Jump to content

Recommended Posts

Run Combofix from your main account. I have not asked that go looking for Combofix folders, If Combofix is on your system it would appear on your Desktop, if it aint there just continue with the instructions.

 

If you really feel my requests are beyond your scope maybe you should consider taking your PC to a repair facility. I did believe we had your system clean at one point, unfortunately we find ourselves back to square one.

Combofix is a program that carries out combination fixes, it is not really difficult to run. Download the tool and save direct to your Desktop, turn off your security. Run Combofix, sit back and let it run, finish and produce a log.

When done turn your security back on, post the log....

 

Kevin.....

Share this post


Link to post
Share on other sites

I  think I need a good nights sleep before I try this, I am trying to remember what happened the last time I used Combo Fix and think I made a mess. Will download in morning , you might have more faith in me than I do

Share this post


Link to post
Share on other sites

Thanks for the update, CF is really straightforward as long as you follow the instructions... It will create a fresh restore point and an ERUNT back up before it makes any changes so try not to worry...

 

Kevin

Share this post


Link to post
Share on other sites

one more question , I can not use the keypad , it  was bonkers shortly after we purchased the machine . There is a plug in the USB port , if I remove it there is no way to move around , keys did not help they simply locked up. Oh my, it is so difficult just to type a few sentences.  Can I leave that plug in? if not then I may have to stop here. Also The instruction page or URL gave me a very large pop ad.

Share this post


Link to post
Share on other sites

Just leave your system as it is whatever you have plugged in, if you need it, then use it. Not sure how or why you got a popup from the links, they work fine for me. See if you can run Combofix and post the produced log...

Share this post


Link to post
Share on other sites

I am now being told that this web site is an unsecure connection and went ahead and accepted, and now I can not find that log

Share this post


Link to post
Share on other sites

I forgot to unplug the USB printer , it was the only way I could get a print out of the Instructions for Combo Fix and I can not find the log that Combo Fix did once I closed the note pad, I lost it and it is not on top

he deskt

Share this post


Link to post
Share on other sites

I had to dig for this

 

ComboFix 14-04-12.01 - Judith 04/17/2014  12:39:38.1.2 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.2663.1178 [GMT -7:00]
Running from: c:\users\Judith\Desktop\ComboFix.exe
AV: Computer Security *Disabled/Updated* {15414183-282E-D62C-CA37-EF24860A2F17}
SP: Computer Security *Disabled/Updated* {AE20A067-0E14-D9A2-F087-D456FD8D65AA}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Judith\AppData\Local\Microsoft\Windows\Temporary Internet Files\{3513DBB1-033A-4BB0-B4E7-7BFBB778DC2F}.xps
c:\users\Judith\AppData\Local\Microsoft\Windows\Temporary Internet Files\{3659C6DE-3A49-4FCC-B01C-21F6B1815B39}.xps
c:\users\Judith\AppData\Local\Microsoft\Windows\Temporary Internet Files\{3F9DE08A-3865-408C-A4B3-945562055E1F}.xps
c:\users\Judith\AppData\Local\Microsoft\Windows\Temporary Internet Files\{82A017FB-5F01-40CA-BD8D-25F665ECE559}.xps
c:\users\Judith\AppData\Local\Microsoft\Windows\Temporary Internet Files\{E8F44D2D-EE47-4EAE-A257-B61B12711DD4}.xps
.
.
(((((((((((((((((((((((((   Files Created from 2014-03-17 to 2014-04-17  )))))))))))))))))))))))))))))))
.
.
2014-04-17 19:49 . 2014-04-17 19:49 -------- d-----w- c:\users\Guest\AppData\Local\temp
2014-04-17 19:49 . 2014-04-17 19:49 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-04-17 18:56 . 2007-12-07 00:08 108032 ----a-w- c:\windows\system32\E_ILMEMA.DLL
2014-04-17 18:56 . 2007-12-07 00:01 81408 ----a-w- c:\windows\system32\E_IBCBEMA.DLL
2014-04-17 18:07 . 2014-04-17 18:07 -------- d-----w- c:\users\Judith\AppData\Roaming\EPSON
2014-04-17 18:04 . 2014-04-17 18:04 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{8E2718D6-B992-4B66-9E3C-C3244D716D51}\offreg.dll
2014-04-17 18:03 . 2002-07-26 00:06 282624 ----a-w- c:\program files (x86)\Common Files\InstallShield\UpdateService\agent.exe
2014-04-17 17:59 . 2008-11-12 10:00 118784 ----a-w- c:\windows\system32\E_ILMFRA.DLL
2014-04-17 17:59 . 2008-11-12 10:00 81920 ----a-w- c:\windows\system32\E_IBCBFRA.DLL
2014-04-17 17:59 . 2014-04-17 18:56 -------- d-----w- c:\programdata\EPSON
2014-04-17 17:58 . 2009-05-01 07:00 17408 ----a-w- c:\windows\system32\esxcdev.dll
2014-04-17 17:58 . 2009-05-01 07:00 128392 ----a-w- c:\windows\system32\esdevapp.exe
2014-04-17 17:58 . 2008-11-17 07:00 459776 ----a-w- c:\windows\system32\esxwiaud.dll
2014-04-17 17:58 . 2014-04-17 18:02 -------- d-----w- c:\program files (x86)\epson
2014-04-15 14:08 . 2014-03-07 04:43 10521840 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{8E2718D6-B992-4B66-9E3C-C3244D716D51}\mpengine.dll
2014-04-12 01:40 . 2014-04-12 01:40 -------- d-----w- C:\_OTM
2014-04-11 20:45 . 2014-04-11 20:45 -------- d-----w- C:\_OTL
2014-04-11 20:23 . 2014-04-11 20:23 -------- d-----w- c:\users\Guest\AppData\Local\Diagnostics
2014-04-09 16:13 . 2014-02-04 02:35 274880 ----a-w- c:\windows\system32\drivers\msiscsi.sys
2014-04-08 16:22 . 2014-04-08 16:22 -------- d-----w- c:\users\Guest\AppData\Roaming\Malwarebytes
2014-04-08 15:10 . 2014-04-08 15:11 -------- d-----w- c:\users\Guest\AppData\Local\Mozilla
2014-03-25 21:34 . 2014-03-25 21:54 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-03-25 21:34 . 2014-03-25 21:54 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-03-19 19:58 . 2014-03-19 19:58 -------- d-----w- c:\users\Judith\AppData\Roaming\Oracle
.
.
.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-04-09 16:20 . 2013-02-09 02:40 90655440 ----a-w- c:\windows\system32\MRT.exe
2014-03-04 09:17 . 2014-04-09 16:12 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2014-02-20 06:09 . 2014-02-20 06:09 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-02-07 01:23 . 2014-03-12 23:12 3156480 ----a-w- c:\windows\system32\win32k.sys
2014-02-04 02:32 . 2014-03-12 23:11 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2014-02-04 02:32 . 2014-03-12 23:12 624128 ----a-w- c:\windows\system32\qedit.dll
2014-02-04 02:04 . 2014-03-12 23:11 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2014-02-04 02:04 . 2014-03-12 23:12 509440 ----a-w- c:\windows\SysWow64\qedit.dll
2014-01-29 02:32 . 2014-03-12 23:12 484864 ----a-w- c:\windows\system32\wer.dll
2014-01-29 02:06 . 2014-03-12 23:12 381440 ----a-w- c:\windows\SysWow64\wer.dll
2014-01-28 02:32 . 2014-03-12 23:12 228864 ----a-w- c:\windows\system32\wwansvc.dll
.
.
(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"F-Secure Hoster (53784)"="c:\program files (x86)\Frontier\fshoster32.exe" [2013-05-15 191424]
"F-Secure Manager"="c:\program files (x86)\Frontier\apps\ComputerSecurity\Common\FSM32.EXE" [2013-08-14 310208]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
"EEventManager"="c:\progra~2\EPSONS~1\EVENTM~1\EEventManager.exe" [2009-04-07 673616]
.
c:\users\Judith\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2010 Screen Clipper and Launcher.lnk - c:\program files (x86)\Microsoft Office\Office14\ONENOTEM.EXE /tsr [2013-6-25 228552]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableSecureUIAPath"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]
@=""
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]
R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam64.sys;c:\windows\SYSNATIVE\DRIVERS\wdcsam64.sys [x]
R3 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
R4 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
R4 TMachInfo;TMachInfo;c:\program files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe;c:\program files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [x]
R4 TOSHIBA HDD SSD Alert Service;TOSHIBA HDD SSD Alert Service;c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe;c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [x]
S0 amd_sata;amd_sata;c:\windows\system32\DRIVERS\amd_sata.sys;c:\windows\SYSNATIVE\DRIVERS\amd_sata.sys [x]
S0 amd_xata;amd_xata;c:\windows\system32\DRIVERS\amd_xata.sys;c:\windows\SYSNATIVE\DRIVERS\amd_xata.sys [x]
S0 fsbts;fsbts;c:\windows\system32\Drivers\fsbts.sys;c:\windows\SYSNATIVE\Drivers\fsbts.sys [x]
S1 F-Secure HIPS;F-Secure HIPS Driver;c:\program files (x86)\Frontier\apps\ComputerSecurity\HIPS\drivers\fshs.sys;c:\program files (x86)\Frontier\apps\ComputerSecurity\HIPS\drivers\fshs.sys [x]
S1 fsvista;F-Secure Vista Support Driver;c:\program files (x86)\Frontier\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys;c:\program files (x86)\Frontier\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys [x]
S2 fshoster;F-Secure Dll Hoster;c:\program files (x86)\Frontier\fshoster32.exe;c:\program files (x86)\Frontier\fshoster32.exe [x]
S2 FSORSPClient;F-Secure ORSP Client;c:\program files (x86)\Frontier\apps\CCF_Reputation\fsorsp.exe;c:\program files (x86)\Frontier\apps\CCF_Reputation\fsorsp.exe [x]
S3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys;c:\windows\SYSNATIVE\DRIVERS\dc3d.sys [x]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys;c:\windows\SYSNATIVE\DRIVERS\ETD.sys [x]
S3 F-Secure Gatekeeper;F-Secure Gatekeeper;c:\program files (x86)\Frontier\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys;c:\program files (x86)\Frontier\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys [x]
S3 fsni;fsni;c:\program files (x86)\Frontier\apps\CCF_Scanning\fsni64.sys;c:\program files (x86)\Frontier\apps\CCF_Scanning\fsni64.sys [x]
S3 FwLnk;FwLnk Driver;c:\windows\system32\DRIVERS\FwLnk.sys;c:\windows\SYSNATIVE\DRIVERS\FwLnk.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
S3 Point64;Microsoft Mouse and Keyboard Center Filter Driver;c:\windows\system32\DRIVERS\point64.sys;c:\windows\SYSNATIVE\DRIVERS\point64.sys [x]
S3 RTL8192Ce;Realtek Wireless LAN 802.11n PCI-E NIC Driver;c:\windows\system32\DRIVERS\rtl8192Ce.sys;c:\windows\SYSNATIVE\DRIVERS\rtl8192Ce.sys [x]
.
.
Contents of the 'Scheduled Tasks' folder
.
2014-04-17 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-25 21:54]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SmartAudio"="c:\program files\CONEXANT\SAII\SAIICpl.exe" [2010-12-14 316032]
"TosVolRegulator"="c:\program files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe" [2009-11-11 24376]
"TosSENotify"="c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe" [2010-02-06 709976]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 192.168.254.254
FF - ProfilePath - c:\users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\cqjugvhh.default-1395345917665\
FF - prefs.js: browser.search.selectedEngine - Google
.
- - - - ORPHANS REMOVED - - - -
.
c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Best Buy pc app.lnk - c:\programdata\Best Buy pc app\ClickOnceSetup.exe "c:\programdata\Best Buy pc app\Best Buy pc app.application"
SafeBoot-99961887.sys
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
HKLM-Run-TPwrMain - c:\program files (x86)\TOSHIBA\Power Saver\TPwrMain.EXE
HKLM-Run-SmoothView - c:\program files (x86)\Toshiba\SmoothView\SmoothView.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\fshoster]
"ImagePath"="\"c:\program files (x86)\Frontier\fshoster32.exe\" -hosterid:0"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_77_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_77_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_77_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_77_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_77.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.12"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_77.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_77.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_77.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\F-Secure\My Services Agent\Protected]
@Denied: ) (Everyone)
"AgentIdentifier"="ef59e152-a984-4b10-b488-fbfaaac30bdb"
"AuthorizationCode"=""
"53784_AgentIdentifier"="ef59e152-a984-4b10-b488-fbfaaac30bdb"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2014-04-17  12:54:19
ComboFix-quarantined-files.txt  2014-04-17 19:54
.
Pre-Run: 265,521,926,144 bytes free
Post-Run: 265,370,431,488 bytes free
.
- - End Of File - - D81D356ACFCDFB9C1616B3BCC5C6EB6D
5B5E648D12FCADC244C1EC30318E1EB9
 

Share this post


Link to post
Share on other sites

1. Close any open browsers.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

3. Open notepad and copy/paste the text in the Codebox below into it:

ClearJavaCache::

 

Save this as CFScript.txt, and as Type: All Files (*.*) in the same location as ComboFix.exe

CF3.jpg

CFScriptB-4.gif

Refering to the picture above, drag CFScript into ComboFix.exe

When finished, it shall produce a log for you at C:\ComboFix.txt which I will require in your next reply.

 

Next,

 

We need to run an online AV scan to ensure there are no remnants of any infection left on your system that may have been missed. This scan is very thorough and well worth running, it can take several hours please be patient and let it complete:

 

Run Eset Online Scanner

 

**Note** You will need to use Internet explorer for this scan - Vista and Windows 7/8 right click on IE shortcut and run as admin

 

Go to Eset web page http://www.eset.com/us/online-scanner/ to run an online scan from ESET.

 


Turn off the real time scanner of any existing antivirus program while performing the online scan
click on the Run ESET Online Scanner button
Tick the box next to YES, I accept the Terms of Use.
Click Start
When asked, allow the add/on to be installed
Click Start
Make sure that the option "Remove found threats"  is ticked
Click on Advanced Settings, ensure the options
Scan for potentially unwanted applications, Scan for potentially unsafe applications, and Enable Anti-Stealth Technology are ticked.
Click Scan
wait for the virus definitions to be downloaded
Wait for the scan to finish

 

When the scan is complete

 


If no threats were found
put a checkmark in "Uninstall application on close"
close program
report to me that nothing was found

 

If threats were found

 


click on "list of threats found"
click on "export to text file" and save it as ESET SCAN and save to the desktop
Click on back
put a checkmark in "Uninstall application on close"
click on finish

 

close program

 

Copy and paste the report in next reply.

Share this post


Link to post
Share on other sites

ComboFix 14-04-12.01 - Judith 04/17/2014  14:32:05.2.2 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.2663.1436 [GMT -7:00]
Running from: c:\users\Judith\Desktop\ComboFix.exe
Command switches used :: c:\users\Judith\Desktop\CFScript.txt
AV: Computer Security *Disabled/Updated* {15414183-282E-D62C-CA37-EF24860A2F17}
SP: Computer Security *Disabled/Updated* {AE20A067-0E14-D9A2-F087-D456FD8D65AA}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((   Files Created from 2014-03-17 to 2014-04-17  )))))))))))))))))))))))))))))))
.
.
2014-04-17 21:42 . 2014-04-17 21:42 -------- d-----w- c:\users\Guest\AppData\Local\temp
2014-04-17 21:42 . 2014-04-17 21:42 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-04-17 18:56 . 2007-12-07 00:08 108032 ----a-w- c:\windows\system32\E_ILMEMA.DLL
2014-04-17 18:56 . 2007-12-07 00:01 81408 ----a-w- c:\windows\system32\E_IBCBEMA.DLL
2014-04-17 18:07 . 2014-04-17 20:21 -------- d-----w- c:\users\Judith\AppData\Roaming\EPSON
2014-04-17 18:04 . 2014-04-17 20:47 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{8E2718D6-B992-4B66-9E3C-C3244D716D51}\offreg.dll
2014-04-17 18:03 . 2002-07-26 00:06 282624 ----a-w- c:\program files (x86)\Common Files\InstallShield\UpdateService\agent.exe
2014-04-17 17:59 . 2008-11-12 10:00 118784 ----a-w- c:\windows\system32\E_ILMFRA.DLL
2014-04-17 17:59 . 2008-11-12 10:00 81920 ----a-w- c:\windows\system32\E_IBCBFRA.DLL
2014-04-17 17:59 . 2014-04-17 18:56 -------- d-----w- c:\programdata\EPSON
2014-04-17 17:58 . 2009-05-01 07:00 17408 ----a-w- c:\windows\system32\esxcdev.dll
2014-04-17 17:58 . 2009-05-01 07:00 128392 ----a-w- c:\windows\system32\esdevapp.exe
2014-04-17 17:58 . 2008-11-17 07:00 459776 ----a-w- c:\windows\system32\esxwiaud.dll
2014-04-17 17:58 . 2014-04-17 18:02 -------- d-----w- c:\program files (x86)\epson
2014-04-15 14:08 . 2014-03-07 04:43 10521840 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{8E2718D6-B992-4B66-9E3C-C3244D716D51}\mpengine.dll
2014-04-12 01:40 . 2014-04-12 01:40 -------- d-----w- C:\_OTM
2014-04-11 20:45 . 2014-04-11 20:45 -------- d-----w- C:\_OTL
2014-04-11 20:23 . 2014-04-11 20:23 -------- d-----w- c:\users\Guest\AppData\Local\Diagnostics
2014-04-09 16:13 . 2014-02-04 02:35 274880 ----a-w- c:\windows\system32\drivers\msiscsi.sys
2014-04-08 16:22 . 2014-04-08 16:22 -------- d-----w- c:\users\Guest\AppData\Roaming\Malwarebytes
2014-04-08 15:10 . 2014-04-08 15:11 -------- d-----w- c:\users\Guest\AppData\Local\Mozilla
2014-03-25 21:34 . 2014-03-25 21:54 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-03-25 21:34 . 2014-03-25 21:54 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-03-19 19:58 . 2014-03-19 19:58 -------- d-----w- c:\users\Judith\AppData\Roaming\Oracle
.
.
.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-04-09 16:20 . 2013-02-09 02:40 90655440 ----a-w- c:\windows\system32\MRT.exe
2014-03-04 09:17 . 2014-04-09 16:12 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2014-02-20 06:09 . 2014-02-20 06:09 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-02-07 01:23 . 2014-03-12 23:12 3156480 ----a-w- c:\windows\system32\win32k.sys
2014-02-04 02:32 . 2014-03-12 23:11 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2014-02-04 02:32 . 2014-03-12 23:12 624128 ----a-w- c:\windows\system32\qedit.dll
2014-02-04 02:04 . 2014-03-12 23:11 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2014-02-04 02:04 . 2014-03-12 23:12 509440 ----a-w- c:\windows\SysWow64\qedit.dll
2014-01-29 02:32 . 2014-03-12 23:12 484864 ----a-w- c:\windows\system32\wer.dll
2014-01-29 02:06 . 2014-03-12 23:12 381440 ----a-w- c:\windows\SysWow64\wer.dll
2014-01-28 02:32 . 2014-03-12 23:12 228864 ----a-w- c:\windows\system32\wwansvc.dll
.
.
(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"F-Secure Hoster (53784)"="c:\program files (x86)\Frontier\fshoster32.exe" [2013-05-15 191424]
"F-Secure Manager"="c:\program files (x86)\Frontier\apps\ComputerSecurity\Common\FSM32.EXE" [2013-08-14 310208]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
"EEventManager"="c:\progra~2\EPSONS~1\EVENTM~1\EEventManager.exe" [2009-04-07 673616]
.
c:\users\Judith\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2010 Screen Clipper and Launcher.lnk - c:\program files (x86)\Microsoft Office\Office14\ONENOTEM.EXE /tsr [2013-6-25 228552]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableSecureUIAPath"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]
@=""
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]
R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam64.sys;c:\windows\SYSNATIVE\DRIVERS\wdcsam64.sys [x]
R3 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
R4 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
R4 TMachInfo;TMachInfo;c:\program files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe;c:\program files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [x]
R4 TOSHIBA HDD SSD Alert Service;TOSHIBA HDD SSD Alert Service;c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe;c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [x]
S0 amd_sata;amd_sata;c:\windows\system32\DRIVERS\amd_sata.sys;c:\windows\SYSNATIVE\DRIVERS\amd_sata.sys [x]
S0 amd_xata;amd_xata;c:\windows\system32\DRIVERS\amd_xata.sys;c:\windows\SYSNATIVE\DRIVERS\amd_xata.sys [x]
S0 fsbts;fsbts;c:\windows\system32\Drivers\fsbts.sys;c:\windows\SYSNATIVE\Drivers\fsbts.sys [x]
S1 F-Secure HIPS;F-Secure HIPS Driver;c:\program files (x86)\Frontier\apps\ComputerSecurity\HIPS\drivers\fshs.sys;c:\program files (x86)\Frontier\apps\ComputerSecurity\HIPS\drivers\fshs.sys [x]
S1 fsvista;F-Secure Vista Support Driver;c:\program files (x86)\Frontier\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys;c:\program files (x86)\Frontier\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys [x]
S2 fshoster;F-Secure Dll Hoster;c:\program files (x86)\Frontier\fshoster32.exe;c:\program files (x86)\Frontier\fshoster32.exe [x]
S2 FSORSPClient;F-Secure ORSP Client;c:\program files (x86)\Frontier\apps\CCF_Reputation\fsorsp.exe;c:\program files (x86)\Frontier\apps\CCF_Reputation\fsorsp.exe [x]
S3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys;c:\windows\SYSNATIVE\DRIVERS\dc3d.sys [x]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys;c:\windows\SYSNATIVE\DRIVERS\ETD.sys [x]
S3 F-Secure Gatekeeper;F-Secure Gatekeeper;c:\program files (x86)\Frontier\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys;c:\program files (x86)\Frontier\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys [x]
S3 fsni;fsni;c:\program files (x86)\Frontier\apps\CCF_Scanning\fsni64.sys;c:\program files (x86)\Frontier\apps\CCF_Scanning\fsni64.sys [x]
S3 FwLnk;FwLnk Driver;c:\windows\system32\DRIVERS\FwLnk.sys;c:\windows\SYSNATIVE\DRIVERS\FwLnk.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
S3 Point64;Microsoft Mouse and Keyboard Center Filter Driver;c:\windows\system32\DRIVERS\point64.sys;c:\windows\SYSNATIVE\DRIVERS\point64.sys [x]
S3 RTL8192Ce;Realtek Wireless LAN 802.11n PCI-E NIC Driver;c:\windows\system32\DRIVERS\rtl8192Ce.sys;c:\windows\SYSNATIVE\DRIVERS\rtl8192Ce.sys [x]
.
.
Contents of the 'Scheduled Tasks' folder
.
2014-04-17 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-25 21:54]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SmartAudio"="c:\program files\CONEXANT\SAII\SAIICpl.exe" [2010-12-14 316032]
"TPwrMain"="c:\program files (x86)\TOSHIBA\Power Saver\TPwrMain.EXE" [bU]
"SmoothView"="c:\program files (x86)\Toshiba\SmoothView\SmoothView.exe" [bU]
"TosVolRegulator"="c:\program files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe" [2009-11-11 24376]
"TosSENotify"="c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe" [2010-02-06 709976]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 192.168.254.254
FF - ProfilePath - c:\users\Judith\AppData\Roaming\Mozilla\Firefox\Profiles\cqjugvhh.default-1395345917665\
FF - prefs.js: browser.search.selectedEngine - Google
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\fshoster]
"ImagePath"="\"c:\program files (x86)\Frontier\fshoster32.exe\" -hosterid:0"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_77_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_77_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_77_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_77_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_77.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.12"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_77.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_77.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_77.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\F-Secure\My Services Agent\Protected]
@Denied: ) (Everyone)
"AgentIdentifier"="ef59e152-a984-4b10-b488-fbfaaac30bdb"
"AuthorizationCode"=""
"53784_AgentIdentifier"="ef59e152-a984-4b10-b488-fbfaaac30bdb"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2014-04-17  14:46:24
ComboFix-quarantined-files.txt  2014-04-17 21:46
ComboFix2.txt  2014-04-17 19:54
.
Pre-Run: 265,447,845,888 bytes free
Post-Run: 265,382,338,560 bytes free
.
- - End Of File - - B216CAAEB08F9FC2086E5040E2694B4A
5B5E648D12FCADC244C1EC30318E1EB9
 

Share this post


Link to post
Share on other sites

Thank you, post ESET log when ready, also give an update on any remaining issues or concerns....

Share this post


Link to post
Share on other sites

I am not having fun with Eset , got it to run and do not know where the text is

Share this post


Link to post
Share on other sites

I have not log but the Eset did not find any thing

Share this post


Link to post
Share on other sites

 

When the scan is complete

 

 

  •  

  • If no threats were found <<<<<--------

     

  • put a checkmark in "Uninstall application on close"

     

  • close program

     

  • report to me that nothing was found <<<<<------

 

That is what the posted instructions tell you to do..... What is the current status of your system, are there any remaining issues or concerns relating to malware or infection?

Share this post


Link to post
Share on other sites

Nothing was found , thank you. I have real problems typing and sometimes asked for the computer pass word, that I would normally be asked for when I turn on the computer. That password was removed from the main account for us to run these programs and had never appeared while simply using the computer on the main Windows screen or files or folders. Also if I put a pass word it will not do any thing so I leave it blank and then press Ok and then it goes away. I think this is a  very unstable computer

Share this post


Link to post
Share on other sites

Regarding the password issue, go here: http://www.sevenforums.com/tutorials/288-password-create-user-account.html follow those instructions to set up a user account password..

 

Next,

 

Close all windows, Select > start icon > all programs > accessories > Right click on "command prompt" > select > Run as administrator > ok any alerts > at the command prompt type or copy and paste sfc /scannow > then tap enter. When finished type exit Tap enter, re-boot your PC.

***Note the space between sfc and /scannow.

To get report, open an elevated command prompt, type or copy and paste:

findstr /c:"[sR]" %windir%\logs\cbs\cbs.log >%userprofile%\Desktop\sfcdetails.txt

Post that log, should be found on your Desktop....

 

Let me know if there is any improvement after run SFC...
 

Share this post


Link to post
Share on other sites

I am not sure I understand this because we already have a main admin account and one guest account. The only thing I did was remove the pass word, the account still appears

Share this post


Link to post
Share on other sites

The instruction is to ad a password to any account you choose, if you look at the first image in the instructions you will see that is an Admin account, all you have to do is follow the instructions from there and add a password. You did say the Admin account had the password removed, if you do not want the password back then just ignore the the instructions. Maybe I misread your previous reply...

Share this post


Link to post
Share on other sites

2014-04-18 11:02:35, Info                  CSI    00000009 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:02:35, Info                  CSI    0000000a [sR] Beginning Verify and Repair transaction
2014-04-18 11:02:37, Info                  CSI    0000000c [sR] Verify complete
2014-04-18 11:02:38, Info                  CSI    0000000d [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:02:38, Info                  CSI    0000000e [sR] Beginning Verify and Repair transaction
2014-04-18 11:02:40, Info                  CSI    00000010 [sR] Verify complete
2014-04-18 11:02:41, Info                  CSI    00000011 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:02:41, Info                  CSI    00000012 [sR] Beginning Verify and Repair transaction
2014-04-18 11:02:43, Info                  CSI    00000014 [sR] Verify complete
2014-04-18 11:02:44, Info                  CSI    00000015 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:02:44, Info                  CSI    00000016 [sR] Beginning Verify and Repair transaction
2014-04-18 11:02:46, Info                  CSI    00000018 [sR] Verify complete
2014-04-18 11:02:46, Info                  CSI    00000019 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:02:46, Info                  CSI    0000001a [sR] Beginning Verify and Repair transaction
2014-04-18 11:02:49, Info                  CSI    0000001c [sR] Verify complete
2014-04-18 11:02:50, Info                  CSI    0000001d [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:02:50, Info                  CSI    0000001e [sR] Beginning Verify and Repair transaction
2014-04-18 11:02:55, Info                  CSI    00000020 [sR] Verify complete
2014-04-18 11:02:55, Info                  CSI    00000021 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:02:55, Info                  CSI    00000022 [sR] Beginning Verify and Repair transaction
2014-04-18 11:03:00, Info                  CSI    00000024 [sR] Verify complete
2014-04-18 11:03:00, Info                  CSI    00000025 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:03:00, Info                  CSI    00000026 [sR] Beginning Verify and Repair transaction
2014-04-18 11:03:03, Info                  CSI    00000028 [sR] Verify complete
2014-04-18 11:03:04, Info                  CSI    00000029 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:03:04, Info                  CSI    0000002a [sR] Beginning Verify and Repair transaction
2014-04-18 11:03:08, Info                  CSI    0000002c [sR] Verify complete
2014-04-18 11:03:08, Info                  CSI    0000002d [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:03:08, Info                  CSI    0000002e [sR] Beginning Verify and Repair transaction
2014-04-18 11:03:14, Info                  CSI    00000030 [sR] Verify complete
2014-04-18 11:03:14, Info                  CSI    00000031 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:03:14, Info                  CSI    00000032 [sR] Beginning Verify and Repair transaction
2014-04-18 11:03:19, Info                  CSI    00000034 [sR] Verify complete
2014-04-18 11:03:19, Info                  CSI    00000035 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:03:19, Info                  CSI    00000036 [sR] Beginning Verify and Repair transaction
2014-04-18 11:03:23, Info                  CSI    00000038 [sR] Verify complete
2014-04-18 11:03:23, Info                  CSI    00000039 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:03:23, Info                  CSI    0000003a [sR] Beginning Verify and Repair transaction
2014-04-18 11:03:30, Info                  CSI    0000003d [sR] Verify complete
2014-04-18 11:03:30, Info                  CSI    0000003e [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:03:30, Info                  CSI    0000003f [sR] Beginning Verify and Repair transaction
2014-04-18 11:03:40, Info                  CSI    00000043 [sR] Verify complete
2014-04-18 11:03:41, Info                  CSI    00000044 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:03:41, Info                  CSI    00000045 [sR] Beginning Verify and Repair transaction
2014-04-18 11:03:47, Info                  CSI    00000048 [sR] Verify complete
2014-04-18 11:03:48, Info                  CSI    00000049 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:03:48, Info                  CSI    0000004a [sR] Beginning Verify and Repair transaction
2014-04-18 11:03:54, Info                  CSI    0000004d [sR] Verify complete
2014-04-18 11:03:55, Info                  CSI    0000004e [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:03:55, Info                  CSI    0000004f [sR] Beginning Verify and Repair transaction
2014-04-18 11:04:03, Info                  CSI    00000051 [sR] Verify complete
2014-04-18 11:04:04, Info                  CSI    00000052 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:04:04, Info                  CSI    00000053 [sR] Beginning Verify and Repair transaction
2014-04-18 11:04:17, Info                  CSI    00000078 [sR] Verify complete
2014-04-18 11:04:18, Info                  CSI    00000079 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:04:18, Info                  CSI    0000007a [sR] Beginning Verify and Repair transaction
2014-04-18 11:04:26, Info                  CSI    0000007c [sR] Verify complete
2014-04-18 11:04:26, Info                  CSI    0000007d [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:04:26, Info                  CSI    0000007e [sR] Beginning Verify and Repair transaction
2014-04-18 11:04:33, Info                  CSI    00000080 [sR] Verify complete
2014-04-18 11:04:34, Info                  CSI    00000081 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:04:34, Info                  CSI    00000082 [sR] Beginning Verify and Repair transaction
2014-04-18 11:04:40, Info                  CSI    00000084 [sR] Verify complete
2014-04-18 11:04:41, Info                  CSI    00000085 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:04:41, Info                  CSI    00000086 [sR] Beginning Verify and Repair transaction
2014-04-18 11:04:49, Info                  CSI    00000088 [sR] Verify complete
2014-04-18 11:04:50, Info                  CSI    00000089 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:04:50, Info                  CSI    0000008a [sR] Beginning Verify and Repair transaction
2014-04-18 11:04:56, Info                  CSI    0000008c [sR] Verify complete
2014-04-18 11:04:56, Info                  CSI    0000008d [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:04:56, Info                  CSI    0000008e [sR] Beginning Verify and Repair transaction
2014-04-18 11:05:08, Info                  CSI    00000092 [sR] Verify complete
2014-04-18 11:05:09, Info                  CSI    00000093 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:05:09, Info                  CSI    00000094 [sR] Beginning Verify and Repair transaction
2014-04-18 11:05:22, Info                  CSI    000000b5 [sR] Verify complete
2014-04-18 11:05:23, Info                  CSI    000000b6 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:05:23, Info                  CSI    000000b7 [sR] Beginning Verify and Repair transaction
2014-04-18 11:05:37, Info                  CSI    000000b9 [sR] Verify complete
2014-04-18 11:05:38, Info                  CSI    000000ba [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:05:38, Info                  CSI    000000bb [sR] Beginning Verify and Repair transaction
2014-04-18 11:05:56, Info                  CSI    000000bf [sR] Verify complete
2014-04-18 11:05:57, Info                  CSI    000000c0 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:05:57, Info                  CSI    000000c1 [sR] Beginning Verify and Repair transaction
2014-04-18 11:06:01, Info                  CSI    000000c3 [sR] Verify complete
2014-04-18 11:06:01, Info                  CSI    000000c4 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:06:01, Info                  CSI    000000c5 [sR] Beginning Verify and Repair transaction
2014-04-18 11:06:04, Info                  CSI    000000c7 [sR] Verify complete
2014-04-18 11:06:04, Info                  CSI    000000c8 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:06:04, Info                  CSI    000000c9 [sR] Beginning Verify and Repair transaction
2014-04-18 11:06:08, Info                  CSI    000000cb [sR] Verify complete
2014-04-18 11:06:09, Info                  CSI    000000cc [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:06:09, Info                  CSI    000000cd [sR] Beginning Verify and Repair transaction
2014-04-18 11:06:24, Info                  CSI    000000e0 [sR] Verify complete
2014-04-18 11:06:24, Info                  CSI    000000e1 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:06:24, Info                  CSI    000000e2 [sR] Beginning Verify and Repair transaction
2014-04-18 11:06:29, Info                  CSI    000000e4 [sR] Verify complete
2014-04-18 11:06:29, Info                  CSI    000000e5 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:06:29, Info                  CSI    000000e6 [sR] Beginning Verify and Repair transaction
2014-04-18 11:06:34, Info                  CSI    000000e8 [sR] Verify complete
2014-04-18 11:06:34, Info                  CSI    000000e9 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:06:34, Info                  CSI    000000ea [sR] Beginning Verify and Repair transaction
2014-04-18 11:06:39, Info                  CSI    000000ec [sR] Verify complete
2014-04-18 11:06:40, Info                  CSI    000000ed [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:06:40, Info                  CSI    000000ee [sR] Beginning Verify and Repair transaction
2014-04-18 11:06:47, Info                  CSI    000000f0 [sR] Verify complete
2014-04-18 11:06:48, Info                  CSI    000000f1 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:06:48, Info                  CSI    000000f2 [sR] Beginning Verify and Repair transaction
2014-04-18 11:07:03, Info                  CSI    000000f6 [sR] Verify complete
2014-04-18 11:07:04, Info                  CSI    000000f7 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:07:04, Info                  CSI    000000f8 [sR] Beginning Verify and Repair transaction
2014-04-18 11:07:09, Info                  CSI    000000fa [sR] Verify complete
2014-04-18 11:07:09, Info                  CSI    000000fb [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:07:09, Info                  CSI    000000fc [sR] Beginning Verify and Repair transaction
2014-04-18 11:07:13, Info                  CSI    000000fe [sR] Verify complete
2014-04-18 11:07:13, Info                  CSI    000000ff [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:07:13, Info                  CSI    00000100 [sR] Beginning Verify and Repair transaction
2014-04-18 11:07:25, Info                  CSI    00000102 [sR] Verify complete
2014-04-18 11:07:26, Info                  CSI    00000103 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:07:26, Info                  CSI    00000104 [sR] Beginning Verify and Repair transaction
2014-04-18 11:07:35, Info                  CSI    00000106 [sR] Verify complete
2014-04-18 11:07:36, Info                  CSI    00000107 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:07:36, Info                  CSI    00000108 [sR] Beginning Verify and Repair transaction
2014-04-18 11:07:44, Info                  CSI    0000010a [sR] Verify complete
2014-04-18 11:07:45, Info                  CSI    0000010b [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:07:45, Info                  CSI    0000010c [sR] Beginning Verify and Repair transaction
2014-04-18 11:08:03, Info                  CSI    00000124 [sR] Verify complete
2014-04-18 11:08:04, Info                  CSI    00000125 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:08:04, Info                  CSI    00000126 [sR] Beginning Verify and Repair transaction
2014-04-18 11:08:13, Info                  CSI    00000128 [sR] Verify complete
2014-04-18 11:08:14, Info                  CSI    00000129 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:08:14, Info                  CSI    0000012a [sR] Beginning Verify and Repair transaction
2014-04-18 11:08:36, Info                  CSI    0000012c [sR] Verify complete
2014-04-18 11:08:37, Info                  CSI    0000012d [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:08:37, Info                  CSI    0000012e [sR] Beginning Verify and Repair transaction
2014-04-18 11:08:53, Info                  CSI    00000131 [sR] Verify complete
2014-04-18 11:08:54, Info                  CSI    00000132 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:08:54, Info                  CSI    00000133 [sR] Beginning Verify and Repair transaction
2014-04-18 11:09:03, Info                  CSI    00000135 [sR] Verify complete
2014-04-18 11:09:04, Info                  CSI    00000136 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:09:04, Info                  CSI    00000137 [sR] Beginning Verify and Repair transaction
2014-04-18 11:09:14, Info                  CSI    00000139 [sR] Verify complete
2014-04-18 11:09:15, Info                  CSI    0000013a [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:09:15, Info                  CSI    0000013b [sR] Beginning Verify and Repair transaction
2014-04-18 11:09:23, Info                  CSI    0000013d [sR] Verify complete
2014-04-18 11:09:24, Info                  CSI    0000013e [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:09:24, Info                  CSI    0000013f [sR] Beginning Verify and Repair transaction
2014-04-18 11:09:30, Info                  CSI    00000141 [sR] Verify complete
2014-04-18 11:09:31, Info                  CSI    00000142 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:09:31, Info                  CSI    00000143 [sR] Beginning Verify and Repair transaction
2014-04-18 11:09:38, Info                  CSI    00000147 [sR] Verify complete
2014-04-18 11:09:39, Info                  CSI    00000148 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:09:39, Info                  CSI    00000149 [sR] Beginning Verify and Repair transaction
2014-04-18 11:10:02, Info                  CSI    0000014b [sR] Verify complete
2014-04-18 11:10:03, Info                  CSI    0000014c [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:10:03, Info                  CSI    0000014d [sR] Beginning Verify and Repair transaction
2014-04-18 11:10:11, Info                  CSI    00000150 [sR] Verify complete
2014-04-18 11:10:12, Info                  CSI    00000151 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:10:12, Info                  CSI    00000152 [sR] Beginning Verify and Repair transaction
2014-04-18 11:10:21, Info                  CSI    00000155 [sR] Verify complete
2014-04-18 11:10:22, Info                  CSI    00000156 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:10:22, Info                  CSI    00000157 [sR] Beginning Verify and Repair transaction
2014-04-18 11:10:30, Info                  CSI    00000159 [sR] Verify complete
2014-04-18 11:10:31, Info                  CSI    0000015a [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:10:31, Info                  CSI    0000015b [sR] Beginning Verify and Repair transaction
2014-04-18 11:10:44, Info                  CSI    0000015e [sR] Verify complete
2014-04-18 11:10:45, Info                  CSI    0000015f [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:10:45, Info                  CSI    00000160 [sR] Beginning Verify and Repair transaction
2014-04-18 11:10:53, Info                  CSI    00000162 [sR] Verify complete
2014-04-18 11:10:54, Info                  CSI    00000163 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:10:54, Info                  CSI    00000164 [sR] Beginning Verify and Repair transaction
2014-04-18 11:11:03, Info                  CSI    00000166 [sR] Verify complete
2014-04-18 11:11:04, Info                  CSI    00000167 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:11:04, Info                  CSI    00000168 [sR] Beginning Verify and Repair transaction
2014-04-18 11:11:11, Info                  CSI    0000016a [sR] Verify complete
2014-04-18 11:11:12, Info                  CSI    0000016b [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:11:12, Info                  CSI    0000016c [sR] Beginning Verify and Repair transaction
2014-04-18 11:11:23, Info                  CSI    0000016f [sR] Verify complete
2014-04-18 11:11:23, Info                  CSI    00000170 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:11:23, Info                  CSI    00000171 [sR] Beginning Verify and Repair transaction
2014-04-18 11:11:28, Info                  CSI    00000173 [sR] Verify complete
2014-04-18 11:11:29, Info                  CSI    00000174 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:11:29, Info                  CSI    00000175 [sR] Beginning Verify and Repair transaction
2014-04-18 11:11:36, Info                  CSI    00000178 [sR] Verify complete
2014-04-18 11:11:37, Info                  CSI    00000179 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:11:37, Info                  CSI    0000017a [sR] Beginning Verify and Repair transaction
2014-04-18 11:11:48, Info                  CSI    0000017c [sR] Verify complete
2014-04-18 11:11:48, Info                  CSI    0000017d [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:11:48, Info                  CSI    0000017e [sR] Beginning Verify and Repair transaction
2014-04-18 11:11:56, Info                  CSI    00000182 [sR] Verify complete
2014-04-18 11:11:57, Info                  CSI    00000183 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:11:57, Info                  CSI    00000184 [sR] Beginning Verify and Repair transaction
2014-04-18 11:12:07, Info                  CSI    00000186 [sR] Verify complete
2014-04-18 11:12:07, Info                  CSI    00000187 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:12:07, Info                  CSI    00000188 [sR] Beginning Verify and Repair transaction
2014-04-18 11:12:18, Info                  CSI    0000018b [sR] Verify complete
2014-04-18 11:12:19, Info                  CSI    0000018c [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:12:19, Info                  CSI    0000018d [sR] Beginning Verify and Repair transaction
2014-04-18 11:12:26, Info                  CSI    0000018f [sR] Verify complete
2014-04-18 11:12:27, Info                  CSI    00000190 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:12:27, Info                  CSI    00000191 [sR] Beginning Verify and Repair transaction
2014-04-18 11:12:30, Info                  CSI    00000193 [sR] Verify complete
2014-04-18 11:12:31, Info                  CSI    00000194 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:12:31, Info                  CSI    00000195 [sR] Beginning Verify and Repair transaction
2014-04-18 11:12:39, Info                  CSI    00000197 [sR] Verify complete
2014-04-18 11:12:40, Info                  CSI    00000198 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:12:40, Info                  CSI    00000199 [sR] Beginning Verify and Repair transaction
2014-04-18 11:12:47, Info                  CSI    0000019b [sR] Verify complete
2014-04-18 11:12:48, Info                  CSI    0000019c [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:12:48, Info                  CSI    0000019d [sR] Beginning Verify and Repair transaction
2014-04-18 11:12:57, Info                  CSI    0000019f [sR] Verify complete
2014-04-18 11:12:58, Info                  CSI    000001a0 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:12:58, Info                  CSI    000001a1 [sR] Beginning Verify and Repair transaction
2014-04-18 11:13:04, Info                  CSI    000001a3 [sR] Verify complete
2014-04-18 11:13:04, Info                  CSI    000001a4 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:13:04, Info                  CSI    000001a5 [sR] Beginning Verify and Repair transaction
2014-04-18 11:13:12, Info                  CSI    000001a7 [sR] Verify complete
2014-04-18 11:13:13, Info                  CSI    000001a8 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:13:13, Info                  CSI    000001a9 [sR] Beginning Verify and Repair transaction
2014-04-18 11:13:34, Info                  CSI    000001ab [sR] Verify complete
2014-04-18 11:13:35, Info                  CSI    000001ac [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:13:35, Info                  CSI    000001ad [sR] Beginning Verify and Repair transaction
2014-04-18 11:14:07, Info                  CSI    000001af [sR] Verify complete
2014-04-18 11:14:08, Info                  CSI    000001b0 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:14:08, Info                  CSI    000001b1 [sR] Beginning Verify and Repair transaction
2014-04-18 11:14:19, Info                  CSI    000001b3 [sR] Verify complete
2014-04-18 11:14:19, Info                  CSI    000001b4 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:14:19, Info                  CSI    000001b5 [sR] Beginning Verify and Repair transaction
2014-04-18 11:14:27, Info                  CSI    000001b7 [sR] Verify complete
2014-04-18 11:14:27, Info                  CSI    000001b8 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:14:27, Info                  CSI    000001b9 [sR] Beginning Verify and Repair transaction
2014-04-18 11:14:32, Info                  CSI    000001bb [sR] Verify complete
2014-04-18 11:14:32, Info                  CSI    000001bc [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:14:32, Info                  CSI    000001bd [sR] Beginning Verify and Repair transaction
2014-04-18 11:14:37, Info                  CSI    000001bf [sR] Verify complete
2014-04-18 11:14:38, Info                  CSI    000001c0 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:14:38, Info                  CSI    000001c1 [sR] Beginning Verify and Repair transaction
2014-04-18 11:14:46, Info                  CSI    000001c3 [sR] Verify complete
2014-04-18 11:14:47, Info                  CSI    000001c4 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:14:47, Info                  CSI    000001c5 [sR] Beginning Verify and Repair transaction
2014-04-18 11:14:50, Info                  CSI    000001c7 [sR] Verify complete
2014-04-18 11:14:50, Info                  CSI    000001c8 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:14:50, Info                  CSI    000001c9 [sR] Beginning Verify and Repair transaction
2014-04-18 11:14:52, Info                  CSI    000001cb [sR] Verify complete
2014-04-18 11:14:52, Info                  CSI    000001cc [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:14:52, Info                  CSI    000001cd [sR] Beginning Verify and Repair transaction
2014-04-18 11:15:02, Info                  CSI    000001d5 [sR] Verify complete
2014-04-18 11:15:02, Info                  CSI    000001d6 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:15:02, Info                  CSI    000001d7 [sR] Beginning Verify and Repair transaction
2014-04-18 11:15:07, Info                  CSI    000001d9 [sR] Verify complete
2014-04-18 11:15:07, Info                  CSI    000001da [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:15:07, Info                  CSI    000001db [sR] Beginning Verify and Repair transaction
2014-04-18 11:15:12, Info                  CSI    000001dd [sR] Verify complete
2014-04-18 11:15:13, Info                  CSI    000001de [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:15:13, Info                  CSI    000001df [sR] Beginning Verify and Repair transaction
2014-04-18 11:15:17, Info                  CSI    000001e1 [sR] Verify complete
2014-04-18 11:15:18, Info                  CSI    000001e2 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:15:18, Info                  CSI    000001e3 [sR] Beginning Verify and Repair transaction
2014-04-18 11:15:26, Info                  CSI    000001e5 [sR] Verify complete
2014-04-18 11:15:26, Info                  CSI    000001e6 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:15:26, Info                  CSI    000001e7 [sR] Beginning Verify and Repair transaction
2014-04-18 11:15:39, Info                  CSI    000001ea [sR] Verify complete
2014-04-18 11:15:39, Info                  CSI    000001eb [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:15:39, Info                  CSI    000001ec [sR] Beginning Verify and Repair transaction
2014-04-18 11:15:43, Info                  CSI    000001ee [sR] Verify complete
2014-04-18 11:15:44, Info                  CSI    000001ef [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:15:44, Info                  CSI    000001f0 [sR] Beginning Verify and Repair transaction
2014-04-18 11:15:47, Info                  CSI    000001f2 [sR] Verify complete
2014-04-18 11:15:48, Info                  CSI    000001f3 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:15:48, Info                  CSI    000001f4 [sR] Beginning Verify and Repair transaction
2014-04-18 11:16:05, Info                  CSI    000001f9 [sR] Verify complete
2014-04-18 11:16:05, Info                  CSI    000001fa [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:16:05, Info                  CSI    000001fb [sR] Beginning Verify and Repair transaction
2014-04-18 11:16:20, Info                  CSI    000001fe [sR] Verify complete
2014-04-18 11:16:20, Info                  CSI    000001ff [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:16:20, Info                  CSI    00000200 [sR] Beginning Verify and Repair transaction
2014-04-18 11:16:30, Info                  CSI    00000204 [sR] Verify complete
2014-04-18 11:16:31, Info                  CSI    00000205 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:16:31, Info                  CSI    00000206 [sR] Beginning Verify and Repair transaction
2014-04-18 11:16:42, Info                  CSI    00000211 [sR] Verify complete
2014-04-18 11:16:43, Info                  CSI    00000212 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:16:43, Info                  CSI    00000213 [sR] Beginning Verify and Repair transaction
2014-04-18 11:16:54, Info                  CSI    0000021a [sR] Verify complete
2014-04-18 11:16:54, Info                  CSI    0000021b [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:16:54, Info                  CSI    0000021c [sR] Beginning Verify and Repair transaction
2014-04-18 11:17:03, Info                  CSI    0000021e [sR] Verify complete
2014-04-18 11:17:04, Info                  CSI    0000021f [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:17:04, Info                  CSI    00000220 [sR] Beginning Verify and Repair transaction
2014-04-18 11:17:10, Info                  CSI    00000224 [sR] Verify complete
2014-04-18 11:17:10, Info                  CSI    00000225 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:17:10, Info                  CSI    00000226 [sR] Beginning Verify and Repair transaction
2014-04-18 11:17:17, Info                  CSI    00000228 [sR] Verify complete
2014-04-18 11:17:18, Info                  CSI    00000229 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:17:18, Info                  CSI    0000022a [sR] Beginning Verify and Repair transaction
2014-04-18 11:17:29, Info                  CSI    0000024f [sR] Verify complete
2014-04-18 11:17:29, Info                  CSI    00000250 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:17:29, Info                  CSI    00000251 [sR] Beginning Verify and Repair transaction
2014-04-18 11:17:36, Info                  CSI    00000253 [sR] Verify complete
2014-04-18 11:17:37, Info                  CSI    00000254 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:17:37, Info                  CSI    00000255 [sR] Beginning Verify and Repair transaction
2014-04-18 11:17:42, Info                  CSI    00000257 [sR] Verify complete
2014-04-18 11:17:43, Info                  CSI    00000258 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:17:43, Info                  CSI    00000259 [sR] Beginning Verify and Repair transaction
2014-04-18 11:17:50, Info                  CSI    0000025b [sR] Verify complete
2014-04-18 11:17:51, Info                  CSI    0000025c [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:17:51, Info                  CSI    0000025d [sR] Beginning Verify and Repair transaction
2014-04-18 11:17:57, Info                  CSI    0000026b [sR] Verify complete
2014-04-18 11:17:58, Info                  CSI    0000026c [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:17:58, Info                  CSI    0000026d [sR] Beginning Verify and Repair transaction
2014-04-18 11:18:09, Info                  CSI    0000026f [sR] Verify complete
2014-04-18 11:18:09, Info                  CSI    00000270 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:18:09, Info                  CSI    00000271 [sR] Beginning Verify and Repair transaction
2014-04-18 11:18:21, Info                  CSI    0000027f [sR] Verify complete
2014-04-18 11:18:21, Info                  CSI    00000280 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:18:21, Info                  CSI    00000281 [sR] Beginning Verify and Repair transaction
2014-04-18 11:18:26, Info                  CSI    00000283 [sR] Verify complete
2014-04-18 11:18:27, Info                  CSI    00000284 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:18:27, Info                  CSI    00000285 [sR] Beginning Verify and Repair transaction
2014-04-18 11:18:32, Info                  CSI    00000287 [sR] Verify complete
2014-04-18 11:18:33, Info                  CSI    00000288 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:18:33, Info                  CSI    00000289 [sR] Beginning Verify and Repair transaction
2014-04-18 11:18:40, Info                  CSI    0000028c [sR] Verify complete
2014-04-18 11:18:41, Info                  CSI    0000028d [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:18:41, Info                  CSI    0000028e [sR] Beginning Verify and Repair transaction
2014-04-18 11:18:44, Info                  CSI    00000290 [sR] Verify complete
2014-04-18 11:18:45, Info                  CSI    00000291 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:18:45, Info                  CSI    00000292 [sR] Beginning Verify and Repair transaction
2014-04-18 11:18:54, Info                  CSI    00000294 [sR] Verify complete
2014-04-18 11:18:55, Info                  CSI    00000295 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:18:55, Info                  CSI    00000296 [sR] Beginning Verify and Repair transaction
2014-04-18 11:19:03, Info                  CSI    00000298 [sR] Verify complete
2014-04-18 11:19:03, Info                  CSI    00000299 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:19:03, Info                  CSI    0000029a [sR] Beginning Verify and Repair transaction
2014-04-18 11:19:13, Info                  CSI    000002a1 [sR] Verify complete
2014-04-18 11:19:14, Info                  CSI    000002a2 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:19:14, Info                  CSI    000002a3 [sR] Beginning Verify and Repair transaction
2014-04-18 11:19:24, Info                  CSI    000002b8 [sR] Verify complete
2014-04-18 11:19:25, Info                  CSI    000002b9 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:19:25, Info                  CSI    000002ba [sR] Beginning Verify and Repair transaction
2014-04-18 11:19:47, Info                  CSI    000002bc [sR] Verify complete
2014-04-18 11:19:47, Info                  CSI    000002bd [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:19:47, Info                  CSI    000002be [sR] Beginning Verify and Repair transaction
2014-04-18 11:19:53, Info                  CSI    000002c0 [sR] Verify complete
2014-04-18 11:19:53, Info                  CSI    000002c1 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:19:53, Info                  CSI    000002c2 [sR] Beginning Verify and Repair transaction
2014-04-18 11:19:59, Info                  CSI    000002c4 [sR] Verify complete
2014-04-18 11:19:59, Info                  CSI    000002c5 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:19:59, Info                  CSI    000002c6 [sR] Beginning Verify and Repair transaction
2014-04-18 11:20:05, Info                  CSI    000002ca [sR] Verify complete
2014-04-18 11:20:06, Info                  CSI    000002cb [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:20:06, Info                  CSI    000002cc [sR] Beginning Verify and Repair transaction
2014-04-18 11:20:12, Info                  CSI    000002ce [sR] Verify complete
2014-04-18 11:20:13, Info                  CSI    000002cf [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:20:13, Info                  CSI    000002d0 [sR] Beginning Verify and Repair transaction
2014-04-18 11:20:21, Info                  CSI    000002d2 [sR] Verify complete
2014-04-18 11:20:21, Info                  CSI    000002d3 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:20:21, Info                  CSI    000002d4 [sR] Beginning Verify and Repair transaction
2014-04-18 11:20:27, Info                  CSI    000002d6 [sR] Verify complete
2014-04-18 11:20:28, Info                  CSI    000002d7 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:20:28, Info                  CSI    000002d8 [sR] Beginning Verify and Repair transaction
2014-04-18 11:20:34, Info                  CSI    000002db [sR] Verify complete
2014-04-18 11:20:35, Info                  CSI    000002dc [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:20:35, Info                  CSI    000002dd [sR] Beginning Verify and Repair transaction
2014-04-18 11:20:41, Info                  CSI    000002df [sR] Verify complete
2014-04-18 11:20:41, Info                  CSI    000002e0 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:20:41, Info                  CSI    000002e1 [sR] Beginning Verify and Repair transaction
2014-04-18 11:20:48, Info                  CSI    000002e3 [sR] Verify complete
2014-04-18 11:20:49, Info                  CSI    000002e4 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:20:49, Info                  CSI    000002e5 [sR] Beginning Verify and Repair transaction
2014-04-18 11:20:57, Info                  CSI    000002e8 [sR] Verify complete
2014-04-18 11:20:57, Info                  CSI    000002e9 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:20:57, Info                  CSI    000002ea [sR] Beginning Verify and Repair transaction
2014-04-18 11:21:02, Info                  CSI    000002ec [sR] Verify complete
2014-04-18 11:21:03, Info                  CSI    000002ed [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:21:03, Info                  CSI    000002ee [sR] Beginning Verify and Repair transaction
2014-04-18 11:21:12, Info                  CSI    000002f0 [sR] Verify complete
2014-04-18 11:21:12, Info                  CSI    000002f1 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:21:12, Info                  CSI    000002f2 [sR] Beginning Verify and Repair transaction
2014-04-18 11:21:18, Info                  CSI    000002f4 [sR] Verify complete
2014-04-18 11:21:19, Info                  CSI    000002f5 [sR] Verifying 100 (0x0000000000000064) components
2014-04-18 11:21:19, Info                  CSI    000002f6 [sR] Beginning Verify and Repair transaction
2014-04-18 11:21:26, Info                  CSI    000002f8 [sR] Verify complete
2014-04-18 11:21:27, Info                  CSI    000002f9 [sR] Verifying 41 (0x0000000000000029) components
2014-04-18 11:21:27, Info                  CSI    000002fa [sR] Beginning Verify and Repair transaction
2014-04-18 11:21:29, Info                  CSI    000002fc [sR] Verify complete
2014-04-18 11:21:29, Info                  CSI    000002fd [sR] Repairing 0 components
2014-04-18 11:21:29, Info                  CSI    000002fe [sR] Beginning Verify and Repair transaction
2014-04-18 11:21:29, Info                  CSI    00000300 [sR] Repair complete
 

Share this post


Link to post
Share on other sites

The only way I will know is to start typing and occasionally the cursor jumps out of the page , off the line of ty appear pe and it appearsll  that it is still oing it right on this page. I am finding it difficult to respond due to the random jump around of the mouse's cursor

Share this post


Link to post
Share on other sites

Can you open Device Manager, are there any exclamation or question marks against Keyboards or Mice and other pointing devices

Share this post


Link to post
Share on other sites

No there are no question marks or exclamation marks, Can you walk me through moving One Note and putting Note Pad or Word Pad for on line notes , Right now if I want to same something it goes to Note Pad  and I don't like it and , just out of curiosity could that cause the problem ? Can not hurt to try . My daughter who once worked for lynex is having a similar problem. I just opened up Power Point and picked a new blank page and saw this in the middle what is osi 00000009 [sR]


Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.