
MySQL Server 5.5
Netwaiting
Notepad++
Oracle Enterprise Single Sign-on Password Reset Client
Passport_Direct
PDFCreator
PhotoShowExpress
Qexplain2full
Quest Software Toad for Oracle Version 9.0.1
Quest SQL Tuning for Oracle
Roxio Activation Module
Roxio BackOnTrack
Roxio Burn
Roxio Creator Starter
Roxio Express Labeler 3
Roxio File Backup
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2736428)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2835393)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2858302v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2861188)
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
Security Update for Microsoft .NET Framework 4 Extended (KB2656351)
Security Update for Microsoft .NET Framework 4 Extended (KB2736428)
Security Update for Microsoft .NET Framework 4 Extended (KB2742595)
Security Update for Microsoft .NET Framework 4 Extended (KB2858302v2)
Security Update for Microsoft Excel 2010 (KB2826033) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596615) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2687441) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2687499) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2553284) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2687423) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2760781) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2826023) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2826035) 32-Bit Edition
Security Update for Microsoft Outlook 2010 (KB2837597) 32-Bit Edition
Security Update for Microsoft Visual Basic for Applications 6.5 (KB2688865)
Security Update for Microsoft Visual Basic for Applications 6.5 (KB974945)
Security Update for Microsoft Word 2010 (KB2760769) 32-Bit Edition
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition
Snagit 11
Sonic CinePlayer Decoder Pack
Stat 5.5.4
TextPad 6
WIDCOMM Bluetooth Software
X7Magic Setup
XML Marker version 2.1
XML Notepad 2007
.
==== Event Viewer Messages From Past Week ========
.
12/22/2013 9:01:13 AM, Error: Schannel [36888]  - The following fatal alert was generated: 40. The internal error state is 107.
12/22/2013 9:01:13 AM, Error: Schannel [36874]  - An SSL 3.0 connection request was received from a remote client application, but none of the cipher suites supported by the client application are supported by the server. The SSL connection request has failed.
12/22/2013 5:03:28 PM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}
12/22/2013 5:03:28 PM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
12/22/2013 5:03:16 PM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
12/22/2013 5:03:10 PM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}
12/22/2013 5:02:36 PM, Error: Microsoft-Windows-WLAN-AutoConfig [10000]  - WLAN Extensibility Module has failed to start. Module Path: C:\windows\System32\IWMSSvc.dll Error Code: 21
12/22/2013 5:02:21 PM, Error: Service Control Manager [7026]  - The following boot-start or system-start driver(s) failed to load:  discache luafv spldr Wanarpv6
12/22/2013 5:02:21 PM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001]  - The computer has rebooted from a bugcheck.  The bugcheck was: 0x0000000a (0x044500b9, 0x00000002, 0x00000001, 0x83298d9a). A dump was saved in: C:\windows\MEMORY.DMP. Report Id: 122213-26239-01.
12/22/2013 5:02:21 PM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1084" attempting to start the service TermService with arguments "" in order to run the server: {F9A874B6-F8A8-4D73-B5A8-AB610816828B}
12/22/2013 5:02:19 PM, Error: NETLOGON [5719]  - This computer was not able to set up a secure session with a domain controller in domain FLOWSERVE due to the following:  There are currently no logon servers available to service the logon request.  This may lead to authentication problems. Make sure that this computer is connected to the network. If the problem persists, please contact your domain administrator.   ADDITIONAL INFO  If this computer is a domain controller for the specified domain, it sets up the secure session to the primary domain controller emulator in the specified domain. Otherwise, this computer sets up the secure session to any domain controller in the specified domain.
12/22/2013 5:02:18 PM, Error: Service Control Manager [7001]  - The Computer Browser service depends on the Server service which failed to start because of the following error:  The dependency service or group failed to start.
12/22/2013 4:59:17 PM, Error: Microsoft-Windows-GroupPolicy [1129]  - The processing of Group Policy failed because of lack of network connectivity to a domain controller. This may be a transient condition. A success message would be generated once the machine gets connected to the domain controller and Group Policy has succesfully processed. If you do not see a success message for several hours, then contact your administrator.
12/22/2013 4:59:16 PM, Error: Service Control Manager [7026]  - The following boot-start or system-start driver(s) failed to load:  luafv
12/22/2013 4:51:04 PM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1084" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334}
12/22/2013 4:49:34 PM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001]  - The computer has rebooted from a bugcheck.  The bugcheck was: 0x0000007e (0xc0000005, 0x834c98a8, 0x8e391574, 0x8e391150). A dump was saved in: C:\windows\MEMORY.DMP. Report Id: 122213-24180-01.
12/22/2013 4:47:15 PM, Error: Service Control Manager [7000]  - The Spooler service failed to start due to the following error:  The system cannot find the file specified.
12/22/2013 3:40:42 PM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001]  - The computer has rebooted from a bugcheck.  The bugcheck was: 0x0000007e (0xc0000005, 0x832c58a8, 0x8e195574, 0x8e195150). A dump was saved in: C:\windows\MEMORY.DMP. Report Id: 122213-23618-01.
12/22/2013 3:35:35 PM, Error: Service Control Manager [7001]  - The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:  The dependency service or group failed to start.
12/22/2013 3:35:34 PM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1068" attempting to start the service netprofm with arguments "" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89}
12/22/2013 3:35:34 PM, Error: Microsoft-Windows-DistributedCOM [10005]  - DCOM got error "1068" attempting to start the service netman with arguments "" in order to run the server: {BA126AD1-2166-11D1-B1D0-00805FC1270E}
12/22/2013 3:35:10 PM, Error: Service Control Manager [7023]  - The Power service terminated with the following error:  The service has not been started.
12/22/2013 3:35:06 PM, Error: Service Control Manager [7026]  - The following boot-start or system-start driver(s) failed to load:  AFD CSC DfsC discache luafv mfehidk NetBIOS NetBT nsiproxy Psched rdbss spldr tdx vwififlt Wanarpv6 WfpLwf ws2ifsl
12/22/2013 3:35:06 PM, Error: Service Control Manager [7001]  - The Telephony service depends on the Plug and Play service which failed to start because of the following error:  The service did not respond to the start or control request in a timely fashion.
12/22/2013 3:35:06 PM, Error: Service Control Manager [7001]  - The Network Location Awareness service depends on the Network Store Interface Service service which failed to start because of the following error:  The dependency service or group failed to start.
12/22/2013 3:35:06 PM, Error: Service Control Manager [7001]  - The Network Connections service depends on the Network Store Interface Service service which failed to start because of the following error:  The dependency service or group failed to start.
12/22/2013 3:35:06 PM, Error: Service Control Manager [7001]  - The McAfee Validation Trust Protection Service service depends on the McAfee Inc. mfehidk service which failed to start because of the following error:  A device attached to the system is not functioning.
12/22/2013 3:35:06 PM, Error: Service Control Manager [7001]  - The McAfee McShield service depends on the McAfee Validation Trust Protection Service service which failed to start because of the following error:  The dependency service or group failed to start.
12/22/2013 3:35:06 PM, Error: Service Control Manager [7001]  - The IP Helper service depends on the Network Store Interface Service service which failed to start because of the following error:  The dependency service or group failed to start.
12/22/2013 3:35:05 PM, Error: Service Control Manager [7001]  - The Workstation service depends on the Network Store Interface Service service which failed to start because of the following error:  The dependency service or group failed to start.
12/22/2013 3:35:05 PM, Error: Service Control Manager [7001]  - The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error:  A device attached to the system is not functioning.
12/22/2013 3:35:05 PM, Error: Service Control Manager [7001]  - The SMB 2.0 MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error:  The dependency service or group failed to start.
12/22/2013 3:35:05 PM, Error: Service Control Manager [7001]  - The SMB 1.x MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error:  The dependency service or group failed to start.
12/22/2013 3:35:05 PM, Error: Service Control Manager [7001]  - The Smart Card service depends on the Plug and Play service which failed to start because of the following error:  The service did not respond to the start or control request in a timely fashion.
12/22/2013 3:35:05 PM, Error: Service Control Manager [7001]  - The Network Store Interface Service service depends on the NSI proxy service driver. service which failed to start because of the following error:  A device attached to the system is not functioning.
12/22/2013 3:35:05 PM, Error: Service Control Manager [7001]  - The Netlogon service depends on the Workstation service which failed to start because of the following error:  The dependency service or group failed to start.
12/22/2013 3:35:04 PM, Error: Service Control Manager [7001]  - The Windows Driver Foundation - User-mode Driver Framework service depends on the Plug and Play service which failed to start because of the following error:  The service did not respond to the start or control request in a timely fashion.
12/22/2013 3:35:04 PM, Error: Service Control Manager [7001]  - The TCP/IP NetBIOS Helper service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error:  A device attached to the system is not functioning.
12/22/2013 3:35:04 PM, Error: Service Control Manager [7001]  - The Intel® PROSet/Wireless ZeroConfig Service service depends on the WLAN AutoConfig service which failed to start because of the following error:  The dependency service or group failed to start.
12/22/2013 3:35:04 PM, Error: Service Control Manager [7001]  - The DHCP Client service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error:  A device attached to the system is not functioning.
12/22/2013 3:35:04 PM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001]  - The computer has rebooted from a bugcheck.  The bugcheck was: 0x0000007e (0xc0000005, 0x832a3ff6, 0x8e18da4c, 0x8e18d630). A dump was saved in: C:\windows\MEMORY.DMP. Report Id: 122213-21980-01.
12/22/2013 3:35:03 PM, Error: Service Control Manager [7001]  - The Windows Audio service depends on the Windows Audio Endpoint Builder service which failed to start because of the following error:  The dependency service or group failed to start.
12/22/2013 3:35:03 PM, Error: Service Control Manager [7001]  - The Windows Audio Endpoint Builder service depends on the Plug and Play service which failed to start because of the following error:  The service did not respond to the start or control request in a timely fashion.
12/22/2013 3:34:59 PM, Error: Service Control Manager [7009]  - A timeout was reached (30000 milliseconds) while waiting for the Plug and Play service to connect.
12/22/2013 3:34:59 PM, Error: Service Control Manager [7000]  - The Plug and Play service failed to start due to the following error:  The service did not respond to the start or control request in a timely fashion.
12/22/2013 3:31:13 PM, Error: Service Control Manager [7001]  - The Remote Access Connection Manager service depends on the Telephony service which failed to start because of the following error:  The dependency service or group failed to start.
12/22/2013 3:31:13 PM, Error: Service Control Manager [7001]  - The Internet Connection Sharing (ICS) service depends on the Remote Access Connection Manager service which failed to start because of the following error:  The dependency service or group failed to start.
12/22/2013 3:31:07 PM, Error: Service Control Manager [7023]  - The Server service terminated with the following error:  The service has not been started.
12/22/2013 3:31:06 PM, Error: Service Control Manager [7024]  -
12/22/2013 3:31:06 PM, Error: BROWSER [8017]  - The browser has failed to start because the dependent service LanmanServer had invalid service status 3. Status             Meaning   1              Service Stopped    2              Start Pending    3              Stop Pending    4              Running    5              Continue Pending    6              Pause Pending    7              Paused
12/22/2013 3:30:56 PM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001]  - The computer has rebooted from a bugcheck.  The bugcheck was: 0x0000007e (0xc0000005, 0x832e3ff6, 0x8e18da4c, 0x8e18d630). A dump was saved in: C:\windows\MEMORY.DMP. Report Id: 122213-25599-01.
12/22/2013 12:44:23 PM, Error: Microsoft-Windows-TerminalServices-RemoteConnectionManager [1067]  - The terminal server cannot register 'TERMSRV' Service Principal Name to be used for server authentication. The following error occured: The specified domain either does not exist or could not be contacted. .
12/21/2013 11:12:38 AM, Error: Schannel [36887]  - The following fatal alert was received: 10.
12/20/2013 7:42:38 PM, Error: NETLOGON [5719]  - This computer was not able to set up a secure session with a domain controller in domain FLOWSERVE due to the following:  The RPC server is unavailable.  This may lead to authentication problems. Make sure that this computer is connected to the network. If the problem persists, please contact your domain administrator.   ADDITIONAL INFO  If this computer is a domain controller for the specified domain, it sets up the secure session to the primary domain controller emulator in the specified domain. Otherwise, this computer sets up the secure session to any domain controller in the specified domain.
12/20/2013 11:18:43 AM, Error: bowser [8003]  - The master browser has received a server announcement from the computer 27BC8W1 that believes that it is the master browser for the domain on transport NetBT_Tcpip_{3ED62EB1-8E39-4877-95EB-04EED1AE74. The master browser is stopping or an election is being forced.
12/19/2013 9:44:04 AM, Error: bowser [8003]  - The master browser has received a server announcement from the computer 7D129141H that believes that it is the master browser for the domain on transport NetBT_Tcpip_{3ED62EB1-8E39-4877-95EB-04EED1AE. The master browser is stopping or an election is being forced.
12/19/2013 9:10:10 AM, Error: Microsoft-Windows-GroupPolicy [1054]  - The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name System (DNS) is configured and working correctly.
12/19/2013 9:10:04 AM, Error: Microsoft-Windows-TerminalServices-RemoteConnectionManager [1067]  - The terminal server cannot register 'TERMSRV' Service Principal Name to be used for server authentication. The following error occured: The RPC server is unavailable. .
.
==== End Of File ===========================
 

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.