Jump to content

Getting "Bad Image" Errors

Nathhaw
 Share

Recommended Posts

Nathhaw

Nathhaw

Posted
Posted

After running Malwarebytes I am getting numerous errors.  They are all similar to the example below. 

 

  • notepad.exe - Bad Image  C:\Progra~2\Wincert\WIN32C~1.DLL is either not designed to run on Windows or it contains an error.  Try installing the program again using the original installation media or contract your system administrator or the software vendor for support.

 

Based on what I have read on the forums, I ran FRST and posted the readout below.  If there is something else I should do, please let me know.  Thank you.

 

Additional scan result of Farbar Recovery Scan Tool (x86) Version:16-06-2014
Ran by Freda at 2014-06-17 23:25:44
Running from C:\Users\Freda\Desktop
Boot Mode: Normal
==========================================================

==================== Security Center ========================

AV: Norton 360 (Enabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
AS: Norton 360 (Enabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Norton 360 (Enabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}

==================== Installed Programs ======================

32 Bit HP CIO Components Installer (Version: 2.1.4 - Hewlett-Packard) Hidden
Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.4.0.2710 - Adobe Systems Incorporated)
Adobe AIR (Version: 3.4.0.2710 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 11 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 11.2.202.235 - Adobe Systems Incorporated)
Adobe Reader 8.1.2 (HKLM\...\{AC76BA86-7AD7-1033-7B44-A81200000003}) (Version: 8.1.2 - Adobe Systems Incorporated)
Cards_Calendar_OrderGift_DoMorePlugout (Version: 2.03.0000 - Hewlett-Packard) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.07 - Piriform)
Compatibility Pack for the 2007 Office system (HKLM\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation)
CyberLink DVD Suite Deluxe (HKLM\...\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: .1707 - CyberLink Corp.)
DJ_AIO_03_F4200_Software_Min (Version: 110.0.206.000 - Hewlett-Packard) Hidden
DVD Play (HKLM\...\{45D707E9-F3C4-11D9-A373-0050BAE317E1}) (Version: 2.4.5411 - Hewlett-Packard)
Enhanced Multimedia Keyboard Solution (HKLM\...\KBD) (Version:  - Hewlett-Packard)
Garmin Lifetime Updater (HKLM\...\{0E13CAA3-B5FC-48C0-AA4A-26F5CD0C371C}) (Version: 2.1.7 - Garmin)
Google Chrome (HKLM\...\Google Chrome) (Version: 35.0.1916.153 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.24.7 - Google Inc.) Hidden
Hardware Diagnostic Tools (HKLM\...\PC-Doctor for Windows) (Version: 5.1.4861.15 - PC-Doctor, Inc.)
Hewlett-Packard Active Check for Health Check (Version: 1.1.15.2 - Hewlett-Packard) Hidden
Hewlett-Packard Asset Agent for Health Check (Version: 2.0.63.2 - HP) Hidden
HP Active Support Library (Version: 3.1.6.1 - Hewlett-Packard) Hidden
HP Customer Experience Enhancements (HKLM\...\{C27C82E4-9C53-4D76-9ED3-A01A3D5EE679}) (Version: 5.6.0.2510 - Hewlett-Packard)
HP Customer Feedback (Version: 1.0.0 - Hewlett-Packard) Hidden
HP Deskjet F4200 All-In-One Driver 11.0 03 (HKLM\...\{C3B6AEB1-390C-4792-8677-CD87F8B2C959}) (Version: 11.0 - HP)
HP Photosmart Essential 2.5 (Version: 1.03.0000 - Hewlett-Packard) Hidden
HP Photosmart Essential 3.0 (HKLM\...\HP Photosmart Essential) (Version: 3.0 - HP)
HP Picasso Media Center Add-In (Version: 1.0.0 - HP) Hidden
HP Recovery Manager RSS (Version: 84.0.0.7 - Hewlet Packard Company) Hidden
HP Total Care Advisor (HKLM\...\{f32502b5-5b64-4882-bf61-77f23edcac4f}) (Version: 2.3.4292.2709 - Hewlett-Packard)
HP Update (HKLM\...\{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}) (Version: 5.003.001.001 - Hewlett-Packard)
HPPhotoSmartPhotobookWebPack1 (Version: 2.03.0000 - Hewlett-Packard) Hidden
HPTCSSetup (HKLM\...\{FA3B34BE-4246-4062-90A3-34CBBEA12B72}) (Version: 1.0.964.2626 - Hewlett-Packard Company)
Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217040FF}) (Version: 7.0.510 - Oracle)
LabelPrint (HKLM\...\{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.2.2913 - CyberLink Corp.)
LightScribe System Software  1.14.17.1 (HKLM\...\{0E7DBD52-B097-4F2B-A7C7-F105B0D20FDB}) (Version: 1.14.17.1 - LightScribe)
LightScribeTemplateLabeler (HKLM\...\{305D4B08-5807-4475-B1C8-D54685534864}) (Version: 1.10.23.1 - LightScribe)
Malwarebytes Anti-Malware version 2.0.2.1012 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.130.10 - McAfee, Inc.)
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 60 day trial (HKLM\...\OfficeTrial) (Version:  - )
Microsoft Office PowerPoint Viewer 2007 (English) (HKLM\...\{95120000-00AF-0409-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Works (HKLM\...\{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}) (Version: 9.7.0621 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
My HP Games (HKLM\...\WildTangent hp Master Uninstall) (Version: 1.0.0.52 - WildTangent)
Norton 360 (HKLM\...\N360) (Version: 20.5.0.28 - Symantec Corporation)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version:  - )
PCIe Soft Data Fax Modem with SmartCP (HKLM\...\CNXT_MODEM_PCI_HSF) (Version: 7.71.00.50 - Conexant Systems)
PSSWCORE (Version: 2.03.0000 - Hewlett-Packard) Hidden
Python 2.5.2 (HKLM\...\{6B976ADF-8AE8-434E-B282-A06C7F624D2F}) (Version: 2.5.2150 - Python Software Foundation)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5657 - Realtek Semiconductor Corp.)
Scan (Version: 11.0.0.0 - Hewlett-Packard) Hidden
TeamViewer 6 Host (HKLM\...\TeamViewer 6 Host) (Version: 6.0.11656 - TeamViewer GmbH)
Toolbox (Version: 110.0.180.000 - Hewlett-Packard) Hidden
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (HKLM\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707) (Version: 1 - Microsoft Corporation)
VideoToolkit01 (Version: 110.0.171.000 - Hewlett-Packard) Hidden
Window Shopper (HKLM\...\{A1570454-ED12-4050-A7AC-9282C7AFB23C}) (Version: 01.02.0003 - Superfish)

==================== Restore Points  =========================

07-06-2014 04:00:06 Scheduled Checkpoint
08-06-2014 04:00:05 Scheduled Checkpoint
09-06-2014 05:11:03 Scheduled Checkpoint
10-06-2014 05:55:40 Scheduled Checkpoint
11-06-2014 05:05:24 Scheduled Checkpoint
12-06-2014 04:00:05 Scheduled Checkpoint
12-06-2014 07:00:17 Windows Update
13-06-2014 04:00:04 Scheduled Checkpoint
14-06-2014 07:05:09 Scheduled Checkpoint
15-06-2014 05:46:28 Scheduled Checkpoint
16-06-2014 04:00:06 Scheduled Checkpoint
17-06-2014 05:23:04 Scheduled Checkpoint
18-06-2014 02:00:17 Removed WeatherBug
18-06-2014 02:04:26 Removed Ask Toolbar
18-06-2014 02:09:36 Removed Fliptoast
18-06-2014 02:11:32 Removed FlipToast
18-06-2014 02:17:59 Removed muvee autoProducer 6.1
18-06-2014 02:35:18 Removed Window Shopper
18-06-2014 02:37:44 Removed Window Shopper
18-06-2014 02:40:43 Removed Window Shopper
18-06-2014 02:48:31 Configured PowerDirector
18-06-2014 03:11:43 Removed Window Shopper

==================== Hosts content: ==========================

2006-11-02 06:23 - 2006-09-18 17:41 - 00000761 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
::1             localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {0E0CCFE2-F8BC-4DD3-AB83-ACCB415D9621} - System32\Tasks\Norton WSC Integration => C:\Program Files\Norton 360\Engine\20.5.0.28\WSCStub.exe [2014-04-29] (Symantec Corporation)
Task: {1627A7F5-A5BF-4289-9580-DCB3B1B980AD} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2011-11-04] (Google Inc.)
Task: {18DFD9FC-082E-4E9B-8285-5F21D2B4EDAE} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {2877ACE5-5F65-44E2-99FE-850414B16588} - System32\Tasks\HP Health Check => c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [2008-06-02] (Hewlett-Packard)
Task: {4D43A788-2BBF-4A54-B5BA-102E394547A2} - System32\Tasks\PC-Doctor\Scheduled Maintenance Swap => C:\Program Files\PC-Doctor for Windows\task_swap.exe [2008-03-13] (PC-Doctor, Inc.)
Task: {5916F864-469C-4391-8604-E4EA141A2699} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-20] ()
Task: {5A15F048-C0B0-401D-8434-50B259F3109F} - System32\Tasks\PC-Doctor\Scheduled Maintenance => C:\Program Files\PC-Doctor for Windows\RunProfiler.exe [2008-04-09] (PC-Doctor, Inc.)
Task: {64885171-EAE9-4883-BE3D-6F7DD04D34EB} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-10-21] (Piriform Ltd)
Task: {7C5A51E8-1AD7-48C6-8879-257A8A9609F5} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {8712B5BE-4071-4879-A9C4-2D7837E2C691} - System32\Tasks\RecoveryCD => C:\Program Files\Hewlett-Packard\HP TCS\RemEngine.exe [2008-04-11] ()
Task: {8B0E6FAB-F43A-4988-AF0A-A21646C212F0} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {8B45AF48-85FD-4996-BBF5-CFFE2F663495} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2011-11-04] (Google Inc.)
Task: {9ED703A9-5FFD-40D5-895A-4385EE1509DE} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-20] (Microsoft Corporation)
Task: {9ED826ED-467A-43E1-978D-F54900454B5E} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\netsh.exe [2006-11-02] (Microsoft Corporation)
Task: {C9D8D300-4575-45E1-A978-E1E380983D6E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-11] (Adobe Systems Incorporated)
Task: {DB5B9A1D-8D95-4F04-81C6-BCAF724AEDB3} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files\Norton 360\Engine\20.5.0.28\SymErr.exe [2013-06-03] (Symantec Corporation)
Task: {EC2BB24D-C060-4DE7-A751-B6769B77FECA} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files\Norton 360\Engine\20.5.0.28\SymErr.exe [2013-06-03] (Symantec Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-03-06 15:31 - 2014-03-06 15:31 - 00557352 _____ () C:\Program Files\VerifiedVPN\bin\hsswd.exe
2014-03-06 15:29 - 2014-03-06 15:29 - 00937768 _____ () C:\Program Files\VerifiedVPN\bin\af_proxy.dll
2014-05-01 16:45 - 2012-05-30 10:51 - 00699280 ____R () C:\PROGRAM FILES\NORTON 360\ENGINE\20.5.0.28\wincfi39.dll

==================== Alternate Data Streams (whitelisted) =========

==================== Safe Mode (whitelisted) ===================

==================== EXE Association (whitelisted) =============

==================== MSCONFIG/TASK MANAGER disabled items =========

MSCONFIG\startupreg: DATAMNGR => C:\PROGRA~1\WI9130~1\Datamngr\DATAMN~1.EXE
MSCONFIG\startupreg: DPService => "C:\Program Files\HP\DVDPlay\DPService.exe"
MSCONFIG\startupreg: fTalk => "C:\Users\Freda\AppData\Local\fTalk\ftalk.exe" -autorun
MSCONFIG\startupreg: HPAdvisor => C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN
MSCONFIG\startupreg: KBD => C:\HP\KBD\KbdStub.EXE
MSCONFIG\startupreg: MapsGalaxy Search Scope Monitor => "C:\PROGRA~1\MAPSGA~2\bar\1.bin\39srchmn.exe" /m=2 /w /h
MSCONFIG\startupreg: MapsGalaxy_39 Browser Plugin Loader => C:\PROGRA~1\MAPSGA~2\bar\1.bin\39brmon.exe
MSCONFIG\startupreg: My Web Search Bar Search Scope Monitor => "C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe" /m=2 /w /h
MSCONFIG\startupreg: MyFunCards Search Scope Monitor => "C:\PROGRA~1\MYFUNC~2\bar\1.bin\5msrchmn.exe" /m=2 /w /h
MSCONFIG\startupreg: MyFunCards_5m Browser Plugin Loader => C:\PROGRA~1\MYFUNC~2\bar\1.bin\5mbrmon.exe
MSCONFIG\startupreg: MyWebSearch Email Plugin => C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================
Error: (06/17/2014 11:17:29 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/17/2014 11:11:44 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddWin32ServiceFiles: Unable to back up image of service VerifiedVPNService since QueryServiceConfig API failed

System Error:
The system cannot find the file specified.

Error: (06/17/2014 11:11:43 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddWin32ServiceFiles: Unable to back up image of service My Web Search Service since QueryServiceConfig API failed

System Error:
The system cannot find the file specified.

Error: (06/17/2014 11:11:43 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddWin32ServiceFiles: Unable to back up image of service MyFunCardsService since QueryServiceConfig API failed

System Error:
The system cannot find the file specified.

Error: (06/17/2014 11:11:43 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddWin32ServiceFiles: Unable to back up image of service MapsGalaxyService since QueryServiceConfig API failed

System Error:
The system cannot find the file specified.

Error: (06/17/2014 11:11:43 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddWin32ServiceFiles: Unable to back up image of service HowToSimplifiedService since QueryServiceConfig API failed

System Error:
The system cannot find the file specified.

Error: (06/17/2014 10:48:32 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddWin32ServiceFiles: Unable to back up image of service VerifiedVPNService since QueryServiceConfig API failed

System Error:
The system cannot find the file specified.

Error: (06/17/2014 10:48:32 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddWin32ServiceFiles: Unable to back up image of service My Web Search Service since QueryServiceConfig API failed

System Error:
The system cannot find the file specified.

Error: (06/17/2014 10:48:32 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddWin32ServiceFiles: Unable to back up image of service MyFunCardsService since QueryServiceConfig API failed

System Error:
The system cannot find the file specified.

Error: (06/17/2014 10:48:32 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddWin32ServiceFiles: Unable to back up image of service MapsGalaxyService since QueryServiceConfig API failed

System Error:
The system cannot find the file specified.

System errors:
=============
Error: (06/17/2014 11:17:30 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Parallel port driver%%1058

Error: (06/16/2014 02:47:20 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: VerifiedVPNService1

Error: (06/16/2014 02:47:18 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: My Web Search Service1

Error: (06/16/2014 02:47:18 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: MyFunCardsService1

Error: (06/16/2014 02:47:16 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: MapsGalaxyService1

Error: (06/16/2014 02:47:16 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: HowToSimplifiedService1

Error: (06/15/2014 02:10:20 PM) (Source: DCOM) (EventID: 10016) (User: Freda-PC)
Description: machine-defaultLocalActivation{9BA05972-F6A8-11CF-A442-00A0C90A8F39}Freda-PCFredaS-1-5-21-560484386-3413784811-3042563543-1000LocalHost (Using LRPC)

Error: (06/13/2014 10:26:58 AM) (Source: DCOM) (EventID: 10016) (User: Freda-PC)
Description: machine-defaultLocalActivation{9BA05972-F6A8-11CF-A442-00A0C90A8F39}Freda-PCFredaS-1-5-21-560484386-3413784811-3042563543-1000LocalHost (Using LRPC)

Error: (06/12/2014 03:25:46 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Parallel port driver%%1058

Error: (06/12/2014 02:34:31 AM) (Source: Dhcp) (EventID: 1002) (User: )
Description: The IP address lease 10.254.192.17 for the Network Card with network address 00FF5479E4D2 has been denied by the DHCP server 10.254.223.254 (The DHCP Server sent a DHCPNACK message).

Microsoft Office Sessions:
=========================
Error: (06/17/2014 11:17:29 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/17/2014 11:11:44 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddWin32ServiceFiles: Unable to back up image of service VerifiedVPNService since QueryServiceConfig API failed

System Error:
The system cannot find the file specified.

Error: (06/17/2014 11:11:43 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddWin32ServiceFiles: Unable to back up image of service My Web Search Service since QueryServiceConfig API failed

System Error:
The system cannot find the file specified.

Error: (06/17/2014 11:11:43 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddWin32ServiceFiles: Unable to back up image of service MyFunCardsService since QueryServiceConfig API failed

System Error:
The system cannot find the file specified.

Error: (06/17/2014 11:11:43 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddWin32ServiceFiles: Unable to back up image of service MapsGalaxyService since QueryServiceConfig API failed

System Error:
The system cannot find the file specified.

Error: (06/17/2014 11:11:43 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddWin32ServiceFiles: Unable to back up image of service HowToSimplifiedService since QueryServiceConfig API failed

System Error:
The system cannot find the file specified.

Error: (06/17/2014 10:48:32 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddWin32ServiceFiles: Unable to back up image of service VerifiedVPNService since QueryServiceConfig API failed

System Error:
The system cannot find the file specified.

Error: (06/17/2014 10:48:32 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddWin32ServiceFiles: Unable to back up image of service My Web Search Service since QueryServiceConfig API failed

System Error:
The system cannot find the file specified.

Error: (06/17/2014 10:48:32 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddWin32ServiceFiles: Unable to back up image of service MyFunCardsService since QueryServiceConfig API failed

System Error:
The system cannot find the file specified.

Error: (06/17/2014 10:48:32 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddWin32ServiceFiles: Unable to back up image of service MapsGalaxyService since QueryServiceConfig API failed

System Error:
The system cannot find the file specified.

CodeIntegrity Errors:
===================================
  Date: 2014-06-17 23:25:38.611
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-06-17 23:25:38.065
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-06-17 23:25:37.488
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-06-17 23:25:36.895
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-06-17 23:25:36.178
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-06-17 23:25:35.647
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-06-17 23:25:35.133
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-06-17 23:25:34.602
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-06-17 23:25:14.541
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\SYMEVENT.SYS because the set of per-page image hashes could not be found on the system.

  Date: 2014-06-17 23:25:14.026
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\SYMEVENT.SYS because the set of per-page image hashes could not be found on the system.

==================== Memory info ===========================

Percentage of memory in use: 56%
Total physical RAM: 1917.76 MB
Available physical RAM: 833.06 MB
Total Pagefile: 4080.7 MB
Available Pagefile: 2914.02 MB
Total Virtual: 2047.88 MB
Available Virtual: 1885.63 MB

==================== Drives ================================

Drive c: (HP) (Fixed) (Total:138.09 GB) (Free:87.58 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (FACTORY_IMAGE) (Fixed) (Total:10.96 GB) (Free:1.49 GB) NTFS ==>[system with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 149 GB) (Disk ID: 8567D7D9)
Partition 1: (Active) - (Size=138 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=11 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Link to post
Share on other sites
1PW

1PW

Posted
Posted

Hello Nathhaw and :welcome:

 

For the benefit of those who analyze the two diagnostic log sets, you may as well attach the 2nd log file generated by FRST.exe. Namely Addition.txt.

 

Also attach the output diagnostic out text file from mbam-check.exe named CheckResults.txt too.

 

Re: Diagnostic Logs

 

That will complete the 3 log files required.

 

Thank you.
 

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.