What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

acer laptop windows 7 freezing or program not responding [Closed]

29 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #16
Running very slow, scan took about six hours. browser still the same but I've been using IE not Firefox. The results from the scan just said no threats found
Post #17
Hi gcdi,

Running very slow, scan took about six hours. browser still the same but I've been using IE not Firefox.

  • Do you have the same issues in IE as you did in Firefox?
  • Can you test Firefox and see if the condition still exists?
=========================

1. TFC

Download TFC to your desktop
  • Close any open windows.
  • Double click the TFC icon to run the program
    • Vista, Windows 7 & 8 Right click and select "Run as Administrator"
  • TFC will close all open programs itself in order to run,
  • Click the Start button to begin the process.
  • Allow TFC to run uninterrupted.
  • The program should not take long to finish it's job
  • Once its finished it should automatically reboot your machine,
  • If it doesn't, manually reboot to ensure a complete clean
=========================
Post #18
IE is the one I described earlier, firefox runs a little better, I don't have to refresh to get a new page to open and I can back up a page but the machine will still freeze and go to not responding. Do you have any ideas as to what is causing this? It is getting increasingly more frustrating trying all these scans as it takes several tries and forced shutdowns to get a download and then to run it. This last temp cleaner I had to run in safe mode, I don't know if that's okay but I couldn't get it to run in normal windows mode. Getting user folders. Stopping running processes. Emptying Temp folders. User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 56504 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: gcdi ->Temp folder emptied: 86554699 bytes ->Temporary Internet Files folder emptied: 13617479 bytes ->Java cache emptied: 1 bytes ->FireFox cache emptied: 249043233 bytes ->Google Chrome cache emptied: 0 bytes ->Flash cache emptied: 58149 bytes User: Public ->Temp folder emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 63216714 bytes %systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 1820444 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 67825 bytes Emptying RecycleBin. Do not interrupt. RecycleBin emptied: 0 bytes Process complete! Total Files Cleaned = 395.00 mb
Post #19
Hi gcdi,

Do you have any ideas as to what is causing this?

At this stage I don't see any malware in the logs you have posted recently. So it might be a hardware or disk issue.

all these scans as it takes several tries and forced shutdowns to get a download and then to run it

Please include this kind of details with each post if they occur.

=========================

1. Chkdsk in Vista/7

You must run the command prompt as an administrator or in an "elevated mode".
  • Start menu, in the search bar type "cmd"
  • Right-click the cmd icon, select "run as administrator"
    • If you have user account control (UAC) set up it may prompt you to accept that action.
  • Then type in "chkdsk /r" (make note of the space between chkdsk and /)
=========================

2. To view results log:
  • Open the Start Menu, and type eventvwr.msc in the search box and press enter.
  • If prompted by UAC, then click on Yes (Windows 7) or Continue (Vista).
  • In the left pane of Event Viewer, double click on Windows Logs to expand it, then right click on Application and click on Find.
  • Copy and paste Chkdsk into the line, and click on Find Next.
  • You will now see the system log for the scan results of Check Disk (chkdsk).
  • In the right had menu select copy, open notepad and paste the chkdsk results into notepad
  • Post in your next reply.
Post #20
Well, this reply had to come from another machine, the one we have been working on wont start now. When turning on I see the option to enter setup then the screen goes blank but still lit, after a little while it starts startup recovery, then after a few minutes it says it can't repair startup on it's own and askes if you want to send info to microsoft. After that you have an option to see more details and then a screen with about five options, system restore etc.
Post #21
Hi gcdi,

Well, this reply had to come from another machine.

Can you elaborate on this part of your statement?

=========================

You will need a functioning computer and a flash drive to complete this initial download step. Please read the instructions all the way through or print them out before proceeding.

=========================

1. Farbar Recovery Scan Tool

Download Farbar Recovery Scan Tool 32-Bit or Farbar Recovery Scan Tool 64-Bit and save it to a flash drive.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

Plug the flashdrive into the infected PC.

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:
  • Restart the computer.
  • As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
  • Use the arrow keys to select the Repair your computer menu item.
  • Select US as the keyboard language settings, and then click Next.
  • Select the operating system you want to repair, and then click Next.
  • Select your user account an click Next.
To enter System Recovery Options by using Windows installation disc:
  • Insert the installation disc.
  • Restart your computer.
  • If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
  • Click Repair your computer.
  • Select US as the keyboard language settings, and then click Next.
  • Select the operating system you want to repair, and then click Next.
  • Select your user account and click Next.
On the System Recovery Options menu you will get the following options:Startup Repair
System Restore
Windows Complete PC Restore
Windows Memory Diagnostic Tool
Command Prompt

[*]Select Command Prompt

[*]In the command window type in notepad and press Enter.

[*]The notepad opens. Under File menu select Open.

[*]Select "Computer" and find your flash drive letter and close the notepad.

[*]In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter

Note: Replace letter e with the drive letter of your flash drive.
[*]The tool will start to run.

[*]When the tool opens click Yes to disclaimer.

[*]Press Scan button.

[*]It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.

Post #22
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-06-2013 02
Ran by [removed] on 07-06-2013 23:24:57
Running from G:\
Windows 7 Home Premium Service Pack 1 (X64) OS Language: English(US)
Internet Explorer Version 9
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> FRST is updated to run from normal or Safe mode to produce a full FRST.txt log and an extra Addition.txt log.

==================== Registry (Whitelisted) ==================

HKLM\…\Run: [IntelPAN] "C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel PAN Tray [1935120 2011-05-02] (Intel® Corporation)
HKLM\…\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [2280232 2010-07-29] (Synaptics Incorporated)
HKLM\…\Run: [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [497648 2010-07-29] (Adobe Systems Incorporated)
HKLM\…\Run: [Power Management] C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1831528 2011-05-10] (Acer Incorporated)
HKLM\…\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey [1281512 2013-01-27] (Microsoft Corporation)
HKLM-x32\…\Run: [SuiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" [340848 2011-04-02] (Egis Technology Inc.)
HKLM-x32\…\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe [1103440 2011-06-30] (Dritek System Inc.)
HKLM-x32\…\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [113288 2010-11-16] (Renesas Electronics Corporation)
HKLM-x32\…\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\…\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)
HKU\Default\…\RunOnce: [ScrSav] C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe /default [154144 2010-07-29] ()
HKU\Default User\…\RunOnce: [ScrSav] C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe /default [154144 2010-07-29] ()

==================== Services (Whitelisted) =================

S2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22056 2013-01-27] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-05-02] ()
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [379360 2013-01-27] (Microsoft Corporation)
S2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256832 2011-04-23] (NTI Corporation)

==================== Drivers (Whitelisted) ====================

S3 mouclass; C:\Windows\System32\DRIVERS\mouclass.sys [49216 2009-07-13] ()
S0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [230320 2013-01-20] (Microsoft Corporation)
S2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [130008 2013-01-20] (Microsoft Corporation)
S1 Npfs; C:\Windows\System32\Drivers\Npfs.sys [44032 2009-07-13] ()
S3 RemoteControl-USBLAN; C:\Windows\System32\DRIVERS\rcblan.sys [46616 2007-01-24] (Belcarra Technologies)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-06-07 23:24 - 2013-06-07 23:24 - 00000000 ____D C:\FRST
2013-06-06 07:50 - 2013-06-06 07:50 - 00448512 ____A (OldTimer Tools) C:\Users\gcdi\Downloads\TFC.exe
2013-06-05 18:44 - 2013-06-05 18:44 - 00157260 ____A C:\Users\gcdi\AppData\Local\census.cache
2013-06-05 18:44 - 2013-06-05 18:44 - 00091159 ____A C:\Users\gcdi\AppData\Local\ars.cache
2013-06-05 10:16 - 2012-06-04 23:37 - 00256904 ____A (Trend Micro Inc.) C:\Windows\SysWOW64\Drivers\tmcomm.sys
2013-06-05 10:13 - 2013-06-05 10:13 - 00000036 ____A C:\Users\gcdi\AppData\Local\housecall.guid.cache
2013-06-05 10:12 - 2013-06-05 10:13 - 02002944 ____A (Trend Micro Inc.) C:\Users\gcdi\Desktop\HousecallLauncherCA0XFEZ1.exe
2013-06-04 10:01 - 2013-06-04 10:01 - 00001117 ____A C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-06-04 10:01 - 2013-06-04 10:01 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-06-04 10:01 - 2013-04-04 11:50 - 00025928 ____A (Malwarebytes Corporation) C:\Windows\System32\Drivers\mbam.sys
2013-06-04 09:58 - 2013-06-04 09:58 - 10285040 ____A (Malwarebytes Corporation ) C:\Users\gcdi\Desktop\mbam-setup-1.75.0.1300.exe
2013-06-04 09:53 - 2013-06-04 12:20 - 00000000 ____D C:\Users\gcdi\Desktop\WTT Reply
2013-06-04 09:53 - 2013-06-04 09:53 - 00001716 ____A C:\Users\gcdi\Desktop\RKreport[2]_D_06042013_02d1253.txt
2013-06-04 09:48 - 2013-06-04 09:48 - 00001734 ____A C:\Users\gcdi\Desktop\RKreport[1]_S_06042013_02d1248.txt
2013-06-03 19:54 - 2013-06-04 09:51 - 00000000 ____D C:\Users\gcdi\Desktop\RK_Quarantine
2013-06-03 19:54 - 2013-06-03 19:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-06-03 19:51 - 2013-06-03 19:51 - 00816128 ____A C:\Users\gcdi\Downloads\RogueKiller.exe
2013-06-03 19:36 - 2013-06-03 19:36 - 00008936 ____A C:\Users\gcdi\Desktop\roguekiller.htm
2013-06-02 22:57 - 2013-06-02 22:57 - 00019168 ____A C:\Users\gcdi\Desktop\dds.txt
2013-06-02 22:56 - 2013-06-02 22:56 - 00688992 ____R (Swearware) C:\Users\gcdi\Desktop\dds.scr
2013-06-01 21:48 - 2013-06-01 21:48 - 00000000 ____D C:\41983bb1ed5a14b92ad6
2013-06-01 20:06 - 2013-06-01 20:06 - 00019736 ____A C:\ComboFix.txt
2013-06-01 19:37 - 2013-06-01 20:06 - 00000000 ____D C:\Qoobox
2013-06-01 19:37 - 2013-06-01 20:05 - 00000000 ____D C:\Windows\erdnt
2013-06-01 19:37 - 2011-06-25 22:45 - 00256000 ____A C:\Windows\PEV.exe
2013-06-01 19:37 - 2010-11-07 09:20 - 00208896 ____A C:\Windows\MBR.exe
2013-06-01 19:37 - 2009-04-19 20:56 - 00060416 ____A (NirSoft) C:\Windows\NIRCMD.exe
2013-06-01 19:37 - 2000-08-30 16:00 - 00518144 ____A (SteelWerX) C:\Windows\SWREG.exe
2013-06-01 19:37 - 2000-08-30 16:00 - 00406528 ____A (SteelWerX) C:\Windows\SWSC.exe
2013-06-01 19:37 - 2000-08-30 16:00 - 00098816 ____A C:\Windows\sed.exe
2013-06-01 19:37 - 2000-08-30 16:00 - 00080412 ____A C:\Windows\grep.exe
2013-06-01 19:37 - 2000-08-30 16:00 - 00068096 ____A C:\Windows\zip.exe
2013-06-01 19:35 - 2013-06-01 19:35 - 05076199 ____R (Swearware) C:\Users\gcdi\Desktop\ComboFix.exe
2013-06-01 19:24 - 2013-06-01 19:24 - 00004867 ____A C:\AdwCleaner[S1].txt
2013-06-01 19:23 - 2013-06-01 19:23 - 00632031 ____A C:\Users\gcdi\Downloads\AdwCleaner.exe
2013-06-01 01:06 - 2013-06-01 01:06 - 00005021 ____A C:\Users\gcdi\Desktop\attach.zip
2013-06-01 00:43 - 2013-06-01 00:43 - 00688992 ____R (Swearware) C:\Users\gcdi\Downloads\dds (1).scr
2013-05-31 01:20 - 2013-05-31 01:20 - 00602112 ____A (OldTimer Tools) C:\Users\gcdi\Desktop\OTL.exe
2013-05-31 01:07 - 2013-05-31 01:07 - 00000564 ____A C:\Users\gcdi\Desktop\MBR.zip
