Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

computer doesn't shutdown cleanly [Solved]

Started by annmeris , Jan 16 2015 11:00 PM
corupt member files references AMD

  • This topic is locked This topic is locked

#76
BrianDrab
Posted 27 January 2015 - 07:24 AM

BrianDrab

    Trusted Helper

  • Malware Removal
  • 3,591 posts

Thank you. I see some potential issues. Please run the following.

 

Step#1 - FRST Scan
1. Please download Farbar Recovery Scan Tool and save it to your Desktop.
    Note: You need to run the 64-bit Version so please ensure you download that one.
2. Right click to run as administrator. When the tool opens click Yes to disclaimer.
3. Please ensure you place a check mark in the Addition.txt check box at the bottom of the form before running (if not already).
4. Press Scan button.
5. It will produce a log called FRST.txt in the same directory the tool is run from (which should now be the desktop)
6. Please copy and paste log back here.
7. Another log (Addition.txt - also located in the same directory as FRST64.exe) will be generated Please also paste that along with the FRST.txt into your reply.


  • 0

Advertisements

#77
annmeris
Posted 27 January 2015 - 02:53 PM

annmeris

    Member

  • Topic Starter
  • Member
  • PipPip
  • 71 posts
Couldn't just post too large, I attached it.
Thanks..Ann

Attached Files


  • 0

#78
BrianDrab
Posted 27 January 2015 - 04:11 PM

BrianDrab

    Trusted Helper

  • Malware Removal
  • 3,591 posts

Those zip files appear to be empty. Can you post the files (unzipped) to a service such as https://www.sendspace.com/ and then just post the link to the file here. Let me know if you need assistance. Thanks.


  • 0

#79
annmeris
Posted 27 January 2015 - 06:57 PM

annmeris

    Member

  • Topic Starter
  • Member
  • PipPip
  • 71 posts
http://www.sendspace...YMdJ4RJVHqDY73w
  • 0

#80
BrianDrab
Posted 27 January 2015 - 07:24 PM

BrianDrab

    Trusted Helper

  • Malware Removal
  • 3,591 posts

Thanks, got it. Please do the following.

 

Step#1 - FRST Fix
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
1. Download attached file and save it to the Desktop. Attached File  fixlist.txt   3.33KB   197 downloads
Note. It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work (in this case...the desktop).
2. Run FRST64 by Right-Clicking on the file and choosing Run as administrator.
3. Press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
4. When finished FRST64 will generate a log on the Desktop (Fixlog.txt). Please post the contents of it in your reply.

 

 

Step#2 - AdWCleaner
1. Please download AdwCleaner by Xplode onto your desktop.
2. Close all open programs and internet browsers.
3. Right-click on AdwCleaner.exe and select Run as administrator to run the tool.
4. Click on Scan.
5. After the scan is complete click on "Clean"
6. Confirm each time with Ok.
7. Your computer will be rebooted automatically. A text file will open after the restart.
8. Please post the content of that logfile with your next answer.
9. If need be, you can also find the logfile at C:\AdwCleaner\AdwCleaner[S0].txt as well.

 

Step#3 - McAfee Uninstall Tool
There may be remnants of Mcafee that need to be cleaned up.
1. Please download the removal tool from here and save it to your desktop.
2. Open up the program and run it and answer all the prompts appropriately to continue.
3. When you see the message CleanUp Successful, restart your computer.

 

 

 

Items for your next post

1. FRST Fix Log

2. AdwCleaner log

 

 

 


  • 0

#81
annmeris
Posted 27 January 2015 - 08:00 PM

annmeris

    Member

  • Topic Starter
  • Member
  • PipPip
  • 71 posts
CreateRestorePoint:
HKLM-x32\...\Run: [] => [X]
SearchScopes: HKLM -> {DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} URL =
SearchScopes: HKU\S-1-5-21-1161381707-4004551611-1247331581-1002 -> DefaultScope {9D63AF3F-1559-43AB-B453-3E1EB40F2B44} URL = http://vosteran.com/...=1491066917&ir=
SearchScopes: HKU\S-1-5-21-1161381707-4004551611-1247331581-1002 -> {89063143-16D3-4178-9C3B-1CDEC5AABEB4} URL =
SearchScopes: HKU\S-1-5-21-1161381707-4004551611-1247331581-1002 -> {9D63AF3F-1559-43AB-B453-3E1EB40F2B44} URL = http://vosteran.com/...=1491066917&ir=
SearchScopes: HKU\S-1-5-21-1161381707-4004551611-1247331581-1008 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL =
SearchScopes: HKU\S-1-5-21-1161381707-4004551611-1247331581-1008 -> {89063143-16D3-4178-9C3B-1CDEC5AABEB4} URL =
SearchScopes: HKU\S-1-5-21-1161381707-4004551611-1247331581-1002 -> {DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} URL = https://search.yahoo...p={SearchTerms}
FF DefaultSearchEngine: Secure Search
FF SearchEngineOrder.1: Secure Search
FF SelectedSearchEngine: Vosteran
FF Keyword.URL: https://search.yahoo...636D20141224&p=
FF Homepage: hxxp://vosteran.com/?f=1&a=vst_secureddownload_15_04_ie&cd=2XzuyEtN2Y1L1QzuyBtDtCzzzz0BzztBtCtCtAyEzytDyBtBtN0D0Tzu0StCtCtCyEtN1L2XzutAtFyBtFtBtFtCtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StAzyzyyDyD0AyE0AtGzytCzyzytGzyyCtAtAtGtDyE0AtCtGtBtDtAyC0AyEtAtD0EyCyB0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyB0EyBtC0AtCtC0AtGyBzzyE0AtGyEyCyDtCtGzyyEzzyBtG0A0B0FtB0DyD0AyEtAyEtBzy2Q&cr=1491066917&ir=
FF NewTab: about:newtab
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml
FF Extension: No Name - C:\Program Files (x86)\McAfee\SiteAdvisor [Not Found]
S2 0178581421713826mcinstcleanup; C:\Users\ann_000\AppData\Local\Temp\017858~1.EXE [836168 2014-03-13] (McAfee, Inc.)
C:\Users\ann_000\AppData\Local\Temp\017858~1.EXE
2013-08-23 08:30 - 2013-08-23 08:30 - 0000119 _____ () C:\ProgramData\{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}.log
2013-08-23 08:27 - 2013-08-23 08:28 - 0000106 _____ () C:\ProgramData\{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}.log
2013-08-23 08:28 - 2013-08-23 08:28 - 0000111 _____ () C:\ProgramData\{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}.log
2013-08-23 08:27 - 2013-08-23 08:27 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
2013-08-23 08:29 - 2013-08-23 08:29 - 0000108 _____ () C:\ProgramData\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}.log
cmd:type C:\Users\ann_000\AppData\Local\killertool.log
cmd:type C:\WINDOWS\errord.log
cmd:type C:\WINDOWS\error.log
EmptyTemp:
# AdwCleaner v4.109 - Report created 27/01/2015 at 17:55:09
# Updated 24/01/2015 by Xplode
# Database : 2015-01-26.1 [Live]
# Operating System : Windows 8.1 Pro (64 bits)
# Username : ann_000 - ALL-IN-ONE
# Running from : C:\Users\ann_000\Desktop\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Users\ann_000\AppData\LocalLow\AVG SafeGuard toolbar
Folder Deleted : C:\Users\ann_000\Documents\Updater
File Deleted : C:\END

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8DCB7100-DF86-4384-8842-8FA844297B3F}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8DCB7100-DF86-4384-8842-8FA844297B3F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8DCB7100-DF86-4384-8842-8FA844297B3F}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{8DCB7100-DF86-4384-8842-8FA844297B3F}]
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9D63AF3F-1559-43AB-B453-3E1EB40F2B44}
Key Deleted : HKCU\Software\SecuredDownload
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A2D81E70-2A98-4A08-A628-94388B063C5E}
Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - *.local

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17416


-\\ Mozilla Firefox v34.0.5 (x86 en-US)

[ieo3hqpz.default\prefs.js] - Line Deleted : user_pref("browser.search.selectedEngine", "Vosteran");
[ieo3hqpz.default\prefs.js] - Line Deleted : user_pref("browser.startup.homepage", "hxxp://vosteran.com/?f=1&a=vst_secureddownload_15_04_ie&cd=2XzuyEtN2Y1L1QzuyBtDtCzzzz0BzztBtCtCtAyEzytDyBtBtN0D0Tzu0StCtCtCyEtN1L2XzutAtFyBtFtBtFtCtN1L1CzutCyEtB[...]

*************************

AdwCleaner[R0].txt - [2706 octets] - [27/01/2015 17:53:28]
AdwCleaner[S0].txt - [2521 octets] - [27/01/2015 17:55:09]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2581 octets] ##########
  • 0

#82
BrianDrab
Posted 27 January 2015 - 08:04 PM

BrianDrab

    Trusted Helper

  • Malware Removal
  • 3,591 posts

It doesn't appear you did Step#1 properly or you posted the contents of the wrong file. It appears you posted the contents of the fixlist.txt instead of the fixlog.txt.


  • 0

#83
annmeris
Posted 27 January 2015 - 09:41 PM

annmeris

    Member

  • Topic Starter
  • Member
  • PipPip
  • 71 posts

Sorry, I didn't realize I had to run the program again.  Should I run adware again?

 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 24-01-2015 01
Ran by ann_000 at 2015-01-27 19:36:24 Run:1
Running from C:\Users\ann_000\Desktop
Loaded Profiles: ann_000 & QBDataServiceUser17 (Available profiles: ann_000 & QBDataServiceUser17 & Administrator)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
CreateRestorePoint:
HKLM-x32\...\Run: [] => [X]
SearchScopes: HKLM -> {DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} URL =
SearchScopes: HKU\S-1-5-21-1161381707-4004551611-1247331581-1002 -> DefaultScope {9D63AF3F-1559-43AB-B453-3E1EB40F2B44} URL = http://vosteran.com/...r=1491066917=
SearchScopes: HKU\S-1-5-21-1161381707-4004551611-1247331581-1002 -> {89063143-16D3-4178-9C3B-1CDEC5AABEB4} URL =
SearchScopes: HKU\S-1-5-21-1161381707-4004551611-1247331581-1002 -> {9D63AF3F-1559-43AB-B453-3E1EB40F2B44} URL = http://vosteran.com/...r=1491066917=
SearchScopes: HKU\S-1-5-21-1161381707-4004551611-1247331581-1008 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL =
SearchScopes: HKU\S-1-5-21-1161381707-4004551611-1247331581-1008 -> {89063143-16D3-4178-9C3B-1CDEC5AABEB4} URL =
SearchScopes: HKU\S-1-5-21-1161381707-4004551611-1247331581-1002 -> {DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} URL = https://search.yahoo...&p={SearchTerms}
FF DefaultSearchEngine: Secure Search
FF SearchEngineOrder.1: Secure Search
FF SelectedSearchEngine: Vosteran
FF Keyword.URL: https://search.yahoo...S636D20141224=
FF Homepage: hxxp://vosteran.com/?f=1&a=vst_secureddownload_15_04_ie&cd=2XzuyEtN2Y1L1QzuyBtDtCzzzz0BzztBtCtCtAyEzytDyBtBtN0D0Tzu0StCtCtCyEtN1L2XzutAtFyBtFtBtFtCtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StAzyzyyDyD0AyE0AtGzytCzyzytGzyyCtAtAtGtDyE0AtCtGtBtDtAyC0AyEtAtD0EyCyB0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyB0EyBtC0AtCtC0AtGyBzzyE0AtGyEyCyDtCtGzyyEzzyBtG0A0B0FtB0DyD0AyEtAyEtBzy2Q&cr=1491066917&ir=
FF NewTab: about:newtab
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml
FF Extension: No Name - C:\Program Files (x86)\McAfee\SiteAdvisor [Not Found]
S2 0178581421713826mcinstcleanup; C:\Users\ann_000\AppData\Local\Temp\017858~1.EXE [836168 2014-03-13] (McAfee, Inc.)
C:\Users\ann_000\AppData\Local\Temp\017858~1.EXE
2013-08-23 08:30 - 2013-08-23 08:30 - 0000119 _____ () C:\ProgramData\{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}.log
2013-08-23 08:27 - 2013-08-23 08:28 - 0000106 _____ () C:\ProgramData\{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}.log
2013-08-23 08:28 - 2013-08-23 08:28 - 0000111 _____ () C:\ProgramData\{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}.log
2013-08-23 08:27 - 2013-08-23 08:27 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
2013-08-23 08:29 - 2013-08-23 08:29 - 0000108 _____ () C:\ProgramData\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}.log
cmd:type C:\Users\ann_000\AppData\Local\killertool.log
cmd:type C:\WINDOWS\errord.log
cmd:type C:\WINDOWS\error.log
EmptyTemp:

*****************

Restore point was successfully created.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77}" => Key deleted successfully.
HKCR\CLSID\{DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} => Key not found.
HKU\S-1-5-21-1161381707-4004551611-1247331581-1002\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKU\S-1-5-21-1161381707-4004551611-1247331581-1002\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{89063143-16D3-4178-9C3B-1CDEC5AABEB4}" => Key deleted successfully.
HKCR\CLSID\{89063143-16D3-4178-9C3B-1CDEC5AABEB4} => Key not found.
HKU\S-1-5-21-1161381707-4004551611-1247331581-1002\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9D63AF3F-1559-43AB-B453-3E1EB40F2B44} => Key not found.
HKCR\CLSID\{9D63AF3F-1559-43AB-B453-3E1EB40F2B44} => Key not found.
HKU\S-1-5-21-1161381707-4004551611-1247331581-1008\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKU\S-1-5-21-1161381707-4004551611-1247331581-1008\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{89063143-16D3-4178-9C3B-1CDEC5AABEB4}" => Key deleted successfully.
HKCR\CLSID\{89063143-16D3-4178-9C3B-1CDEC5AABEB4} => Key not found.
"HKU\S-1-5-21-1161381707-4004551611-1247331581-1002\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77}" => Key deleted successfully.
HKCR\CLSID\{DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} => Key not found.
Firefox DefaultSearchEngine deleted successfully.
Firefox SearchEngineOrder.1 deleted successfully.
Firefox SelectedSearchEngine deleted successfully.
Firefox Keyword.URL deleted successfully.
Firefox homepage deleted successfully.
Firefox newtab deleted successfully.
C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml => Moved successfully.
C:\Program Files (x86)\McAfee\SiteAdvisor not found.
0178581421713826mcinstcleanup => Service deleted successfully.
C:\Users\ann_000\AppData\Local\Temp\017858~1.EXE => Moved successfully.
C:\ProgramData\{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}.log => Moved successfully.
C:\ProgramData\{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}.log => Moved successfully.
C:\ProgramData\{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}.log => Moved successfully.
C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log => Moved successfully.
C:\ProgramData\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}.log => Moved successfully.

========= type C:\Users\ann_000\AppData\Local\killertool.log =========

[1419823120] : -try-run

[1419908809] : -try-run

[1419911480] : -try-run

[1419911518] : -try-run

[1419911520] : -cleanold-reboot

[1419911521] : -app-quit

[1419911521] : -svc-stop

[1419911521] : -svc-uninstall

[1419911533] : -lsp-unmap

[1419911847] : -reg-clean -file-clean

[1419911848] : -prefs-clean

[1419911848] : -uninst-clean

========= End of CMD: =========

========= type C:\WINDOWS\errord.log =========

1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting
1108V:Driver 1106 Starting

========= End of CMD: =========

========= type C:\WINDOWS\error.log =========

 

==============================================================

2014-12-17 23:06:47 NT Service Build 1102 Starting

 

==============================================================

2014-12-17 23:32:47 NT Service Build 1102 Starting

 

==============================================================

2014-12-19 21:25:50 NT Service Build 1102 Starting

 

==============================================================

2014-12-24 13:34:57 NT Service Build 1102 Starting

 

==============================================================

2014-12-24 22:08:53 NT Service Build 1102 Starting

 

==============================================================

2014-12-24 22:55:48 NT Service Build 1102 Starting

 

==============================================================

2014-12-28 19:01:38 NT Service Build 1102 Starting

 

==============================================================

2014-12-28 19:23:59 NT Service Build 1102 Starting

 

==============================================================

2014-12-28 20:13:05 NT Service Build 1102 Starting

 

==============================================================

2014-12-28 20:24:47 NT Service Build 1102 Starting

 

==============================================================

2014-12-28 20:33:01 NT Service Build 1102 Starting

 

==============================================================

2014-12-28 21:17:01 NT Service Build 1102 Starting

 

==============================================================

2014-12-28 21:43:36 NT Service Build 1102 Starting

 

==============================================================

2014-12-29 01:38:43 NT Service Build 1102 Starting

 

==============================================================

2014-12-29 09:54:23 NT Service Build 1102 Starting

 

==============================================================

2014-12-29 10:32:47 NT Service Build 1102 Starting

 

==============================================================

2014-12-29 11:23:29 NT Service Build 1102 Starting

 

==============================================================

2014-12-29 11:44:58 NT Service Build 1102 Starting

 

==============================================================

2014-12-29 12:32:06 NT Service Build 1102 Starting

 

==============================================================

2014-12-29 12:51:22 NT Service Build 1102 Starting

 

==============================================================

2014-12-29 14:41:05 NT Service Build 1102 Starting

 

==============================================================

2014-12-29 16:17:11 NT Service Build 1102 Starting

 

==============================================================

2014-12-29 17:13:34 NT Service Build 1102 Starting

 

==============================================================

2014-12-29 17:16:00 NT Service Build 1102 Starting

 

==============================================================

2014-12-29 19:47:04 NT Service Build 1102 Starting

 

==============================================================

2014-12-29 20:03:36 NT Service Build 1102 Starting

 

==============================================================

2014-12-29 20:12:34 NT Service Build 1102 Starting

 

==============================================================

2014-12-29 20:37:15 NT Service Build 1102 Starting

 

==============================================================

2014-12-29 20:45:42 NT Service Build 1102 Starting

 

==============================================================

2014-12-29 21:54:03 NT Service Build 1102 Starting

 

==============================================================

2014-12-29 22:04:27 NT Service Build 1102 Starting

 

==============================================================

2014-12-30 20:55:39 NT Service Build 1102 Starting

 

==============================================================

2014-12-30 23:54:29 NT Service Build 1102 Starting

 

==============================================================

2014-12-31 00:01:12 NT Service Build 1102 Starting

 

==============================================================

2014-12-31 20:23:33 NT Service Build 1102 Starting

 

==============================================================

2015-01-03 13:33:46 NT Service Build 1102 Starting

 

==============================================================

2015-01-06 11:22:41 NT Service Build 1102 Starting

 

==============================================================

2015-01-06 12:51:08 NT Service Build 1102 Starting

 

==============================================================

2015-01-06 13:31:14 NT Service Build 1102 Starting

 

==============================================================

2015-01-06 14:55:39 NT Service Build 1102 Starting

 

==============================================================

2015-01-06 19:41:02 NT Service Build 1102 Starting

 

==============================================================

2015-01-06 21:39:37 NT Service Build 1102 Starting

 

==============================================================

2015-01-07 10:24:08 NT Service Build 1102 Starting

 

==============================================================

2015-01-12 10:40:05 NT Service Build 1102 Starting

 

==============================================================

2015-01-12 20:50:34 NT Service Build 1102 Starting

 

==============================================================

2015-01-12 22:15:11 NT Service Build 1102 Starting

 

==============================================================

2015-01-13 11:36:21 NT Service Build 1102 Starting

 

==============================================================

2015-01-13 12:33:09 NT Service Build 1102 Starting

 

==============================================================

2015-01-13 14:21:14 NT Service Build 1102 Starting

 

==============================================================

2015-01-13 15:55:42 NT Service Build 1102 Starting

 

==============================================================

2015-01-13 15:57:59 NT Service Build 1102 Starting

 

==============================================================

2015-01-13 16:18:04 NT Service Build 1102 Starting

 

==============================================================

2015-01-13 19:14:29 NT Service Build 1102 Starting

 

==============================================================

2015-01-14 09:23:10 NT Service Build 1102 Starting

 

==============================================================

2015-01-14 11:46:29 NT Service Build 1102 Starting

 

==============================================================

2015-01-14 15:57:01 NT Service Build 1102 Starting

 

==============================================================

2015-01-15 09:28:40 NT Service Build 1102 Starting

 

==============================================================

2015-01-15 12:57:29 NT Service Build 1102 Starting

 

==============================================================

2015-01-15 15:25:24 NT Service Build 1102 Starting

 

==============================================================

2015-01-15 23:56:11 NT Service Build 1102 Starting

 

==============================================================

2015-01-16 00:13:32 NT Service Build 1102 Starting

 

==============================================================

2015-01-16 10:04:37 NT Service Build 1102 Starting

 

==============================================================

2015-01-16 11:11:41 NT Service Build 1102 Starting

 

==============================================================

2015-01-16 11:31:39 NT Service Build 1102 Starting

 

==============================================================

2015-01-16 15:35:55 NT Service Build 1102 Starting

 

==============================================================

2015-01-16 16:53:43 NT Service Build 1102 Starting

 

==============================================================

2015-01-16 19:04:25 NT Service Build 1102 Starting

 

==============================================================

2015-01-16 19:23:46 NT Service Build 1102 Starting

 

==============================================================

2015-01-17 10:58:35 NT Service Build 1102 Starting

 

==============================================================

2015-01-17 11:18:24 NT Service Build 1102 Starting

 

==============================================================

2015-01-17 11:27:25 NT Service Build 1102 Starting

 

==============================================================

2015-01-17 11:32:10 NT Service Build 1102 Starting

 

==============================================================

2015-01-17 16:38:49 NT Service Build 1102 Starting

 

==============================================================

2015-01-17 18:35:04 NT Service Build 1102 Starting

 

==============================================================

2015-01-17 18:36:43 NT Service Build 1102 Starting

 

==============================================================

2015-01-17 19:14:53 NT Service Build 1102 Starting

 

==============================================================

2015-01-18 09:48:37 NT Service Build 1102 Starting

 

==============================================================

2015-01-18 10:13:49 NT Service Build 1102 Starting

 

==============================================================

2015-01-18 11:22:19 NT Service Build 1102 Starting

 

==============================================================

2015-01-18 13:54:27 NT Service Build 1102 Starting

 

==============================================================

2015-01-18 20:41:11 NT Service Build 1102 Starting

 

==============================================================

2015-01-18 21:58:34 NT Service Build 1102 Starting

 

==============================================================

2015-01-18 22:17:35 NT Service Build 1102 Starting

 

==============================================================

2015-01-18 22:29:52 NT Service Build 1102 Starting

 

==============================================================

2015-01-19 00:01:11 NT Service Build 1102 Starting

 

==============================================================

2015-01-19 00:58:01 NT Service Build 1102 Starting

 

==============================================================

2015-01-19 08:31:48 NT Service Build 1102 Starting

 

==============================================================

2015-01-19 10:30:14 NT Service Build 1102 Starting

 

==============================================================

2015-01-19 11:06:56 NT Service Build 1102 Starting

 

==============================================================

2015-01-19 13:05:37 NT Service Build 1102 Starting

 

==============================================================

2015-01-19 14:30:16 NT Service Build 1102 Starting

 

==============================================================

2015-01-19 15:54:40 NT Service Build 1102 Starting

 

==============================================================

2015-01-19 16:28:18 NT Service Build 1102 Starting

 

==============================================================

2015-01-19 17:08:14 NT Service Build 1102 Starting

 

==============================================================

2015-01-19 19:47:21 NT Service Build 1102 Starting

 

==============================================================

2015-01-19 21:38:36 NT Service Build 1102 Starting

 

==============================================================

2015-01-19 23:37:27 NT Service Build 1102 Starting

 

==============================================================

2015-01-20 00:10:46 NT Service Build 1102 Starting

 

==============================================================

2015-01-20 12:05:55 NT Service Build 1102 Starting

 

==============================================================

2015-01-20 17:03:31 NT Service Build 1102 Starting

 

==============================================================

2015-01-20 17:44:07 NT Service Build 1102 Starting

 

==============================================================

2015-01-21 10:04:54 NT Service Build 1102 Starting

 

==============================================================

2015-01-21 16:11:55 NT Service Build 1102 Starting

 

==============================================================

2015-01-21 16:13:13 NT Service Build 1102 Starting

 

==============================================================

2015-01-21 16:24:58 NT Service Build 1102 Starting

 

==============================================================

2015-01-21 16:51:03 NT Service Build 1102 Starting

 

==============================================================

2015-01-21 18:20:45 NT Service Build 1102 Starting

 

==============================================================

2015-01-22 20:01:59 NT Service Build 1102 Starting

 

==============================================================

2015-01-23 09:26:05 NT Service Build 1102 Starting

 

==============================================================

2015-01-23 10:55:06 NT Service Build 1102 Starting

 

==============================================================

2015-01-23 11:34:45 NT Service Build 1102 Starting

 

==============================================================

2015-01-23 13:18:23 NT Service Build 1102 Starting

 

==============================================================

2015-01-23 14:41:07 NT Service Build 1102 Starting

 

==============================================================

2015-01-23 16:04:29 NT Service Build 1102 Starting

 

==============================================================

2015-01-23 17:20:11 NT Service Build 1102 Starting

 

==============================================================

2015-01-23 17:48:45 NT Service Build 1102 Starting

 

==============================================================

2015-01-23 19:09:25 NT Service Build 1102 Starting

 

==============================================================

2015-01-23 19:17:56 NT Service Build 1102 Starting

 

==============================================================

2015-01-23 19:26:44 NT Service Build 1102 Starting

 

==============================================================

2015-01-23 19:46:53 NT Service Build 1102 Starting

 

==============================================================

2015-01-23 20:02:40 NT Service Build 1102 Starting

 

==============================================================

2015-01-23 20:11:45 NT Service Build 1102 Starting

 

==============================================================

2015-01-23 20:19:23 NT Service Build 1102 Starting

 

==============================================================

2015-01-23 20:23:59 NT Service Build 1102 Starting

 

==============================================================

2015-01-23 20:34:24 NT Service Build 1102 Starting

 

==============================================================

2015-01-23 20:52:24 NT Service Build 1102 Starting

 

==============================================================

2015-01-23 21:11:14 NT Service Build 1102 Starting

 

==============================================================

2015-01-23 21:18:04 NT Service Build 1102 Starting

 

==============================================================

2015-01-23 21:36:12 NT Service Build 1102 Starting

 

==============================================================

2015-01-23 23:28:29 NT Service Build 1102 Starting

 

==============================================================

2015-01-24 17:19:33 NT Service Build 1102 Starting

 

==============================================================

2015-01-24 18:04:12 NT Service Build 1102 Starting

 

==============================================================

2015-01-24 19:05:41 NT Service Build 1102 Starting

 

==============================================================

2015-01-24 20:57:08 NT Service Build 1102 Starting

 

==============================================================

2015-01-24 21:57:30 NT Service Build 1102 Starting

 

==============================================================

2015-01-25 11:59:30 NT Service Build 1102 Starting

 

==============================================================

2015-01-25 13:58:19 NT Service Build 1102 Starting

 

==============================================================

2015-01-25 17:08:44 NT Service Build 1102 Starting

 

==============================================================

2015-01-25 17:35:08 NT Service Build 1102 Starting

 

==============================================================

2015-01-25 18:47:27 NT Service Build 1102 Starting

 

==============================================================

2015-01-25 19:07:17 NT Service Build 1102 Starting

 

==============================================================

2015-01-26 08:58:29 NT Service Build 1102 Starting

 

==============================================================

2015-01-26 14:03:10 NT Service Build 1102 Starting

 

==============================================================

2015-01-26 16:43:03 NT Service Build 1102 Starting

 

==============================================================

2015-01-26 20:02:47 NT Service Build 1102 Starting

 

==============================================================

2015-01-27 12:18:56 NT Service Build 1102 Starting

 

==============================================================

2015-01-27 16:53:11 NT Service Build 1102 Starting

 

==============================================================

2015-01-27 17:56:15 NT Service Build 1102 Starting

 

==============================================================

2015-01-27 18:04:07 NT Service Build 1102 Starting

 

==============================================================

2015-01-27 19:23:54 NT Service Build 1102 Starting

========= End of CMD: =========

EmptyTemp: => Removed 13.2 GB temporary data.

The system needed a reboot.

==== End of Fixlog 19:37:11 ====


  • 0

#84
annmeris
Posted 27 January 2015 - 09:56 PM

annmeris

    Member

  • Topic Starter
  • Member
  • PipPip
  • 71 posts

I ran the adware pgm again. Just in case.   Dealing with too many things. This computer is taking forever to fix and I know I'm not helping.

Sorry

 

# AdwCleaner v4.109 - Report created 27/01/2015 at 19:49:20
# Updated 24/01/2015 by Xplode
# Database : 2015-01-26.1 [Live]
# Operating System : Windows 8.1 Pro  (64 bits)
# Username : ann_000 - ALL-IN-ONE
# Running from : C:\Users\ann_000\Desktop\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

***** [ Scheduled Tasks ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17416

-\\ Mozilla Firefox v34.0.5 (x86 en-US)

*************************

AdwCleaner[R1].txt - [737 octets] - [27/01/2015 19:45:52]
AdwCleaner[R2].txt - [796 octets] - [27/01/2015 19:47:10]
AdwCleaner[S1].txt - [718 octets] - [27/01/2015 19:49:20]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [777 octets] ##########


  • 0

#85
BrianDrab
Posted 27 January 2015 - 10:39 PM

BrianDrab

    Trusted Helper

  • Malware Removal
  • 3,591 posts

Good job. Thank you. Please do the following.

 

 Step#1 - Services Check
1. Please download Farbar Service Scanner to your desktop.
2. Make sure that ALL the options are checked:
3. Press "Scan".
4. It will create a log (FSS.txt) in the same directory the tool is run.
5. Please copy and paste the log to your reply.
 
Things For Your Next Post:
1. Contents of the FSS.txt log.


  • 0

Advertisements

#86
annmeris
Posted 27 January 2015 - 11:29 PM

annmeris

    Member

  • Topic Starter
  • Member
  • PipPip
  • 71 posts
Farbar Service Scanner Version: 17-01-2015
Ran by ann_000 (administrator) on 27-01-2015 at 21:27:40
Running from "C:\Users\ann_000\Desktop"
Microsoft Windows 8.1 Pro (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Policy:
========================


Action Center:
============


Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============

Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => File is digitally signed
C:\Windows\System32\drivers\nsiproxy.sys => File is digitally signed
C:\Windows\System32\dhcpcore.dll => File is digitally signed
C:\Windows\System32\drivers\afd.sys => File is digitally signed
C:\Windows\System32\drivers\tdx.sys => File is digitally signed
C:\Windows\System32\Drivers\tcpip.sys => File is digitally signed
C:\Windows\System32\dnsrslvr.dll => File is digitally signed
C:\Windows\System32\mpssvc.dll => File is digitally signed
C:\Windows\System32\bfe.dll => File is digitally signed
C:\Windows\System32\drivers\mpsdrv.sys => File is digitally signed
C:\Windows\System32\wscsvc.dll => File is digitally signed
C:\Windows\System32\wbem\WMIsvc.dll => File is digitally signed
C:\Windows\System32\wuaueng.dll => File is digitally signed
C:\Windows\System32\qmgr.dll => File is digitally signed
C:\Windows\System32\es.dll => File is digitally signed
C:\Windows\System32\cryptsvc.dll => File is digitally signed
C:\Program Files\Windows Defender\MpSvc.dll => File is digitally signed
C:\Program Files\Windows Defender\MsMpEng.exe => File is digitally signed
C:\Windows\System32\ipnathlp.dll => File is digitally signed
C:\Windows\System32\iphlpsvc.dll => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed


**** End of log ****
  • 0

#87
BrianDrab
Posted 28 January 2015 - 06:59 AM

BrianDrab

    Trusted Helper

  • Malware Removal
  • 3,591 posts

Let me know if your computer goes to sleep properly now. If it doesn't please run the memory.dmp through Windbg like you have in the past and post results. Note: Just make sure that the date/time of Memory.dmp is of the time you think the machine crashed.


  • 0

#88
annmeris
Posted 28 January 2015 - 09:29 AM

annmeris

    Member

  • Topic Starter
  • Member
  • PipPip
  • 71 posts
Want to make sure I'm looking at the right date. The date that is next to the MEMORY.DMP In the list. Every memory dump I've posted the date is always the date. I restart the computer. I never have a date of it actually going down. It did crash. But the light on the start button stays on since we changed that setting.

Edited by annmeris, 28 January 2015 - 09:32 AM.

  • 0

#89
BrianDrab
Posted 28 January 2015 - 09:49 AM

BrianDrab

    Trusted Helper

  • Malware Removal
  • 3,591 posts

Sounds like it indeed crashed. Go ahead and run the memory.dmp through Windbg and post the results. I'm then going to see if any of the hardware experts have any ideas. I'll await the results. Thanks.


  • 0

#90
annmeris
Posted 28 January 2015 - 11:42 AM

annmeris

    Member

  • Topic Starter
  • Member
  • PipPip
  • 71 posts
I've attached both the one named lastn, crashed last night and that was the dump when I started first thing in the AM. The other called morning is the last restart this morning. You should know the hardware was checked with all diagnostics available through Dell. The only thing that could not be run was the 2 wire test on the Nvidia. It did run on the other video card. apparently this Nvidia card doesn't have the capabilities as the other. I check that through Nvidia. My guess is it is a driver. When we put the first driver in, think it was Intel, I believe it went to sleep. Then when added the Nvidia, I believe we were back to not sleeping.

Thanks...Ann
Ann

Attached Files


  • 0
Back to Virus, Spyware, Malware Removal · Next Unread Topic →




Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Virus, Spyware, Malware Removal

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP