Blue Screen Trouble [Solved]

the next scan doesnt work with IE. I tried in firefox. After 20 mins I got error 2002

Hello jdcats007

the next scan doesnt work with IE. I tried in firefox. After 20 mins I got error 2002

That may be being caused by the problems with the hard drive.

Please post a new OTL log for me to review and we'll take things from there

Hello jdcats007

Thank you for the log.

• Please open OTL
  
  
  
  • Copy and paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL.
    
    

    :OTL
    SRV - File not found [Auto | Stopped] – C:\ProgramData\UpdaterService\wsupdsvc.exe /SERVICE – (UpdaterService)
    IE - HKCU\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
    IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}…00000242c6ea9d7
    IE - HKCU\..\SearchScopes\{91607fa7-3c2f-4f90-93e3-d5337a6b0ac2}: "URL" = Playbryte-fa-v/search/redirect/?type=default&user_id=cae7fe76-9c4e-476a-acd6-6fdd4686b491&query={searchTerms}
    O2 - BHO: (no name) - MRI_DISABLED - No CLSID value found.
    O3 - HKLM\..\Toolbar: (PasswordBox Toolbar) - {25E2E5C9-C43C-4EE8-B23E-4383915F2BCE} - C:\Program Files\PasswordBox\Application\pbbtn.dll File not found
    O3 - HKCU\..\Toolbar\WebBrowser: (PasswordBox Toolbar) - {25E2E5C9-C43C-4EE8-B23E-4383915F2BCE} - C:\Program Files\PasswordBox\Application\pbbtn.dll File not found
    O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
    O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O15 - HKCU\..Trusted Ranges: Range1 ([http] in Local intranet)
    [2012/09/28 09:48:58 | 000,000,000 | —D | M] – C:\Users\Owner\AppData\Roaming\Babylon
    
    :Files
    C:\ProgramData\UpdaterService
    
    :Commands
    [purity]
    [emptytemp]
    [emptyflash]
    [Reboot]

  • Once you have pasted the information into the Custom Scans/Fixes box, click the "Run Fix" button at the top.
  • Allow the program to run unhindered.
  • Your machine will re-start itself. This is normal.
  • A log will be created after your machine reboots. Please post the contents of the log in your next reply.
  
  Once you have ran the above script, let see if we can get a different online scan to run:
  
  
• BitDefender
  
  
  
  • Lets try an online scan with BitDefender QuickScan.
  • Please be patient as scanning can take some time.
  • We recommend that you disable any real time protection that you have before starting the scan.
  • Click here here to access the BitDefender QuickScan page
  
  
  • For Firefox users:
  • Click on the Free Scan Now button.
  • You will be prompted to install a plug-in. Please Allow the installation.
  • If the process stalls you may need to refresh the page.
  • A Software Installation window will appear.
  • Click on Install Now and the plugin will be installed as an Add-on.
  • Restart Firefox when done. Go back to the BitDefender QuickScan page again and click on Free Scan Now and proceed accordingly.
  
  
  • For Internet Explorer users:
  • Click on the Free Scan Now button.
  • You will be prompted to install an ActiveX control. Please allow the control to install.
  • The page will refresh. Click on the Free Scan Now button again and proceed accordingly.
  
  If you are unable to run the bitdefender scan just let me know.
  
  
  Please post the OTL fix log and the Bitdefender log (if the scan completes) in your next reply, along with another OTL scan log.

Question? If the hard drive has crashed, how hard will it be to replace? Is something anyone can do? OTL log: All processes killed ========== OTL ========== Service UpdaterService stopped successfully! Service UpdaterService deleted successfully! File C:\ProgramData\UpdaterService\wsupdsvc.exe /SERVICE not found. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully! Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{91607fa7-3c2f-4f90-93e3-d5337a6b0ac2}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{91607fa7-3c2f-4f90-93e3-d5337a6b0ac2}\ not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\MRI_DISABLED\ deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{25E2E5C9-C43C-4EE8-B23E-4383915F2BCE} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{25E2E5C9-C43C-4EE8-B23E-4383915F2BCE}\ deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{25E2E5C9-C43C-4EE8-B23E-4383915F2BCE} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{25E2E5C9-C43C-4EE8-B23E-4383915F2BCE}\ not found. Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions\ deleted successfully. Registry key HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel\ deleted successfully. Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\Range1\\http deleted successfully. C:\Users\Owner\AppData\Roaming\Babylon folder moved successfully. ========== FILES ========== File\Folder C:\ProgramData\UpdaterService not found. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Owner ->Temp folder emptied: 883451 bytes ->Temporary Internet Files folder emptied: 50703532 bytes ->Java cache emptied: 1780160 bytes ->FireFox cache emptied: 2014741 bytes ->Google Chrome cache emptied: 6099312 bytes ->Flash cache emptied: 1960635 bytes User: Public ->Temp folder emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 0 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes RecycleBin emptied: 26112 bytes Total Files Cleaned = 61.00 mb [EMPTYFLASH] User: All Users User: Default User: Default User User: Owner ->Flash cache emptied: 0 bytes User: Public Total Flash Files Cleaned = 0.00 mb OTL by OldTimer - Version 3.2.69.0 log created on 11182012_112354 Files\Folders moved on Reboot… PendingFileRenameOperations files… Registry entries deleted on Reboot… Bitfinder log: QuickScan 32-bit v0.9.9.119 ————————— Scan date: Sun Nov 18 11:37:34 2012 Machine ID: 5DD85BA3 No infection found. ——————- Processes ——— Firefox 1780 C:\Program Files\Mozilla Firefox\firefox.exe Firefox 572 C:\Program Files\Mozilla Firefox\plugin-container.exe Microsoft® Windows® Operating System 1288 C:\Windows\explorer.exe Microsoft® Windows® Operating System 384 C:\Windows\System32\csrss.exe Microsoft® Windows® Operating System 420 C:\Windows\System32\csrss.exe Microsoft® Windows® Operating System 516 C:\Windows\System32\lsass.exe Microsoft® Windows® Operating System 504 C:\Windows\System32\services.exe Microsoft® Windows® Operating System 324 C:\Windows\System32\smss.exe Microsoft® Windows® Operating System 1992 C:\Windows\System32\wbem\unsecapp.exe Microsoft® Windows® Operating System 2036 C:\Windows\System32\wbem\WmiPrvSE.exe Microsoft® Windows® Operating System 428 C:\Windows\System32\wininit.exe Microsoft® Windows® Operating System 456 C:\Windows\System32\winlogon.exe (verified) Microsoft® Windows® Operating System 524 C:\Windows\System32\lsm.exe (verified) Microsoft® Windows® Operating System 680 C:\Windows\System32\svchost.exe (verified) Microsoft® Windows® Operating System 736 C:\Windows\System32\svchost.exe (verified) Microsoft® Windows® Operating System 772 C:\Windows\System32\svchost.exe (verified) Microsoft® Windows® Operating System 860 C:\Windows\System32\svchost.exe (verified) Microsoft® Windows® Operating System 888 C:\Windows\System32\svchost.exe (verified) Microsoft® Windows® Operating System 924 C:\Windows\System32\svchost.exe (verified) Microsoft® Windows® Operating System 976 C:\Windows\System32\svchost.exe (verified) Microsoft® Windows® Operating System 1132 C:\Windows\System32\svchost.exe (verified) Microsoft® Windows® Operating System 1376 C:\Windows\System32\svchost.exe (verified) Microsoft® Windows® Operating System 1396 C:\Windows\System32\svchost.exe Network activity —————- Process firefox.exe (1780) connected on port 80 (HTTP) –> 74.125.225.57 Process firefox.exe (1780) connected on port 80 (HTTP) –> [removed] Process firefox.exe (1780) connected on port 80 (HTTP) –> [removed] Process firefox.exe (1780) connected on port 80 (HTTP) –> [removed] Process firefox.exe (1780) connected on port 80 (HTTP) –> [removed] Process firefox.exe (1780) connected on port 80 (HTTP) –> [removed] Process firefox.exe (1780) connected on port 80 (HTTP) –> [removed] Process wininit.exe (428) listens on ports: 49152 (RPC) Process services.exe (504) listens on ports: 49156 (RPC) Process lsass.exe (516) listens on ports: 49154 (RPC) Process svchost.exe (736) listens on ports: 135 (RPC) Process svchost.exe (860) listens on ports: 49153 (RPC) Process svchost.exe (1396) listens on ports: 49155 (RPC) Autoruns and critical files ————————— 4Sync C:\Program Files\4Sync\4Sync.exe Adobe® Flash® Player Installer/Uninstal C:\Windows\system32\Macromed\Flash\FlashUtil32_11_4_402_287_ActiveX.exe Adobe® Flash® Player Update Service C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Apple Push C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe CEEment C:\Program Files\hewlett-packard\sdp\ceement\HPCEE.exe Facebook Update C:\Users\Owner\AppData\Local\Facebook\Update\FacebookUpdate.exe Google Update C:\Users\Owner\AppData\Local\Google\Update\GoogleUpdate.exe HP Quick Launch Buttons C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe HP QuickPlay C:\Program Files\HP\QuickPlay\QPService.exe HP Wireless Assistant C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe IncrediMail C:\Program Files\IncrediMail\bin\IncMail.exe Intel® Common User Interface C:\Windows\system32\hkcmd.exe Intel® Common User Interface C:\Windows\system32\igfxdev.dll Intel® Common User Interface C:\Windows\system32\igfxpers.exe Intel® Common User Interface C:\Windows\system32\igfxtray.exe iTunes C:\Program Files\iTunes\iTunesHelper.exe Java™ Platform SE Auto Updater 2 0 C:\Program Files\Common Files\Java\Java Update\jusched.exe Kaspersky Anti-Virus c:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\adialhk.dll Kaspersky Anti-Virus C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe Kaspersky Anti-Virus c:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\kloehk.dll Kaspersky Anti-Virus c:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\mzvkbd.dll Kaspersky Anti-Virus c:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\mzvkbd3.dll Kaspersky Anti-Virus C:\Windows\system32\klogon.dll LightScribe C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe Malwarebytes Anti-Malware C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe Microsoft LifeCam C:\Program Files\Microsoft LifeCam\LifeExp.exe Microsoft Office OneNote C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE Microsoft® Windows® Operating System C:\Program Files\Windows Sidebar\Sidebar.exe Microsoft® Windows® Operating System C:\Windows\system32\BROWSEUI.dll Microsoft® Windows® Operating System C:\Windows\system32\Ribbons.scr ooVoo C:\Program Files\ooVoo\oovoo.exe OTL C:\Users\Owner\Desktop\OTL.exe QuickTime C:\Program Files\QuickTime\QTTask.exe Skype C:\Program Files\Skype\Phone\Skype.exe Synaptics Pointing Device Driver C:\Program Files\Synaptics\SynTP\SynTPEnh.exe Updater C:\Program Files\Ask.com\Updater\Updater.exe Windows® Internet Explorer c:\windows\system32\webcheck.dll (verified) Microsoft® Windows® Operating System C:\Windows\ehome\ehTray.exe (verified) Microsoft® Windows® Operating System c:\windows\system32\userinit.exe Browser plugins ————— Bitdefender QuickScan C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\yvru7yi8.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\plugins\npqscan.dll Bonjour C:\Program Files\Bonjour\mdnsNSP.dll Facebook Video Calling Plugin C:\Users\Owner\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll Google Update C:\Users\Owner\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll Java Deployment Toolkit 7.0.70.11 C:\Windows\system32\npDeployJava1.dll Java™ Platform SE 7 U7 c:\program files\java\jre7\bin\jp2ssv.dll Java™ Platform SE 7 U7 C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll Java™ Platform SE 7 U7 c:\program files\java\jre7\bin\ssv.dll Kaspersky Anti-Virus c:\program files\kaspersky lab\kaspersky internet security 2009\ievkbd.dll npitunes.dll C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll NPSWF32_11_4_402_287.dll C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_287.dll QuickTime Plug-in 7.7.2 C:\Program Files\Internet Explorer\plugins\npqtplugin.dll QuickTime Plug-in 7.7.2 C:\Program Files\Internet Explorer\plugins\npqtplugin2.dll QuickTime Plug-in 7.7.2 C:\Program Files\Internet Explorer\plugins\npqtplugin3.dll QuickTime Plug-in 7.7.2 C:\Program Files\Internet Explorer\plugins\npqtplugin4.dll QuickTime Plug-in 7.7.2 C:\Program Files\Internet Explorer\plugins\npqtplugin5.dll QuickTime Plug-in 7.7.2 C:\Program Files\Internet Explorer\plugins\npqtplugin6.dll QuickTime Plug-in 7.7.2 C:\Program Files\Internet Explorer\plugins\npqtplugin7.dll registryAccess C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaanijiojpcccpkjdjjmjghddcgcbfj\7.17.0.0_0\background\registryAccess.dll Shockwave for Director C:\Windows\system32\Adobe\Director\np32dsw.dll Silverlight Plug-In c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll Toolbar c:\program files\ask.com\genericasktoolbar.dll Vizzed Retro Game Room Plugin C:\Program Files\Vizzed\Vizzed Retro Game Room\NpVizzedRgr.dll Windows Presentation Foundation c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll Windows® Internet Explorer C:\Windows\system32\ieframe.dll (verified) AcroIEHelperShim Library c:\program files\common files\adobe\acrobat\activex\acroiehelpershim.dll (verified) Microsoft® Windows® Operating System C:\Windows\system32\mswsock.dll (verified) Microsoft® Windows® Operating System C:\Windows\system32\napinsp.dll (verified) Microsoft® Windows® Operating System C:\Windows\system32\NLAapi.dll (verified) Microsoft® Windows® Operating System C:\Windows\system32\pnrpnsp.dll (verified) Microsoft® Windows® Operating System C:\Windows\System32\winrnr.dll Scan —- MD5: f9c162f980d3cb5e8c2a69cb4e69f55f C:\Program Files\4Sync\4Sync.exe MD5: 91dbd8da178be91e2f99c326cf660ffe C:\Program Files\4Sync\ShellExt.dll MD5: b580d2d00faeeabe6c1ebc0bd736d265 c:\program files\ask.com\genericasktoolbar.dll MD5: efc9daec6c427da6b56d6d0b745c1cc4 C:\Program Files\Ask.com\Updater\Updater.exe MD5: 40947436a70e0034e41123df5a0a7702 C:\Program Files\Bonjour\mdnsNSP.dll MD5: db5bea73edaf19ac68b2c0fad0f92b1a C:\Program Files\Bonjour\mDNSResponder.exe MD5: 82cc8f77e9ec61c6b4d48dd4d5ca78e7 C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe MD5: a5299d04ed225d64cf07a568a3e1bf8c C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe MD5: 12916e0642e92561c98b18a2a2d01b14 C:\Program Files\Common Files\Java\Java Update\jusched.exe MD5: 4a9295c9be22739d030ab072e9a0b169 C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe MD5: abf90fc5a127f481219b873c1b8dfc1c C:\Program Files\Common Files\LightScribe\LSSrvc.exe MD5: 785f487a64950f3cb8e9f16253ba3b7b C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE MD5: 805ae1f90c64758d19aaa001cf8cba12 C:\Program Files\CyberLink\Shared files\RichVideo.exe MD5: a19b0bb5a7eb6df2dd4a0711d36955ee c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe MD5: 7795f8cebc284a426b53f541e538695f C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe MD5: f7cf218e5caa6fc0bb55791ad31e2b3f C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe MD5: 8cb896c573fd15ae8b13180da53e93d2 C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe MD5: e7e91ebf735d68c4ba1b8367d3121e0c C:\Program Files\hewlett-packard\sdp\ceement\HPCEE.exe MD5: 1665c7121a026df10c903db9bc5e9d43 C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe MD5: 617dc2877015270914ca3c03873560d5 C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe MD5: 5e5208a733bbcc4571f384754a9a6746 C:\Program Files\HP\QuickPlay\QPService.exe MD5: 6a8f8cb5346c028cb6476994fb7ba4d5 C:\Program Files\IncrediMail\bin\IncMail.exe MD5: 5e4ff36923c37c80b537dce6caa755f9 C:\Program Files\Internet Explorer\ieproxy.dll MD5: 2f7480a40151eb2e483cf6524edba3f7 C:\Program Files\Internet Explorer\plugins\npqtplugin.dll MD5: 2f7480a40151eb2e483cf6524edba3f7 C:\Program Files\Internet Explorer\plugins\npqtplugin2.dll MD5: 2f7480a40151eb2e483cf6524edba3f7 C:\Program Files\Internet Explorer\plugins\npqtplugin3.dll MD5: 2f7480a40151eb2e483cf6524edba3f7 C:\Program Files\Internet Explorer\plugins\npqtplugin4.dll MD5: 2f7480a40151eb2e483cf6524edba3f7 C:\Program Files\Internet Explorer\plugins\npqtplugin5.dll MD5: 2f7480a40151eb2e483cf6524edba3f7 C:\Program Files\Internet Explorer\plugins\npqtplugin6.dll MD5: 2f7480a40151eb2e483cf6524edba3f7 C:\Program Files\Internet Explorer\plugins\npqtplugin7.dll MD5: bc0ea61246f8d940fbc5f652d337d6bd C:\Program Files\iPod\bin\iPodService.exe MD5: 4affdcaadcb1dbbffaf06c7f82e7f6fc C:\Program Files\iTunes\iTunesHelper.exe MD5: c1680c34de8a405c8829ab93236576fd C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll MD5: 87e063f1e676c99b6c1c047794deb115 c:\program files\java\jre7\bin\jp2ssv.dll MD5: 632f5b29e8c27631e7ac76e330fe2980 C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll MD5: a8ea3f37f4f31e620383f40526e723fe c:\program files\java\jre7\bin\ssv.dll MD5: 76ad93c7f420b724a9adf673dbd84e91 c:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\adialhk.dll MD5: 26de7793a6437ceb66c049d76ff1b555 C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe MD5: f09ee70d53cd3c336375d363191bba76 c:\program files\kaspersky lab\kaspersky internet security 2009\ievkbd.dll MD5: 22b145980a4fb79204217b7f3c14c798 c:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\kloehk.dll MD5: d84e0ff88869047147c3c795f4ef35a7 c:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\mzvkbd.dll MD5: 4dba4917081d7b6f3ce73fa1f3966ca7 c:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\mzvkbd3.dll MD5: 12e33dd823d74680de6f33bfa359efb3 C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe MD5: 19be5bf2ff9283894bc0f22322fdf56b C:\Program Files\Microsoft LifeCam\LifeExp.exe MD5: d98350792a7ce82e7459a7c36481beda C:\Program Files\Microsoft LifeCam\MSCamS32.exe MD5: 9013599b12923a45c029c34e8d2211ac c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll MD5: 4069a06436494c4de12f65477bb92ebe C:\Program Files\Mozilla Firefox\components\browsercomps.dll MD5: e60e9d5f229cb8da347d48add6e8dc47 C:\Program Files\Mozilla Firefox\firefox.exe MD5: 340a842b7c5d21e08bfcbb7f9b58139d C:\Program Files\Mozilla Firefox\freebl3.dll MD5: b9a5a116229ff8e1d5994f6793eb6a6e C:\Program Files\Mozilla Firefox\gkmedias.dll MD5: 7ef5d4b34137d053b9f4f843ae796802 C:\Program Files\Mozilla Firefox\mozalloc.dll MD5: be852d6ad0a67ee9dd28c6f95e5896e1 C:\Program Files\Mozilla Firefox\mozglue.dll MD5: cc726292a4fdec2857688ca3c32a510d C:\Program Files\Mozilla Firefox\mozjs.dll MD5: f9cf7ed9f44176962d182b80ae0c66d4 C:\Program Files\Mozilla Firefox\mozsqlite3.dll MD5: 03e9314004f504a14a61c3d364b62f66 C:\Program Files\Mozilla Firefox\MSVCP100.dll MD5: 67ec459e42d3081dd8fd34356f7cafc1 C:\Program Files\Mozilla Firefox\MSVCR100.dll MD5: cebc736458c1f79c23b1bbc5493db4c2 C:\Program Files\Mozilla Firefox\nspr4.dll MD5: e1fbacb92fe471c684546dd9336afef6 C:\Program Files\Mozilla Firefox\nss3.dll MD5: f3b8464a02e793fd46bcf6f8f6da878d C:\Program Files\Mozilla Firefox\nssckbi.dll MD5: a062f4f9f2e2a89f7c0ed75be5ab8d3f C:\Program Files\Mozilla Firefox\nssdbm3.dll MD5: d8474b89fd26b18eed414a42ae5175ac C:\Program Files\Mozilla Firefox\nssutil3.dll MD5: a38276867df9ecfac4bae167ba34772d C:\Program Files\Mozilla Firefox\plc4.dll MD5: 74e3fd55c2bcfedcecc80121e93ffec5 C:\Program Files\Mozilla Firefox\plds4.dll MD5: b204707e5f48e90427da6874e72345f9 C:\Program Files\Mozilla Firefox\plugin-container.exe MD5: 94fb1d160021fe9f54c84ff587273868 C:\Program Files\Mozilla Firefox\smime3.dll MD5: 7f1d7cfabb351d8f46a0b94d5787fcf3 C:\Program Files\Mozilla Firefox\softokn3.dll MD5: 5914766c39b2d62ce67e2509f78216ab C:\Program Files\Mozilla Firefox\ssl3.dll MD5: 7f89683200960ffae7c6f7f99360949c C:\Program Files\Mozilla Firefox\xpcom.dll MD5: 819fa5f084b3174cf702320ce58aa7e6 C:\Program Files\Mozilla Firefox\xul.dll MD5: 8be15f71de6ff33fc56dcde7b2b9efe8 C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe MD5: db82ea00432d9e4e4ba416c2907d55e7 C:\Program Files\ooVoo\oovoo.exe MD5: 2f436caa73e16a8211c2cbaa838ffe62 C:\Program Files\PasswordBox\pbbtnService.exe MD5: 916a2c4eb028604783fd5ea169236c1d C:\Program Files\QuickTime\QTTask.exe MD5: cbec06e32d0ac9c3d0a9199edc1fb959 C:\Program Files\Skype\Phone\Skype.exe MD5: f07af60b152221472fbdb2fecec4896d C:\Program Files\Skype\Updater\Updater.exe MD5: 0d362785bef9bdf5a6e1f4628d06716d C:\Program Files\SMINST\BLService.exe MD5: ae567d261d281b51be55e53a786e8574 C:\Program Files\Synaptics\SynTP\SynTPEnh.exe MD5: 4c47a5d633793e4d2ee247373593a4fe C:\Program Files\Vizzed\Vizzed Retro Game Room\NpVizzedRgr.dll MD5: 7d1f2afe12bafc4c18c5a0e3c6866e38 c:\program files\windows defender\mprtplug.dll MD5: aefd5e1d91b86ab41d9705600303f34e C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{C053699A-2D19-4E4A-88C8-BFEE7A2CF622}\mpengine.dll MD5: 2a3fb4c98f139038e23330d2439db8a4 C:\Users\Owner\AppData\Local\Facebook\Update\FacebookUpdate.exe MD5: 0b31b0f8fa99cfd009c8fbea9e20c9de C:\Users\Owner\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll MD5: cf118ba396261f8890cea8615d8cfadb C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaanijiojpcccpkjdjjmjghddcgcbfj\7.17.0.0_0\background\registryAccess.dll MD5: 586fdc4e02623ee228ec35b9604ae5f2 C:\Users\Owner\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll MD5: 506708142bc63daba64f2d3ad1dcd5bf C:\Users\Owner\AppData\Local\Google\Update\GoogleUpdate.exe MD5: c9e3864fb9cbfa93d9010bcfe18a5697 C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\yvru7yi8.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\plugins\npqscan.dll MD5: 4adcfee16ee9978f06157634669d36fb C:\Users\Owner\Desktop\OTL.exe MD5: ab87eeffd18f2baafc274e7075ea6c67 c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll MD5: e2318e8514abf50e3ecedab9465a90a1 C:\Windows\system32\Adobe\Director\np32dsw.dll MD5: e9b9c1b98c8d6d48407e1c1203eac659 C:\Windows\System32\adsldpc.dll MD5: f31eebc1a1c81fd04005489cc3dcdfe7 C:\Windows\system32\basesrv.dll MD5: 74f26fc01b180d4a99a168ed69c30a53 C:\Windows\system32\cmd.exe MD5: 7f15b4953378c8b5161d65c26d5fed4d C:\Windows\system32\cngaudit.dll MD5: 93e317d7ad783d8eaee2e3500bfe889d C:\Windows\System32\credui.dll MD5: b0f9073be86c6d4edd4eba674251e699 C:\Windows\system32\CRYPT32.dll MD5: 09469b8edd2755143fda06867aad7e73 c:\windows\system32\CRYPTNET.dll MD5: f1e8c34892336d33eddcdfe44e474f64 c:\windows\system32\cryptsvc.dll MD5: 187076dd5d8d4d5d23079d0741195ead C:\Windows\system32\CSRSRV.dll MD5: abca209eba02cb59233614db83b4f50d C:\Windows\System32\csrss.exe MD5: 85e861d0b88db2b54acb0839654c09f7 C:\Windows\system32\DNSAPI.dll MD5: 57d762f6f5974af0da2be88a3349baaa C:\Windows\System32\dnsrslvr.dll MD5: 3911b972b55fea0478476b2e777b29fa C:\Windows\system32\drivers\afd.sys MD5: 02d34ac487df3da4e3f01874e61eb619 C:\Windows\system32\DRIVERS\athr.sys MD5: 35f376253f687bde63976ccb3f2108ca C:\Windows\system32\DRIVERS\bowser.sys MD5: 1adf6f4852e7d7e2e8ac481bdb970586 C:\Windows\system32\drivers\CHDRT32.sys MD5: 622c41a07ca7e6dd91770f50d532cb6c C:\Windows\System32\Drivers\dfsc.sys MD5: c68ac676b0ef30cfbb1080adce49eb1f C:\Windows\System32\drivers\dxgkrnl.sys MD5: 185ada973b5020655cee342059a86cbb C:\Windows\system32\DRIVERS\GEARAspiWDM.sys MD5: 35956140e686d53bf676cf0c778880fc C:\Windows\system32\DRIVERS\HpqKbFiltr.sys MD5: 0acd399f5db3df1b58903cf4949ab5a8 C:\Windows\system32\DRIVERS\HSX_CNXT.sys MD5: cc267848cb3508e72762be65734e764d C:\Windows\system32\DRIVERS\HSX_DPV.sys MD5: a2882945cc4b6e3e4e9e825590438888 C:\Windows\system32\DRIVERS\HSXHWAZL.sys MD5: 8266ae06df974e5ba047b3e9e9e70b3f C:\Windows\system32\DRIVERS\igdkmd32.sys MD5: c7e7e43cbd34d3b0a0156b51b917dfcc C:\Windows\system32\drivers\IntcHdmi.sys MD5: cd6a8fa9395460ffe7fd8881a6c67254 C:\Windows\system32\DRIVERS\kl1.sys MD5: f9089982ed97340984e3dd60edd75490 C:\Windows\system32\drivers\klbg.sys MD5: 73eb94ad1c85b4a3c5a8b4d879f668b9 C:\Windows\system32\DRIVERS\klfltdev.sys MD5: 016ccb39030fed3138eb41af8d2b24b6 C:\Windows\system32\DRIVERS\klif.sys MD5: 29458f09e485e3c37ef3d440bab9ca9b C:\Windows\system32\DRIVERS\klim6.sys MD5: 4a1445efa932a3baf5bdb02d7131ee20 C:\Windows\System32\Drivers\ksecdd.sys MD5: 0db7527db188c7d967a37bb51bbf3963 C:\Windows\system32\drivers\mbamswissarmy.sys MD5: 1e94971c4b446ab2290deb71d01cf0c2 C:\Windows\system32\DRIVERS\mrxsmb.sys MD5: 4fccb34d793b116423209c0f8b7a3b03 C:\Windows\system32\DRIVERS\mrxsmb10.sys MD5: c3cb1b40ad4a0124d617a1199b0b9d7c C:\Windows\system32\DRIVERS\mrxsmb20.sys MD5: 35d5458d9a1b26b2005abffbf4c1c5e7 C:\Windows\system32\DRIVERS\NETw3v32.sys MD5: 5119ffc2a6b51089cdb0efdc75808c97 C:\Windows\System32\Drivers\nx6000.sys MD5: b9c2b89f08670e159f7181891e449cd9 C:\Windows\System32\drivers\partmgr.sys MD5: 125c504a34d0a2e152517e342e7e432c C:\Windows\system32\DRIVERS\Rtlh86.sys MD5: 126ea89bcc413ee45e3004fb0764888f C:\Windows\system32\DRIVERS\sdbus.sys MD5: 41987f9fc0e61adf54f581e15029ad91 C:\Windows\System32\DRIVERS\srv.sys MD5: ff33aff99564b1aa534f58868cbe41ef C:\Windows\System32\DRIVERS\srv2.sys MD5: 7605c0e1d01a08f3ecd743f38b834a44 C:\Windows\System32\DRIVERS\srvnet.sys MD5: 00b19f27858f56181edb58b71a7c67a0 C:\Windows\system32\DRIVERS\SynTP.sys MD5: 27d470dabc77bc60d0a3b0e4deb6cb91 C:\Windows\System32\drivers\tcpip.sys MD5: 73b41f4ead65f355962168d766af0f2e C:\Windows\System32\Drivers\usbaapl.sys MD5: cd5f291a1161f15896d1a4d63daff5df C:\Windows\system32\DRIVERS\xaudio.exe MD5: dab33cfa9dd24251aaa389ff36b64d4b C:\Windows\system32\DRIVERS\xaudio.sys MD5: 7d1f3b131d503ef43ee594b5a2b9b427 C:\Windows\system32\DRIVERS\yk60x86.sys MD5: cabd1b34bd05c986b4dbc18bc0e947ee C:\Windows\system32\dwrite.dll MD5: abaeaee763e287bdd39094c4165e1f3f C:\Windows\system32\fdproxy.dll MD5: 8ce364388c8eca59b14b539179276d44 C:\Windows\system32\FntCache.dll MD5: 3cd5bbda19a1ab4eba359e0a14fdf0f0 C:\Windows\system32\hkcmd.exe MD5: 0ba3f31e2b4d8d99df8dd19e81155374 C:\Windows\system32\ieframe.dll MD5: eb8a00e8e9931a7ec04f920b09d880d8 C:\Windows\system32\iertutil.dll MD5: fdc6bd427e353d205c1afb6065fa8175 C:\Windows\system32\igfxdev.dll MD5: 3142195521fee436088ee8a5748de1b1 C:\Windows\system32\igfxpers.exe MD5: 493164122dc72e1bf6d12f575604fbda C:\Windows\system32\igfxsrvc.dll MD5: 1029b84ecbe4b95acb8491a3fe63d70f C:\Windows\system32\igfxtray.exe MD5: eb49faa5ebbc06356fb12476438781b9 C:\Windows\system32\imagehlp.dll MD5: 574b473facaa0e91702b86578440b525 C:\Windows\system32\KERNEL32.dll MD5: 74c2f29cc612b2b34231bebd824d2fb2 C:\Windows\system32\keyiso.dll MD5: 1fe46082a766cebe72ff30d0de7ddcd1 C:\Windows\system32\klogon.dll MD5: 19ffad68a02af1bf0bc336ee26cd6767 c:\windows\system32\l2gpstore.dll MD5: 35d40113e4a5b961b6ce5c5857702518 c:\windows\system32\lmhsvc.dll MD5: 178fac2b7c66e9a4400ce7ac37623e3f C:\Windows\system32\LSASRV.dll MD5: a3e186b4b935905b829219502557314e C:\Windows\System32\lsass.exe MD5: 44c00a385ca9dbc1d5cf3781f8c26aea C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe MD5: 8709c95e4ec55378d5bf27f02b0ed5a5 C:\Windows\system32\Macromed\Flash\FlashUtil32_11_4_402_287_ActiveX.exe MD5: e7bc792810ec02dd1f7ed25d830e9324 C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_287.dll MD5: 56e315acfb08a177b4d01e42b9044db5 C:\Windows\System32\MPRAPI.dll MD5: abe9eea1eabea0711610a637a7b1c25d C:\Windows\system32\msprivs.dll MD5: ff41e1ac301f51e16f61ad7c0f45467c C:\Windows\System32\msshsq.dll MD5: 73fd66b14d3c4252f7a524b8836a4359 C:\Windows\System32\mstask.dll MD5: 17af64d727545f2804f6e6d998327e3f C:\Windows\system32\msvcrt.dll MD5: 6abd253226770eae1292b4c945ed4b4b C:\Windows\System32\msxml3.dll MD5: 024528e25bbe8768536861ea09be1672 C:\Windows\System32\msxml6.dll MD5: 2fa16465f64db54b1f7f511395eb4fd7 C:\Windows\system32\NCObjAPI.DLL MD5: 188cc19108b0ebd6332d6628d4ede469 C:\Windows\system32\ncrypt.dll MD5: f4d9ed6bd74ad7cc0bec83c43a1cb76b c:\windows\system32\ncsi.dll MD5: 98b656eaf128cd06f625b09c84d959e1 C:\Windows\system32\NETAPI32.dll MD5: 6bc5fcef351e4cb5a269c1e84b5a06da C:\Windows\system32\netcfgx.dll MD5: 95daecf0fb120a7b5da679cc54e37dde C:\Windows\system32\netlogon.dll MD5: ab87c54ca19675880b0cae65b8af140c C:\Windows\system32\npDeployJava1.dll MD5: 8bb86f0c7eea2bded6fe095d0b4ca9bd c:\windows\system32\nsisvc.dll MD5: dda770bbd7c2ed024d6f50e279d90e5b C:\Windows\system32\ntdll.dll MD5: 9586e7cb2255a8b097a7e4538202585e C:\Windows\system32\ole32.dll MD5: dc15ab7168c0309d8f04fd95b6240422 C:\Windows\system32\OLEACC.dll MD5: b218342214d9bba0f54ea12ba2e9278c C:\Windows\system32\OLEAUT32.dll MD5: 2dd6af8e97f59c9d39329bbc2a81f13f C:\Windows\System32\RASDLG.dll MD5: 5a32d90a3d3d63e9011869a07a720ab3 C:\Windows\system32\Ribbons.scr MD5: 50e3e76b0901bb4fc029bb88bfa5ce79 C:\Windows\system32\schannel.dll MD5: 1a58069db21d05eb2ab58ee5753ebe8d C:\Windows\system32\schedsvc.dll MD5: d602fedbd9155fc2ded6863fb60c950f C:\Windows\system32\Secur32.dll MD5: 167ac31450c0c53a01fa1491e94d7678 C:\Windows\system32\SHDOCVW.dll MD5: aaf101900a23d75ae1ae00840fa6f3b8 C:\Windows\system32\SHELL32.dll MD5: 9176285122b7b849fec2aa1b72a8f7a8 C:\Windows\system32\SHLWAPI.dll MD5: c7230fbee14437716701c15be02c27b8 C:\Windows\system32\SHSVCS.dll MD5: 8554097e5136c3bf9f69fe578a1b35f4 C:\Windows\System32\spoolsv.exe MD5: 1bf5eebfd518dd7298434d8c862f825d C:\Windows\system32\srvsvc.dll MD5: b5950df243837d8217f4e597919b224a C:\Windows\system32\stobject.dll MD5: 71f5a7104fdf16c0ac5283a6ce666553 C:\Windows\system32\SYSNTFY.dll MD5: bfa034aac103d8a6f591ac9364688339 C:\Windows\system32\t2embed.dll MD5: 52e129522c1775dbb8cc252e7a0655c7 C:\Windows\system32\taskschd.dll MD5: 8a38b5e8493a9d103083b8620ac5f3a1 C:\Windows\System32\tdh.dll MD5: f8873d15018f411588bec02c1725bada C:\Windows\system32\tspkg.dll MD5: e45051c374f845edf3db02a35ba13193 C:\Windows\system32\umb.dll MD5: 9fac0f6d5f3d922db294e30cd3f62369 C:\Windows\system32\urlmon.dll MD5: 80fff14f1757b9af8be9d314fc1ae88b C:\Windows\system32\USP10.dll MD5: dc3ae9f1554dcd97f90983ddbdacd83d C:\Windows\system32\vsstrace.dll MD5: e3f535656b5abf249702eb64f3cf9af0 C:\Windows\system32\wbem\wbemcons.dll MD5: 2c3b09e586bda2cc49a292be7badc589 C:\Windows\system32\wbem\wmiutils.dll MD5: 5193de33f3284c447e0d31dafbf92570 c:\windows\system32\webcheck.dll MD5: 0745d6ead386710110817fbec03f5161 C:\Windows\system32\wfapigp.dll MD5: dbd02e3e6f061ebbbf9b99a9d7cba30b C:\Windows\System32\WINHTTP.dll MD5: 5553611e2f9ea6f613079177f1233068 C:\Windows\system32\WININET.dll MD5: 101ba3ea053480bb5d957ef37c06b5ed C:\Windows\System32\wininit.exe MD5: 14ff750efe13b0c21e5a06507c3a97b1 C:\Windows\system32\WINMM.dll MD5: 5ec8fb83f31aa2d6f421f02c3f4f4475 C:\Windows\system32\WINSPOOL.DRV MD5: d2293b069e4b63dc17b2f08d45e71124 C:\Windows\system32\winsrv.dll MD5: b2e569ef26dac9d6994a2aff4f601b7a C:\Windows\system32\WINTRUST.dll MD5: 87cdffcbd09c1ca03a068343d5d93250 C:\Windows\system32\WMI.dll MD5: f0321da5203f1e71917f3b7a13dc4912 C:\Windows\system32\WMsgAPI.dll MD5: fc3ec24fce372c89423e015a2ac1a31e C:\Windows\system32\wuaueng.dll MD5: 399bb52ad0668472717498e97cf28341 c:\windows\system32\WUDFPlatform.dll MD5: 1908cc7673f72601affdca022689cedf C:\Windows\system32\XmlLite.dll MD5: be3c082837866c4c291adaf163c10ea6 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll MD5: 76eaef4ddebbc7c38853f586c0e91dce C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18581_none_9e591052 ca1013d0\gdiplus.dll No file uploaded. Scan finished - communication took 5 sec Total traffic - 0.01 MB sent, 1.32 KB recvd Scanned 677 files and modules - 58 seconds ==============================================================================

Hello jdcats007

Question? If the hard drive has crashed, how hard will it be to replace? Is something anyone can do?

If a hard drive crashes it is usually recoverable. What I think you are asking is - what happens if you have a hard drive failure.

A hard drive failure is very different from a crash. When a hard drive fails you will (most likely) be unable to access the files stored on the drive, which is why I advised you to ensure you have a backup of your files after we determined the meaning of the blue screen error message you were receiving. If you have a PC tower (rather than a laptop), replacing a defective drive ought to be easy enough, and I can put you in touch with experts who will be able to guide you through the process.

The online scan looks good.

I would like to continue by checking for core system file corruption but before we do, please re-scan your machine with OTL as you did in post number 33 and post the log for me to review

Due to inactivity, this topic has been closed. If you are the topic starter and need this topic reopened, please PM a staff member (include the address of this thread in your request). Everyone else please start a new topic.

Topic re-opened at Users request.

The windows repair doesn't work well with safe mode and I still get the blue screen on normal start up

Hello jdcats007

The windows repair doesn't work well with safe mode

Please run the other two scans as requested and post the logs in your next reply.

I'm am currently trying the get the scans for you. For some reason I DONT get an email when there is a new post to the forum.

here is a regular malwarebytes scan… it removed 7 threats… Malwarebytes Anti-Malware 1.65.1.1000 www.malwarebytes.org Database version: v2012.11.29.09 Windows Vista Service Pack 2 x86 NTFS Internet Explorer 9.0.8112.16421 Owner :: OWNER-PC [administrator] 11/29/2012 11:07:56 AM mbam-log-2012-11-29 (11-07-56).txt Scan type: Quick scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 211726 Time elapsed: 7 minute(s), 1 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 2 HKCU\Software\cheerychickenSA (Adware.HotBar.CC) -> Quarantined and deleted successfully. HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\PLAYBRYTE (PUP.PlayBryte) -> Quarantined and deleted successfully. Registry Values Detected: 1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Playbryte|Publisher (PUP.PlayBryte) -> Data: Playbryte -> Quarantined and deleted successfully. Registry Data Items Detected: 1 HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowSearch (PUM.Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and repaired successfully. Folders Detected: 0 (No malicious items detected) Files Detected: 3 C:\Users\Owner\Downloads\Setup.exe (Adware.Hotbar) -> Quarantined and deleted successfully. C:\Users\Owner\Downloads\vGrabber_Setup (1).exe (PUP.BundleInstaller.VG) -> Quarantined and deleted successfully. C:\Users\Owner\Downloads\vGrabber_Setup.exe (PUP.BundleInstaller.VG) -> Quarantined and deleted successfully. (end)