2013-05-31 01:05 - 2013-05-31 01:05 - 00001905 ____A C:\Users\gcdi\Desktop\aswMBR.txt
2013-05-31 01:05 - 2013-05-31 01:05 - 00000512 ____A C:\Users\gcdi\Desktop\MBR.dat
2013-05-30 23:36 - 2013-05-30 23:37 - 04745728 ____A (AVAST Software) C:\Users\gcdi\Downloads\aswMBR.exe
2013-05-27 12:44 - 2013-05-27 12:44 - 00010615 ____A C:\Users\gcdi\Downloads\hijackthis.log
2013-05-27 12:43 - 2013-05-27 12:43 - 00388608 ____A (Trend Micro Inc.) C:\Users\gcdi\Downloads\HiJackThis.exe
2013-05-26 00:08 - 2013-05-26 00:08 - 00000000 ____D C:\e4933ed8a76bc9d5f102bd69d3
2013-05-25 22:23 - 2013-05-25 22:23 - 00000000 ____D C:\b3e550ed4b693c4412057d6e
2013-05-23 12:43 - 2013-05-23 12:43 - 00000000 ____D C:\d0338d9681d99315fb
2013-05-23 12:41 - 2013-04-04 22:52 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-05-23 12:41 - 2013-04-04 22:50 - 02647552 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-05-23 12:41 - 2013-04-04 22:50 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-05-23 12:41 - 2013-04-04 22:50 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-05-23 12:41 - 2013-04-04 22:50 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-05-23 12:41 - 2013-04-04 22:50 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-05-23 12:41 - 2013-04-04 22:50 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-05-23 12:41 - 2013-04-04 21:26 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-05-23 12:41 - 2013-04-04 21:26 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-05-23 12:41 - 2013-04-04 21:26 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-05-23 12:41 - 2013-04-04 21:26 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-05-23 12:41 - 2013-04-04 21:26 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-05-23 12:41 - 2013-04-04 21:26 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-05-23 12:41 - 2013-04-04 20:43 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-05-23 12:41 - 2013-04-04 20:29 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-05-23 12:41 - 2013-04-04 19:51 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-05-23 12:41 - 2013-04-04 19:38 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-05-23 12:40 - 2013-04-04 22:52 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-05-23 12:40 - 2013-04-04 22:50 - 19231232 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-05-23 12:40 - 2013-04-04 22:50 - 15404032 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-05-23 12:40 - 2013-04-04 22:50 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-05-23 12:40 - 2013-04-04 22:50 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-05-23 12:40 - 2013-04-04 22:50 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-05-23 12:40 - 2013-04-04 21:28 - 01767424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-05-23 12:40 - 2013-04-04 21:28 - 01130496 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-05-23 12:40 - 2013-04-04 21:26 - 14323712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-05-23 12:40 - 2013-04-04 21:26 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-05-23 12:40 - 2013-04-04 21:26 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-05-23 12:40 - 2013-04-04 21:26 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-05-23 12:40 - 2013-04-04 21:26 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-05-15 08:02 - 2013-04-09 22:01 - 00983400 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-05-15 08:02 - 2013-04-09 22:01 - 00265064 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgmms1.sys
2013-05-15 08:02 - 2013-02-26 22:02 - 00111448 ____A (Microsoft Corporation) C:\Windows\System32\consent.exe
2013-05-15 08:02 - 2013-02-26 21:52 - 14172672 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll
2013-05-15 08:02 - 2013-02-26 21:52 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\shdocvw.dll
2013-05-15 08:02 - 2013-02-26 21:48 - 01930752 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll
2013-05-15 08:02 - 2013-02-26 21:47 - 00070144 ____A (Microsoft Corporation) C:\Windows\System32\appinfo.dll
2013-05-15 08:02 - 2013-02-26 20:55 - 12872704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-05-15 08:02 - 2013-02-26 20:55 - 00180224 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-05-15 08:02 - 2013-02-26 20:49 - 01796096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-05-15 08:02 - 2011-02-03 03:25 - 00144384 ____A (Microsoft Corporation) C:\Windows\System32\cdd.dll
2013-05-14 19:43 - 2013-06-06 07:48 - 00002072 ____A C:\Windows\setupact.log
2013-05-14 19:43 - 2013-05-14 19:43 - 00000000 ____A C:\Windows\setuperr.log
2013-05-14 19:42 - 2013-06-02 22:28 - 00000878 ____A C:\Windows\PFRO.log
2013-05-14 19:40 - 2013-05-14 19:40 - 00098404 ____A C:\Users\gcdi\Documents\cc_20130514_224016.reg
2013-05-14 19:21 - 2013-05-14 19:21 - 00000826 ____A C:\Users\Public\Desktop\CCleaner.lnk
2013-05-14 19:21 - 2013-05-14 19:21 - 00000000 ____D C:\Program Files\CCleaner
2013-05-14 19:20 - 2013-05-14 19:21 - 00000000 ____D C:\ProgramData\Yahoo! Companion
2013-05-14 19:20 - 2013-05-14 19:20 - 00000000 ____D C:\Users\gcdi\AppData\Roaming\Yahoo!
2013-05-14 19:20 - 2013-05-14 19:20 - 00000000 ____D C:\ProgramData\Yahoo!
2013-05-14 19:20 - 2013-05-14 19:20 - 00000000 ____D C:\Program Files (x86)\Yahoo!
2013-05-14 19:18 - 2013-05-14 19:18 - 01116800 ____A (AirInstaller Inc.) C:\Users\gcdi\Downloads\setup.exe
2013-05-14 18:58 - 2013-05-14 18:59 - 00011394 ____A C:\Users\gcdi\AppData\Local\HWVendorDetection.log
2013-05-14 11:13 - 2013-05-14 19:38 - 00000000 ____D C:\Windows\Minidump
2013-05-14 00:59 - 2013-05-14 00:53 - 00263584 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-05-14 00:59 - 2013-05-14 00:53 - 00174496 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-05-14 00:59 - 2013-05-14 00:53 - 00174496 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-05-14 00:53 - 2013-05-14 00:53 - 00095648 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-05-14 00:43 - 2013-05-14 00:43 - 00000000 ____A C:\Windows\SysWOW64\jupdate-1.7.0_21-b11.log
2013-05-13 20:18 - 2013-05-13 20:18 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-05-13 20:18 - 2013-05-13 20:18 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2013-05-13 19:34 - 2013-05-13 19:34 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-05-13 19:34 - 2013-05-13 19:34 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-05-13 19:34 - 2013-05-13 19:34 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-05-13 19:34 - 2013-05-13 19:34 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-05-13 19:34 - 2013-05-13 19:34 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-05-13 19:34 - 2013-05-13 19:34 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-05-13 19:34 - 2013-05-13 19:34 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-05-13 19:34 - 2013-05-13 19:34 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-05-13 19:34 - 2013-05-13 19:34 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-05-13 19:34 - 2013-05-13 19:34 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-05-13 19:34 - 2013-05-13 19:34 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-05-13 19:34 - 2013-05-13 19:34 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-05-13 19:34 - 2013-05-13 19:34 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-05-13 19:34 - 2013-05-13 19:34 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-05-13 19:34 - 2013-05-13 19:34 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-05-13 19:34 - 2013-05-13 19:34 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-05-13 19:34 - 2013-05-13 19:34 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-05-13 19:34 - 2013-05-13 19:34 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-05-13 19:34 - 2013-05-13 19:34 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-05-13 19:34 - 2013-05-13 19:34 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-05-13 19:34 - 2013-05-13 19:34 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-05-12 21:21 - 2013-04-12 06:45 - 01656680 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ntfs.sys

==================== One Month Modified Files and Folders =======

2013-06-07 23:24 - 2013-06-07 23:24 - 00000000 ____D C:\FRST
2013-06-06 08:08 - 2011-10-20 08:55 - 01485314 ____A C:\Windows\WindowsUpdate.log
2013-06-06 07:55 - 2009-07-13 21:13 - 00755378 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-06 07:50 - 2013-06-06 07:50 - 00448512 ____A (OldTimer Tools) C:\Users\gcdi\Downloads\TFC.exe
2013-06-06 07:48 - 2013-05-14 19:43 - 00002072 ____A C:\Windows\setupact.log
2013-06-06 07:48 - 2012-07-18 21:03 - 00000890 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-06-06 07:48 - 2011-10-20 12:36 - 00000000 ____D C:\ProgramData\clear.fi
2013-06-06 07:48 - 2009-07-13 21:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-06 07:29 - 2009-07-13 21:08 - 00032624 ____A C:\Windows\Tasks\SCHEDLGU.TXT
2013-06-06 07:19 - 2012-06-10 05:51 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-06-05 20:04 - 2012-07-18 21:03 - 00000894 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-06-05 20:01 - 2012-03-28 21:50 - 00000830 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-06-05 18:44 - 2013-06-05 18:44 - 00157260 ____A C:\Users\gcdi\AppData\Local\census.cache
2013-06-05 18:44 - 2013-06-05 18:44 - 00091159 ____A C:\Users\gcdi\AppData\Local\ars.cache
2013-06-05 10:13 - 2013-06-05 10:13 - 00000036 ____A C:\Users\gcdi\AppData\Local\housecall.guid.cache
2013-06-05 10:13 - 2013-06-05 10:12 - 02002944 ____A (Trend Micro Inc.) C:\Users\gcdi\Desktop\HousecallLauncherCA0XFEZ1.exe
2013-06-05 10:05 - 2012-07-18 21:03 - 00002187 ____A C:\Users\Public\Desktop\Google Chrome.lnk
2013-06-05 09:49 - 2009-07-13 20:45 - 00016976 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-05 09:49 - 2009-07-13 20:45 - 00016976 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-04 12:20 - 2013-06-04 09:53 - 00000000 ____D C:\Users\gcdi\Desktop\WTT Reply
2013-06-04 10:01 - 2013-06-04 10:01 - 00001117 ____A C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-06-04 10:01 - 2013-06-04 10:01 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-06-04 09:58 - 2013-06-04 09:58 - 10285040 ____A (Malwarebytes Corporation ) C:\Users\gcdi\Desktop\mbam-setup-1.75.0.1300.exe
2013-06-04 09:53 - 2013-06-04 09:53 - 00001716 ____A C:\Users\gcdi\Desktop\RKreport[2]_D_06042013_02d1253.txt
2013-06-04 09:51 - 2013-06-03 19:54 - 00000000 ____D C:\Users\gcdi\Desktop\RK_Quarantine
2013-06-04 09:48 - 2013-06-04 09:48 - 00001734 ____A C:\Users\gcdi\Desktop\RKreport[1]_S_06042013_02d1248.txt
2013-06-03 19:54 - 2013-06-03 19:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-06-03 19:51 - 2013-06-03 19:51 - 00816128 ____A C:\Users\gcdi\Downloads\RogueKiller.exe
2013-06-03 19:36 - 2013-06-03 19:36 - 00008936 ____A C:\Users\gcdi\Desktop\roguekiller.htm
2013-06-02 22:57 - 2013-06-02 22:57 - 00019168 ____A C:\Users\gcdi\Desktop\dds.txt
2013-06-02 22:57 - 2013-03-29 21:40 - 00014354 ____A C:\Users\gcdi\Desktop\attach.txt
2013-06-02 22:56 - 2013-06-02 22:56 - 00688992 ____R (Swearware) C:\Users\gcdi\Desktop\dds.scr
2013-06-02 22:28 - 2013-05-14 19:42 - 00000878 ____A C:\Windows\PFRO.log
2013-06-01 21:48 - 2013-06-01 21:48 - 00000000 ____D C:\41983bb1ed5a14b92ad6
2013-06-01 20:06 - 2013-06-01 20:06 - 00019736 ____A C:\ComboFix.txt
2013-06-01 20:06 - 2013-06-01 19:37 - 00000000 ____D C:\Qoobox
2013-06-01 20:06 - 2009-07-13 19:20 - 00000000 __RHD C:\users\Default
2013-06-01 20:05 - 2013-06-01 19:37 - 00000000 ____D C:\Windows\erdnt
2013-06-01 20:04 - 2009-07-13 18:34 - 00000215 ____A C:\Windows\system.ini
2013-06-01 19:35 - 2013-06-01 19:35 - 05076199 ____R (Swearware) C:\Users\gcdi\Desktop\ComboFix.exe
2013-06-01 19:24 - 2013-06-01 19:24 - 00004867 ____A C:\AdwCleaner[S1].txt
2013-06-01 19:23 - 2013-06-01 19:23 - 00632031 ____A C:\Users\gcdi\Downloads\AdwCleaner.exe
2013-06-01 01:06 - 2013-06-01 01:06 - 00005021 ____A C:\Users\gcdi\Desktop\attach.zip
2013-06-01 00:43 - 2013-06-01 00:43 - 00688992 ____R (Swearware) C:\Users\gcdi\Downloads\dds (1).scr
2013-05-31 01:20 - 2013-05-31 01:20 - 00602112 ____A (OldTimer Tools) C:\Users\gcdi\Desktop\OTL.exe
2013-05-31 01:07 - 2013-05-31 01:07 - 00000564 ____A C:\Users\gcdi\Desktop\MBR.zip
2013-05-31 01:05 - 2013-05-31 01:05 - 00001905 ____A C:\Users\gcdi\Desktop\aswMBR.txt
2013-05-31 01:05 - 2013-05-31 01:05 - 00000512 ____A C:\Users\gcdi\Desktop\MBR.dat
2013-05-30 23:37 - 2013-05-30 23:36 - 04745728 ____A (AVAST Software) C:\Users\gcdi\Downloads\aswMBR.exe
2013-05-27 12:44 - 2013-05-27 12:44 - 00010615 ____A C:\Users\gcdi\Downloads\hijackthis.log
2013-05-27 12:43 - 2013-05-27 12:43 - 00388608 ____A (Trend Micro Inc.) C:\Users\gcdi\Downloads\HiJackThis.exe
2013-05-27 12:36 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\System32\NDF
2013-05-26 21:35 - 2012-02-04 09:19 - 00007677 ____A C:\Users\gcdi\AppData\Local\resmon.resmoncfg
2013-05-26 00:08 - 2013-05-26 00:08 - 00000000 ____D C:\e4933ed8a76bc9d5f102bd69d3
2013-05-25 23:13 - 2011-10-28 10:01 - 00002023 ____A C:\Users\Public\Desktop\Adobe Reader X.lnk
2013-05-25 22:23 - 2013-05-25 22:23 - 00000000 ____D C:\b3e550ed4b693c4412057d6e
2013-05-25 20:10 - 2011-10-20 12:28 - 75016696 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-05-25 20:00 - 2009-07-13 20:45 - 00289000 ____A C:\Windows\System32\FNTCACHE.DAT
2013-05-23 22:01 - 2012-03-28 21:50 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-05-23 22:01 - 2011-07-20 13:53 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-05-23 12:55 - 2007-07-11 17:49 - 00000000 ____D C:\Windows\Panther
2013-05-23 12:43 - 2013-05-23 12:43 - 00000000 ____D C:\d0338d9681d99315fb
2013-05-14 19:43 - 2013-05-14 19:43 - 00000000 ____A C:\Windows\setuperr.log
2013-05-14 19:40 - 2013-05-14 19:40 - 00098404 ____A C:\Users\gcdi\Documents\cc_20130514_224016.reg
2013-05-14 19:38 - 2013-05-14 11:13 - 00000000 ____D C:\Windows\Minidump
2013-05-14 19:21 - 2013-05-14 19:21 - 00000826 ____A C:\Users\Public\Desktop\CCleaner.lnk
2013-05-14 19:21 - 2013-05-14 19:21 - 00000000 ____D C:\Program Files\CCleaner
2013-05-14 19:21 - 2013-05-14 19:20 - 00000000 ____D C:\ProgramData\Yahoo! Companion
2013-05-14 19:20 - 2013-05-14 19:20 - 00000000 ____D C:\Users\gcdi\AppData\Roaming\Yahoo!
2013-05-14 19:20 - 2013-05-14 19:20 - 00000000 ____D C:\ProgramData\Yahoo!
2013-05-14 19:20 - 2013-05-14 19:20 - 00000000 ____D C:\Program Files (x86)\Yahoo!
2013-05-14 19:18 - 2013-05-14 19:18 - 01116800 ____A (AirInstaller Inc.) C:\Users\gcdi\Downloads\setup.exe
2013-05-14 18:59 - 2013-05-14 18:58 - 00011394 ____A C:\Users\gcdi\AppData\Local\HWVendorDetection.log
2013-05-14 00:59 - 2012-04-23 11:29 - 00000000 ____D C:\Program Files (x86)\Java
2013-05-14 00:53 - 2013-05-14 00:59 - 00263584 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-05-14 00:53 - 2013-05-14 00:59 - 00174496 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-05-14 00:53 - 2013-05-14 00:59 - 00174496 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-05-14 00:53 - 2013-05-14 00:53 - 00095648 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-05-14 00:53 - 2012-06-26 11:36 - 00866720 ____A (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2013-05-14 00:53 - 2012-04-23 11:29 - 00788896 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-05-14 00:43 - 2013-05-14 00:43 - 00000000 ____A C:\Windows\SysWOW64\jupdate-1.7.0_21-b11.log
2013-05-13 23:23 - 2011-10-20 12:11 - 00000000 ____D C:\users\gcdi
2013-05-13 20:18 - 2013-05-13 20:18 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-05-13 20:18 - 2013-05-13 20:18 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2013-05-13 20:18 - 2011-10-20 22:40 - 00001945 ____A C:\Windows\epplauncher.mif
2013-05-13 19:39 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-05-13 19:34 - 2013-05-13 19:34 - 01509376 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-05-13 19:34 - 2013-05-13 19:34 - 01441280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-05-13 19:34 - 2013-05-13 19:34 - 01400416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-05-13 19:34 - 2013-05-13 19:34 - 01400416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-05-13 19:34 - 2013-05-13 19:34 - 01054720 ____A (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2013-05-13 19:34 - 2013-05-13 19:34 - 00905728 ____A (Microsoft Corporation) C:\Windows\System32\mshtmlmedia.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00762368 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00719360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00629248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00599552 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00523264 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00452096 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00441856 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-05-13 19:34 - 2013-05-13 19:34 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-05-13 19:34 - 2013-05-13 19:34 - 00357888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00281600 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00270848 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00247296 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00242200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00235008 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00232960 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00226816 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00226304 ____A (Microsoft Corporation) C:\Windows\System32\elshyph.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00216064 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00204800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00185344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00173568 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-05-13 19:34 - 2013-05-13 19:34 - 00167424 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-05-13 19:34 - 2013-05-13 19:34 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-05-13 19:34 - 2013-05-13 19:34 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00144896 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-05-13 19:34 - 2013-05-13 19:34 - 00138752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-05-13 19:34 - 2013-05-13 19:34 - 00137216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-05-13 19:34 - 2013-05-13 19:34 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00135680 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00125440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00117248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00102912 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00092160 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-05-13 19:34 - 2013-05-13 19:34 - 00082432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00079872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-05-13 19:34 - 2013-05-13 19:34 - 00073728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-05-13 19:34 - 2013-05-13 19:34 - 00069120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00062976 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00061952 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-05-13 19:34 - 2013-05-13 19:34 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00051200 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00038400 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00023040 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-05-13 19:34 - 2013-05-13 19:34 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-05-13 19:34 - 2013-05-13 19:34 - 00012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-05-13 19:34 - 2013-05-13 19:34 - 00012800 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-05-13 19:34 - 2013-05-13 19:34 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-05-12 21:37 - 2011-07-20 13:52 - 00000000 ____D C:\ProgramData\Adobe

==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\…\.exe: exefile => OK
HKLM\…\exefile\DefaultIcon: %1 => OK
HKLM\…\exefile\open\command: "%1" %* => OK

==================== Restore Points =========================


==================== Memory info ===========================

Percentage of memory in use: 17%
Total physical RAM: 3947.86 MB
Available physical RAM: 3274.9 MB
Total Pagefile: 3946.06 MB
Available Pagefile: 3271.56 MB
Total Virtual: 8192 MB
Available Virtual: 8191.86 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:447.66 GB) (Free:404.03 GB) NTFS (Disk=0 Partition=3)
Drive e: (PQSERVICE) (Fixed) (Total:18 GB) (Free:3.46 GB) NTFS (Disk=0 Partition=1)
Drive g: () (Removable) (Total:0.12 GB) (Free:0.12 GB) FAT (Disk=1 Partition=1)
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (SYSTEM RESERVED) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS (Disk=0 Partition=2) ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 36249AAE)
Partition 1: (Not Active) - (Size=18 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=448 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 123 MB) (Disk ID: 8BD15ED1)
Partition 1: (Active) - (Size=123 MB) - (Type=06)


Last Boot: 2013-06-03 19:16

==================== End Of Log ============================
Post #23
Hi gcdi,
  • Click Start and My Computer.
  • Right-click the hard drive you want to check, and click Properties.
  • Select the Tools tab in the Error Checking section click Check Now. Check both boxes. Click Start.
    • You'll get a message that the computer must be rebooted to run a complete check.
  • Click Yes and reboot. Chkdsk will take a while, so run it when you don't need to use the computer for something else.
To view results log:
  • Go to Start - Run and type in eventvwr.msc, and hit enter.
  • When Event Viewer opens, click on "Application", then scroll down to "Winlogon" and double-click on it to open it up.
  • This is the log created after running chkdsk. Click on the icon that looks like two pieces of paper to copy it and then paste it here please.
Post the results in your next reply
Post #25
Hi gcdi,

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:
  • Restart the computer.
  • As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
  • Use the arrow keys to select the Repair your computer menu item.
  • Select US as the keyboard language settings, and then click Next.
  • Select the operating system you want to repair, and then click Next.
  • Select your user account an click Next.
On the System Recovery Options menu you will get the following options:
Startup Repair
System Restore
Windows Complete PC Restore
Windows Memory Diagnostic Tool
Command Prompt
Choose Startup Repair and follow the onscreen directions. Reboot when done.

Post back the results
Post #26
Taping F8 doesn't seem to do anything. If I leave the machine on with the blank screen after about four or five minutes the recovery will open. When I select Startup Repair the results are the same as before, it says it can't repair by itself and gives option to send to Microsoft. Here are the details. Problem signature: Problem Event Name: StartupRepairOffline Problem Signature 01: 6.1.7600.16385 Problem Signature 02: 6.1.7600.16385 Problem Signature 03: unknown Problem Signature 04: 99 Problem Signature 05: ManualRepair Problem Signature 06: 1 Problem Signature 07: NoOsInstalled OS Version: 6.1.7601.2.1.0.256.1 Locale ID: 1033
Post #27 last edited
Hi gcdi,

Let's try a different approach:

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:
  • Restart the computer.
  • As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
  • Use the arrow keys to select the Repair your computer menu item.
  • Select US as the keyboard language settings, and then click Next.
  • Select the operating system you want to repair, and then click Next.
  • Select your user account an click Next.
On the System Recovery Options menu you will get the following options:
Startup Repair
System Restore
Windows Complete PC Restore
Windows Memory Diagnostic Tool
Command Prompt

Select Command Prompt, when the command prompt opens type chkdsk /r (make note of the space between the k and /)
Press Enter
Post #29
Hi gcdi,

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:
  • Restart the computer.
  • As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
  • Use the arrow keys to select the Repair your computer menu item.
  • Select US as the keyboard language settings, and then click Next.
  • Select the operating system you want to repair, and then click Next.
  • Select your user account an click Next.
On the System Recovery Options menu you will get the following options:
Startup Repair
System Restore
Windows Complete PC Restore
Windows Memory Diagnostic Tool
Command Prompt
Choose a Restore Point that was before the computer began having issues, and follow the onscreen instructions.
Post #30
It said: No restore points have been created on your computers system drive. To create a restore point open system protection.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI