What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Vista can't download to desktop or save HiJackthis Log File

3 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
I am experiencing the following difficulties with my computer and am hopefull someone can assist me please. I cannot select the download location for any downloaded files. It defaults to my user directory and the folder named "Downloads" only. I was able to download HiJackthis, but not to the desktop. When I run the program it does not open the report log file in notepad, it doesn't open a log file at all. I downloaded and ran OTL, but again it was not from the desktop. Here is the info from that scan, I hope it helps as I am unsure of how to proceed or what to do. Appreciate your time and assistance here.

OTL logfile created on: 5/19/2011 11:40:32 AM - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\Magic\Downloads
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 62.00% Memory free
4.00 Gb Paging File | 3.00 Gb Available in Paging File | 73.00% Paging File free
Paging file location(s): ?:\pagefile.sys

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 147.58 Gb Total Space | 83.87 Gb Free Space | 56.83% Space Free | Partition Type: NTFS

Computer Name: MAGIC-PC | User Name: Magic | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Magic\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\a-squared Free\a2service.exe (Emsi Software GmbH)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
PRC - C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe (TOSHIBA Corporation)
PRC - C:\Program Files\Common Files\Authentium\AntiVirus\dvpapi.vista.exe (Authentium, Inc.)
PRC - C:\Program Files\Protector Suite QL\upeksvr.exe (UPEK Inc.)


========== Modules (SafeList) ==========

MOD - C:\Users\Magic\Downloads\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll (Microsoft Corporation)


========== Win32 Services (SafeList) ==========

SRV - (GameConsoleService) – C:\Program Files\TOSHIBA Games\TOSHIBA Game Console\GameConsoleService.exe (WildTangent, Inc.)
SRV - (a2free) – C:\Program Files\a-squared Free\a2service.exe (Emsi Software GmbH)
SRV - (WAS) – C:\Windows\System32\inetsrv\iisw3adm.dll (Microsoft Corporation)
SRV - (W3SVC) – C:\Windows\System32\inetsrv\iisw3adm.dll (Microsoft Corporation)
SRV - (AppHostSvc) – C:\Windows\System32\inetsrv\apphostsvc.dll (Microsoft Corporation)
SRV - (PCPitstop Scheduling) – C:\Program Files\PCPitstop\PCPitstopScheduleService.exe ()
SRV - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (TosCoSrv) – C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe (TOSHIBA Corporation)
SRV - (dvpapi) – C:\Program Files\Common Files\Authentium\AntiVirus\dvpapi.vista.exe (Authentium, Inc.)
SRV - (TNaviSrv) – C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe (TOSHIBA Corporation)
SRV - (TOSHIBA Bluetooth Service) – C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe (TOSHIBA CORPORATION)
SRV - (Swupdtmr) – c:\Toshiba\IVP\swupdate\swupdtmr.exe ()
SRV - (pinger) – C:\Toshiba\IVP\ISM\pinger.exe ()
SRV - (CFSvcs) – C:\Program Files\Toshiba\ConfigFree\CFSvcs.exe (TOSHIBA CORPORATION)
SRV - (AgereModemAudio) – C:\Windows\System32\agrsmsvc.exe (Agere Systems)
SRV - (UleadBurningHelper) – C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe (Ulead Systems, Inc.)
SRV - (TODDSrv) – C:\Windows\System32\TODDSrv.exe (TOSHIBA Corporation)


========== Driver Services (SafeList) ==========

DRV - (SASDIFSV) – C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (RMCAST) RMCAST (Pgm) – C:\Windows\System32\drivers\rmcast.sys (Microsoft Corporation)
DRV - (RTL8169) – C:\Windows\System32\drivers\Rtlh86.sys (Realtek Corporation )
DRV - (SASENUM) – C:\Program Files\SUPERAntiSpyware\SASENUM.SYS ( SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASKUTIL) – C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (athr) – C:\Windows\System32\drivers\athr.sys (Atheros Communications, Inc.)
DRV - (Point32) – C:\Windows\System32\drivers\point32k.sys (Microsoft Corporation)
DRV - (JL2005C) – C:\Windows\System32\drivers\jl2005c.sys (Windows ® 2000 DDK provider)
DRV - (TVALZ) – C:\Windows\system32\DRIVERS\TVALZ_O.SYS (TOSHIBA Corporation)
DRV - (AFS) – C:\Windows\System32\drivers\AFS.SYS (Oak Technology Inc.)
DRV - (CSS DVP) – C:\Windows\System32\drivers\css-dvp.sys (Authentium, Inc.)
DRV - (tos_sps32) – C:\Windows\system32\DRIVERS\tos_sps32.sys (TOSHIBA Corporation)
DRV - (atikmdag) – C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (SQTECH913D) – C:\Windows\System32\drivers\Capt8080.sys (Service & Quality Technology.)
DRV - (tifm21) – C:\Windows\System32\drivers\tifm21.sys (Texas Instruments)
DRV - (AgereSoftModem) – C:\Windows\System32\drivers\AGRSM.sys (Agere Systems)
DRV - (tdcmdpst) – C:\Windows\System32\drivers\tdcmdpst.sys (TOSHIBA Corporation.)
DRV - (KR3NPXP) – C:\Windows\system32\drivers\kr3npxp.sys (TOSHIBA CORPORATION)
DRV - (ApfiltrService) – C:\Windows\System32\drivers\Apfiltr.sys (Alps Electric Co., Ltd.)
DRV - (LPCFilter) – C:\Windows\system32\DRIVERS\LPCFilter.sys (COMPAL ELECTRONIC INC.)
DRV - (KR10I) – C:\Windows\system32\drivers\kr10i.sys (TOSHIBA CORPORATION)
DRV - (KR10N) – C:\Windows\system32\drivers\kr10n.sys (TOSHIBA CORPORATION)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.toshibadirect.com/dpdstart
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [Binary data over 100 bytes]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [Binary data over 100 bytes]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.toshibadirect.com/dpdstart

