Additional scan result of Farbar Recovery Scan Tool (x86) Version:23-11-2015 Ran by Owner (2015-11-24 18:36:21) Running from C:\ Microsoft Windows XP Home Edition Service Pack 3 (X86) (2008-11-01 18:18:47) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-583907252-412668190-839522115-500 - Administrator - Enabled) ASPNET (S-1-5-21-583907252-412668190-839522115-1005 - Limited - Enabled) Guest (S-1-5-21-583907252-412668190-839522115-501 - Limited - Disabled) HelpAssistant (S-1-5-21-583907252-412668190-839522115-1000 - Limited - Disabled) Owner (S-1-5-21-583907252-412668190-839522115-1003 - Administrator - Enabled) => %SystemDrive%\Documents and Settings\Owner Sara (S-1-5-21-583907252-412668190-839522115-1006 - Limited - Enabled) => %SystemDrive%\Documents and Settings\Sara Steve (S-1-5-21-583907252-412668190-839522115-1004 - Administrator - Enabled) => %SystemDrive%\Documents and Settings\Steve SUPPORT_388945a0 (S-1-5-21-583907252-412668190-839522115-1002 - Limited - Disabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Webroot SecureAnywhere (Enabled - Up to date) {D486329C-1488-4CEB-9CC8-D662B732D904} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 1300 (Version: 5.31.1.27 - Hewlett-Packard) Hidden 1300_Help (Version: 5.31.1.27 - Hewlett-Packard) Hidden 1300Tour (Version: 5.31.1.27 - Hewlett-Packard) Hidden 1300Trb (Version: 5.31.1.27 - Hewlett-Packard) Hidden Access Drivers (Version: 2.8 - EarthLink) Hidden Acrobat.com (HKLM\...\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.1.377 - Adobe Systems Incorporated) Acrobat.com (Version: 0.0.0 - Adobe Systems Incorporated) Hidden Adobe AIR (HKLM\...\Adobe AIR) (Version: 1.0.4990 - Adobe Systems Inc.) Adobe Flash Player 19 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 19.0.0.245 - Adobe Systems Incorporated) Adobe Reader X (10.1.11) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AA1000000001}) (Version: 10.1.11 - Adobe Systems Incorporated) AiO_Scan (Version: 5.31.1.27 - Hewlett-Packard) Hidden AIOMinimal (Version: 5.31.1.27 - Hewlett-Packard) Hidden AiOSoftware (Version: 5.31.1.27 - Hewlett-Packard) Hidden Apple Application Support (HKLM\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.) Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) B57Inst (Version: 3.40 - Broadcom) Hidden BCM V.92 56K Modem (HKLM\...\BCM V.92 56K Modem) (Version: - ) Broadcom 440x 10/100 Integrated Controller (HKLM\...\InstallShield_{52504CE6-E909-4113-B232-4AFEC6543A61}) (Version: 3.29 - Broadcom) Broadcom 440x 10/100 Integrated Controller (Version: 3.29 - Broadcom) Hidden Broadcom Driver Installer (HKLM\...\InstallShield_{BE6890C7-31EF-478C-812E-1E2899ABFCA9}) (Version: 3.40 - Broadcom) Copy (Version: 5.31.0.150 - Hewlett-Packard) Hidden CreativeProjects (Version: 5.31.0.150 - Hewlett-Packard) Hidden Critical Update for Windows Media Player 11 (KB959772) (HKLM\...\KB959772_WM11) (Version: - Microsoft Corporation) Deal Info (Version: 2005.2.98.0 - EarthLink, Inc) Hidden Dell ResourceCD (HKLM\...\{D78653C3-A8FF-415F-92E6-D774E634FF2D}) (Version: - ) Director (Version: 5.31.0.154 - Hewlett-Packard) Hidden DivX Converter (HKLM\...\{B13A7C41581B411290FBC0395694E2A9}) (Version: 6.6.1 - DivX, Inc.) DivX Setup (HKLM\...\DivX Setup) (Version: 2.6.3.80 - DivX, LLC) DocProc (Version: 3.1.0.0 - Hewlett-Packard) Hidden EarthLink Accelerator (Version: 5.0.1.1054 - EarthLink, Inc.) Hidden EarthLink Common Authentication (Version: 1.0.87.0 - ) Hidden EarthLink FastLane (Version: 5.5.100.115 - EarthLink, Inc) Hidden EarthLink MailBox (Version: 2005.2.15.0 - EarthLink, Inc.) Hidden EarthLink Software (HKLM\...\EarthLink TotalAccess 2004) (Version: 2005.2.118.0 - ) EarthLink Spyware Blocker (Version: 2005.1.45.0 - EarthLink, Inc.) Hidden EarthLink Toolbar (HKLM\...\{B8C2A83F-20B0-49D9-BA2B-6495DD8639ED}) (Version: 2.2.59.0 - EarthLink, Inc.) EarthLink Wireless High Speed (Version: 1.4.1221 - EarthLink, Inc) Hidden Fax (Version: 5.31.2.31 - Hewlett-Packard) Hidden Google Chrome (HKLM\...\Google Chrome) (Version: 46.0.2490.86 - Google Inc.) Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (Version: 1.3.28.15 - Google Inc.) Hidden H&R Block Basic + Efile + State 2011 (HKLM\...\{70469C1D-DDF0-44A0-B873-9F28B354256C}) (Version: 11.03.7102 - HRB Technology, LLC.) H&R Block Basic + Efile 2009 (HKLM\...\{92A0792A-E771-4C4A-9A4A-C2917AA19EEA}) (Version: 09.02.6901 - HRB Technology, LLC.) H&R Block Basic + Efile 2010 (HKLM\...\{FD2B3CFD-AFBD-4944-A79D-407CB3C24110}) (Version: 10.02.6301 - HRB Technology, LLC.) H&R Block Basic + Efile 2012 (HKLM\...\{89D20029-0578-4D8D-979A-695C8D868868}) (Version: 12.02.7301 - HRB Technology, LLC.) H&R Block Basic + Efile 2013 (HKLM\...\{FDF789BA-0A3F-45B1-AFC3-FB424AFEB3D0}) (Version: 13.02.6502 - HRB Technology, LLC.) H&R Block Basic + Efile 2014 (HKLM\...\{EBE87539-2EE4-459C-BC74-F4F9D36A954B}) (Version: 14.02.7401 - HRB Technology, LLC.) H&R Block Ohio 2011 (HKLM\...\{459D0CEE-BBAD-465D-A0BF-C7820085A050}) (Version: 1.11.4101 - HRB Technology, LLC.) HP Photo & Imaging 3.1 (HKLM\...\HP Photo & Imaging) (Version: 3.1 - HP) HP PSC & OfficeJet 3.0 (HKLM\...\{F38FA38A-7E5A-4209-88ED-4DE21CD20EEF}) (Version: 3.0 - HP) HP Software Update (HKLM\...\{CC0A24CB-87C9-4F1C-A1F2-F87D8D4DDCAF}) (Version: 1.0.18.20030625 - Hewlett-Packard) HP Unload DLL Patch (HKLM\...\{595D0DE8-C38A-4432-B851-47DECC1A99BD}) (Version: 1.00.0000 - Hewlett-Packard) hpmdtab (Version: 2.0.470.1598 - Hewlett-Packard) Hidden HPSystemDiagnostics (Version: 1.5.0.0 - Your Company Name) Hidden InstantShare (Version: 3.1.0.13 - Hewlett-Packard) Hidden Intel(R) Extreme Graphics Driver (HKLM\...\{8A708DD8-A5E6-11D4-A706-000629E95E20}) (Version: - ) Logitech MouseWare 9.77 (HKLM\...\{5809E7CF-4DCF-11D4-9875-00105ACE7734}) (Version: - ) Media Player Codec Pack 3.2.0 (HKLM\...\Media Player - Codec Pack) (Version: - Media Player Codec Pack) Memories Disc Creator 2.0 (HKLM\...\{2E132061-C78A-48D4-A899-1D13B9D189FA}) (Version: 2.0.470.1598 - Memories Disc Creator 2.0) Microsoft .NET Framework 1.1 (HKLM\...\Microsoft .NET Framework 1.1 (1033)) (Version: - ) Microsoft .NET Framework 1.1 Security Update (KB2698023) (HKLM\...\M2698023) (Version: - ) Microsoft .NET Framework 1.1 Security Update (KB2833941) (HKLM\...\M2833941) (Version: - ) Microsoft .NET Framework 1.1 Security Update (KB979906) (HKLM\...\M979906) (Version: - ) Microsoft .NET Framework 2.0 Service Pack 2 (HKLM\...\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}) (Version: 2.2.30729 - Microsoft Corporation) Microsoft .NET Framework 3.0 Service Pack 2 (HKLM\...\{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}) (Version: 3.2.30729 - Microsoft Corporation) Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation) Microsoft Compression Client Pack 1.0 for Windows XP (HKLM\...\MSCompPackV1) (Version: 1 - Microsoft Corporation) Microsoft Money 2004 (HKLM\...\{1D643CD7-4DD6-11D7-A4E0-000874180BB3}) (Version: 12.0.50 - Microsoft) Microsoft Money 2004 System Pack (HKLM\...\{8C64E145-54BA-11D6-91B1-00500462BE80}) (Version: 12.0.80 - Microsoft) Microsoft Office 2000 Disc 2 (HKLM\...\{00040409-78E1-11D2-B60F-006097C998E7}) (Version: 9.00.2720 - Microsoft Corporation) Microsoft Office 2000 Professional (HKLM\...\{00010409-78E1-11D2-B60F-006097C998E7}) (Version: 9.00.2720 - Microsoft Corporation) Microsoft Photo Editor (HKLM\...\Microsoft Photo Editor_is1) (Version: - Microsoft, Inc.) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft User-Mode Driver Framework Feature Pack 1.0 (HKLM\...\Wudf01000) (Version: - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Mozilla Firefox 35.0 (x86 en-US) (HKLM\...\Mozilla Firefox 35.0 (x86 en-US)) (Version: 35.0 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla) MSXML 4.0 SP2 (KB936181) (HKLM\...\{C04E32E0-0416-434D-AFB9-6969D703A9EF}) (Version: 4.20.9848.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MSXML 4.0 SP2 and SOAP Toolkit 3.0 (Version: 1.0.0.0 - Webroot Software, Inc.) Hidden Nero Suite (HKLM\...\NeroMultiInstaller!UninstallKey) (Version: - ) Overland (Version: 1.76.0 - Hewlett-Packard) Hidden overland (Version: 2.1.5 - HP) Hidden Pdf995 (installed by TaxCut) (HKLM\...\Pdf995) (Version: - ) PdfEdit995 (installed by TaxCut) (HKLM\...\PdfEdit995) (Version: - ) PhotoGallery (Version: 5.31.0.158 - Hewlett-Packard) Hidden PrintScreen (Version: 5.31.0.147 - Hewlett-Packard) Hidden QFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden QuickProjects (Version: 5.31.0.147 - Hewlett-Packard) Hidden QuickTime 7 (HKLM\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.) Readme (Version: 5.31.1.27 - Hewlett-Packard) Hidden RealPlayer (HKLM\...\RealPlayer 6.0) (Version: - RealNetworks) Recuva (HKLM\...\Recuva) (Version: 1.52 - Piriform) Redistributed Files (Version: 2.0.46.0 - EarthLink, Inc.) Hidden Scan (Version: 3.1.0.0 - Hewlett-Packard) Hidden SkinsHP1 (Version: 5.31.0.147 - Hewlett-Packard) Hidden SkinsHP2 (Version: 5.31.0.147 - Hewlett-Packard) Hidden Sonic DLA (HKLM\...\{1206EF92-2E83-4859-ACCB-2048C3CB7DA6}) (Version: 4.50 - Sonic Solutions) Sonic RecordNow! (HKLM\...\{9541FED0-327F-4DF0-8B96-EF57EF622F19}) (Version: 6.5.0 - Sonic Solutions) Sonic Update Manager (HKLM\...\{09DA4F91-2A09-4232-AB8C-6BC740096DE3}) (Version: 2.80 - Sonic Solutions) Sound Blaster Live! (HKLM\...\{96E16100-A77F-4B31-B9AD-FFBA040EE1BD}) (Version: - ) TaxCut Basic + Efile 2008 (HKLM\...\{D81FBA6E-5492-4C46-BAE3-3A9242C27210}) (Version: 08.03.7101 - H & R Block) TaxCut Premium 2007 (HKLM\...\{4732D4A0-5A47-44D8-9B84-B3BD4906D30D}) (Version: 07.03.0000 - H & R Block) TotalAccess Core Applications (Version: 2005.2.118.0 - EarthLink, Inc.) Hidden TrayApp (Version: 5.31.0.147 - Hewlett-Packard) Hidden Unload (Version: 3.1.0 - Hewlett-Packard) Hidden VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden VLC media player 1.1.11 (HKLM\...\VLC media player) (Version: 1.1.11 - VideoLAN) WebFldrs XP (Version: 9.50.7523 - Microsoft Corporation) Hidden WebReg (Version: 5.31.0.147 - Hewlett-Packard) Hidden Webroot SecureAnywhere (HKLM\...\WRUNINST) (Version: 9.0.6.18 - Webroot) Windows Genuine Advantage Validation Tool (KB892130) (HKLM\...\KB892130) (Version: - Microsoft Corporation) Windows Genuine Advantage Validation Tool (KB892130) (HKLM\...\WGA) (Version: 1.7.0069.2 - Microsoft Corporation) Windows Internet Explorer 8 (HKLM\...\ie8) (Version: 20090308.140743 - Microsoft Corporation) Windows Media Format 11 runtime (HKLM\...\Windows Media Format Runtime) (Version: - ) Windows Media Player 11 (HKLM\...\Windows Media Player) (Version: - ) Windows XP Service Pack 3 (HKLM\...\Windows XP Service Pack) (Version: 20080414.031525 - Microsoft Corporation) WinRAR archiver (HKLM\...\WinRAR archiver) (Version: - ) Yahoo! Messenger (HKLM\...\Yahoo! Messenger) (Version: - Yahoo! Inc.) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== Restore Points ========================= ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2003-07-16 15:29 - 2011-08-09 06:38 - 00000734 ____A C:\WINDOWS\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) ==================== Shortcuts ============================= (The entries could be listed to be restored or removed.) ==================== Loaded Modules (Whitelisted) ============== 2008-03-29 10:42 - 2008-03-29 10:42 - 00159744 _____ () C:\WINDOWS\system32\mmfinfo.dll 2008-03-29 10:41 - 2008-03-29 10:41 - 00023552 _____ () C:\WINDOWS\system32\mkunicode.dll 2008-11-06 23:34 - 2006-12-03 14:53 - 00126464 _____ () C:\Program Files\WinRAR\rarext.dll 2009-04-04 20:40 - 2009-04-04 20:40 - 00051716 _____ () C:\WINDOWS\system32\pdf995mon.dll 2003-08-11 03:07 - 2003-08-11 03:07 - 00565248 _____ () C:\WINDOWS\System32\hpotscl.dll 2014-01-10 00:26 - 2014-01-10 00:26 - 01861968 _____ () C:\Program Files\DivX\DivX Update\DivXUpdate.exe 2014-01-10 00:28 - 2014-01-10 00:28 - 00100688 _____ () C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll 2004-07-20 18:11 - 2004-07-20 18:11 - 00053248 _____ () C:\Program Files\EarthLink TotalAccess\zlib.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\LMIRescue_87e80eba-8d8b-4821-8b6e-ed336cba6a6a => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\UploadMgr => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRkrn => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRSVC => ""="Service" ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) IE trusted site: HKU\S-1-5-21-583907252-412668190-839522115-1003\...\ebay.com -> hxxp://my.ebay.com IE trusted site: HKU\S-1-5-21-583907252-412668190-839522115-1003\...\ebaydesc.com -> hxxp://vi.vipr.ebaydesc.com IE trusted site: HKU\S-1-5-21-583907252-412668190-839522115-1003\...\rubmw.ru -> hxxp://www.rubmw.ru IE trusted site: HKU\S-1-5-21-583907252-412668190-839522115-1003\...\time.gov -> hxxp://www.time.gov IE trusted site: HKU\S-1-5-21-583907252-412668190-839522115-1003\...\uploaded.net -> hxxp://uploaded.net IE trusted site: HKU\S-1-5-21-583907252-412668190-839522115-1003\...\uploking.com -> hxxp://uploking.com IE trusted site: HKU\S-1-5-21-583907252-412668190-839522115-1003\...\yahoo.com -> hxxp://us.mg1.mail.yahoo.com ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-583907252-412668190-839522115-1003\Control Panel\Desktop\\Wallpaper -> DNS Servers: 192.168.1.254 Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) StandardProfile\AuthorizedApplications: [C:\Program Files\EarthLink TotalAccess\TaskPanl.exe] => Enabled:TaskPanl StandardProfile\AuthorizedApplications: [C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe] => Enabled:Yahoo! Messenger StandardProfile\AuthorizedApplications: [C:\Program Files\Google\Chrome\Application\chrome.exe] => Enabled:Google Chrome StandardProfile\AuthorizedApplications: [C:\Program Files\Mozilla Firefox\firefox.exe] => Enabled:Firefox (C:\Program Files\Mozilla Firefox) StandardProfile\AuthorizedApplications: [C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe] => Enabled:WebKit StandardProfile\AuthorizedApplications: [C:\Documents and Settings\Owner\Local Settings\Application Data\LogMeIn Rescue Applet\LMIR0004.tmp\lmi_rescue.exe] => Enabled:LogMeIn Rescue StandardProfile\AuthorizedApplications: [C:\Documents and Settings\Owner\Local Settings\Application Data\LogMeIn Rescue Applet\LMIR0006.tmp\lmi_rescue.exe] => Enabled:LogMeIn Rescue ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (11/23/2015 09:53:24 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application adwcleaner.exe, version 5.0.2.2, faulting module adwcleaner.exe, version 5.0.2.2, fault address 0x00021540. Processing media-specific event for [adwcleaner.exe!ws!] Error: (11/23/2015 09:53:13 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application adwcleaner.exe, version 5.0.2.2, faulting module adwcleaner.exe, version 5.0.2.2, fault address 0x00021540. Processing media-specific event for [adwcleaner.exe!ws!] Error: (11/23/2015 08:08:09 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Hanging application FRST.exe, version 23.11.2015.0, hang module hungapp, version 0.0.0.0, hang address 0x00000000. Error: (11/23/2015 08:08:08 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Hanging application FRST.exe, version 23.11.2015.0, hang module hungapp, version 0.0.0.0, hang address 0x00000000. Error: (11/23/2015 05:47:29 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Hanging application HRBlock2014.exe, version 2014.2.0.7401, hang module hungapp, version 0.0.0.0, hang address 0x00000000. Error: (11/22/2015 02:43:48 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Hanging application iexplore.exe, version 8.0.6001.18702, hang module hungapp, version 0.0.0.0, hang address 0x00000000. Error: (11/22/2015 02:36:06 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Hanging application iexplore.exe, version 8.0.6001.18702, hang module hungapp, version 0.0.0.0, hang address 0x00000000. Error: (11/20/2015 06:27:28 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Hanging application iexplore.exe, version 8.0.6001.18702, hang module hungapp, version 0.0.0.0, hang address 0x00000000. Error: (11/20/2015 04:28:42 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Hanging application iexplore.exe, version 8.0.6001.18702, hang module hungapp, version 0.0.0.0, hang address 0x00000000. Error: (11/20/2015 04:28:40 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Hanging application iexplore.exe, version 8.0.6001.18702, hang module hungapp, version 0.0.0.0, hang address 0x00000000. System errors: ============= Error: (11/24/2015 03:28:25 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: The System Restore Service service terminated with the following error: %%2 Error: (11/24/2015 03:28:25 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The System Restore Filter Driver service failed to start due to the following error: %%3 Error: (11/24/2015 03:28:24 PM) (Source: SRService) (EventID: 104) (User: ) Description: The System Restore initialization process failed. Error: (11/24/2015 03:28:24 PM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: The following boot-start or system-start driver(s) failed to load: sr Error: (11/24/2015 02:49:14 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: The System Restore Service service terminated with the following error: %%2 Error: (11/24/2015 02:49:14 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The System Restore Filter Driver service failed to start due to the following error: %%3 Error: (11/24/2015 02:49:14 PM) (Source: SRService) (EventID: 104) (User: ) Description: The System Restore initialization process failed. Error: (11/24/2015 02:49:14 PM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: The following boot-start or system-start driver(s) failed to load: sr Error: (11/24/2015 02:38:09 PM) (Source: 0) (EventID: 9) (User: ) Description: \Device\Ide\IdePort0 Error: (11/24/2015 02:04:01 PM) (Source: 0) (EventID: 9) (User: ) Description: \Device\Ide\IdePort0 ==================== Memory info =========================== Processor: Intel(R) Pentium(R) 4 CPU 2.40GHz Percentage of memory in use: 56% Total physical RAM: 765.9 MB Available physical RAM: 333.29 MB Total Virtual: 1877 MB Available Virtual: 1479.5 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:38.25 GB) (Free:12.12 GB) NTFS ==>[drive with boot components (Windows XP)] Drive d: (Elements) (Fixed) (Total:465.73 GB) (Free:188.4 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows XP) (Size: 38.3 GB) (Disk ID: 9DC96E9E) Partition 1: (Not Active) - (Size=31 MB) - (Type=DE) Partition 2: (Active) - (Size=38.2 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows XP) (Size: 465.7 GB) (Disk ID: 0004A183) Partition 1: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS) ==================== End of Addition.txt ============================