kevinf80 Posted April 16, 2014 ID:819072 Share Posted April 16, 2014 Run Combofix from your main account. I have not asked that go looking for Combofix folders, If Combofix is on your system it would appear on your Desktop, if it aint there just continue with the instructions. If you really feel my requests are beyond your scope maybe you should consider taking your PC to a repair facility. I did believe we had your system clean at one point, unfortunately we find ourselves back to square one.Combofix is a program that carries out combination fixes, it is not really difficult to run. Download the tool and save direct to your Desktop, turn off your security. Run Combofix, sit back and let it run, finish and produce a log.When done turn your security back on, post the log.... Kevin..... Link to post Share on other sites More sharing options...
whonew Posted April 17, 2014 Author ID:819676 Share Posted April 17, 2014 I think I need a good nights sleep before I try this, I am trying to remember what happened the last time I used Combo Fix and think I made a mess. Will download in morning , you might have more faith in me than I do Link to post Share on other sites More sharing options...
kevinf80 Posted April 17, 2014 ID:819710 Share Posted April 17, 2014 Thanks for the update, CF is really straightforward as long as you follow the instructions... It will create a fresh restore point and an ERUNT back up before it makes any changes so try not to worry... Kevin Link to post Share on other sites More sharing options...
whonew Posted April 17, 2014 Author ID:819838 Share Posted April 17, 2014 one more question , I can not use the keypad , it was bonkers shortly after we purchased the machine . There is a plug in the USB port , if I remove it there is no way to move around , keys did not help they simply locked up. Oh my, it is so difficult just to type a few sentences. Can I leave that plug in? if not then I may have to stop here. Also The instruction page or URL gave me a very large pop ad. Link to post Share on other sites More sharing options...
kevinf80 Posted April 17, 2014 ID:819877 Share Posted April 17, 2014 Just leave your system as it is whatever you have plugged in, if you need it, then use it. Not sure how or why you got a popup from the links, they work fine for me. See if you can run Combofix and post the produced log... Link to post Share on other sites More sharing options...
whonew Posted April 17, 2014 Author ID:819919 Share Posted April 17, 2014 I am now being told that this web site is an unsecure connection and went ahead and accepted, and now I can not find that log Link to post Share on other sites More sharing options...
kevinf80 Posted April 17, 2014 ID:819945 Share Posted April 17, 2014 Which log can you not find? Link to post Share on other sites More sharing options...
whonew Posted April 17, 2014 Author ID:819947 Share Posted April 17, 2014 I forgot to unplug the USB printer , it was the only way I could get a print out of the Instructions for Combo Fix and I can not find the log that Combo Fix did once I closed the note pad, I lost it and it is not on tophe deskt Link to post Share on other sites More sharing options...
whonew Posted April 17, 2014 Author ID:819949 Share Posted April 17, 2014 I had to dig for this ComboFix 14-04-12.01 - Judith 04/17/2014 12:39:38.1.2 - x64Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.2663.1178 [GMT -7:00]Running from: c:\users\Judith\Desktop\ComboFix.exeAV: Computer Security *Disabled/Updated* {15414183-282E-D62C-CA37-EF24860A2F17}SP: Computer Security *Disabled/Updated* {AE20A067-0E14-D9A2-F087-D456FD8D65AA}SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}..((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))..c:\users\Judith\AppData\Local\Microsoft\Windows\Temporary Internet Files\{3513DBB1-033A-4BB0-B4E7-7BFBB778DC2F}.xpsc:\users\Judith\AppData\Local\Microsoft\Windows\Temporary Internet Files\{3659C6DE-3A49-4FCC-B01C-21F6B1815B39}.xpsc:\users\Judith\AppData\Local\Microsoft\Windows\Temporary Internet Files\{3F9DE08A-3865-408C-A4B3-945562055E1F}.xpsc:\users\Judith\AppData\Local\Microsoft\Windows\Temporary Internet Files\{82A017FB-5F01-40CA-BD8D-25F665ECE559}.xpsc:\users\Judith\AppData\Local\Microsoft\Windows\Temporary Internet Files\{E8F44D2D-EE47-4EAE-A257-B61B12711DD4}.xps..((((((((((((((((((((((((( Files Created from 2014-03-17 to 2014-04-17 )))))))))))))))))))))))))))))))..2014-04-17 19:49 . 2014-04-17 19:49 -------- d-----w- c:\users\Guest\AppData\Local\temp2014-04-17 19:49 . 2014-04-17 19:49 -------- d-----w- c:\users\Default\AppData\Local\temp2014-04-17 18:56 . 2007-12-07 00:08 108032 ----a-w- c:\windows\system32\E_ILMEMA.DLL2014-04-17 18:56 . 2007-12-07 00:01 81408 ----a-w- c:\windows\system32\E_IBCBEMA.DLL2014-04-17 18:07 . 2014-04-17 18:07 -------- d-----w- c:\users\Judith\AppData\Roaming\EPSON2014-04-17 18:04 . 2014-04-17 18:04 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{8E2718D6-B992-4B66-9E3C-C3244D716D51}\offreg.dll2014-04-17 18:03 . 2002-07-26 00:06 282624 ----a-w- c:\program files (x86)\Common Files\InstallShield\UpdateService\agent.exe2014-04-17 17:59 . 2008-11-12 10:00 118784 ----a-w- c:\windows\system32\E_ILMFRA.DLL2014-04-17 17:59 . 2008-11-12 10:00 81920 ----a-w- c:\windows\system32\E_IBCBFRA.DLL2014-04-17 17:59 . 2014-04-17 18:56 -------- d-----w- c:\programdata\EPSON2014-04-17 17:58 . 2009-05-01 07:00 17408 ----a-w- c:\windows\system32\esxcdev.dll2014-04-17 17:58 . 2009-05-01 07:00 128392 ----a-w- c:\windows\system32\esdevapp.exe2014-04-17 17:58 . 2008-11-17 07:00 459776 ----a-w- c:\windows\system32\esxwiaud.dll2014-04-17 17:58 . 2014-04-17 18:02 -------- d-----w- c:\program files (x86)\epson2014-04-15 14:08 . 2014-03-07 04:43 10521840 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{8E2718D6-B992-4B66-9E3C-C3244D716D51}\mpengine.dll2014-04-12 01:40 . 2014-04-12 01:40 -------- d-----w- C:\_OTM2014-04-11 20:45 . 2014-04-11 20:45 -------- d-----w- C:\_OTL2014-04-11 20:23 . 2014-04-11 20:23 -------- d-----w- c:\users\Guest\AppData\Local\Diagnostics2014-04-09 16:13 . 2014-02-04 02:35 274880 ----a-w- c:\windows\system32\drivers\msiscsi.sys2014-04-08 16:22 . 2014-04-08 16:22 -------- d-----w- c:\users\Guest\AppData\Roaming\Malwarebytes2014-04-08 15:10 . 2014-04-08 15:11 -------- d-----w- c:\users\Guest\AppData\Local\Mozilla2014-03-25 21:34 . 2014-03-25 21:54 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl2014-03-25 21:34 . 2014-03-25 21:54 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe2014-03-19 19:58 . 2014-03-19 19:58 -------- d-----w- c:\users\Judith\AppData\Roaming\Oracle...(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))).2014-04-09 16:20 . 2013-02-09 02:40 90655440 ----a-w- c:\windows\system32\MRT.exe2014-03-04 09:17 . 2014-04-09 16:12 44032 ----a-w- c:\windows\apppatch\acwow64.dll2014-02-20 06:09 . 2014-02-20 06:09 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll2014-02-07 01:23 . 2014-03-12 23:12 3156480 ----a-w- c:\windows\system32\win32k.sys2014-02-04 02:32 . 2014-03-12 23:11 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll2014-02-04 02:32 . 2014-03-12 23:12 624128 ----a-w- c:\windows\system32\qedit.dll2014-02-04 02:04 . 2014-03-12 23:11 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll2014-02-04 02:04 . 2014-03-12 23:12 509440 ----a-w- c:\windows\SysWow64\qedit.dll2014-01-29 02:32 . 2014-03-12 23:12 484864 ----a-w- c:\windows\system32\wer.dll2014-01-29 02:06 . 2014-03-12 23:12 381440 ----a-w- c:\windows\SysWow64\wer.dll2014-01-28 02:32 . 2014-03-12 23:12 228864 ----a-w- c:\windows\system32\wwansvc.dll..((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))..*Note* empty entries & legit default entries are not shownREGEDIT4.[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]"F-Secure Hoster (53784)"="c:\program files (x86)\Frontier\fshoster32.exe" [2013-05-15 191424]"F-Secure Manager"="c:\program files (x86)\Frontier\apps\ComputerSecurity\Common\FSM32.EXE" [2013-08-14 310208]"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]"EEventManager"="c:\progra~2\EPSONS~1\EVENTM~1\EEventManager.exe" [2009-04-07 673616].c:\users\Judith\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk - c:\program files (x86)\Microsoft Office\Office14\ONENOTEM.EXE /tsr [2013-6-25 228552].[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]"ConsentPromptBehaviorAdmin"= 5 (0x5)"ConsentPromptBehaviorUser"= 3 (0x3)"EnableUIADesktopToggle"= 0 (0x0)"EnableSecureUIAPath"= 1 (0x1).[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]@="".[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]@="".R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]R2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam64.sys;c:\windows\SYSNATIVE\DRIVERS\wdcsam64.sys [x]R3 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]R4 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]R4 TMachInfo;TMachInfo;c:\program files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe;c:\program files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [x]R4 TOSHIBA HDD SSD Alert Service;TOSHIBA HDD SSD Alert Service;c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe;c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [x]S0 amd_sata;amd_sata;c:\windows\system32\DRIVERS\amd_sata.sys;c:\windows\SYSNATIVE\DRIVERS\amd_sata.sys [x]S0 amd_xata;amd_xata;c:\windows\system32\DRIVERS\amd_xata.sys;c:\windows\SYSNATIVE\DRIVERS\amd_xata.sys [x]S0 fsbts;fsbts;c:\windows\system32\Drivers\fsbts.sys;c:\windows\SYSNATIVE\Drivers\fsbts.sys [x]S1 F-Secure HIPS;F-Secure HIPS Driver;c:\program files (x86)\Frontier\apps\ComputerSecurity\HIPS\drivers\fshs.sys;c:\program files (x86)\Frontier\apps\ComputerSecurity\HIPS\drivers\fshs.sys [x]S1 fsvista;F-Secure Vista Support Driver;c:\program files (x86)\Frontier\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys;c:\program files (x86)\Frontier\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys [x]S2 fshoster;F-Secure Dll Hoster;c:\program files (x86)\Frontier\fshoster32.exe;c:\program files (x86)\Frontier\fshoster32.exe [x]S2 FSORSPClient;F-Secure ORSP Client;c:\program files (x86)\Frontier\apps\CCF_Reputation\fsorsp.exe;c:\program files (x86)\Frontier\apps\CCF_Reputation\fsorsp.exe [x]S3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys;c:\windows\SYSNATIVE\DRIVERS\dc3d.sys [x]S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys;c:\windows\SYSNATIVE\DRIVERS\ETD.sys [x]S3 F-Secure Gatekeeper;F-Secure Gatekeeper;c:\program files (x86)\Frontier\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys;c:\program files (x86)\Frontier\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys [x]S3 fsni;fsni;c:\program files (x86)\Frontier\apps\CCF_Scanning\fsni64.sys;c:\program files (x86)\Frontier\apps\CCF_Scanning\fsni64.sys [x]S3 FwLnk;FwLnk Driver;c:\windows\system32\DRIVERS\FwLnk.sys;c:\windows\SYSNATIVE\DRIVERS\FwLnk.sys [x]S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]S3 Point64;Microsoft Mouse and Keyboard Center Filter Driver;c:\windows\system32\DRIVERS\point64.sys;c:\windows\SYSNATIVE\DRIVERS\point64.sys [x]S3 RTL8192Ce;Realtek Wireless LAN 802.11n PCI-E NIC Driver;c:\windows\system32\DRIVERS\rtl8192Ce.sys;c:\windows\SYSNATIVE\DRIVERS\rtl8192Ce.sys [x]..Contents of the 'Scheduled Tasks' folder.2014-04-17 c:\windows\Tasks\Adobe Flash Player Updater.job- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-25 21:54]..--------- X64 Entries -----------..[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]"SmartAudio"="c:\program files\CONEXANT\SAII\SAIICpl.exe" [2010-12-14 316032]"TosVolRegulator"="c:\program files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe" [2009-11-11 24376]"TosSENotify"="c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe" [2010-02-06 709976].------- Supplementary Scan -------.uLocal Page = c:\windows\system32\blank.htmmLocal Page = c:\windows\SysWOW64\blank.htmTCP: DhcpNameServer = 192.168.254.254FF - ProfilePath - c:\users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\cqjugvhh.default-1395345917665\FF - prefs.js: browser.search.selectedEngine - Google.- - - - ORPHANS REMOVED - - - -.c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Best Buy pc app.lnk - c:\programdata\Best Buy pc app\ClickOnceSetup.exe "c:\programdata\Best Buy pc app\Best Buy pc app.application"SafeBoot-99961887.sysHKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - startHKLM-Run-TPwrMain - c:\program files (x86)\TOSHIBA\Power Saver\TPwrMain.EXEHKLM-Run-SmoothView - c:\program files (x86)\Toshiba\SmoothView\SmoothView.exe...[HKEY_LOCAL_MACHINE\system\ControlSet001\services\fshoster]"ImagePath"="\"c:\program files (x86)\Frontier\fshoster32.exe\" -hosterid:0".--------------------- LOCKED REGISTRY KEYS ---------------------.[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]@Denied: (A 2) (Everyone)@="FlashBroker""LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_77_ActiveX.exe,-101".[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]"Enabled"=dword:00000001.[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_77_ActiveX.exe".[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}".[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]@Denied: (A 2) (Everyone)@="IFlashBroker5".[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]@="{00020424-0000-0000-C000-000000000046}".[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}""Version"="1.0".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]@Denied: (A 2) (Everyone)@="FlashBroker""LocalizedString"="@c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_77_ActiveX.exe,-101".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]"Enabled"=dword:00000001.[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]@="c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_77_ActiveX.exe".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]@Denied: (A 2) (Everyone)@="Shockwave Flash Object".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_77.ocx""ThreadingModel"="Apartment".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]@="0".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]@="ShockwaveFlash.ShockwaveFlash.12".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_77.ocx, 1".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]@="{D27CDB6B-AE6D-11cf-96B8-444553540000}".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]@="1.0".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]@="ShockwaveFlash.ShockwaveFlash".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]@Denied: (A 2) (Everyone)@="Macromedia Flash Factory Object".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_77.ocx""ThreadingModel"="Apartment".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]@="FlashFactory.FlashFactory.1".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_77.ocx, 1".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]@="{D27CDB6B-AE6D-11cf-96B8-444553540000}".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]@="1.0".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]@="FlashFactory.FlashFactory".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]@Denied: (A 2) (Everyone)@="IFlashBroker5".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]@="{00020424-0000-0000-C000-000000000046}".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}""Version"="1.0".[HKEY_LOCAL_MACHINE\software\Wow6432Node\F-Secure\My Services Agent\Protected]@Denied: ) (Everyone)"AgentIdentifier"="ef59e152-a984-4b10-b488-fbfaaac30bdb""AuthorizationCode"="""53784_AgentIdentifier"="ef59e152-a984-4b10-b488-fbfaaac30bdb".[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]@Denied: (A) (Everyone)"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}".[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]@Denied: (A) (Everyone).[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]"Key"="ActionsPane3""Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd".[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]@Denied: (Full) (Everyone).Completion time: 2014-04-17 12:54:19ComboFix-quarantined-files.txt 2014-04-17 19:54.Pre-Run: 265,521,926,144 bytes freePost-Run: 265,370,431,488 bytes free.- - End Of File - - D81D356ACFCDFB9C1616B3BCC5C6EB6D5B5E648D12FCADC244C1EC30318E1EB9 Link to post Share on other sites More sharing options...
kevinf80 Posted April 17, 2014 ID:819958 Share Posted April 17, 2014 1. Close any open browsers.2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.3. Open notepad and copy/paste the text in the Codebox below into it:ClearJavaCache:: Save this as CFScript.txt, and as Type: All Files (*.*) in the same location as ComboFix.exeRefering to the picture above, drag CFScript into ComboFix.exeWhen finished, it shall produce a log for you at C:\ComboFix.txt which I will require in your next reply. Next, We need to run an online AV scan to ensure there are no remnants of any infection left on your system that may have been missed. This scan is very thorough and well worth running, it can take several hours please be patient and let it complete: Run Eset Online Scanner **Note** You will need to use Internet explorer for this scan - Vista and Windows 7/8 right click on IE shortcut and run as admin Go to Eset web page http://www.eset.com/us/online-scanner/ to run an online scan from ESET. Turn off the real time scanner of any existing antivirus program while performing the online scan click on the Run ESET Online Scanner button Tick the box next to YES, I accept the Terms of Use.Click Start When asked, allow the add/on to be installedClick Start Make sure that the option "Remove found threats" is ticked Click on Advanced Settings, ensure the options Scan for potentially unwanted applications, Scan for potentially unsafe applications, and Enable Anti-Stealth Technology are ticked.Click Scan wait for the virus definitions to be downloaded Wait for the scan to finish When the scan is complete If no threats were found put a checkmark in "Uninstall application on close" close program report to me that nothing was found If threats were found click on "list of threats found" click on "export to text file" and save it as ESET SCAN and save to the desktop Click on back put a checkmark in "Uninstall application on close" click on finish close program Copy and paste the report in next reply. Link to post Share on other sites More sharing options...
whonew Posted April 17, 2014 Author ID:819970 Share Posted April 17, 2014 ComboFix 14-04-12.01 - Judith 04/17/2014 14:32:05.2.2 - x64Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.2663.1436 [GMT -7:00]Running from: c:\users\Judith\Desktop\ComboFix.exeCommand switches used :: c:\users\Judith\Desktop\CFScript.txtAV: Computer Security *Disabled/Updated* {15414183-282E-D62C-CA37-EF24860A2F17}SP: Computer Security *Disabled/Updated* {AE20A067-0E14-D9A2-F087-D456FD8D65AA}SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}..((((((((((((((((((((((((( Files Created from 2014-03-17 to 2014-04-17 )))))))))))))))))))))))))))))))..2014-04-17 21:42 . 2014-04-17 21:42 -------- d-----w- c:\users\Guest\AppData\Local\temp2014-04-17 21:42 . 2014-04-17 21:42 -------- d-----w- c:\users\Default\AppData\Local\temp2014-04-17 18:56 . 2007-12-07 00:08 108032 ----a-w- c:\windows\system32\E_ILMEMA.DLL2014-04-17 18:56 . 2007-12-07 00:01 81408 ----a-w- c:\windows\system32\E_IBCBEMA.DLL2014-04-17 18:07 . 2014-04-17 20:21 -------- d-----w- c:\users\Judith\AppData\Roaming\EPSON2014-04-17 18:04 . 2014-04-17 20:47 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{8E2718D6-B992-4B66-9E3C-C3244D716D51}\offreg.dll2014-04-17 18:03 . 2002-07-26 00:06 282624 ----a-w- c:\program files (x86)\Common Files\InstallShield\UpdateService\agent.exe2014-04-17 17:59 . 2008-11-12 10:00 118784 ----a-w- c:\windows\system32\E_ILMFRA.DLL2014-04-17 17:59 . 2008-11-12 10:00 81920 ----a-w- c:\windows\system32\E_IBCBFRA.DLL2014-04-17 17:59 . 2014-04-17 18:56 -------- d-----w- c:\programdata\EPSON2014-04-17 17:58 . 2009-05-01 07:00 17408 ----a-w- c:\windows\system32\esxcdev.dll2014-04-17 17:58 . 2009-05-01 07:00 128392 ----a-w- c:\windows\system32\esdevapp.exe2014-04-17 17:58 . 2008-11-17 07:00 459776 ----a-w- c:\windows\system32\esxwiaud.dll2014-04-17 17:58 . 2014-04-17 18:02 -------- d-----w- c:\program files (x86)\epson2014-04-15 14:08 . 2014-03-07 04:43 10521840 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{8E2718D6-B992-4B66-9E3C-C3244D716D51}\mpengine.dll2014-04-12 01:40 . 2014-04-12 01:40 -------- d-----w- C:\_OTM2014-04-11 20:45 . 2014-04-11 20:45 -------- d-----w- C:\_OTL2014-04-11 20:23 . 2014-04-11 20:23 -------- d-----w- c:\users\Guest\AppData\Local\Diagnostics2014-04-09 16:13 . 2014-02-04 02:35 274880 ----a-w- c:\windows\system32\drivers\msiscsi.sys2014-04-08 16:22 . 2014-04-08 16:22 -------- d-----w- c:\users\Guest\AppData\Roaming\Malwarebytes2014-04-08 15:10 . 2014-04-08 15:11 -------- d-----w- c:\users\Guest\AppData\Local\Mozilla2014-03-25 21:34 . 2014-03-25 21:54 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl2014-03-25 21:34 . 2014-03-25 21:54 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe2014-03-19 19:58 . 2014-03-19 19:58 -------- d-----w- c:\users\Judith\AppData\Roaming\Oracle...(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))).2014-04-09 16:20 . 2013-02-09 02:40 90655440 ----a-w- c:\windows\system32\MRT.exe2014-03-04 09:17 . 2014-04-09 16:12 44032 ----a-w- c:\windows\apppatch\acwow64.dll2014-02-20 06:09 . 2014-02-20 06:09 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll2014-02-07 01:23 . 2014-03-12 23:12 3156480 ----a-w- c:\windows\system32\win32k.sys2014-02-04 02:32 . 2014-03-12 23:11 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll2014-02-04 02:32 . 2014-03-12 23:12 624128 ----a-w- c:\windows\system32\qedit.dll2014-02-04 02:04 . 2014-03-12 23:11 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll2014-02-04 02:04 . 2014-03-12 23:12 509440 ----a-w- c:\windows\SysWow64\qedit.dll2014-01-29 02:32 . 2014-03-12 23:12 484864 ----a-w- c:\windows\system32\wer.dll2014-01-29 02:06 . 2014-03-12 23:12 381440 ----a-w- c:\windows\SysWow64\wer.dll2014-01-28 02:32 . 2014-03-12 23:12 228864 ----a-w- c:\windows\system32\wwansvc.dll..((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))..*Note* empty entries & legit default entries are not shownREGEDIT4.[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]"F-Secure Hoster (53784)"="c:\program files (x86)\Frontier\fshoster32.exe" [2013-05-15 191424]"F-Secure Manager"="c:\program files (x86)\Frontier\apps\ComputerSecurity\Common\FSM32.EXE" [2013-08-14 310208]"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]"EEventManager"="c:\progra~2\EPSONS~1\EVENTM~1\EEventManager.exe" [2009-04-07 673616].c:\users\Judith\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk - c:\program files (x86)\Microsoft Office\Office14\ONENOTEM.EXE /tsr [2013-6-25 228552].[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]"ConsentPromptBehaviorAdmin"= 5 (0x5)"ConsentPromptBehaviorUser"= 3 (0x3)"EnableUIADesktopToggle"= 0 (0x0)"EnableSecureUIAPath"= 1 (0x1).[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]@="".[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]@="".R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]R2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam64.sys;c:\windows\SYSNATIVE\DRIVERS\wdcsam64.sys [x]R3 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]R4 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]R4 TMachInfo;TMachInfo;c:\program files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe;c:\program files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [x]R4 TOSHIBA HDD SSD Alert Service;TOSHIBA HDD SSD Alert Service;c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe;c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [x]S0 amd_sata;amd_sata;c:\windows\system32\DRIVERS\amd_sata.sys;c:\windows\SYSNATIVE\DRIVERS\amd_sata.sys [x]S0 amd_xata;amd_xata;c:\windows\system32\DRIVERS\amd_xata.sys;c:\windows\SYSNATIVE\DRIVERS\amd_xata.sys [x]S0 fsbts;fsbts;c:\windows\system32\Drivers\fsbts.sys;c:\windows\SYSNATIVE\Drivers\fsbts.sys [x]S1 F-Secure HIPS;F-Secure HIPS Driver;c:\program files (x86)\Frontier\apps\ComputerSecurity\HIPS\drivers\fshs.sys;c:\program files (x86)\Frontier\apps\ComputerSecurity\HIPS\drivers\fshs.sys [x]S1 fsvista;F-Secure Vista Support Driver;c:\program files (x86)\Frontier\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys;c:\program files (x86)\Frontier\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys [x]S2 fshoster;F-Secure Dll Hoster;c:\program files (x86)\Frontier\fshoster32.exe;c:\program files (x86)\Frontier\fshoster32.exe [x]S2 FSORSPClient;F-Secure ORSP Client;c:\program files (x86)\Frontier\apps\CCF_Reputation\fsorsp.exe;c:\program files (x86)\Frontier\apps\CCF_Reputation\fsorsp.exe [x]S3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys;c:\windows\SYSNATIVE\DRIVERS\dc3d.sys [x]S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys;c:\windows\SYSNATIVE\DRIVERS\ETD.sys [x]S3 F-Secure Gatekeeper;F-Secure Gatekeeper;c:\program files (x86)\Frontier\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys;c:\program files (x86)\Frontier\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys [x]S3 fsni;fsni;c:\program files (x86)\Frontier\apps\CCF_Scanning\fsni64.sys;c:\program files (x86)\Frontier\apps\CCF_Scanning\fsni64.sys [x]S3 FwLnk;FwLnk Driver;c:\windows\system32\DRIVERS\FwLnk.sys;c:\windows\SYSNATIVE\DRIVERS\FwLnk.sys [x]S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]S3 Point64;Microsoft Mouse and Keyboard Center Filter Driver;c:\windows\system32\DRIVERS\point64.sys;c:\windows\SYSNATIVE\DRIVERS\point64.sys [x]S3 RTL8192Ce;Realtek Wireless LAN 802.11n PCI-E NIC Driver;c:\windows\system32\DRIVERS\rtl8192Ce.sys;c:\windows\SYSNATIVE\DRIVERS\rtl8192Ce.sys [x]..Contents of the 'Scheduled Tasks' folder.2014-04-17 c:\windows\Tasks\Adobe Flash Player Updater.job- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-25 21:54]..--------- X64 Entries -----------..[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]"SmartAudio"="c:\program files\CONEXANT\SAII\SAIICpl.exe" [2010-12-14 316032]"TPwrMain"="c:\program files (x86)\TOSHIBA\Power Saver\TPwrMain.EXE" [bU]"SmoothView"="c:\program files (x86)\Toshiba\SmoothView\SmoothView.exe" [bU]"TosVolRegulator"="c:\program files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe" [2009-11-11 24376]"TosSENotify"="c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe" [2010-02-06 709976].------- Supplementary Scan -------.uLocal Page = c:\windows\system32\blank.htmmLocal Page = c:\windows\SysWOW64\blank.htmTCP: DhcpNameServer = 192.168.254.254FF - ProfilePath - c:\users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\cqjugvhh.default-1395345917665\FF - prefs.js: browser.search.selectedEngine - Google..[HKEY_LOCAL_MACHINE\system\ControlSet001\services\fshoster]"ImagePath"="\"c:\program files (x86)\Frontier\fshoster32.exe\" -hosterid:0".--------------------- LOCKED REGISTRY KEYS ---------------------.[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]@Denied: (A 2) (Everyone)@="FlashBroker""LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_77_ActiveX.exe,-101".[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]"Enabled"=dword:00000001.[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_77_ActiveX.exe".[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}".[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]@Denied: (A 2) (Everyone)@="IFlashBroker5".[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]@="{00020424-0000-0000-C000-000000000046}".[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}""Version"="1.0".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]@Denied: (A 2) (Everyone)@="FlashBroker""LocalizedString"="@c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_77_ActiveX.exe,-101".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]"Enabled"=dword:00000001.[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]@="c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_77_ActiveX.exe".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]@Denied: (A 2) (Everyone)@="Shockwave Flash Object".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_77.ocx""ThreadingModel"="Apartment".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]@="0".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]@="ShockwaveFlash.ShockwaveFlash.12".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_77.ocx, 1".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]@="{D27CDB6B-AE6D-11cf-96B8-444553540000}".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]@="1.0".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]@="ShockwaveFlash.ShockwaveFlash".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]@Denied: (A 2) (Everyone)@="Macromedia Flash Factory Object".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_77.ocx""ThreadingModel"="Apartment".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]@="FlashFactory.FlashFactory.1".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_77.ocx, 1".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]@="{D27CDB6B-AE6D-11cf-96B8-444553540000}".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]@="1.0".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]@="FlashFactory.FlashFactory".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]@Denied: (A 2) (Everyone)@="IFlashBroker5".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]@="{00020424-0000-0000-C000-000000000046}".[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}""Version"="1.0".[HKEY_LOCAL_MACHINE\software\Wow6432Node\F-Secure\My Services Agent\Protected]@Denied: ) (Everyone)"AgentIdentifier"="ef59e152-a984-4b10-b488-fbfaaac30bdb""AuthorizationCode"="""53784_AgentIdentifier"="ef59e152-a984-4b10-b488-fbfaaac30bdb".[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]@Denied: (A) (Everyone)"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}".[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]@Denied: (A) (Everyone).[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]"Key"="ActionsPane3""Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd".[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]@Denied: (Full) (Everyone).Completion time: 2014-04-17 14:46:24ComboFix-quarantined-files.txt 2014-04-17 21:46ComboFix2.txt 2014-04-17 19:54.Pre-Run: 265,447,845,888 bytes freePost-Run: 265,382,338,560 bytes free.- - End Of File - - B216CAAEB08F9FC2086E5040E2694B4A5B5E648D12FCADC244C1EC30318E1EB9 Link to post Share on other sites More sharing options...
kevinf80 Posted April 17, 2014 ID:819977 Share Posted April 17, 2014 Thank you, post ESET log when ready, also give an update on any remaining issues or concerns.... Link to post Share on other sites More sharing options...
whonew Posted April 17, 2014 Author ID:820023 Share Posted April 17, 2014 I am not having fun with Eset , got it to run and do not know where the text is Link to post Share on other sites More sharing options...
whonew Posted April 18, 2014 Author ID:820089 Share Posted April 18, 2014 I have not log but the Eset did not find any thing Link to post Share on other sites More sharing options...
kevinf80 Posted April 18, 2014 ID:820211 Share Posted April 18, 2014 When the scan is complete If no threats were found <<<<<-------- put a checkmark in "Uninstall application on close" close program report to me that nothing was found <<<<<------ That is what the posted instructions tell you to do..... What is the current status of your system, are there any remaining issues or concerns relating to malware or infection? Link to post Share on other sites More sharing options...
whonew Posted April 18, 2014 Author ID:820309 Share Posted April 18, 2014 Nothing was found , thank you. I have real problems typing and sometimes asked for the computer pass word, that I would normally be asked for when I turn on the computer. That password was removed from the main account for us to run these programs and had never appeared while simply using the computer on the main Windows screen or files or folders. Also if I put a pass word it will not do any thing so I leave it blank and then press Ok and then it goes away. I think this is a very unstable computer Link to post Share on other sites More sharing options...
kevinf80 Posted April 18, 2014 ID:820327 Share Posted April 18, 2014 Regarding the password issue, go here: http://www.sevenforums.com/tutorials/288-password-create-user-account.html follow those instructions to set up a user account password.. Next, Close all windows, Select > start icon > all programs > accessories > Right click on "command prompt" > select > Run as administrator > ok any alerts > at the command prompt type or copy and paste sfc /scannow > then tap enter. When finished type exit Tap enter, re-boot your PC.***Note the space between sfc and /scannow.To get report, open an elevated command prompt, type or copy and paste:findstr /c:"[sR]" %windir%\logs\cbs\cbs.log >%userprofile%\Desktop\sfcdetails.txtPost that log, should be found on your Desktop.... Let me know if there is any improvement after run SFC... Link to post Share on other sites More sharing options...
whonew Posted April 18, 2014 Author ID:820371 Share Posted April 18, 2014 I am not sure I understand this because we already have a main admin account and one guest account. The only thing I did was remove the pass word, the account still appears Link to post Share on other sites More sharing options...
kevinf80 Posted April 18, 2014 ID:820374 Share Posted April 18, 2014 The instruction is to ad a password to any account you choose, if you look at the first image in the instructions you will see that is an Admin account, all you have to do is follow the instructions from there and add a password. You did say the Admin account had the password removed, if you do not want the password back then just ignore the the instructions. Maybe I misread your previous reply... Link to post Share on other sites More sharing options...
whonew Posted April 18, 2014 Author ID:820432 Share Posted April 18, 2014 2014-04-18 11:02:35, Info CSI 00000009 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:02:35, Info CSI 0000000a [sR] Beginning Verify and Repair transaction2014-04-18 11:02:37, Info CSI 0000000c [sR] Verify complete2014-04-18 11:02:38, Info CSI 0000000d [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:02:38, Info CSI 0000000e [sR] Beginning Verify and Repair transaction2014-04-18 11:02:40, Info CSI 00000010 [sR] Verify complete2014-04-18 11:02:41, Info CSI 00000011 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:02:41, Info CSI 00000012 [sR] Beginning Verify and Repair transaction2014-04-18 11:02:43, Info CSI 00000014 [sR] Verify complete2014-04-18 11:02:44, Info CSI 00000015 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:02:44, Info CSI 00000016 [sR] Beginning Verify and Repair transaction2014-04-18 11:02:46, Info CSI 00000018 [sR] Verify complete2014-04-18 11:02:46, Info CSI 00000019 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:02:46, Info CSI 0000001a [sR] Beginning Verify and Repair transaction2014-04-18 11:02:49, Info CSI 0000001c [sR] Verify complete2014-04-18 11:02:50, Info CSI 0000001d [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:02:50, Info CSI 0000001e [sR] Beginning Verify and Repair transaction2014-04-18 11:02:55, Info CSI 00000020 [sR] Verify complete2014-04-18 11:02:55, Info CSI 00000021 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:02:55, Info CSI 00000022 [sR] Beginning Verify and Repair transaction2014-04-18 11:03:00, Info CSI 00000024 [sR] Verify complete2014-04-18 11:03:00, Info CSI 00000025 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:03:00, Info CSI 00000026 [sR] Beginning Verify and Repair transaction2014-04-18 11:03:03, Info CSI 00000028 [sR] Verify complete2014-04-18 11:03:04, Info CSI 00000029 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:03:04, Info CSI 0000002a [sR] Beginning Verify and Repair transaction2014-04-18 11:03:08, Info CSI 0000002c [sR] Verify complete2014-04-18 11:03:08, Info CSI 0000002d [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:03:08, Info CSI 0000002e [sR] Beginning Verify and Repair transaction2014-04-18 11:03:14, Info CSI 00000030 [sR] Verify complete2014-04-18 11:03:14, Info CSI 00000031 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:03:14, Info CSI 00000032 [sR] Beginning Verify and Repair transaction2014-04-18 11:03:19, Info CSI 00000034 [sR] Verify complete2014-04-18 11:03:19, Info CSI 00000035 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:03:19, Info CSI 00000036 [sR] Beginning Verify and Repair transaction2014-04-18 11:03:23, Info CSI 00000038 [sR] Verify complete2014-04-18 11:03:23, Info CSI 00000039 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:03:23, Info CSI 0000003a [sR] Beginning Verify and Repair transaction2014-04-18 11:03:30, Info CSI 0000003d [sR] Verify complete2014-04-18 11:03:30, Info CSI 0000003e [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:03:30, Info CSI 0000003f [sR] Beginning Verify and Repair transaction2014-04-18 11:03:40, Info CSI 00000043 [sR] Verify complete2014-04-18 11:03:41, Info CSI 00000044 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:03:41, Info CSI 00000045 [sR] Beginning Verify and Repair transaction2014-04-18 11:03:47, Info CSI 00000048 [sR] Verify complete2014-04-18 11:03:48, Info CSI 00000049 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:03:48, Info CSI 0000004a [sR] Beginning Verify and Repair transaction2014-04-18 11:03:54, Info CSI 0000004d [sR] Verify complete2014-04-18 11:03:55, Info CSI 0000004e [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:03:55, Info CSI 0000004f [sR] Beginning Verify and Repair transaction2014-04-18 11:04:03, Info CSI 00000051 [sR] Verify complete2014-04-18 11:04:04, Info CSI 00000052 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:04:04, Info CSI 00000053 [sR] Beginning Verify and Repair transaction2014-04-18 11:04:17, Info CSI 00000078 [sR] Verify complete2014-04-18 11:04:18, Info CSI 00000079 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:04:18, Info CSI 0000007a [sR] Beginning Verify and Repair transaction2014-04-18 11:04:26, Info CSI 0000007c [sR] Verify complete2014-04-18 11:04:26, Info CSI 0000007d [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:04:26, Info CSI 0000007e [sR] Beginning Verify and Repair transaction2014-04-18 11:04:33, Info CSI 00000080 [sR] Verify complete2014-04-18 11:04:34, Info CSI 00000081 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:04:34, Info CSI 00000082 [sR] Beginning Verify and Repair transaction2014-04-18 11:04:40, Info CSI 00000084 [sR] Verify complete2014-04-18 11:04:41, Info CSI 00000085 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:04:41, Info CSI 00000086 [sR] Beginning Verify and Repair transaction2014-04-18 11:04:49, Info CSI 00000088 [sR] Verify complete2014-04-18 11:04:50, Info CSI 00000089 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:04:50, Info CSI 0000008a [sR] Beginning Verify and Repair transaction2014-04-18 11:04:56, Info CSI 0000008c [sR] Verify complete2014-04-18 11:04:56, Info CSI 0000008d [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:04:56, Info CSI 0000008e [sR] Beginning Verify and Repair transaction2014-04-18 11:05:08, Info CSI 00000092 [sR] Verify complete2014-04-18 11:05:09, Info CSI 00000093 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:05:09, Info CSI 00000094 [sR] Beginning Verify and Repair transaction2014-04-18 11:05:22, Info CSI 000000b5 [sR] Verify complete2014-04-18 11:05:23, Info CSI 000000b6 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:05:23, Info CSI 000000b7 [sR] Beginning Verify and Repair transaction2014-04-18 11:05:37, Info CSI 000000b9 [sR] Verify complete2014-04-18 11:05:38, Info CSI 000000ba [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:05:38, Info CSI 000000bb [sR] Beginning Verify and Repair transaction2014-04-18 11:05:56, Info CSI 000000bf [sR] Verify complete2014-04-18 11:05:57, Info CSI 000000c0 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:05:57, Info CSI 000000c1 [sR] Beginning Verify and Repair transaction2014-04-18 11:06:01, Info CSI 000000c3 [sR] Verify complete2014-04-18 11:06:01, Info CSI 000000c4 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:06:01, Info CSI 000000c5 [sR] Beginning Verify and Repair transaction2014-04-18 11:06:04, Info CSI 000000c7 [sR] Verify complete2014-04-18 11:06:04, Info CSI 000000c8 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:06:04, Info CSI 000000c9 [sR] Beginning Verify and Repair transaction2014-04-18 11:06:08, Info CSI 000000cb [sR] Verify complete2014-04-18 11:06:09, Info CSI 000000cc [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:06:09, Info CSI 000000cd [sR] Beginning Verify and Repair transaction2014-04-18 11:06:24, Info CSI 000000e0 [sR] Verify complete2014-04-18 11:06:24, Info CSI 000000e1 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:06:24, Info CSI 000000e2 [sR] Beginning Verify and Repair transaction2014-04-18 11:06:29, Info CSI 000000e4 [sR] Verify complete2014-04-18 11:06:29, Info CSI 000000e5 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:06:29, Info CSI 000000e6 [sR] Beginning Verify and Repair transaction2014-04-18 11:06:34, Info CSI 000000e8 [sR] Verify complete2014-04-18 11:06:34, Info CSI 000000e9 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:06:34, Info CSI 000000ea [sR] Beginning Verify and Repair transaction2014-04-18 11:06:39, Info CSI 000000ec [sR] Verify complete2014-04-18 11:06:40, Info CSI 000000ed [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:06:40, Info CSI 000000ee [sR] Beginning Verify and Repair transaction2014-04-18 11:06:47, Info CSI 000000f0 [sR] Verify complete2014-04-18 11:06:48, Info CSI 000000f1 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:06:48, Info CSI 000000f2 [sR] Beginning Verify and Repair transaction2014-04-18 11:07:03, Info CSI 000000f6 [sR] Verify complete2014-04-18 11:07:04, Info CSI 000000f7 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:07:04, Info CSI 000000f8 [sR] Beginning Verify and Repair transaction2014-04-18 11:07:09, Info CSI 000000fa [sR] Verify complete2014-04-18 11:07:09, Info CSI 000000fb [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:07:09, Info CSI 000000fc [sR] Beginning Verify and Repair transaction2014-04-18 11:07:13, Info CSI 000000fe [sR] Verify complete2014-04-18 11:07:13, Info CSI 000000ff [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:07:13, Info CSI 00000100 [sR] Beginning Verify and Repair transaction2014-04-18 11:07:25, Info CSI 00000102 [sR] Verify complete2014-04-18 11:07:26, Info CSI 00000103 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:07:26, Info CSI 00000104 [sR] Beginning Verify and Repair transaction2014-04-18 11:07:35, Info CSI 00000106 [sR] Verify complete2014-04-18 11:07:36, Info CSI 00000107 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:07:36, Info CSI 00000108 [sR] Beginning Verify and Repair transaction2014-04-18 11:07:44, Info CSI 0000010a [sR] Verify complete2014-04-18 11:07:45, Info CSI 0000010b [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:07:45, Info CSI 0000010c [sR] Beginning Verify and Repair transaction2014-04-18 11:08:03, Info CSI 00000124 [sR] Verify complete2014-04-18 11:08:04, Info CSI 00000125 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:08:04, Info CSI 00000126 [sR] Beginning Verify and Repair transaction2014-04-18 11:08:13, Info CSI 00000128 [sR] Verify complete2014-04-18 11:08:14, Info CSI 00000129 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:08:14, Info CSI 0000012a [sR] Beginning Verify and Repair transaction2014-04-18 11:08:36, Info CSI 0000012c [sR] Verify complete2014-04-18 11:08:37, Info CSI 0000012d [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:08:37, Info CSI 0000012e [sR] Beginning Verify and Repair transaction2014-04-18 11:08:53, Info CSI 00000131 [sR] Verify complete2014-04-18 11:08:54, Info CSI 00000132 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:08:54, Info CSI 00000133 [sR] Beginning Verify and Repair transaction2014-04-18 11:09:03, Info CSI 00000135 [sR] Verify complete2014-04-18 11:09:04, Info CSI 00000136 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:09:04, Info CSI 00000137 [sR] Beginning Verify and Repair transaction2014-04-18 11:09:14, Info CSI 00000139 [sR] Verify complete2014-04-18 11:09:15, Info CSI 0000013a [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:09:15, Info CSI 0000013b [sR] Beginning Verify and Repair transaction2014-04-18 11:09:23, Info CSI 0000013d [sR] Verify complete2014-04-18 11:09:24, Info CSI 0000013e [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:09:24, Info CSI 0000013f [sR] Beginning Verify and Repair transaction2014-04-18 11:09:30, Info CSI 00000141 [sR] Verify complete2014-04-18 11:09:31, Info CSI 00000142 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:09:31, Info CSI 00000143 [sR] Beginning Verify and Repair transaction2014-04-18 11:09:38, Info CSI 00000147 [sR] Verify complete2014-04-18 11:09:39, Info CSI 00000148 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:09:39, Info CSI 00000149 [sR] Beginning Verify and Repair transaction2014-04-18 11:10:02, Info CSI 0000014b [sR] Verify complete2014-04-18 11:10:03, Info CSI 0000014c [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:10:03, Info CSI 0000014d [sR] Beginning Verify and Repair transaction2014-04-18 11:10:11, Info CSI 00000150 [sR] Verify complete2014-04-18 11:10:12, Info CSI 00000151 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:10:12, Info CSI 00000152 [sR] Beginning Verify and Repair transaction2014-04-18 11:10:21, Info CSI 00000155 [sR] Verify complete2014-04-18 11:10:22, Info CSI 00000156 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:10:22, Info CSI 00000157 [sR] Beginning Verify and Repair transaction2014-04-18 11:10:30, Info CSI 00000159 [sR] Verify complete2014-04-18 11:10:31, Info CSI 0000015a [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:10:31, Info CSI 0000015b [sR] Beginning Verify and Repair transaction2014-04-18 11:10:44, Info CSI 0000015e [sR] Verify complete2014-04-18 11:10:45, Info CSI 0000015f [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:10:45, Info CSI 00000160 [sR] Beginning Verify and Repair transaction2014-04-18 11:10:53, Info CSI 00000162 [sR] Verify complete2014-04-18 11:10:54, Info CSI 00000163 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:10:54, Info CSI 00000164 [sR] Beginning Verify and Repair transaction2014-04-18 11:11:03, Info CSI 00000166 [sR] Verify complete2014-04-18 11:11:04, Info CSI 00000167 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:11:04, Info CSI 00000168 [sR] Beginning Verify and Repair transaction2014-04-18 11:11:11, Info CSI 0000016a [sR] Verify complete2014-04-18 11:11:12, Info CSI 0000016b [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:11:12, Info CSI 0000016c [sR] Beginning Verify and Repair transaction2014-04-18 11:11:23, Info CSI 0000016f [sR] Verify complete2014-04-18 11:11:23, Info CSI 00000170 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:11:23, Info CSI 00000171 [sR] Beginning Verify and Repair transaction2014-04-18 11:11:28, Info CSI 00000173 [sR] Verify complete2014-04-18 11:11:29, Info CSI 00000174 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:11:29, Info CSI 00000175 [sR] Beginning Verify and Repair transaction2014-04-18 11:11:36, Info CSI 00000178 [sR] Verify complete2014-04-18 11:11:37, Info CSI 00000179 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:11:37, Info CSI 0000017a [sR] Beginning Verify and Repair transaction2014-04-18 11:11:48, Info CSI 0000017c [sR] Verify complete2014-04-18 11:11:48, Info CSI 0000017d [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:11:48, Info CSI 0000017e [sR] Beginning Verify and Repair transaction2014-04-18 11:11:56, Info CSI 00000182 [sR] Verify complete2014-04-18 11:11:57, Info CSI 00000183 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:11:57, Info CSI 00000184 [sR] Beginning Verify and Repair transaction2014-04-18 11:12:07, Info CSI 00000186 [sR] Verify complete2014-04-18 11:12:07, Info CSI 00000187 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:12:07, Info CSI 00000188 [sR] Beginning Verify and Repair transaction2014-04-18 11:12:18, Info CSI 0000018b [sR] Verify complete2014-04-18 11:12:19, Info CSI 0000018c [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:12:19, Info CSI 0000018d [sR] Beginning Verify and Repair transaction2014-04-18 11:12:26, Info CSI 0000018f [sR] Verify complete2014-04-18 11:12:27, Info CSI 00000190 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:12:27, Info CSI 00000191 [sR] Beginning Verify and Repair transaction2014-04-18 11:12:30, Info CSI 00000193 [sR] Verify complete2014-04-18 11:12:31, Info CSI 00000194 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:12:31, Info CSI 00000195 [sR] Beginning Verify and Repair transaction2014-04-18 11:12:39, Info CSI 00000197 [sR] Verify complete2014-04-18 11:12:40, Info CSI 00000198 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:12:40, Info CSI 00000199 [sR] Beginning Verify and Repair transaction2014-04-18 11:12:47, Info CSI 0000019b [sR] Verify complete2014-04-18 11:12:48, Info CSI 0000019c [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:12:48, Info CSI 0000019d [sR] Beginning Verify and Repair transaction2014-04-18 11:12:57, Info CSI 0000019f [sR] Verify complete2014-04-18 11:12:58, Info CSI 000001a0 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:12:58, Info CSI 000001a1 [sR] Beginning Verify and Repair transaction2014-04-18 11:13:04, Info CSI 000001a3 [sR] Verify complete2014-04-18 11:13:04, Info CSI 000001a4 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:13:04, Info CSI 000001a5 [sR] Beginning Verify and Repair transaction2014-04-18 11:13:12, Info CSI 000001a7 [sR] Verify complete2014-04-18 11:13:13, Info CSI 000001a8 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:13:13, Info CSI 000001a9 [sR] Beginning Verify and Repair transaction2014-04-18 11:13:34, Info CSI 000001ab [sR] Verify complete2014-04-18 11:13:35, Info CSI 000001ac [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:13:35, Info CSI 000001ad [sR] Beginning Verify and Repair transaction2014-04-18 11:14:07, Info CSI 000001af [sR] Verify complete2014-04-18 11:14:08, Info CSI 000001b0 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:14:08, Info CSI 000001b1 [sR] Beginning Verify and Repair transaction2014-04-18 11:14:19, Info CSI 000001b3 [sR] Verify complete2014-04-18 11:14:19, Info CSI 000001b4 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:14:19, Info CSI 000001b5 [sR] Beginning Verify and Repair transaction2014-04-18 11:14:27, Info CSI 000001b7 [sR] Verify complete2014-04-18 11:14:27, Info CSI 000001b8 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:14:27, Info CSI 000001b9 [sR] Beginning Verify and Repair transaction2014-04-18 11:14:32, Info CSI 000001bb [sR] Verify complete2014-04-18 11:14:32, Info CSI 000001bc [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:14:32, Info CSI 000001bd [sR] Beginning Verify and Repair transaction2014-04-18 11:14:37, Info CSI 000001bf [sR] Verify complete2014-04-18 11:14:38, Info CSI 000001c0 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:14:38, Info CSI 000001c1 [sR] Beginning Verify and Repair transaction2014-04-18 11:14:46, Info CSI 000001c3 [sR] Verify complete2014-04-18 11:14:47, Info CSI 000001c4 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:14:47, Info CSI 000001c5 [sR] Beginning Verify and Repair transaction2014-04-18 11:14:50, Info CSI 000001c7 [sR] Verify complete2014-04-18 11:14:50, Info CSI 000001c8 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:14:50, Info CSI 000001c9 [sR] Beginning Verify and Repair transaction2014-04-18 11:14:52, Info CSI 000001cb [sR] Verify complete2014-04-18 11:14:52, Info CSI 000001cc [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:14:52, Info CSI 000001cd [sR] Beginning Verify and Repair transaction2014-04-18 11:15:02, Info CSI 000001d5 [sR] Verify complete2014-04-18 11:15:02, Info CSI 000001d6 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:15:02, Info CSI 000001d7 [sR] Beginning Verify and Repair transaction2014-04-18 11:15:07, Info CSI 000001d9 [sR] Verify complete2014-04-18 11:15:07, Info CSI 000001da [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:15:07, Info CSI 000001db [sR] Beginning Verify and Repair transaction2014-04-18 11:15:12, Info CSI 000001dd [sR] Verify complete2014-04-18 11:15:13, Info CSI 000001de [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:15:13, Info CSI 000001df [sR] Beginning Verify and Repair transaction2014-04-18 11:15:17, Info CSI 000001e1 [sR] Verify complete2014-04-18 11:15:18, Info CSI 000001e2 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:15:18, Info CSI 000001e3 [sR] Beginning Verify and Repair transaction2014-04-18 11:15:26, Info CSI 000001e5 [sR] Verify complete2014-04-18 11:15:26, Info CSI 000001e6 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:15:26, Info CSI 000001e7 [sR] Beginning Verify and Repair transaction2014-04-18 11:15:39, Info CSI 000001ea [sR] Verify complete2014-04-18 11:15:39, Info CSI 000001eb [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:15:39, Info CSI 000001ec [sR] Beginning Verify and Repair transaction2014-04-18 11:15:43, Info CSI 000001ee [sR] Verify complete2014-04-18 11:15:44, Info CSI 000001ef [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:15:44, Info CSI 000001f0 [sR] Beginning Verify and Repair transaction2014-04-18 11:15:47, Info CSI 000001f2 [sR] Verify complete2014-04-18 11:15:48, Info CSI 000001f3 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:15:48, Info CSI 000001f4 [sR] Beginning Verify and Repair transaction2014-04-18 11:16:05, Info CSI 000001f9 [sR] Verify complete2014-04-18 11:16:05, Info CSI 000001fa [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:16:05, Info CSI 000001fb [sR] Beginning Verify and Repair transaction2014-04-18 11:16:20, Info CSI 000001fe [sR] Verify complete2014-04-18 11:16:20, Info CSI 000001ff [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:16:20, Info CSI 00000200 [sR] Beginning Verify and Repair transaction2014-04-18 11:16:30, Info CSI 00000204 [sR] Verify complete2014-04-18 11:16:31, Info CSI 00000205 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:16:31, Info CSI 00000206 [sR] Beginning Verify and Repair transaction2014-04-18 11:16:42, Info CSI 00000211 [sR] Verify complete2014-04-18 11:16:43, Info CSI 00000212 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:16:43, Info CSI 00000213 [sR] Beginning Verify and Repair transaction2014-04-18 11:16:54, Info CSI 0000021a [sR] Verify complete2014-04-18 11:16:54, Info CSI 0000021b [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:16:54, Info CSI 0000021c [sR] Beginning Verify and Repair transaction2014-04-18 11:17:03, Info CSI 0000021e [sR] Verify complete2014-04-18 11:17:04, Info CSI 0000021f [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:17:04, Info CSI 00000220 [sR] Beginning Verify and Repair transaction2014-04-18 11:17:10, Info CSI 00000224 [sR] Verify complete2014-04-18 11:17:10, Info CSI 00000225 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:17:10, Info CSI 00000226 [sR] Beginning Verify and Repair transaction2014-04-18 11:17:17, Info CSI 00000228 [sR] Verify complete2014-04-18 11:17:18, Info CSI 00000229 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:17:18, Info CSI 0000022a [sR] Beginning Verify and Repair transaction2014-04-18 11:17:29, Info CSI 0000024f [sR] Verify complete2014-04-18 11:17:29, Info CSI 00000250 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:17:29, Info CSI 00000251 [sR] Beginning Verify and Repair transaction2014-04-18 11:17:36, Info CSI 00000253 [sR] Verify complete2014-04-18 11:17:37, Info CSI 00000254 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:17:37, Info CSI 00000255 [sR] Beginning Verify and Repair transaction2014-04-18 11:17:42, Info CSI 00000257 [sR] Verify complete2014-04-18 11:17:43, Info CSI 00000258 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:17:43, Info CSI 00000259 [sR] Beginning Verify and Repair transaction2014-04-18 11:17:50, Info CSI 0000025b [sR] Verify complete2014-04-18 11:17:51, Info CSI 0000025c [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:17:51, Info CSI 0000025d [sR] Beginning Verify and Repair transaction2014-04-18 11:17:57, Info CSI 0000026b [sR] Verify complete2014-04-18 11:17:58, Info CSI 0000026c [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:17:58, Info CSI 0000026d [sR] Beginning Verify and Repair transaction2014-04-18 11:18:09, Info CSI 0000026f [sR] Verify complete2014-04-18 11:18:09, Info CSI 00000270 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:18:09, Info CSI 00000271 [sR] Beginning Verify and Repair transaction2014-04-18 11:18:21, Info CSI 0000027f [sR] Verify complete2014-04-18 11:18:21, Info CSI 00000280 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:18:21, Info CSI 00000281 [sR] Beginning Verify and Repair transaction2014-04-18 11:18:26, Info CSI 00000283 [sR] Verify complete2014-04-18 11:18:27, Info CSI 00000284 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:18:27, Info CSI 00000285 [sR] Beginning Verify and Repair transaction2014-04-18 11:18:32, Info CSI 00000287 [sR] Verify complete2014-04-18 11:18:33, Info CSI 00000288 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:18:33, Info CSI 00000289 [sR] Beginning Verify and Repair transaction2014-04-18 11:18:40, Info CSI 0000028c [sR] Verify complete2014-04-18 11:18:41, Info CSI 0000028d [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:18:41, Info CSI 0000028e [sR] Beginning Verify and Repair transaction2014-04-18 11:18:44, Info CSI 00000290 [sR] Verify complete2014-04-18 11:18:45, Info CSI 00000291 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:18:45, Info CSI 00000292 [sR] Beginning Verify and Repair transaction2014-04-18 11:18:54, Info CSI 00000294 [sR] Verify complete2014-04-18 11:18:55, Info CSI 00000295 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:18:55, Info CSI 00000296 [sR] Beginning Verify and Repair transaction2014-04-18 11:19:03, Info CSI 00000298 [sR] Verify complete2014-04-18 11:19:03, Info CSI 00000299 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:19:03, Info CSI 0000029a [sR] Beginning Verify and Repair transaction2014-04-18 11:19:13, Info CSI 000002a1 [sR] Verify complete2014-04-18 11:19:14, Info CSI 000002a2 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:19:14, Info CSI 000002a3 [sR] Beginning Verify and Repair transaction2014-04-18 11:19:24, Info CSI 000002b8 [sR] Verify complete2014-04-18 11:19:25, Info CSI 000002b9 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:19:25, Info CSI 000002ba [sR] Beginning Verify and Repair transaction2014-04-18 11:19:47, Info CSI 000002bc [sR] Verify complete2014-04-18 11:19:47, Info CSI 000002bd [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:19:47, Info CSI 000002be [sR] Beginning Verify and Repair transaction2014-04-18 11:19:53, Info CSI 000002c0 [sR] Verify complete2014-04-18 11:19:53, Info CSI 000002c1 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:19:53, Info CSI 000002c2 [sR] Beginning Verify and Repair transaction2014-04-18 11:19:59, Info CSI 000002c4 [sR] Verify complete2014-04-18 11:19:59, Info CSI 000002c5 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:19:59, Info CSI 000002c6 [sR] Beginning Verify and Repair transaction2014-04-18 11:20:05, Info CSI 000002ca [sR] Verify complete2014-04-18 11:20:06, Info CSI 000002cb [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:20:06, Info CSI 000002cc [sR] Beginning Verify and Repair transaction2014-04-18 11:20:12, Info CSI 000002ce [sR] Verify complete2014-04-18 11:20:13, Info CSI 000002cf [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:20:13, Info CSI 000002d0 [sR] Beginning Verify and Repair transaction2014-04-18 11:20:21, Info CSI 000002d2 [sR] Verify complete2014-04-18 11:20:21, Info CSI 000002d3 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:20:21, Info CSI 000002d4 [sR] Beginning Verify and Repair transaction2014-04-18 11:20:27, Info CSI 000002d6 [sR] Verify complete2014-04-18 11:20:28, Info CSI 000002d7 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:20:28, Info CSI 000002d8 [sR] Beginning Verify and Repair transaction2014-04-18 11:20:34, Info CSI 000002db [sR] Verify complete2014-04-18 11:20:35, Info CSI 000002dc [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:20:35, Info CSI 000002dd [sR] Beginning Verify and Repair transaction2014-04-18 11:20:41, Info CSI 000002df [sR] Verify complete2014-04-18 11:20:41, Info CSI 000002e0 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:20:41, Info CSI 000002e1 [sR] Beginning Verify and Repair transaction2014-04-18 11:20:48, Info CSI 000002e3 [sR] Verify complete2014-04-18 11:20:49, Info CSI 000002e4 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:20:49, Info CSI 000002e5 [sR] Beginning Verify and Repair transaction2014-04-18 11:20:57, Info CSI 000002e8 [sR] Verify complete2014-04-18 11:20:57, Info CSI 000002e9 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:20:57, Info CSI 000002ea [sR] Beginning Verify and Repair transaction2014-04-18 11:21:02, Info CSI 000002ec [sR] Verify complete2014-04-18 11:21:03, Info CSI 000002ed [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:21:03, Info CSI 000002ee [sR] Beginning Verify and Repair transaction2014-04-18 11:21:12, Info CSI 000002f0 [sR] Verify complete2014-04-18 11:21:12, Info CSI 000002f1 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:21:12, Info CSI 000002f2 [sR] Beginning Verify and Repair transaction2014-04-18 11:21:18, Info CSI 000002f4 [sR] Verify complete2014-04-18 11:21:19, Info CSI 000002f5 [sR] Verifying 100 (0x0000000000000064) components2014-04-18 11:21:19, Info CSI 000002f6 [sR] Beginning Verify and Repair transaction2014-04-18 11:21:26, Info CSI 000002f8 [sR] Verify complete2014-04-18 11:21:27, Info CSI 000002f9 [sR] Verifying 41 (0x0000000000000029) components2014-04-18 11:21:27, Info CSI 000002fa [sR] Beginning Verify and Repair transaction2014-04-18 11:21:29, Info CSI 000002fc [sR] Verify complete2014-04-18 11:21:29, Info CSI 000002fd [sR] Repairing 0 components2014-04-18 11:21:29, Info CSI 000002fe [sR] Beginning Verify and Repair transaction2014-04-18 11:21:29, Info CSI 00000300 [sR] Repair complete Link to post Share on other sites More sharing options...
kevinf80 Posted April 18, 2014 ID:820471 Share Posted April 18, 2014 Let me know if there is any improvement after run SFC... Link to post Share on other sites More sharing options...
whonew Posted April 18, 2014 Author ID:820476 Share Posted April 18, 2014 The only way I will know is to start typing and occasionally the cursor jumps out of the page , off the line of ty appear pe and it appearsll that it is still oing it right on this page. I am finding it difficult to respond due to the random jump around of the mouse's cursor Link to post Share on other sites More sharing options...
kevinf80 Posted April 18, 2014 ID:820534 Share Posted April 18, 2014 Can you open Device Manager, are there any exclamation or question marks against Keyboards or Mice and other pointing devices Link to post Share on other sites More sharing options...
whonew Posted April 19, 2014 Author ID:820573 Share Posted April 19, 2014 No there are no question marks or exclamation marks, Can you walk me through moving One Note and putting Note Pad or Word Pad for on line notes , Right now if I want to same something it goes to Note Pad and I don't like it and , just out of curiosity could that cause the problem ? Can not hurt to try . My daughter who once worked for lynex is having a similar problem. I just opened up Power Point and picked a new blank page and saw this in the middle what is osi 00000009 [sR] Link to post Share on other sites More sharing options...
kevinf80 Posted April 19, 2014 ID:820628 Share Posted April 19, 2014 What is One Note, I do not see it listed in your installed programs list? Link to post Share on other sites More sharing options...
Recommended Posts