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.toshibadirect.com/dpdstart
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.toshibadirect.com/dpdstart
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Yahoo"
FF - prefs.js..browser.search.defaulturl: "http://search.yahoo.com/search?ei=UTF-8&fr=ytff-&p="
FF - prefs.js..browser.search.param.yahoo-fr: "moz2-ytff-"
FF - prefs.js..browser.search.param.yahoo-fr-cjkt: "moz2-ytff-"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "http://www.justice.gov/eoir/vll/benchbook/templates/benchbook%20cancellation%20240A(a)%20template%201%20upload%201-30-08.htm"
FF - prefs.js..extensions.enabledItems: [removed]:1.0
FF - prefs.js..extensions.enabledItems: [removed]:1.0.0.1
FF - prefs.js..extensions.enabledItems: {3e9bb2a7-62ca-4efa-a4e6-f6f6168a652d}:0.8.19
FF - prefs.js..extensions.enabledItems: {4776510a-a1f4-41f3-a3c8-35b474ecef23}:1.0.8
FF - prefs.js..extensions.enabledItems: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20110323
FF - prefs.js..keyword.URL: "http://search.yahoo.com/search?ei=UTF-8&fr=ytff-&p="
FF - prefs.js..network.proxy.type: 4

FF - HKLM\software\mozilla\Firefox\extensions\\{22181a4d-af90-4ca3-a569-faed9118d6bc}:
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.16\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/03/23 16:51:06 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.16\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/04/27 22:56:26 | 000,000,000 | —D | M]

[2008/08/20 02:54:59 | 000,000,000 | —D | M] (No name found) – C:\Users\Magic\AppData\Roaming\mozilla\Extensions
[2011/05/18 10:16:30 | 000,000,000 | —D | M] (No name found) – C:\Users\Magic\AppData\Roaming\mozilla\Firefox\Profiles\tlmwhfb0.default\extensions
[2010/02/14 04:38:49 | 000,000,000 | —D | M] (ShowIP) – C:\Users\Magic\AppData\Roaming\mozilla\Firefox\Profiles\tlmwhfb0.default\extensions\{3e9bb2a7-62ca-4efa-a4e6-f6f6168a652d}
[2010/02/14 04:38:49 | 000,000,000 | —D | M] (Stealther) – C:\Users\Magic\AppData\Roaming\mozilla\Firefox\Profiles\tlmwhfb0.default\extensions\{4776510a-a1f4-41f3-a3c8-35b474ecef23}
[2011/02/14 13:36:08 | 000,000,000 | —D | M] (Yahoo! Toolbar) – C:\Users\Magic\AppData\Roaming\mozilla\Firefox\Profiles\tlmwhfb0.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2008/01/12 04:53:11 | 000,000,000 | —D | M] (Yahoo! Toolbar) – C:\Users\Magic\AppData\Roaming\mozilla\Firefox\Profiles\tlmwhfb0.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}(386)
[2009/01/14 15:48:04 | 000,000,000 | —D | M] (Yahoo! Toolbar) – C:\Users\Magic\AppData\Roaming\mozilla\Firefox\Profiles\tlmwhfb0.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}(601)
[2007/09/09 11:36:44 | 000,000,000 | —D | M] (Yahoo! Toolbar) – C:\Users\Magic\AppData\Roaming\mozilla\Firefox\Profiles\tlmwhfb0.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}(8852)
[2011/04/06 11:20:27 | 000,000,000 | —D | M] (NoScript) – C:\Users\Magic\AppData\Roaming\mozilla\Firefox\Profiles\tlmwhfb0.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}
[2011/04/06 11:20:27 | 000,000,000 | —D | M] (WOT) – C:\Users\Magic\AppData\Roaming\mozilla\Firefox\Profiles\tlmwhfb0.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2011/04/06 11:20:27 | 000,000,000 | —D | M] (Download Statusbar) – C:\Users\Magic\AppData\Roaming\mozilla\Firefox\Profiles\tlmwhfb0.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}
[2011/04/06 11:20:27 | 000,000,000 | —D | M] (LinkedIn Companion for Firefox) – C:\Users\Magic\AppData\Roaming\mozilla\Firefox\Profiles\tlmwhfb0.default\extensions\{e2337727-f9c9-411b-929e-287584341d1a}
[2009/07/18 20:09:33 | 000,000,000 | —D | M] (Ancestry Toolbar) – C:\Users\Magic\AppData\Roaming\mozilla\Firefox\Profiles\tlmwhfb0.default\extensions\[removed]
[2010/01/30 19:42:30 | 000,000,000 | —D | M] (Ancestry.com Advanced Image Viewer) – C:\Users\Magic\AppData\Roaming\mozilla\Firefox\Profiles\tlmwhfb0.default\extensions\[removed]
[2008/03/04 18:16:03 | 000,002,386 | —- | M] () – C:\Users\Magic\AppData\Roaming\Mozilla\Firefox\Profiles\tlmwhfb0.default\searchplugins\siteadvisor.xml
[2007/11/07 10:54:59 | 000,000,766 | —- | M] () – C:\Users\Magic\AppData\Roaming\Mozilla\Firefox\Profiles\tlmwhfb0.default\searchplugins\whitepagescom.xml
[2008/03/29 20:31:59 | 000,005,322 | —- | M] () – C:\Users\Magic\AppData\Roaming\Mozilla\Firefox\Profiles\tlmwhfb0.default\searchplugins\yahoo-search.xml
[2011/04/01 14:36:44 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2009/05/14 16:44:05 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions\[removed]
[2008/06/30 14:44:08 | 000,324,976 | —- | M] (Symantec Corporation) – C:\Program Files\Mozilla Firefox\components\coFFPlgn.dll
[2006/12/03 16:58:24 | 000,864,768 | —- | M] (UPEK Inc.) – C:\Program Files\Mozilla Firefox\components\pbgk1_8.dll
[2008/06/17 23:43:04 | 000,086,016 | —- | M] (Coupons, Inc.) – C:\Program Files\Mozilla Firefox\plugins\npCouponPrinter.dll
[2007/09/05 13:56:00 | 000,352,256 | —- | M] ( ) – C:\Program Files\Mozilla Firefox\plugins\npsabffx.dll

Hosts file not found
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (WOT) - {71576546-354D-41C9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
O4 - HKCU..\Run: [HijackThis startup scan] File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\control panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableCAD = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonScripts = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffScripts = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunLogonScriptSync = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunStartupScriptSync = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideStartupScripts = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\control panel present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\restrictions present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoPrintSharing = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFileSharing = 1
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\System32\iavlsp.dll ()
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\System32\iavlsp.dll ()
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\System32\iavlsp.dll ()
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\System32\iavlsp.dll ()
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Windows\System32\iavlsp.dll ()
O16 - DPF: {6824D897-F7E1-4E41-B84B-B1D3FA4BF1BD} http://utilities.pcpitstop.com/Exterminate…opAntiVirus.dll (PCPitstop AntiVirus)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://dl8-cdn-01.sun.com/s/ESD5/JSCDL/jre…ows-i586-jc.cab (Java Plug-in 1.6.0_11)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_11)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_11)
O16 - DPF: {FFD85DC8-5261-4D11-B728-F7C59D911691} https://secure.iolo.com/purchase/app/ocx/UpgradeVerify.cab (iolo Software Upgrade Entitlement Tool)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\AutorunsDisabled - No CLSID value found
O18 - Protocol\Handler\wot {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files\WOT\WOT.dll ()
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img24.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img24.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 14:43:36 | 000,000,024 | —- | M] () - C:\autoexec.bat – [ NTFS ]
O32 - AutoRun File - [2008/07/01 11:06:57 | 000,000,000 | —D | M] - C:\Autoruns – [ NTFS ]
O34 - HKLM BootExecute: (•) - File not found
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - File not found
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

Drivers32: msacm.dvacm - C:\Program Files\Common Files\Ulead Systems\vio\DVACM.acm (Ulead Systems, Inc.)
Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.JDCT - C:\Windows\System32\jl_jdct.drv (JEILIN Tech.)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2011/05/19 01:42:18 | 000,000,000 | —D | C] – C:\Users\Magic\Documents\Chris Hopkins Info
[2011/05/18 10:10:57 | 000,000,000 | —D | C] – C:\Users\Magic\AppData\Local\Windows Live
[2011/05/18 10:08:20 | 000,754,688 | —- | C] (Microsoft Corporation) – C:\Windows\System32\webservices.dll
[2011/04/27 07:56:52 | 000,000,000 | —D | C] – C:\Users\Magic\AppData\Local\Adobe
[2011/04/27 07:37:09 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\System32\Apphlpdm.dll
[2011/04/27 07:37:08 | 004,240,384 | —- | C] (Microsoft) – C:\Windows\System32\GameUXLegacyGDFs.dll
[2011/04/27 07:36:58 | 000,876,032 | —- | C] (Microsoft Corporation) – C:\Windows\System32\XpsPrint.dll
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/05/19 11:41:00 | 000,000,420 | -H– | M] () – C:\Windows\tasks\User_Feed_Synchronization-{CBC61DF8-6CF6-4ADB-A646-57C18065084F}.job
[2011/05/19 11:22:22 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2011/05/19 10:29:37 | 000,000,102 | —- | M] () – C:\index.ini
[2011/05/19 10:04:58 | 000,003,696 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011/05/19 10:04:58 | 000,003,696 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011/05/19 02:04:52 | 000,065,536 | —- | M] () – C:\Windows\System32\Ikeext.etl
[2011/04/27 23:06:33 | 000,646,662 | —- | M] () – C:\Windows\System32\perfh009.dat
[2011/04/27 23:06:33 | 000,112,514 | —- | M] () – C:\Windows\System32\perfc009.dat
[2011/04/27 22:56:26 | 000,001,858 | —- | M] () – C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/07/27 07:49:37 | 000,000,036 | —- | C] () – C:\Users\Magic\AppData\Local\housecall.guid.cache
[2010/02/25 13:53:52 | 000,000,145 | —- | C] () – C:\Windows\System32\EBPPORT.DAT
[2009/08/18 16:38:35 | 000,107,612 | —- | C] () – C:\Windows\System32\StructuredQuerySchema.bin
[2009/08/18 16:38:34 | 000,117,248 | —- | C] () – C:\Windows\System32\EhStorAuthn.dll
[2009/08/03 15:07:42 | 000,403,816 | —- | C] () – C:\Windows\System32\OGACheckControl.dll
[2009/08/03 15:07:42 | 000,230,768 | —- | C] () – C:\Windows\System32\OGAEXEC.exe
[2009/07/09 00:18:37 | 000,126,976 | —- | C] () – C:\Windows\System32\iavlsp.dll
[2009/07/05 11:34:56 | 000,074,703 | —- | C] () – C:\Windows\System32\mfc45.dll
[2009/06/20 20:17:32 | 000,000,048 | —- | C] () – C:\Windows\wininit.ini
[2009/06/10 03:20:58 | 000,000,013 | —- | C] () – C:\Windows\popcinfo.dat
[2009/01/28 15:17:17 | 000,000,068 | —- | C] () – C:\Program Files\1040PrepModuleInfo08.ini
[2009/01/28 15:17:17 | 000,000,047 | —- | C] () – C:\Windows\TaxACT08.ini
[2008/11/27 15:32:31 | 000,000,623 | —- | C] () – C:\Windows\E-REGTLC.INI
[2008/11/27 10:34:07 | 000,000,057 | —- | C] () – C:\Windows\TLCAPPS.INI
[2008/11/14 02:55:22 | 000,034,989 | —- | C] () – C:\Program Files\release_notes_kis8.0cf2_en.html
[2008/09/06 22:26:24 | 000,077,824 | —- | C] () – C:\Windows\System32\hpzids01.dll
[2008/09/04 00:22:28 | 000,000,552 | —- | C] () – C:\Users\Magic\AppData\Local\d3d8caps.dat
[2008/08/07 06:58:12 | 000,001,077 | —- | C] () – C:\Windows\mozver.dat
[2008/07/28 17:20:04 | 000,002,560 | —- | C] () – C:\Windows\_MSRSTRT.EXE
[2008/07/25 23:36:43 | 000,018,904 | —- | C] () – C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2008/06/30 10:09:28 | 000,098,816 | —- | C] () – C:\Windows\sed.exe
[2008/06/30 10:09:28 | 000,080,412 | —- | C] () – C:\Windows\grep.exe
[2008/06/30 10:09:28 | 000,068,096 | —- | C] () – C:\Windows\zip.exe
[2008/06/30 10:09:28 | 000,049,152 | —- | C] () – C:\Windows\VFind.exe
[2008/04/13 08:02:48 | 000,000,376 | —- | C] () – C:\Windows\ODBC.INI
[2008/03/05 19:44:58 | 000,000,258 | RHS- | C] () – C:\ProgramData\ntuser.pol
[2008/01/24 17:44:27 | 000,014,049 | —- | C] () – C:\ProgramData\LUUnInstall.LiveUpdate
[2008/01/18 20:29:21 | 000,000,115 | —- | C] () – C:\Windows\TaxACT07.ini
[2008/01/09 15:01:48 | 000,053,248 | —- | C] () – C:\Windows\bdoscandel.exe
[2008/01/09 15:01:48 | 000,000,453 | —- | C] () – C:\Windows\bdoscandellang.ini
[2007/09/27 09:21:50 | 000,000,235 | —- | C] () – C:\Users\Magic\AppData\Roaming\devices.xml
[2007/09/27 09:21:50 | 000,000,012 | —- | C] () – C:\Users\Magic\AppData\Roaming\settings.xml
[2007/09/02 21:37:17 | 000,001,356 | —- | C] () – C:\Users\Magic\AppData\Local\d3d9caps.dat
[2007/08/22 11:16:00 | 000,046,456 | R— | C] () – C:\Windows\System32\exitwx.exe
[2007/08/13 15:08:19 | 000,025,447 | —- | C] () – C:\Users\Magic\AppData\Roaming\UserTile.png
[2007/08/08 14:28:01 | 000,020,724 | —- | C] () – C:\Windows\hpoins01.dat
[2007/08/08 14:28:01 | 000,016,618 | —- | C] () – C:\Windows\hpomdl01.dat
[2007/07/27 02:36:17 | 000,001,782 | —- | C] () – C:\Users\Magic\AppData\Roaming\wklnhst.dat
[2007/07/24 21:36:31 | 000,066,048 | —- | C] () – C:\Users\Magic\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007/07/23 02:37:13 | 000,000,067 | —- | C] () – C:\Windows\swupdate.INI
[2007/07/18 14:44:09 | 000,000,145 | —- | C] () – C:\Windows\TaxACT06.ini
[2007/07/18 14:33:30 | 000,000,145 | —- | C] () – C:\Windows\TaxACT05.ini
[2007/07/18 14:26:20 | 000,000,145 | —- | C] () – C:\Windows\TaxACT04.ini
[2007/07/18 14:17:40 | 000,000,098 | —- | C] () – C:\Windows\TaxACT03.ini
[2007/07/18 14:15:22 | 000,000,085 | —- | C] () – C:\Windows\TaxACT02.ini
[2007/07/18 14:13:11 | 000,000,098 | —- | C] () – C:\Windows\Taxact01.ini
[2007/07/18 12:51:59 | 000,000,000 | —- | C] () – C:\Windows\nsreg.dat
[2007/05/16 18:40:56 | 000,204,800 | —- | C] () – C:\Windows\System32\IVIresizeW7.dll
[2007/05/16 18:40:55 | 000,200,704 | —- | C] () – C:\Windows\System32\IVIresizeA6.dll
[2007/05/16 18:40:55 | 000,192,512 | —- | C] () – C:\Windows\System32\IVIresizeP6.dll
[2007/05/16 18:40:55 | 000,192,512 | —- | C] () – C:\Windows\System32\IVIresizeM6.dll
[2007/05/16 18:40:55 | 000,188,416 | —- | C] () – C:\Windows\System32\IVIresizePX.dll
[2007/05/16 18:40:55 | 000,020,480 | —- | C] () – C:\Windows\System32\IVIresize.dll
[2007/05/16 17:46:42 | 000,000,000 | —- | C] () – C:\Windows\NDSTray.INI
[2007/05/16 17:15:16 | 000,128,113 | —- | C] () – C:\Windows\System32\csellang.ini
[2007/05/16 17:15:16 | 000,045,056 | —- | C] () – C:\Windows\System32\csellang.dll
[2007/05/16 17:15:16 | 000,010,150 | —- | C] () – C:\Windows\System32\tosmreg.ini
[2007/05/16 17:15:16 | 000,007,671 | —- | C] () – C:\Windows\System32\cseltbl.ini
[2007/05/16 17:13:14 | 000,000,291 | —- | C] () – C:\Windows\RtDefLvl.ini
[2007/05/16 17:13:14 | 000,000,176 | —- | C] () – C:\Windows\System32\drivers\RTHDAEQ1.dat
[2007/05/16 17:13:14 | 000,000,176 | —- | C] () – C:\Windows\System32\drivers\RTHDAEQ0.dat
[2007/05/16 17:13:14 | 000,000,008 | —- | C] () – C:\Windows\System32\drivers\RtkHDAud.dat
[2007/04/24 21:57:36 | 000,159,744 | —- | C] () – C:\Windows\System32\atitmmxx.dll
[2007/04/24 21:32:44 | 003,107,788 | —- | C] () – C:\Windows\System32\atiumdva.dat
[2007/04/02 14:49:54 | 000,145,050 | —- | C] () – C:\Windows\System32\atiicdxx.dat
[2006/12/05 13:05:06 | 000,114,688 | —- | C] () – C:\Windows\System32\TosBtAcc.dll
[2006/11/02 05:57:28 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2006/11/02 05:47:37 | 000,470,768 | —- | C] () – C:\Windows\System32\FNTCACHE.DAT
[2006/11/02 05:35:32 | 000,005,632 | —- | C] () – C:\Windows\System32\sysprepMCE.dll
[2006/11/02 03:33:01 | 000,646,662 | —- | C] () – C:\Windows\System32\perfh009.dat
[2006/11/02 03:33:01 | 000,287,440 | —- | C] () – C:\Windows\System32\perfi009.dat
[2006/11/02 03:33:01 | 000,112,514 | —- | C] () – C:\Windows\System32\perfc009.dat
[2006/11/02 03:33:01 | 000,030,674 | —- | C] () – C:\Windows\System32\perfd009.dat
[2006/11/02 03:23:21 | 000,215,943 | —- | C] () – C:\Windows\System32\dssec.dat
[2006/11/02 01:58:30 | 000,043,131 | —- | C] () – C:\Windows\mib.bin
[2006/11/02 01:19:00 | 000,000,741 | —- | C] () – C:\Windows\System32\NOISE.DAT
[2006/11/02 00:40:29 | 000,013,750 | —- | C] () – C:\Windows\System32\pacerprf.ini
[2006/11/02 00:25:31 | 000,673,088 | —- | C] () – C:\Windows\System32\mlang.dat
[2006/03/09 02:58:00 | 001,060,424 | —- | C] () – C:\Windows\System32\WdfCoInstaller01000.dll
[2005/11/23 14:55:42 | 000,024,576 | —- | C] () – C:\Windows\System32\SPCtl.dll
[2005/07/22 21:30:20 | 000,065,536 | —- | C] () – C:\Windows\System32\TosCommAPI.dll
[2003/05/17 21:18:18 | 000,021,504 | —- | C] () – C:\Windows\System32\ezbrwsr.dll
[2003/01/07 15:05:08 | 000,002,695 | —- | C] () – C:\Windows\System32\OUTLPERF.INI

========== LOP Check ==========

[2010/07/28 01:47:08 | 000,000,000 | —D | M] – C:\Users\Magic\AppData\Roaming\iolo
[2007/07/27 02:38:04 | 000,000,000 | —D | M] – C:\Users\Magic\AppData\Roaming\Template
[2010/06/19 22:42:30 | 000,000,000 | —D | M] – C:\Users\Magic\AppData\Roaming\Toshiba
[2009/03/16 10:03:20 | 000,000,000 | —D | M] – C:\Users\Magic\AppData\Roaming\Ulead Systems
[2009/03/07 20:48:45 | 000,000,000 | —D | M] – C:\Users\Magic\AppData\Roaming\VCOM
[2009/06/12 20:24:09 | 000,000,000 | —D | M] – C:\Users\Magic\AppData\Roaming\WildTangent
[2007/07/22 21:51:06 | 000,000,000 | —D | M] – C:\Users\Magic\AppData\Roaming\WinBatch
[2011/05/19 01:49:42 | 000,032,620 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT
[2011/05/19 11:41:00 | 000,000,420 | -H– | M] () – C:\Windows\Tasks\User_Feed_Synchronization-{CBC61DF8-6CF6-4ADB-A646-57C18065084F}.job

========== Purity Check ==========



========== Custom Scans ==========


< >

< %SYSTEMDRIVE%\*.* >
[2009/10/23 09:44:37 | 000,006,444 | —- | M] () – C:\aaw7boot.log
[2006/09/18 14:43:36 | 000,000,024 | —- | M] () – C:\autoexec.bat
[2008/02/22 11:37:15 | 000,028,672 | —- | M] () – C:\BCD_Backup
[2008/02/22 11:37:15 | 000,025,600 | -H– | M] () – C:\BCD_Backup.LOG
[2008/02/22 11:37:15 | 000,000,000 | -H– | M] () – C:\BCD_Backup.LOG1
[2008/02/22 11:37:15 | 000,000,000 | -H– | M] () – C:\BCD_Backup.LOG2
[2009/04/10 23:36:36 | 000,333,257 | RHS- | M] () – C:\bootmgr
[2007/05/16 16:47:29 | 000,008,192 | R-S- | M] () – C:\BOOTSECT.BAK
[2009/01/15 13:39:11 | 000,514,953 | —- | M] () – C:\caisslog.txt
[2008/06/30 10:25:41 | 000,015,854 | —- | M] () – C:\ComboFix.txt
[2006/09/18 14:43:37 | 000,000,010 | —- | M] () – C:\config.sys
[2010/08/10 21:04:42 | 000,000,135 | —- | M] () – C:\EventLOG.txt
[2008/11/18 20:11:11 | 000,401,720 | —- | M] (Trend Micro Inc.) – C:\HiJackThis.exe
[2009/01/16 03:01:13 | 000,002,200 | —- | M] () – C:\hijackthis.log
[2007/11/18 17:36:59 | 000,000,000 | —- | M] () – C:\hpfr3420.xml
[2007/11/18 17:41:46 | 000,005,340 | —- | M] () – C:\hpfr3425.log
[2011/05/19 10:29:37 | 000,000,102 | —- | M] () – C:\index.ini
[2008/11/20 22:42:44 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2011/02/15 15:08:10 | 000,000,109 | —- | M] () – C:\mbam-error.txt
[2008/11/20 22:42:44 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2008/08/11 03:01:12 | 000,262,144 | —- | M] () – C:\ntuser.dat
[2008/08/11 03:01:12 | 000,005,120 | -H– | M] () – C:\ntuser.dat.LOG1
[2008/08/11 03:01:11 | 000,000,000 | -H– | M] () – C:\ntuser.dat.LOG2
[2008/08/11 03:01:11 | 000,065,536 | -HS- | M] () – C:\ntuser.dat{fc5ee414-6734-11dd-8ef1-001b380fed16}.TM.blf
[2008/08/11 03:01:11 | 000,524,288 | -HS- | M] () – C:\ntuser.dat{fc5ee414-6734-11dd-8ef1-001b380fed16}.TMContainer00000000000000000001.regtrans-ms
[2008/08/11 03:01:11 | 000,524,288 | -HS- | M] () – C:\ntuser.dat{fc5ee414-6734-11dd-8ef1-001b380fed16}.TMContainer00000000000000000002.regtrans-ms
[2008/08/11 03:01:12 | 000,065,536 | -HS- | M] () – C:\ntuser.dat{fc5ee418-6734-11dd-8ef1-001b380fed16}.TM.blf
[2008/08/11 03:01:12 | 000,524,288 | -HS- | M] () – C:\ntuser.dat{fc5ee418-6734-11dd-8ef1-001b380fed16}.TMContainer00000000000000000001.regtrans-ms
[2008/08/11 03:01:11 | 000,524,288 | -HS- | M] () – C:\ntuser.dat{fc5ee418-6734-11dd-8ef1-001b380fed16}.TMContainer00000000000000000002.regtrans-ms
[2011/05/19 02:04:38 | 2325,020,672 | -HS- | M] () – C:\pagefile.sys
[2008/07/19 16:31:49 | 000,006,008 | —- | M] () – C:\rapport.txt
[2007/07/27 12:46:15 | 000,000,152 | —- | M] () – C:\YServer.txt

< %systemroot%\Fonts\*.com >

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2006/09/18 14:37:34 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2006/11/02 02:46:04 | 000,032,768 | —- | M] (SEIKO EPSON CORPORATION) – C:\Windows\System32\spool\prtprocs\w32x86\1_EP0NPP01.DLL
[2005/10/14 22:41:46 | 000,072,192 | —- | M] (Hewlett-Packard Corporation) – C:\Windows\System32\spool\prtprocs\w32x86\1_hpzpp43a.dll
[2006/11/02 02:46:04 | 000,032,768 | —- | M] (SEIKO EPSON CORPORATION) – C:\Windows\System32\spool\prtprocs\w32x86\EP0NPP01.DLL
[2005/10/14 22:41:46 | 000,072,192 | —- | M] (Hewlett-Packard Corporation) – C:\Windows\System32\spool\prtprocs\w32x86\hpzpp43a.dll
[2008/01/19 00:34:28 | 000,089,600 | —- | M] (Hewlett-Packard Corporation) – C:\Windows\System32\spool\prtprocs\w32x86\HPZPPLHN.DLL
[2007/04/09 13:23:54 | 000,028,552 | —- | M] (Microsoft Corporation) – C:\Windows\System32\spool\prtprocs\w32x86\mdippr.dll
[2006/10/26 19:56:12 | 000,033,104 | —- | M] (Microsoft Corporation) – C:\Windows\System32\spool\prtprocs\w32x86\msonpppr.dll

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2009/01/28 15:17:17 | 000,000,068 | —- | M] () – C:\Program Files\1040PrepModuleInfo08.ini
[2008/12/18 10:53:41 | 000,000,174 | -HS- | M] () – C:\Program Files\desktop.ini
[2008/11/14 02:55:22 | 000,034,989 | —- | M] () – C:\Program Files\release_notes_kis8.0cf2_en.html

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >
[2007/05/16 16:47:12 | 006,602,752 | —- | M] () – C:\Windows\System32\config\COMPONENTS.SAV
[2007/05/16 16:47:10 | 000,102,400 | —- | M] () – C:\Windows\System32\config\DEFAULT.SAV
[2007/05/16 16:47:12 | 000,020,480 | —- | M] () – C:\Windows\System32\config\SECURITY.SAV
[2007/05/16 16:47:24 | 015,556,608 | —- | M] () – C:\Windows\System32\config\SOFTWARE.SAV
[2007/05/16 16:47:27 | 006,012,928 | —- | M] () – C:\Windows\System32\config\SYSTEM.SAV

< %PROGRAMFILES%\bak. /s >
[2009/05/27 20:08:50 | 000,000,000 | —D | M] – C:\Program Files\TOSHIBA Games\Inca Quest\media\graphics\backgrounds\AdventureBackground7\4\bak
[2009/05/27 20:08:50 | 000,000,000 | —D | M] – C:\Program Files\TOSHIBA Games\Inca Quest\media\graphics\backgrounds\AdventureBackground7\5\bak

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >
[2007/01/14 18:49:12 | 000,004,096 | -HS- | M] () – C:\Windows\System32\Thumbs.db

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2010/07/16 04:49:36 | 000,000,286 | -HS- | M] () – C:\Users\Magic\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >
[2008/06/30 09:55:52 | 000,050,688 | —- | M] (Atribune.org) – C:\Users\Magic\Desktop\ATF-Cleaner.exe
[2008/12/10 03:52:20 | 001,478,696 | —- | M] (Microsoft Corporation) – C:\Users\Magic\Desktop\GenuineCheck.exe
[2007/07/23 02:46:00 | 000,802,672 | —- | M] (Volcano Force ) – C:\Users\Magic\Desktop\hideippla.exe
[2008/02/25 13:50:28 | 000,640,687 | —- | M] () – C:\Users\Magic\Desktop\IJS_PDU0101_NN_W32_U_WW.exe
[2008/08/03 23:08:30 | 000,401,720 | —- | M] (Trend Micro Inc.) – C:\Users\Magic\Desktop\Magic.exe
[2008/09/29 08:21:19 | 002,182,784 | —- | M] (Malwarebytes Corporation ) – C:\Users\Magic\Desktop\mbam-setup.exe
[2008/08/12 17:17:53 | 015,865,344 | —- | M] () – C:\Users\Magic\Desktop\PowerDeskStandard6013_US.exe
[2008/12/15 03:03:07 | 005,780,000 | —- | M] () – C:\Users\Magic\Desktop\SUPERAntiSpyware.exe
[2009/07/08 08:15:17 | 000,000,000 | —- | M] () – C:\Users\Magic\Desktop\SupportTool_32-bit.exe
[2009/01/28 14:34:27 | 012,059,435 | —- | M] () – C:\Users\Magic\Desktop\ta08prdw(2).exe
[2009/01/24 04:47:30 | 012,059,435 | —- | M] () – C:\Users\Magic\Desktop\ta08prdw.exe
[2008/02/27 09:34:31 | 040,781,696 | —- | M] () – C:\Users\Magic\Desktop\util_tvap_os2007388a_t3_6but_tosh.exe
[2008/10/14 15:21:45 | 000,840,336 | —- | M] () – C:\Users\Magic\Desktop\winkeyd.exe
[2007/07/23 02:43:34 | 000,318,904 | —- | M] (Microsoft Corporation) – C:\Users\Magic\Desktop\wmpfirefoxplugin.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2011-05-19 10:01:41

< >

========== Alternate Data Streams ==========

@Alternate Data Stream - 115 bytes -> C:\ProgramData\TEMP:5C321E34

< End of report >
Post #2

**In any case where you happen to be busy or unable to give us a reply, we would be grateful if you keep us informed in advance and we will be more than happy to wait. Failure to do so we will have your thread closed in THREE(3) days. :)


Hello there, BubblesUp!

:welcome:

I'm Conspire, I'll be glad to help you with your computer problems.

Please observe these rules while we work:
  • Read the entire procedure
  • It is important to perform ALL actions in sequence.
  • If you don't know, stop and ask! Don't keep going on.
  • Please reply to this thread. Do not start a new topic.
  • Stick with me till you're given the all clear.
  • Remember, absence of symptoms does not mean the infection is all gone.
  • Don't attempt to clean your computer with any tools other than the ones I ask you to use during the cleanup process.

IMPORTANT NOTE : Please do not delete anything unless instructed to.

—————————————————————————————————

I cannot select the download location for any downloaded files. It defaults to my user directory and the folder named "Downloads" only.

Is this the only main problem you're having? Are you using Firefox for that recurring issue?

—————————————————————————————————
Post #3
Hi Conspire, Thanks for the response and your assistance in advance. No this is not the only problem I am experiencing, my cursor moves across the screen by itself, disk drive doesn't recognize when a disk is inserted and asks me to insert a disk into the drive when I already have, Malware Bytes scan runs with 5 results for "Broken-Open Command" I select to remove, reboot, rescan and they are still there, and probably a host of other issues that currently escape my memory, until I am reminded by their occurrence. Yes it happens when I use Firefox but it is the same when I use Internet Explorer as well.
Post #4 last edited
I need you to follow the instructions on how to perform a check on your system files : SFC Command

Follow steps A and B while ignore the rest, then tell me the end result if it manages to find any error.

If you have any doubts, stop right there and let me know.
Post #5
Ok, I am running the sfc command scan now. Then I will run the sfc verification and let you know the results of both. On a side note: Another problem I am experiencing is not being able to save any documents. I can't save to the hard drive, to USB or to disk drive or save at all.
Post #6
OK, the sfc command scan results are as follows: Found items that were corrupt but unable to fix some of them. I tried to view the SR tags in the cbs log by pasting the code provided in the instructions, but the returned results cannot find the specified path. Should I continue as instructed and run sfc verification (B) now or not?
Post #7
I think at this point a repair install is the only choice. Read through this link and let me know if you have any question, as repairing Windows is beyond the scope of this forum. I will try to assist you whatever I can, or you may also choose to go to our Tech Support for further assistance.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI