[dustypink]

I cant find the extras log to post its not on the desk top

[Advertisements]

I cant find the extras log to post its not on the desk top

That's probably because you didn't check the box beside Use SafeList in the Extra Registry section. I will post new instructions. This time please read them carefully and pay particular attention to number 2 and number 5 of the instructions. This scan will produce an abbreviated OTL.txt log but it will produce the full Extras.txt log. I don't need the OTL.txt log but I do need to see the Extras.txt log. Also, please go back to post #26 and complete Step #2. This is checking the hard drive for errors. I don't see anything in the OTL log but the system keeps throwing hard drive errors and the hard drive check scan you ran shows that there are errors on the hard drive. If chkdsk can fix them that's great, but if it can't fix them it may be that the hard drive is failing....which I believe is the conclusion that RKinner came to in the last topic you posted.
Either way, you need to run the chkdsk program. Remember, it can take hours for it to run to completion. Especially if there are lots of clusters that are bad or going bad on the disk.


Step-1.

OTL Scan

Please re-open on the desktop. To do that:

• Vista /7 users: right click the icon and click Run as Administrator.

Make sure all other windows are closed .

• You will see a console like the one below:
  
  
  
• At the top of the console click the greyed out None button<---Very Important
• At the top of the console, click the box beside Include 64bit Scans
• Make sure the Output box at the top is set to Minimal Output.
• In the Extra Registry section click the circle beside Use Safelist.<---Very Important
• Click the button. Do not change any settings unless otherwise told to do so.
• Let the scan run uninterrupted.
• When the scan completes, it will open two notepad windows, OTL.Txt will open on the desktop and Extras.Txt will be minimized on the TaskBar. These are saved in the same location as OTL.
• I Do Not need to see the OTL.txt file, but I need the Extras.txt file, so please copy the contents of this file and paste it into your reply. To do that:
• On the .txt file Menu Bar click Edit then click Select All. This will highlight the contents of the file. Then click Copy.
• Right-click inside the forum post window then click Paste. This will paste the contents of the .txt file in the in the post window.

Step-2.

Complete Step 2 from post #26.


Step-3.

Things For Your Next Post:
Please post the logs in the order requested. Do Not attach the logs unless I request it.
1. The Extras.txt log
2. Let me know what chkdsk found.

[godawgs]

I cant find the extras log to post its not on the desk top

That's probably because you didn't check the box beside Use SafeList in the Extra Registry section. I will post new instructions. This time please read them carefully and pay particular attention to number 2 and number 5 of the instructions. This scan will produce an abbreviated OTL.txt log but it will produce the full Extras.txt log. I don't need the OTL.txt log but I do need to see the Extras.txt log. Also, please go back to post #26 and complete Step #2. This is checking the hard drive for errors. I don't see anything in the OTL log but the system keeps throwing hard drive errors and the hard drive check scan you ran shows that there are errors on the hard drive. If chkdsk can fix them that's great, but if it can't fix them it may be that the hard drive is failing....which I believe is the conclusion that RKinner came to in the last topic you posted.
Either way, you need to run the chkdsk program. Remember, it can take hours for it to run to completion. Especially if there are lots of clusters that are bad or going bad on the disk.


Step-1.

OTL Scan

Please re-open on the desktop. To do that:

• Vista /7 users: right click the icon and click Run as Administrator.

Make sure all other windows are closed .

• You will see a console like the one below:
  
  
  
• At the top of the console click the greyed out None button<---Very Important
• At the top of the console, click the box beside Include 64bit Scans
• Make sure the Output box at the top is set to Minimal Output.
• In the Extra Registry section click the circle beside Use Safelist.<---Very Important
• Click the button. Do not change any settings unless otherwise told to do so.
• Let the scan run uninterrupted.
• When the scan completes, it will open two notepad windows, OTL.Txt will open on the desktop and Extras.Txt will be minimized on the TaskBar. These are saved in the same location as OTL.
• I Do Not need to see the OTL.txt file, but I need the Extras.txt file, so please copy the contents of this file and paste it into your reply. To do that:
• On the .txt file Menu Bar click Edit then click Select All. This will highlight the contents of the file. Then click Copy.
• Right-click inside the forum post window then click Paste. This will paste the contents of the .txt file in the in the post window.

Step-2.

Complete Step 2 from post #26.


Step-3.

Things For Your Next Post:
Please post the logs in the order requested. Do Not attach the logs unless I request it.
1. The Extras.txt log
2. Let me know what chkdsk found.

[dustypink]

ok I will have to do the chck disk thing later I did it over night before followed everything you said sorry

[dustypink]

OTL Extras logfile created on: 3/26/2013 7:09:23 PM - Run 10
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\amanda\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16521)
Locale: 00000409 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy

2.75 Gb Total Physical Memory | 1.27 Gb Available Physical Memory | 46.34% Memory free
5.49 Gb Paging File | 3.36 Gb Available in Paging File | 61.19% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 232.73 Gb Total Space | 28.27 Gb Free Space | 12.15% Space Free | Partition Type: NTFS
Drive D: | 232.64 Gb Total Space | 224.29 Gb Free Space | 96.41% Space Free | Partition Type: NTFS

Computer Name: AMANDA-TOSH | User Name: amanda | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{04124E8D-7ED9-4AED-8DDE-9404D3EF914B}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{268095CC-C1ED-4A91-9A82-1A84736370B1}" = rport=139 | protocol=6 | dir=out | app=system |
"{32347DFE-E15E-4D0F-A7A1-5BC5C00F5409}" = rport=138 | protocol=17 | dir=out | app=system |
"{3452F995-C9F7-462B-B7DF-77E9822751A8}" = lport=10255 | protocol=6 | dir=in | name=tmc_plugin_port |
"{350EB6EA-E162-4B5D-89AF-67627091E2AF}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{47CC02FB-CF7A-4F34-AB24-460CF243BF63}" = lport=139 | protocol=6 | dir=in | app=system |
"{54940AA8-7181-4F8F-B7AD-65A28704487B}" = lport=137 | protocol=17 | dir=in | app=system |
"{549AD882-9B5D-4E3A-B5F7-6887F8B55FED}" = lport=2869 | protocol=6 | dir=in | app=system |
"{5522F560-BE5D-4A2F-9517-1864B8CA342B}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{5B250C99-53E2-40B9-81FD-82DEAFA50708}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{69F1270C-3F6A-44DA-979C-A3B2FBAFDB5A}" = lport=10243 | protocol=6 | dir=in | app=system |
"{69F63E12-DD88-4B80-A33C-330A25D60D4D}" = lport=445 | protocol=6 | dir=in | app=system |
"{748B13A3-4DE1-418F-A0E6-C431F459815A}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{74E85AFB-387F-4D30-81C2-0C1F89AEBA4B}" = rport=445 | protocol=6 | dir=out | app=system |
"{8499F011-6D53-4F31-B008-D4ECFF4A0AA0}" = lport=2869 | protocol=6 | dir=in | app=system |
"{940A4371-B41D-4BEB-8D00-647885F639C8}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{9E22D561-DDEF-45F2-9F7A-6EFE0E1E1B2F}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{A3E22A72-47CA-4AD4-83C9-EE02621D2ABC}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | [email protected],-28539 |
"{A8D8C106-7C24-48E3-A556-92E85225373A}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{B9F3DDCD-CF31-4C3D-95E9-37EB46D7692F}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{DE31DA64-0D59-4B74-A0AA-2C1CAE94ACE1}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{E6AECC94-9FCC-439B-9B02-CAF80E629735}" = rport=10243 | protocol=6 | dir=out | app=system |
"{F7568129-6153-4CA1-929D-D02513ED2942}" = lport=138 | protocol=17 | dir=in | app=system |
"{F7AA4D2A-CC4B-4B91-989C-8F9122F4B57B}" = rport=137 | protocol=17 | dir=out | app=system |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{07C259EA-90AC-424F-94B4-6CD979009CCC}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{0F4DB13D-D1F9-474A-8E70-5F8CB4D81AAF}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2012\avgmfapx.exe |
"{1EC39ADC-60E5-4F5F-956A-55ABE8525708}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{2766EDF3-0D4B-4B9F-8DA3-70C8F655CB1A}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{2994178B-37C7-4FA0-9063-21A8C94F65AE}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2012\avgmfapx.exe |
"{2B2DCE84-D33A-4C99-B400-1BDDF6527DAD}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{460C5695-FEE5-4B7B-B30D-C4F583D159CA}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe |
"{493EAAE5-9B11-4B70-82ED-2A2F00AD1F03}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{519031A7-E9A7-4CFB-AE41-07A4AFA63CA9}" = dir=in | app=c:\program files (x86)\windows live\sync\windowslivesync.exe |
"{58D8EAB3-C20F-4E23-B7DB-D87F1B345C7D}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{69D2C275-D5D1-40EB-94A0-64AA1AA0BE78}" = protocol=6 | dir=out | app=system |
"{6D7ADCFB-6078-4CA3-B8D2-24DABD87299B}" = protocol=1 | dir=out | [email protected],-28544 |
"{7244D53E-F845-421D-BF46-095D78C87A72}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{79DD792A-84A3-4029-A917-98C8469A25E3}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |
"{85883665-384B-4FEF-A0D7-BC5E6A5C8D05}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{8FDE57AD-4EBE-46D0-9ADF-92816BF44922}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{A2F4E7E5-2C16-4B74-B097-339C22F6572F}" = protocol=58 | dir=in | [email protected],-28545 |
"{A77E5E83-5622-4ECE-93BA-229DADC6DDA3}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{C9B863D2-663F-45CC-8D87-88CEDE5EEBDB}" = protocol=58 | dir=out | [email protected],-28546 |
"{CA21B8DD-45B3-460B-B236-E30DDB72F933}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{D2A043FF-A9FC-4F04-9D76-94D8039E394C}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{ECA12887-485E-42E3-954F-5FE9EB400708}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{F079BF3E-399C-4F21-A3DB-EA1BA105C330}" = dir=in | app=c:\program files (x86)\windows live\messenger\wlcsdk.exe |
"{F4E9ED46-9872-431C-8742-4AD25AE97C5B}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{F7287DEC-26A0-4770-9778-C7104E6CE0DC}" = protocol=1 | dir=in | [email protected],-28543 |
"{FE9EF596-A5A8-4BFA-BE9A-1CE9E2449153}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"TCP Query User{463FABB8-23DD-43AA-AC4E-2F5C8E2FE472}C:\program files (x86)\ares\ares.exe" = protocol=6 | dir=in | app=c:\program files (x86)\ares\ares.exe |
"TCP Query User{5BF4E729-ACEC-4E9C-99F8-C2807CB60FF5}C:\users\amanda\appdata\roaming\spotify\spotify.exe" = protocol=6 | dir=in | app=c:\users\amanda\appdata\roaming\spotify\spotify.exe |
"TCP Query User{81CEA7BB-6CFF-4E5E-B7E9-743BC79D3CBA}C:\program files (x86)\google\google earth\client\googleearth.exe" = protocol=6 | dir=in | app=c:\program files (x86)\google\google earth\client\googleearth.exe |
"TCP Query User{94720F2E-1593-46F1-88B4-14970699CF72}C:\users\amanda\appdata\local\microsoft\windows\temporary internet files\content.ie5\htl92x0o\utorrent.exe" = protocol=6 | dir=in | app=c:\users\amanda\appdata\local\microsoft\windows\temporary internet files\content.ie5\htl92x0o\utorrent.exe |
"TCP Query User{E520EA93-0BCC-4AF1-8011-BBFE368CC1AD}C:\users\amanda\appdata\roaming\spotify\spotify.exe" = protocol=6 | dir=in | app=c:\users\amanda\appdata\roaming\spotify\spotify.exe |
"UDP Query User{17A37679-4B24-4464-A672-3443FE1072E0}C:\users\amanda\appdata\local\microsoft\windows\temporary internet files\content.ie5\htl92x0o\utorrent.exe" = protocol=17 | dir=in | app=c:\users\amanda\appdata\local\microsoft\windows\temporary internet files\content.ie5\htl92x0o\utorrent.exe |
"UDP Query User{2595CA4F-ED18-4F2F-8507-DAC4685BFD82}C:\users\amanda\appdata\roaming\spotify\spotify.exe" = protocol=17 | dir=in | app=c:\users\amanda\appdata\roaming\spotify\spotify.exe |
"UDP Query User{2CA87308-CD9B-4027-827E-EE03EA8232D2}C:\program files (x86)\ares\ares.exe" = protocol=17 | dir=in | app=c:\program files (x86)\ares\ares.exe |
"UDP Query User{48232A43-EAE5-4D08-87F2-F63A688E003B}C:\program files (x86)\google\google earth\client\googleearth.exe" = protocol=17 | dir=in | app=c:\program files (x86)\google\google earth\client\googleearth.exe |
"UDP Query User{6404BB8F-A5D5-4B4D-96BB-216EF9272294}C:\users\amanda\appdata\roaming\spotify\spotify.exe" = protocol=17 | dir=in | app=c:\users\amanda\appdata\roaming\spotify\spotify.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{066CFFF8-12BF-4390-A673-75F95EFF188E}" = TOSHIBA Value Added Package
"{21E2A283-1416-AF26-6DA1-92FDE02224EB}" = ccc-utility64
"{26A24AE4-039D-4CA4-87B4-2F86417000FF}" = Java™ 7 (64-bit)
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{4BC310C4-B898-46E2-B5FB-B85A30AA7142}" = iCloud
"{5792CD64-61B4-C448-0D22-3C51DD73AB2A}" = ATI Catalyst Install Manager
"{5DA0E02F-970B-424B-BF41-513A5018E4C0}" = TOSHIBA Disc Creator
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{7446FE8D-C1F9-4D42-AAAE-5DBCE58605A6}" = Apple Mobile Device Support
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{8338783A-0968-3B85-AFC7-BAAE0A63DC50}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90140000-006D-0409-1000-0000000FF1CE}" = Microsoft Office Click-to-Run 2010
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}" = TOSHIBA PC Health Monitor
"{A0E99122-25C1-4CA4-9063-499A2A814EB6}" = TOSHIBA ReelTime
"{B3FF1CD9-B2F0-4D71-BB55-5F580401C48E}" = TOSHIBA eco Utility
"{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}" = TOSHIBA Recovery Media Creator
"{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}" = PlayReady PC Runtime amd64
"{D4322448-B6AF-4316-B859-D8A0E84DCB38}" = TOSHIBA HDD/SSD Alert
"{E65C7D8E-186D-484B-BEA8-DEF0331CE600}" = TRORMCLauncher
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{F67FA545-D8E5-4209-86B1-AEE045D1003F}" = TOSHIBA Face Recognition
"3G - Connect - 3G - Connect_is1" = 3G - Connect
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX 64-bit
"CCleaner" = CCleaner
"CNXT_AUDIO_HDA" = Conexant HD Audio
"CNXT_AUDIO_HDA_HDMI" = Conexant Audio Driver For AMD HDMI Codec
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"ZTEWireless-101_is1" = Reliance Netconnect+

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{02950E10-1AA3-DF62-FED5-42CBD4ADC5C1}" = CCC Help Dutch
"{0420F95C-11FF-4E02-B967-6CC22B188F9F}" = Nero BackItUp
"{066CFFF8-12BF-4390-A673-75F95EFF188E}" = TOSHIBA Value Added Package
"{073B89C3-BA88-41B5-965F-B35A88EAE838}" = TOSHIBA Supervisor Password
"{0D8E81A5-B61C-4360-910C-A738FD1B220A}" = Toshiba TEMPRO
"{0E64B098-8018-4256-BA23-C316A43AD9B0}" = QuickTime
"{118F5964-DA03-7B46-BDEA-7C3FA203D293}" = CCC Help Spanish
"{178832DE-9DE0-4C87-9F82-9315A9B03985}" = Windows Live Writer
"{1CF51B76-7485-410C-D06D-23D1060974D3}" = Catalyst Control Center Core Implementation
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{20400DBD-E6DB-45B8-9B6B-1DD7033818EC}" = Nero InfoTool Help
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
"{21759FAC-AE5F-F171-EB4C-D2FBF66EDD04}" = CCC Help Czech
"{219B4856-468A-F0BB-8249-E630AD4E86C2}" = ccc-core-static
"{2290A680-4083-410A-ADCC-7092C67FC052}" = TOSHIBA Online Product Information
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2348B586-C9AE-46CE-936C-A68E9426E214}" = Nero StartSmart Help
"{23EA31D7-28CD-F7B3-024C-6EB784F1BC79}" = CCC Help Russian
"{26A24AE4-039D-4CA4-87B4-2F83217010FF}" = Java 7 Update 10
"{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App" = Update Installer for WildTangent Games App
"{3108C217-BE83-42E4-AE9E-A56A2A92E549}" = Atheros Communications Inc.® AR81Family Gigabit/Fast Ethernet Driver
"{33CF58F5-48D8-4575-83D6-96F574E4D83A}" = Nero DriveSpeed
"{3669F19D-D7C2-3240-C4EC-A57DECC124FC}" = CCC Help Japanese
"{38A0161D-7CD3-51AD-0ACB-F46DD34D2FF6}" = CCC Help Greek
"{39670BCD-6300-21D8-78A4-ECD68D0C4D95}" = CCC Help Chinese Standard
"{397516AE-7DFE-4F90-84E0-BD616D559434}" = Nero BurnRights
"{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform
"{3D5044A5-97B8-45C0-B956-BB2376569188}" = Windows Live Movie Maker
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
"{46A46830-50AA-3326-7A57-72BB03E6B3EC}" = CCC Help Hungarian
"{46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}" = Adobe AIR
"{47984ADB-54E9-BE8F-E39F-8B1FAAD4B192}" = CCC Help Polish
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.1
"{51E2F9B3-A972-4F58-B4EF-4D9676D9F5D1}" = Nero RescueAgent
"{52BE22C7-5CA2-4150-8948-88C9DD7F6B56}" = QuickShare
"{5570C266-C606-85BC-6E23-C858566E02DB}" = CCC Help Swedish
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{595A3116-40BB-4E0F-A2E8-D7951DA56270}" = NeroExpress
"{5E620377-939F-3E6B-F328-4A69D9CA0D1B}" = CCC Help French
"{5E6F6CF3-BACC-4144-868C-E14622C658F3}" = TOSHIBA Web Camera Application
"{607BE7BF-7C28-4ADB-A4A0-385962B901C3}" = TOSHIBA ConfigFree
"{63EC2120-1742-4625-AA47-C6A8AEC9C64C}" = Apple Application Support
"{6412CECE-8172-4BE5-935B-6CECACD2CA87}" = Windows Live Mail
"{65F5F454-0029-045D-82ED-126F650B5C8F}" = Catalyst Control Center Graphics Previews Vista
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6C3CF7AC-5AB0-42D9-93C0-68166A57AFB6}" = Nero Express
"{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-toshiba" = WildTangent Games App (Toshiba Games)
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{773970F1-5EBA-4474-ADEE-1EA3B0A59492}" = TOSHIBA Recovery Media Creator Reminder
"{7748AC8C-18E3-43BB-959B-088FAEA16FB2}" = Nero StartSmart
"{7829DB6F-A066-4E40-8912-CB07887C20BB}" = Nero BurnRights
"{81128EE8-8EAD-4DB0-85C6-17C2CE50FF71}" = Windows Live Essentials
"{83202942-84B3-4C50-8622-B8C0AA2D2885}" = Nero Express Help
"{836775DC-DC27-BC0C-7770-68E2591F6CC6}" = CCC Help Norwegian
"{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}" = Windows Live Sync
"{86236CB1-023D-82B2-A706-74ECFFA91A8E}" = Catalyst Control Center Graphics Previews Common
"{869200DB-287A-4DC0-B02B-2B6787FBCD4C}" = Nero DiscSpeed
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{8B4BD0EF-A058-3F42-0AD8-763267A735D0}" = Catalyst Control Center Graphics Full New
"{8BD785CF-30C7-4182-B250-0D5FCE78D4DD}" = Catalyst Control Center - Branding
"{8BE504E9-0677-87AC-07D2-1A1428E17A92}" = Catalyst Control Center InstallProxy
"{8E9CEA3B-EBD1-439C-A01D-830CB39613C6}" = TOSHIBA Hardware Setup
"{90140011-0066-0409-0000-0000000FF1CE}" = Microsoft Office Starter 2010 - English
"{90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}" = Toshiba Manuals
"{91D25D3C-A6D8-78D4-CDE7-F70B93389A03}" = CCC Help Italian
"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader
"{983CD6FE-8320-4B80-A8F6-0D0366E0AA22}" = TOSHIBA Media Controller
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9CD5AC28-04E5-07A5-100D-953D2B3A8747}" = Catalyst Control Center Graphics Full Existing
"{9D3D8C60-A55F-4fed-B2B9-173001290E16}" = Realtek WLAN Driver
"{A85FD55B-891B-4314-97A5-EA96C0BD80B5}" = Windows Live Messenger
"{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC6569FA-6919-442A-8552-073BE69E247A}" = TOSHIBA Service Station
"{AD8D84C3-D43A-776D-E4A8-2A4433BCBD32}" = CCC Help Korean
"{B0402CE4-783A-773C-239B-FF45BDFB400E}" = Catalyst Control Center Localization All
"{B2EC4A38-B545-4A00-8214-13FE0E915E6D}" = Advertising Center
"{B32B60B9-C31B-3193-257A-2381305A0851}" = CCC Help German
"{B3B66630-DA7C-BD66-DFA4-F37AC82873EE}" = CCC Help Danish
"{B3FF1CD9-B2F0-4D71-BB55-5F580401C48E}" = TOSHIBA eco Utility
"{B8615768-6D66-5E53-C4E1-6F7EC8D9BFFE}" = CCC Help English
"{BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A}" = Nero ControlCenter
"{c076d290-bb22-4f6a-a9a5-e9405bc611a1}" = Nero 9 Essentials
"{C289841E-5B5F-0198-F3FF-CB361D007DA3}" = CCC Help Thai
"{C6579A65-9CAE-4B31-8B6B-3306E0630A66}" = Apple Software Update
"{C7BC4EBB-D88F-019D-8ED0-F42F89096B18}" = CCC Help Turkish
"{C81A2FE0-3574-00A9-CED4-BDAA334CBE8E}" = Nero Online Upgrade
"{CC019E3F-59D2-4486-8D4B-878105B62A71}" = Nero DiscSpeed Help
"{D10D079D-EFDA-9601-98F8-F935A2A411A0}" = CCC Help Chinese Traditional
"{D4322448-B6AF-4316-B859-D8A0E84DCB38}" = TOSHIBA HDD/SSD Alert
"{D4C9692E-4EFA-4DA0-8B7F-9439466D9E31}" = Full Tilt Poker
"{D6C75F0B-3BC1-4FC9-B8C5-3F7E8ED059CA}" = Windows Live Photo Gallery
"{DFD723B7-1762-73EC-32BC-A7D9E838808D}" = Catalyst Control Center Graphics Light
"{E08CC458-41FB-4BB5-9B08-2C83DB55A5B9}" = Nero BackItUp and Burn
"{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update
"{E5C7D048-F9B4-4219-B323-8BDB01A2563D}" = Nero DriveSpeed Help
"{E819AA87-4215-D35A-6872-BF97C32A9DB3}" = CCC Help Finnish
"{E8A80433-302B-4FF1-815D-FCC8EAC482FF}" = Nero Installer
"{F082CB11-4794-4259-99A1-D91BA762AD15}" = TOSHIBA TEMPRO
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F26FDF57-483E-42C8-A9C9-EEE1EDB256E0}" = TOSHIBA Media Controller Plug-in
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{F4041DCE-3FE1-4E18-8A9E-9DE65231EE36}" = Nero ControlCenter
"{F6BD194C-4190-4D73-B1B1-C48C99921BFE}" = Windows Live Call
"{F6BDD7C5-89ED-4569-9318-469AA9732572}" = Nero BurnRights Help
"{FBCDFD61-7DCF-4E71-9226-873BA0053139}" = Nero InfoTool
"{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}" = Visual Studio 2008 x64 Redistributables
"{FD1F254C-48B2-A188-0127-03855BA15D16}" = CCC Help Portuguese
"Adobe AIR" = Adobe AIR
"avast" = avast! Free Antivirus
"DiskCheckup_is1" = DiskCheckup v3.1
"ESET Online Scanner" = ESET Online Scanner v3
"FileHippo.com" = FileHippo.com Update Checker
"GentingPoker" = Genting Poker
"Google Chrome" = Google Chrome
"InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}" = TOSHIBA Value Added Package
"InstallShield_{773970F1-5EBA-4474-ADEE-1EA3B0A59492}" = TOSHIBA Recovery Media Creator Reminder
"InstallShield_{A0E99122-25C1-4CA4-9063-499A2A814EB6}" = TOSHIBA ReelTime
"InstallShield_{B3FF1CD9-B2F0-4D71-BB55-5F580401C48E}" = TOSHIBA eco Utility
"InstallShield_{D4322448-B6AF-4316-B859-D8A0E84DCB38}" = TOSHIBA HDD/SSD Alert
"InstallShield_{E65C7D8E-186D-484B-BEA8-DEF0331CE600}" = TRORMCLauncher
"InstallShield_{F67FA545-D8E5-4209-86B1-AEE045D1003F}" = TOSHIBA Face Recognition
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.65.1.1000
"Office14.Click2Run" = Microsoft Office Click-to-Run 2010
"PokerStars" = PokerStars
"SpeedFan" = SpeedFan (remove only)
"UltraDefrag" = Ultra Defragmenter
"VLC media player" = VLC media player 2.0.1
"WildTangent toshiba Master Uninstall" = WildTangent Games
"WinLiveSuite_Wave3" = Windows Live Essentials
"WT083877" = Chuzzle Deluxe
"WT083890" = Zuma Deluxe
"WT083910" = Jewel Quest II
"WT083916" = Diner Dash 2 Restaurant Rescue
"WT083925" = Plants vs. Zombies
"WT083929" = Bejeweled 2 Deluxe
"WT083945" = FATE
"WT083958" = Penguins!
"WT083959" = Polar Bowler
"WTA-853bd576-61c9-4125-87d9-9227a3b956a0" = Zuma's Revenge
"WTA-9492261f-5bba-4954-9203-0d1f308a1ac9" = Gem Slider Deluxe
"WTA-ac206827-a5dc-467b-8ab0-e42d62a8548d" = Bejeweled 3
"WTA-d8cdb4d0-3d23-4acf-ab31-8ea7731e4381" = Super Collapse Puzzle Gallery

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
"Spotify" = Spotify

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 2/15/2013 1:26:02 PM | Computer Name = amanda-TOSH | Source = RasClient | ID = 20227
Description =

Error - 2/15/2013 1:30:11 PM | Computer Name = amanda-TOSH | Source = RasClient | ID = 20227
Description =

Error - 2/15/2013 1:30:22 PM | Computer Name = amanda-TOSH | Source = RasClient | ID = 20227
Description =

Error - 2/15/2013 1:30:36 PM | Computer Name = amanda-TOSH | Source = RasClient | ID = 20227
Description =

Error - 2/15/2013 1:33:08 PM | Computer Name = amanda-TOSH | Source = RasClient | ID = 20227
Description =

Error - 2/15/2013 1:34:27 PM | Computer Name = amanda-TOSH | Source = RasClient | ID = 20227
Description =

Error - 2/15/2013 1:34:33 PM | Computer Name = amanda-TOSH | Source = RasClient | ID = 20227
Description =

Error - 2/15/2013 1:41:50 PM | Computer Name = amanda-TOSH | Source = RasClient | ID = 20227
Description =

Error - 2/16/2013 12:01:06 AM | Computer Name = amanda-TOSH | Source = RasClient | ID = 20227
Description =

Error - 2/16/2013 12:01:27 AM | Computer Name = amanda-TOSH | Source = RasClient | ID = 20227
Description =

Error - 2/16/2013 12:02:57 AM | Computer Name = amanda-TOSH | Source = RasClient | ID = 20227
Description =

[ System Events ]
Error - 3/23/2013 3:19:11 PM | Computer Name = amanda-TOSH | Source = atapi | ID = 262155
Description = The driver detected a controller error on \Device\Ide\IdePort0.

Error - 3/23/2013 3:19:11 PM | Computer Name = amanda-TOSH | Source = atapi | ID = 262155
Description = The driver detected a controller error on \Device\Ide\IdePort0.

Error - 3/23/2013 3:23:10 PM | Computer Name = amanda-TOSH | Source = volsnap | ID = 393230
Description = The shadow copies of volume C: were aborted because of an IO failure
on volume C:.

Error - 3/25/2013 10:39:15 PM | Computer Name = amanda-TOSH | Source = atapi | ID = 262155
Description = The driver detected a controller error on \Device\Ide\IdePort0.

Error - 3/25/2013 10:39:15 PM | Computer Name = amanda-TOSH | Source = atapi | ID = 262155
Description = The driver detected a controller error on \Device\Ide\IdePort0.

Error - 3/25/2013 10:39:52 PM | Computer Name = amanda-TOSH | Source = volsnap | ID = 393230
Description = The shadow copies of volume C: were aborted because of an IO failure
on volume C:.

Error - 3/25/2013 10:45:05 PM | Computer Name = amanda-TOSH | Source = atapi | ID = 262155
Description = The driver detected a controller error on \Device\Ide\IdePort0.

Error - 3/25/2013 10:45:05 PM | Computer Name = amanda-TOSH | Source = atapi | ID = 262155
Description = The driver detected a controller error on \Device\Ide\IdePort0.

Error - 3/25/2013 10:45:05 PM | Computer Name = amanda-TOSH | Source = atapi | ID = 262155
Description = The driver detected a controller error on \Device\Ide\IdePort0.

Error - 3/25/2013 10:45:43 PM | Computer Name = amanda-TOSH | Source = volsnap | ID = 393230
Description = The shadow copies of volume C: were aborted because of an IO failure
on volume C:.


< End of report >

[dustypink]

I ran the check disk thing last night it ran for prob 2 hours, this morning I turned on the lap top and I cant find anything that tells me what that found. Do you want me to run the OTL again?

[godawgs]

Did chkdsk complete? I ask because you said

...this morning I turned on the lap top ...

So did chkdsk complete before the computer was turned off?

[dustypink]

Idont know as I set it to run while I am asleep I am presuming it has .

[godawgs]

OK, let's see if we can get the chkdsk log.

Chkdsk Log

Windows Vista / 7

• Click the Start Orb. In the Start Search box type eventvwr.msc and press the Enter key.
• Click (Continue) on the UAC screen. The Computer Management window will come up.
• On the left side of the window click the arrow beside Event Viewer and click Windows Logs
• Click Application. The Application logs will appear in the center window.
• The chkdsk log should be the first entry, or near the top. The Source column will have an entry of Wininit.
  If it is not the first log:
  • Click on View, and then on Sort by > Date and Time.
  • This should place the chkdsk log at or near the top of the list.
• Click on the entry once
• Now right-click on the entry and choose Properties.
• In the window that pops-up, click on (this will copy the log).
• Open a notepad file.
• Right click inside the notepad window and click Paste. This will put the contents of the chkdsk log in a text file.
• Give the file a name like chkdsklog and save it to the desktop.
• Cpoy and Paste the chkdsklog.txt file in your next reply.

Post the log in your next Reply to this topic.

[dustypink]

no sources say winninit

[godawgs]

I believe there would be a log if it ran. You said above that "this morning I turned on the laptop and I cant find anything that tells me what that found."
Can you walk me through that? If you left the laptop running during the night for chkdsk to run how did it get turned off?

[dustypink]

I am presuming it turned itself off. I will do it again now if you want while I am awake

[godawgs]

Sorry for the delay. I've been a bit under the weather. At some point we are gonna need to make sure that chkdsk completed.
Let's run the system file checker (SFC) and see if any critical system files are missing. Then re-run chkdsk. Since the previous runs haven't produced any logs you are probably gonna need to run it when you are awake and can watch what is happening.

Step-1.

Delete Old SFC Log and run SFC

Windows Vista/7

• Open an elevated command prompt. To do that:
  • Click Start, click on All Programs and Accessories, then right click on Command Prompt and click on Run as administrator. (See screenshot below)
  
  
  
• A command window will open like the image below:
  
  
  
  
• Type the following and press ENTER after each line:
  

  cd  \windows\Logs\cbs
  
  copy  cbs.log  cbs.old
  
  del  cbs.log
  
  

  
  Back at the blinking cursor:
  
• Type or copy and paste the following command and press Enter:

  sfc /scannow

  
  
  The sfc /scannow command scans all protected system files and replaces incorrect versions with correct Microsoft versions. Note: This may take awhile to finish.
• Write down the results of the scan so you can post them in your next reply.
• Type exit and press the ENTER key to close the command window.

Step-2.

Clear Event Logs

Vista/7/8

• Click the Start Orb
• Right click on Computer and click on Manage
• Click (Continue) on the UAC screen. The Computer Management window will come up.
  
  
  
• On the left side of the window click the arrow beside Event Viewer
• Click the arrow beside Windows Logs
• Right click on Application and click Clear Log (No, we don't want to save the old logs.)
• Right click on System and click Clear Log (No, we don't want to save the old logs.)
• Close the Computer Management window and Reboot.

Step-3.

Run the Disc Checker

NOTE: Before running the disk checker to repair a volume, you must do the following:

• Be prepared to let the process complete.
  • If you check either or both of the boxes on the Check Disk window...
  • Automatically fix file system errors.
  • Scan for and attempt recovery of bad sectors
  ...on a large volume (for example, 450 GB) or on a volume with a very large number of files (in the millions), Chkdsk can take a long time to complete.
  NOTE: My record so far was a 450GB hard drive that took 20 hours for Chdsk to complete. When it gets to Stage 4 (Verifying file data) it may stay on the same file number for hours. Chkdsk is still running even though it looks like it has quit responding and stalled. Just let it run.
• The volume is not available during this time because Chkdsk does not relinquish control until it is done. If a volume is being checked during the startup process, the computer is not available until the disk checking process is complete.
• The disk checker does not include parameters that let you cancel the process.

The image below is from a Vista machine but the screens look similar and operate the same in all versions of Windows.

• On the desktop click the Computer icon
• Right click your main drive (I am on C:) and select Properties
• Select the Tools tab
• Select Error Checking
• Click Check Now and OK any UAC prompts.
• Place a tick in both boxes in the Check Disk (OS) window:
  • Automatically fix file system errors.
  • Scan for and attempt recovery of bad sectors
• Press Start
  
  
  
  Note: If one or more of the files on the hard disk are open, you will receive the following message:
  

  Chkdsk cannot run because the volume is in use by another process. Would you like to schedule this volume to be checked the next time the system restarts? (Y/N)

• Type Y, and then press ENTER to schedule the disk check, and then restart, not reboot, your computer to start the disk check.
  To restart the computer:
  • Shutdown the computer
  • Re-start the computer
  • When your computer turns on, you will see a black screen with white lettering, this is chkdsk running.
  • Let chkdsk run through its 5 Stages. When it is finished, your computer will boot to the desktop.
  • You will get a warning that it needs to reboot to continue
  • Allow it to do so

Step-4.

Things For Your Next Post:
Please post the logs in the order requested. Do Not attach the logs unless I request it.
1. Let me know what SFC found
2. Let me know what chkdsk found. If you missed it, I have cleared all of the old Event Viewer logs so go back to post #38 and see if you can find the chkdsk log now.

[dustypink]

ok well I cant do this till wed evening then if I have to stay awake.

[dustypink]

step one
windows resource protection found corrupt files but was unable to fix some of them
Details are in the CBS.Log windir\logs\cbs\cbs

Edited by dustypink, 01 April 2013 - 01:37 PM.

[godawgs]

Get the CBS Log

• Open an elevated command prompt. To do that:
  • Click on All Programs and Accessories, then right click on Command Prompt and click on Run as administrator. (See screenshot below)
  
  
• Type or copy and paste the following command, and then press ENTER:
  

  findstr /c:"[SR]" %windir%\Logs\CBS\CBS.log >%userprofile%\Desktop\sfcdetails.txt

A file named sfcdetails.txt will now be on the desktop. Copy and Paste the contents of this file in your next reply.