kevinf80 Posted December 21, 2016 ID:1082802 Share Posted December 21, 2016 Com Surrogate is genuine windows process, a 3rd party codec pack can help.... The following are just suggestions... I use Icaros.. Icaros - http://www.videohelp.com/software/Icaros Shark - http://shark007.net/ K-Lite - https://www.codecguide.com/ Regarding Cortana, is it set up correctly....? http://www.thewindowsclub.com/set-up-cortana-in-windows-10 Link to post Share on other sites More sharing options...
Stephen720 Posted December 22, 2016 Author ID:1082867 Share Posted December 22, 2016 Thank you but I'm gonna reinstall windows cause things have changed and I just dont feel safe, my friends told me to install windows on a different partition so if i need to reset windows it will be easy, how do I do this? Also do I have to purchase windows or can you still get win 10 for free? Link to post Share on other sites More sharing options...
kevinf80 Posted December 22, 2016 ID:1082894 Share Posted December 22, 2016 If you believe your system is still compromised then reinstalling on another partiton is not an option I would recommend... If you have important data on your system obviously the first step is to back it up to other media. I would then go for a system "REFRESH" That option still retains data but removes the OS and 3rd party applications, the operating system is reinstalled... For that option go here: https://www.tenforums.com/tutorials/4090-refresh-windows-10-a.html for full instructions. There is also the option for a system "RESET" that is all data removed, all 3rd part apps and OS removed, then Windows reinstalled. That option and other options are available at the bottom of the above tutorial... Link to post Share on other sites More sharing options...
Stephen720 Posted December 22, 2016 Author ID:1083055 Share Posted December 22, 2016 If I do a complete system reset, will it delete all the data from the other drives? Link to post Share on other sites More sharing options...
Stephen720 Posted December 22, 2016 Author ID:1083059 Share Posted December 22, 2016 Also do I need an installation media? Link to post Share on other sites More sharing options...
kevinf80 Posted December 22, 2016 ID:1083085 Share Posted December 22, 2016 (edited) Reset or Refresh will only affect the drive or partition where you have Windows installed... Other drives are not affected.. No installation media is needed, everything needed for the reset is contained in C:\Recovery folder... To reset your computer from within Windows 10, press Windows key + I key to launch the Settings app, then Select Update & security > Recovery, and under Reset this PC click on the Get started button. From there just follow the prompts... Edited December 22, 2016 by kevinf80 Link to post Share on other sites More sharing options...
Stephen720 Posted December 22, 2016 Author ID:1083168 Share Posted December 22, 2016 So I just refreshed and I'm getting the same Bad Pool Header error as before Link to post Share on other sites More sharing options...
kevinf80 Posted December 23, 2016 ID:1083307 Share Posted December 23, 2016 (edited) I thought you were going for a RESET...? Is the bad pool error still showing "KMODE exception not handled" Please download VEW by Vino Rosso from HERE and save it to your Desktop. Double-click VEW.exe. to start, Vista and Windows 7/8 users Right Click and select "Run as Administrator" Under 'Select log to query...check the boxes for both Application and System. Under 'Select type to list... select both Error and Critical. Click the radio button for 'Number of events...Type 15 in the 1 to 20 box. Then click the Run button. Notepad will open with the output log. It will take a couple of minutes to generate the log, please be patient. Please post the Output log in your next reply. Edited December 23, 2016 by kevinf80 Link to post Share on other sites More sharing options...
Stephen720 Posted December 23, 2016 Author ID:1083388 Share Posted December 23, 2016 Sorry I did do the reset. Kmode exception error only occured when i used the boot option where it would only start windows services. Vino's Event Viewer v01c run on Windows 7 in English Report run at 23/12/2016 18:42:57 Note: All dates below are in the format dd/mm/yyyy ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 'Application' Log - Critical Type ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 'Application' Log - Error Type ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Log: 'Application' Date/Time: 23/12/2016 02:03:24 Type: Error Category: 100 Event: 1000 Source: Application Error Faulting application name: chrome.exe, version: 55.0.2883.87, time stamp: 0x5848db5a Faulting module name: ntdll.dll, version: 10.0.14393.479, time stamp: 0x5825887f Exception code: 0xc0000374 Fault offset: 0x00000000000f8283 Faulting process id: 0x1ab8 Faulting application start time: 0x01d25cc0affb09c2 Faulting application path: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll Report Id: fe744813-c434-47ce-b40f-411a407473a0 Faulting package full name: Faulting package-relative application ID: Log: 'Application' Date/Time: 23/12/2016 02:03:13 Type: Error Category: 0 Event: 1026 Source: .NET Runtime Application: PCRemote.exe Framework Version: v4.0.30319 Description: The process was terminated due to an unhandled exception. Exception Info: System.NullReferenceException at PCRemote.HotspotHandler.OnNotification(WLAN_NOTIFICATION_DATA ByRef, IntPtr) Log: 'Application' Date/Time: 23/12/2016 02:00:50 Type: Error Category: 0 Event: 11500 Source: MsiInstaller Product: PC Remote -- Error 1500. Another installation is in progress. You must complete that installation before continuing this one. Log: 'Application' Date/Time: 23/12/2016 00:57:33 Type: Error Category: 100 Event: 1000 Source: Application Error Faulting application name: WinStore.Mobile.exe, version: 11606.1001.39.0, time stamp: 0x57789272 Faulting module name: Windows.UI.Xaml.dll, version: 10.0.14393.479, time stamp: 0x58258ce8 Exception code: 0xc000027b Fault offset: 0x00000000006d675b Faulting process id: 0x2430 Faulting application start time: 0x01d25cb467e2d0e1 Faulting application path: C:\Program Files\WindowsApps\Microsoft.WindowsStore_11606.1001.39.0_x64__8wekyb3d8bbwe\WinStore.Mobile.exe Faulting module path: C:\Windows\System32\Windows.UI.Xaml.dll Report Id: 7404af87-1892-40ec-8633-7d79d35de2af Faulting package full name: Microsoft.WindowsStore_11606.1001.39.0_x64__8wekyb3d8bbwe Faulting package-relative application ID: App Log: 'Application' Date/Time: 23/12/2016 00:36:22 Type: Error Category: 0 Event: 10 Source: Microsoft-Windows-AppModel-State Failure to load the application settings for package Microsoft.VCLibs.140.00_8wekyb3d8bbwe. Error Code: 3 Log: 'Application' Date/Time: 23/12/2016 00:36:22 Type: Error Category: 0 Event: 10 Source: Microsoft-Windows-AppModel-State Failure to load the application settings for package Microsoft.Services.Store.Engagement_8wekyb3d8bbwe. Error Code: 3 Log: 'Application' Date/Time: 23/12/2016 00:36:22 Type: Error Category: 0 Event: 10 Source: Microsoft-Windows-AppModel-State Failure to load the application settings for package Microsoft.NET.Native.Runtime.1.4_8wekyb3d8bbwe. Error Code: 3 Log: 'Application' Date/Time: 23/12/2016 00:36:22 Type: Error Category: 0 Event: 10 Source: Microsoft-Windows-AppModel-State Failure to load the application settings for package Microsoft.NET.Native.Runtime.1.3_8wekyb3d8bbwe. Error Code: 3 Log: 'Application' Date/Time: 23/12/2016 00:36:22 Type: Error Category: 0 Event: 10 Source: Microsoft-Windows-AppModel-State Failure to load the application settings for package Microsoft.NET.Native.Framework.1.3_8wekyb3d8bbwe. Error Code: 3 Log: 'Application' Date/Time: 23/12/2016 00:36:21 Type: Error Category: 0 Event: 10 Source: Microsoft-Windows-AppModel-State Failure to load the application settings for package Microsoft.Advertising.Xaml_8wekyb3d8bbwe. Error Code: 3 Log: 'Application' Date/Time: 23/12/2016 00:36:18 Type: Error Category: 0 Event: 10 Source: Microsoft-Windows-AppModel-State Failure to load the application settings for package Microsoft.VCLibs.140.00_8wekyb3d8bbwe. Error Code: 3 Log: 'Application' Date/Time: 23/12/2016 00:36:18 Type: Error Category: 0 Event: 10 Source: Microsoft-Windows-AppModel-State Failure to load the application settings for package Microsoft.Services.Store.Engagement_8wekyb3d8bbwe. Error Code: 3 Log: 'Application' Date/Time: 23/12/2016 00:36:18 Type: Error Category: 0 Event: 10 Source: Microsoft-Windows-AppModel-State Failure to load the application settings for package Microsoft.NET.Native.Runtime.1.4_8wekyb3d8bbwe. Error Code: 3 Log: 'Application' Date/Time: 23/12/2016 00:36:18 Type: Error Category: 0 Event: 10 Source: Microsoft-Windows-AppModel-State Failure to load the application settings for package Microsoft.NET.Native.Runtime.1.3_8wekyb3d8bbwe. Error Code: 3 Log: 'Application' Date/Time: 23/12/2016 00:36:18 Type: Error Category: 0 Event: 10 Source: Microsoft-Windows-AppModel-State Failure to load the application settings for package Microsoft.NET.Native.Framework.1.3_8wekyb3d8bbwe. Error Code: 3 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 'System' Log - Critical Type ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Log: 'System' Date/Time: 22/12/2016 23:14:46 Type: Critical Category: 63 Event: 41 Source: Microsoft-Windows-Kernel-Power The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Log: 'System' Date/Time: 22/12/2016 22:45:54 Type: Critical Category: 63 Event: 41 Source: Microsoft-Windows-Kernel-Power The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Log: 'System' Date/Time: 22/12/2016 22:41:33 Type: Critical Category: 63 Event: 41 Source: Microsoft-Windows-Kernel-Power The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Log: 'System' Date/Time: 22/12/2016 22:36:41 Type: Critical Category: 63 Event: 41 Source: Microsoft-Windows-Kernel-Power The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Log: 'System' Date/Time: 22/12/2016 22:17:19 Type: Critical Category: 63 Event: 41 Source: Microsoft-Windows-Kernel-Power The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. Log: 'System' Date/Time: 23/12/2016 05:28:13 Type: Critical Category: 404 Event: 404 Source: Microsoft-Windows-TaskScheduler Task Scheduler service has encountered RPC initialization error in "RpcServerUseProtseq:ncacn_ip_tcp". Additional Data: Error Value: 14. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 'System' Log - Error Type ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Log: 'System' Date/Time: 23/12/2016 08:59:42 Type: Error Category: 0 Event: 10016 Source: Microsoft-Windows-DistributedCOM The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. Log: 'System' Date/Time: 23/12/2016 06:15:22 Type: Error Category: 0 Event: 10016 Source: Microsoft-Windows-DistributedCOM The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. Log: 'System' Date/Time: 23/12/2016 02:11:31 Type: Error Category: 0 Event: 10016 Source: Microsoft-Windows-DistributedCOM The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {8D8F4F83-3594-4F07-8369-FC3C3CAE4919} and APPID {F72671A9-012C-4725-9D2F-2A4D32D65169} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. Log: 'System' Date/Time: 23/12/2016 02:11:29 Type: Error Category: 0 Event: 10016 Source: Microsoft-Windows-DistributedCOM The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. Log: 'System' Date/Time: 23/12/2016 02:11:29 Type: Error Category: 0 Event: 10016 Source: Microsoft-Windows-DistributedCOM The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. Log: 'System' Date/Time: 23/12/2016 02:11:01 Type: Error Category: 0 Event: 7023 Source: Service Control Manager The Sync Host_56f22 service terminated with the following error: Access is denied. Log: 'System' Date/Time: 23/12/2016 02:10:58 Type: Error Category: 0 Event: 10010 Source: Microsoft-Windows-DistributedCOM The server {D63B10C5-BB46-4990-A94F-E40B9D520160} did not register with DCOM within the required timeout. Log: 'System' Date/Time: 23/12/2016 02:10:58 Type: Error Category: 0 Event: 10010 Source: Microsoft-Windows-DistributedCOM The server {D63B10C5-BB46-4990-A94F-E40B9D520160} did not register with DCOM within the required timeout. Log: 'System' Date/Time: 23/12/2016 02:10:58 Type: Error Category: 0 Event: 10010 Source: Microsoft-Windows-DistributedCOM The server {D63B10C5-BB46-4990-A94F-E40B9D520160} did not register with DCOM within the required timeout. Log: 'System' Date/Time: 23/12/2016 02:10:58 Type: Error Category: 0 Event: 10010 Source: Microsoft-Windows-DistributedCOM The server {D63B10C5-BB46-4990-A94F-E40B9D520160} did not register with DCOM within the required timeout. Log: 'System' Date/Time: 23/12/2016 02:10:51 Type: Error Category: 0 Event: 10010 Source: Microsoft-Windows-DistributedCOM The server {4AA0A5C4-1B9B-4F2E-99D7-99C6AEC83474} did not register with DCOM within the required timeout. Log: 'System' Date/Time: 23/12/2016 02:10:50 Type: Error Category: 0 Event: 10010 Source: Microsoft-Windows-DistributedCOM The server {4AA0A5C4-1B9B-4F2E-99D7-99C6AEC83474} did not register with DCOM within the required timeout. Log: 'System' Date/Time: 23/12/2016 02:09:01 Type: Error Category: 0 Event: 10016 Source: Microsoft-Windows-DistributedCOM The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. Log: 'System' Date/Time: 23/12/2016 02:09:01 Type: Error Category: 0 Event: 10016 Source: Microsoft-Windows-DistributedCOM The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. Log: 'System' Date/Time: 23/12/2016 02:09:00 Type: Error Category: 0 Event: 10016 Source: Microsoft-Windows-DistributedCOM The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {8D8F4F83-3594-4F07-8369-FC3C3CAE4919} and APPID {F72671A9-012C-4725-9D2F-2A4D32D65169} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. Link to post Share on other sites More sharing options...
kevinf80 Posted December 23, 2016 ID:1083416 Share Posted December 23, 2016 Is your video card overclocked....? Link to post Share on other sites More sharing options...
Stephen720 Posted December 24, 2016 Author ID:1083458 Share Posted December 24, 2016 Yeah, It came factory overclocked. As soon as i reset windows though it would crash like every minute but now that i have everything installed It hasnt crashed since. Link to post Share on other sites More sharing options...
kevinf80 Posted December 24, 2016 ID:1083542 Share Posted December 24, 2016 Is your system OK now, obviously malware/infection is gone....? Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted January 12, 2017 Root Admin ID:1088376 Share Posted January 12, 2017 Glad we could help. :)If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts