[cyclops365]

Fix result of Farbar Recovery Scan Tool (x86) Version: 11-07-2015
Ran by Ian at 2015-07-12 10:16:53 Run:2
Running from C:\Users\Ian\Desktop
Loaded Profiles: Ian (Available Profiles: Ian)
Boot Mode: Normal

==============================================

fixlist content:
*****************
start
CloseProcesses:
CreateRestorePoint:
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
S2 ADExchange; C:\Program Files\Common Files\ArcSoft\esinter\Bin\eservutil.exe [X]
S3 RTL8192cu; system32\DRIVERS\RTL8192cu.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
C:\Users\Ian\AppData\Local\Temp\Quarantine.exe
C:\Users\Ian\AppData\Local\Temp\sqlite3.dll
Emptytemp:
*****************

Processes closed successfully.
Restore point was successfully created.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast" => key removed successfully.
HKCR\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => key not found.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully.
ADExchange => Service removed successfully.
RTL8192cu => Service removed successfully.
Synth3dVsc => Service removed successfully.
tsusbhub => Service removed successfully.
VGPU => Service removed successfully.
C:\Users\Ian\AppData\Local\Temp\Quarantine.exe => moved successfully.
C:\Users\Ian\AppData\Local\Temp\sqlite3.dll => moved successfully.
EmptyTemp: => 289.3 MB temporary data Removed.

The system needed a reboot.

==== End of Fixlog 10:18:23 ====

[Advertisements]

Hello,

How are things ? Did you install an Anti Virus program as sugguested ?

Thanks
Joe

[zep516]

Hello,

How are things ? Did you install an Anti Virus program as sugguested ?

Thanks
Joe

[cyclops365]

Running a bit better now.
Installed Windows Defender as you suggests (sick of Avast keep popping up)

 

[zep516]

OK.

Two more scans and that should do it. ESET could take a long time you may do it later if you like when you're done with using the computer.

ESET Online Scanner

Note: You can use either Internet Explorer or Mozilla FireFox for this scan. You will however need to disable your current installed Anti-Virus, how to do so can be read here.

• Please go >>HERE<< then click on:
  
  Note: If using Mozilla Firefox you will need to download esetsmartinstaller_enu.exe when prompted then double click on the icon to install.
  
  All of the below instructions are compatible with either Internet Explorer or Mozilla FireFox.
• Select the option YES, I accept the Terms of Use then click on:
• When prompted allow the Add-On/Active X to install.
• Make sure that the option Remove found threats is NOT checked, and the option Scan archives is checked.
• Now click on Advanced Settings and select the following:
  • Scan for potentially unwanted applications
  • Scan for potentially unsafe applications
  • Enable Anti-Stealth Technology

• Now click on:
• The virus signature database... will begin to download. Be patient this make take some time depending on the speed of your Internet Connection.
• When completed the Online Scan will begin automatically.
• Do not touch either the Mouse or keyboard during the scan otherwise it may stall.
• When completed make sure you first copy the logfile located at C:\Program Files\ESET\EsetOnlineScanner\log.txt
• Copy and paste that log as a reply to this topic.
• Now click on:
  (Selecting Uninstall application on close if you so wish)

Next

Download Security Check by screen317 from Here or Here
Save it to your Desktop.
Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
A Notepad document should open automatically called checkup.txt; please post the contents of that document.

NOTE: If SecurityCheck aborts and you get the following message: UNSUPPORTED OPERATING SYSTEM! ABORTED! try rebooting the system and then run SecurityCheck again.

Post the ESET scan along with the checkup.txt log in your next response.

Joe

[cyclops365]

ESETSmartInstaller@High as CAB hook log:
OnlineScanner.ocx - registred OK
# product=EOS
# version=8
# iexplore.exe=11.00.9600.16428 (winblue_gdr.131013-1700)
# EOSSerial=e14245d0e8cb9245834a72519cab0c9b
# end=init
# utc_time=2015-07-12 11:46:40
# local_time=2015-07-13 12:46:40 (+0000, GMT Daylight Time)
# country="United Kingdom"
# osver=6.1.7601 NT Service Pack 1
Update Init
Update Download
Update Finalize
Updated modules version: 24764
# product=EOS
# version=8
# iexplore.exe=11.00.9600.16428 (winblue_gdr.131013-1700)
# EOSSerial=e14245d0e8cb9245834a72519cab0c9b
# end=updated
# utc_time=2015-07-12 11:49:35
# local_time=2015-07-13 12:49:35 (+0000, GMT Daylight Time)
# country="United Kingdom"
# osver=6.1.7601 NT Service Pack 1
# product=EOS
# version=8
# iexplore.exe=11.00.9600.16428 (winblue_gdr.131013-1700)
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=e14245d0e8cb9245834a72519cab0c9b
# engine=24764
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2015-07-13 02:28:46
# local_time=2015-07-13 03:28:46 (+0000, GMT Daylight Time)
# country="United Kingdom"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Microsoft Security Essentials'
# compatibility_mode=5895 16777213 100 100 60099 59734920 0 0
# scanned=386987
# found=14
# cleaned=0
# scan_time=9549
sh=97BCCD25561F44E9B13F05F6EEF083C9CE9BA529 ft=1 fh=641f1fb3d2e699c4 vn="Win32/Toolbar.Conduit.Y potentially unwanted application" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\Conduit\Community Alerts\Alert.dll.vir"
sh=D8F91A17C77E253215C983FD85B573774CE78B00 ft=1 fh=f920e23a4d0004e5 vn="a variant of Win32/AdkDLLWrapper.A potentially unwanted application" ac=I fn="C:\FRST\Quarantine\C\Users\Ian\AppData\Roaming\uTorrent\updates\3.4.1_30888.exe"
sh=A9F04068CF0055460E94B1255AF94DC14E78B152 ft=1 fh=d35a44ff2660ecf1 vn="a variant of Win32/OpenCandy.C potentially unsafe application" ac=I fn="C:\FRST\Quarantine\C\Users\Ian\AppData\Roaming\uTorrent\updates\3.4.2_37754.exe"
sh=E7F6578F45FC7E00C962AD3F37F016F12DCD5F75 ft=1 fh=5135d5609c2efd53 vn="a variant of Win32/OpenCandy.C potentially unsafe application" ac=I fn="C:\FRST\Quarantine\C\Users\Ian\AppData\Roaming\uTorrent\updates\3.4.2_38656.exe"
sh=28904CE0482360ED0B7789A2D99C16B98F278A0C ft=0 fh=0000000000000000 vn="a variant of Win32/HackTool.Patcher.T potentially unsafe application" ac=I fn="C:\FS9\ifly 3.0.rar"
sh=1215C71FB6100A502D9AA25FB6ABB990783D5DC2 ft=1 fh=1b9df2819845bbcf vn="Win32/SuspLibLoad.B trojan" ac=I fn="C:\FS9\Flight One Software\LDS763_Setup.exe"
sh=2BEC3A89EB5BF0BED90AD0923C7D12D44AEB3111 ft=1 fh=169012abcb12da52 vn="Win32/SuspLibLoad.B trojan" ac=I fn="C:\FS9\Level-D Simulations\B767-300\flt1chk4.dll"
sh=8831434E6E3234D6FBEAAA203CEB6475E60111E5 ft=1 fh=b7e8b924ad3b8335 vn="a variant of Win32/HackTool.Patcher.T potentially unsafe application" ac=I fn="C:\Users\Ian\Downloads\IFly\FS2004\4. SP3\Crack\ifly.jets.-.the.737ng.for.fs2004.v3.0-patch.exe"
sh=C566AE09512FF273734929A56ED67E3502149985 ft=1 fh=5911c27f03f386a0 vn="a variant of Win32/Bundled.Toolbar.Ask.M potentially unsafe application" ac=I fn="C:\Windows\Installer\MSI5015.tmp"
sh=2BEC3A89EB5BF0BED90AD0923C7D12D44AEB3111 ft=1 fh=169012abcb12da52 vn="Win32/SuspLibLoad.B trojan" ac=I fn="C:\Windows\System32\flt1chk4.dll"
sh=3088A5C3CFED7A2D1959311E8735D90CD1A59117 ft=1 fh=52b1bbca2e556353 vn="Win32/Toolbar.Conduit potentially unwanted application" ac=I fn="J:\Downloads\Ashampoo Burning Studio 12 v12.0.1 with Key [h33t][iahq76]\ashampoo_burning_studio_12_e12.0.1_sm.exe"
sh=7F3407544227638908122D46E30CBD2883836E5B ft=0 fh=0000000000000000 vn="a variant of Win32/Packed.VMProtect.AAD trojan" ac=I fn="J:\Downloads\World Of Subways Vol. 3 London Underground-RELOADED\rld-wos3.iso"
sh=9E82D51C0281B6D1D189F9EFF7FC1F0C47D68CDD ft=1 fh=f8c81eb628cfeab1 vn="Win32/SuspLibLoad.B trojan" ac=I fn="J:\flight simulator files\Flight One Software\LDS763-Setup3.exe"
sh=1215C71FB6100A502D9AA25FB6ABB990783D5DC2 ft=1 fh=1b9df2819845bbcf vn="Win32/SuspLibLoad.B trojan" ac=I fn="J:\flight simulator files\Flight One Software\LDS763_Setup.exe"
 

[cyclops365]

 Results of screen317's Security Check version 1.005 
 Windows 7 Service Pack 1 x86 (UAC is disabled!) 
 Internet Explorer 11 
``````````````Antivirus/Firewall Check:``````````````
 Windows Firewall Enabled! 
 Windows Firewall Disabled! 
Microsoft Security Essentials  
  (On Access scanning disabled!)
 Error obtaining update status for antivirus! 
`````````Anti-malware/Other Utilities Check:`````````
 Java 7 Update 51 
 Java 8 Update 45 
 Adobe Reader XI 
````````Process Check: objlist.exe by Laurent```````` 
 Microsoft Security Essentials MSMpEng.exe
 Microsoft Security Essentials msseces.exe
 Malwarebytes Anti-Malware mbamservice.exe 
 Malwarebytes Anti-Malware mbam.exe 
 Malwarebytes Anti-Malware mbamscheduler.exe  
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C: 0%
````````````````````End of Log``````````````````````
 

[cyclops365]

There is one problem.
When I restart the computer from hibernation mode, the internet goes down. I am on a cable router (in the UK). I use the diagnostic took in the Networks (from Control Panel) by clicking the red X between Home Network and Internet. It runs for a minute or two and internet comes back on.

The diagnostic tool looks like this when done:

 

upload pictures

 

And internet then runs fine until the next time I wake the PC up from hibernation
 

Edited by cyclops365, 13 July 2015 - 10:16 AM.

[zep516]

I'm running behind please bear with me, I'll be with you as soon as possible.

[zep516]

Hello,

Is that a wireless connection you're using ?


Please download MiniToolBox http://download.blee...MiniToolBox.exeand run it.

Checkmark following boxes:

• Flush DNS
• Report IE Proxy Settings
• Reset IE Proxy Settings
• Report FF Proxy Settings
• Reset FF Proxy Settings
• content of Hosts
• List IP configuration
• List Winsock Entries
• List last 10 Event Viewer log
• List Installed Programs
• List Users, Partitions and Memory size
• List Restore Points

Click Go and post the result.

[cyclops365]

It is a wired connection from my router to computer. I have tried ipconfig /release and ipconfig /renew. No joy.

 

MiniToolBox by Farbar  Version: 01-07-2015
Ran by Ian (administrator) on 17-07-2015 at 09:30:46
Running from "C:\Users\Ian\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RQQS9ORQ"
Microsoft Windows 7 Ultimate  Service Pack 1 (X86)
Model: E4220 Manufacturer: EMACHINES
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.
========================= Hosts content: =================================

 

========================= IP Configuration: ================================

Intel® PRO/100 VE Network Connection = Local Area Connection (Connected)

# ----------------------------------
# IPv4 Configuration
# ----------------------------------
pushd interface ipv4

reset
set global icmpredirects=enabled

popd
# End of IPv4 configuration

 

Windows IP Configuration

   Host Name . . . . . . . . . . . . : Ian-PC
   Primary Dns Suffix  . . . . . . . :
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Intel® PRO/100 VE Network Connection
   Physical Address. . . . . . . . . : 00-19-D1-5B-EF-4D
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::6c90:262b:2a3a:e601%10(Preferred)
   IPv4 Address. . . . . . . . . . . : 192.168.0.3(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Lease Obtained. . . . . . . . . . : 17 July 2015 09:22:12
   Lease Expires . . . . . . . . . . : 18 July 2015 09:22:11
   Default Gateway . . . . . . . . . : 192.168.0.1
   DHCP Server . . . . . . . . . . . : 192.168.0.1
   DHCPv6 IAID . . . . . . . . . . . : 234887633
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-19-81-6E-53-00-19-D1-5B-EF-4D
   DNS Servers . . . . . . . . . . . : 194.168.4.100
                                       194.168.8.100
   NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter isatap.{232B33FC-5A4C-4448-8658-7D5B59AC06ED}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Teredo Tunneling Pseudo-Interface:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv6 Address. . . . . . . . . . . : 2001:0:51c8:4032:c29:33e8:3f57:fffc(Preferred)
   Link-local IPv6 Address . . . . . : fe80::c29:33e8:3f57:fffc%17(Preferred)
   Default Gateway . . . . . . . . . : ::
   NetBIOS over Tcpip. . . . . . . . : Disabled
Server:  cache1.service.virginmedia.net
Address:  194.168.4.100

Name:    google.com
Addresses:  2a00:1450:4009:80b::200e
   216.58.209.238

Pinging google.com [216.58.210.14] with 32 bytes of data:
Reply from 216.58.210.14: bytes=32 time=18ms TTL=56
Reply from 216.58.210.14: bytes=32 time=19ms TTL=56

Ping statistics for 216.58.210.14:
    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 18ms, Maximum = 19ms, Average = 18ms
Server:  cache1.service.virginmedia.net
Address:  194.168.4.100

Name:    yahoo.com
Addresses:  2001:4998:c:a06::2:4008
   2001:4998:44:204::a7
   2001:4998:58:c02::a9
   206.190.36.45
   98.139.183.24
   98.138.253.109

Pinging yahoo.com [206.190.36.45] with 32 bytes of data:
Reply from 206.190.36.45: bytes=32 time=187ms TTL=49
Reply from 206.190.36.45: bytes=32 time=186ms TTL=49

Ping statistics for 206.190.36.45:
    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 186ms, Maximum = 187ms, Average = 186ms

Pinging 127.0.0.1 with 32 bytes of data:
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Ping statistics for 127.0.0.1:
    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 0ms, Average = 0ms
===========================================================================
Interface List
 10...00 19 d1 5b ef 4d ......Intel® PRO/100 VE Network Connection
  1...........................Software Loopback Interface 1
 15...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
 17...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      192.168.0.1      192.168.0.3     20
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
      192.168.0.0    255.255.255.0         On-link       192.168.0.3    276
      192.168.0.3  255.255.255.255         On-link       192.168.0.3    276
    192.168.0.255  255.255.255.255         On-link       192.168.0.3    276
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link       192.168.0.3    276
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link       192.168.0.3    276
===========================================================================
Persistent Routes:
  None

IPv6 Route Table
===========================================================================
Active Routes:
 If Metric Network Destination      Gateway
  1    306 ::1/128                  On-link
 10    276 fe80::/64                On-link
 10    276 fe80::6c90:262b:2a3a:e601/128
                                    On-link
  1    306 ff00::/8                 On-link
 10    276 ff00::/8                 On-link
===========================================================================
Persistent Routes:
  None
========================= Winsock entries =====================================

Catalog5 01 C:\Windows\system32\NLAapi.dll [52224] (Microsoft Corporation)
Catalog5 02 C:\Windows\system32\napinsp.dll [52224] (Microsoft Corporation)
Catalog5 03 C:\Windows\system32\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 04 C:\Windows\system32\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 05 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog5 06 C:\Windows\system32\winrnr.dll [20992] (Microsoft Corporation)
Catalog5 07 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145648] (Microsoft Corp.)
Catalog5 08 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145648] (Microsoft Corp.)
Catalog5 09 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Catalog9 01 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 02 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 03 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 04 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 05 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 06 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 07 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 08 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 09 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 10 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 11 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 12 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 13 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 14 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 15 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 16 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 17 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 18 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 19 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 20 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 21 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 22 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 23 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 24 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 25 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 26 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 27 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 28 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 29 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 30 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 31 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)
Catalog9 32 C:\Windows\system32\mswsock.dll [231424] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (07/16/2015 10:29:16 PM) (Source: Application Hang) (User: )
Description: The program iexplore.exe version 11.0.9600.17909 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 2e0

Start Time: 01d0bff3a626a476

Termination Time: 2925

Application Path: C:\Program Files\Internet Explorer\iexplore.exe

Report Id: 7caf74fe-2c01-11e5-88a2-0019d15bef4d

Error: (07/14/2015 11:38:18 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 14290

Error: (07/14/2015 11:38:18 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 14290

Error: (07/14/2015 11:38:18 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/14/2015 11:38:11 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 6942

Error: (07/14/2015 11:38:11 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 6942

Error: (07/14/2015 11:38:11 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/14/2015 08:06:07 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]

Error: (07/14/2015 08:05:45 PM) (Source: Application Error) (User: )
Description: Faulting application name: GWXUX.exe, version: 6.3.9600.17923, time stamp: 0x55945712
Faulting module name: ntdll.dll, version: 6.1.7601.18869, time stamp: 0x55636303
Exception code: 0xc0000005
Fault offset: 0x00032214
Faulting process id: 0x49c
Faulting application start time: 0xGWXUX.exe0
Faulting application path: GWXUX.exe1
Faulting module path: GWXUX.exe2
Report Id: GWXUX.exe3

Error: (07/14/2015 10:57:36 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 9516

System errors:
=============
Error: (07/16/2015 07:58:46 PM) (Source: Schannel) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 10. The internal error state is 10.

Error: (07/16/2015 07:58:45 PM) (Source: Schannel) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 10. The internal error state is 10.

Error: (07/16/2015 07:58:45 PM) (Source: Schannel) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 10. The internal error state is 10.

Error: (07/16/2015 07:58:45 PM) (Source: Schannel) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 10. The internal error state is 10.

Error: (07/15/2015 10:58:57 PM) (Source: Service Control Manager) (User: )
Description: The ScRegSetValueExW call failed for FailureCommand with the following error:
%%5

Error: (07/15/2015 10:58:53 PM) (Source: Service Control Manager) (User: )
Description: The ScRegSetValueExW call failed for Start with the following error:
%%5

Error: (07/15/2015 10:36:15 AM) (Source: Service Control Manager) (User: )
Description: The ScRegSetValueExW call failed for FailureCommand with the following error:
%%5

Error: (07/15/2015 10:35:03 AM) (Source: Service Control Manager) (User: )
Description: The ScRegSetValueExW call failed for Start with the following error:
%%5

Error: (07/15/2015 07:53:48 AM) (Source: Schannel) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 10. The internal error state is 10.

Error: (07/15/2015 07:53:48 AM) (Source: Schannel) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 10. The internal error state is 10.

Microsoft Office Sessions:
=========================
Error: (07/16/2015 10:29:16 PM) (Source: Application Hang)(User: )
Description: iexplore.exe11.0.9600.179092e001d0bff3a626a4762925C:\Program Files\Internet Explorer\iexplore.exe7caf74fe-2c01-11e5-88a2-0019d15bef4d

Error: (07/14/2015 11:38:18 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 14290

Error: (07/14/2015 11:38:18 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 14290

Error: (07/14/2015 11:38:18 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/14/2015 11:38:11 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 6942

Error: (07/14/2015 11:38:11 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 6942

Error: (07/14/2015 11:38:11 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/14/2015 08:06:07 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe)(User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]

Error: (07/14/2015 08:05:45 PM) (Source: Application Error)(User: )
Description: GWXUX.exe6.3.9600.1792355945712ntdll.dll6.1.7601.1886955636303c00000050003221449c01d0be6809d2b79fC:\Windows\System32\GWX\GWXUX.exeC:\Windows\SYSTEM32\ntdll.dll53edd24d-2a5b-11e5-96cc-0019d15bef4d

Error: (07/14/2015 10:57:36 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 9516

=========================== Installed Programs ============================

µTorrent (HKCU\...\uTorrent) (Version: 3.4.3.40298 - BitTorrent Inc.)
Active Camera 2004 (HKLM\...\Active Camera 2004) (Version:  - )
ActiveRadar Update v1.2 (HKLM\...\{7B8B9BE3-6EFC-4A25-AE30-3F4E29522BA3}) (Version: 1.2.1 - HiFi Simulation Software)
ActiveSky Version 6.5 and ActiveSky Graphics (HKLM\...\{0F0D371F-C111-4279-963A-04139A5E49DB}) (Version: 0.6.995 - HiFi Simulation Software)
ActiveSky2004 (HKLM\...\{5635FCDA-2B86-400F-BF23-784AB09B590F}) (Version: 1.0.0002 - HiFi Simulation Software)
ActiveSky2004.5 Update (HKLM\...\{C30E5DE8-AF71-48B9-8E4E-B2B8F98CD8E6}) (Version: 1.5.1471 - HiFi Simulation Software)
Adobe Flash Player 18 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 18.0.0.203 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.12) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.12 - Adobe Systems Incorporated)
Adobe Refresh Manager (HKLM\...\{AC76BA86-0804-1033-1959-001824147215}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
Adobe Shockwave Player 12.1 (HKLM\...\Adobe Shockwave Player) (Version: 12.1.3.153 - Adobe Systems, Inc.)
Aerosoft's - Aerosoft Launcher (HKLM\...\{EE11CFFC-898C-4875-8A63-8B732A9AD43B}) (Version: 1.0.0.7 - Aerosoft)
aerosoft's - Antalya 2010 (HKLM\...\{7488FFEB-DA27-45FE-ADA4-4277DDF6D2E5}) (Version: 1.04 - aerosoft)
aerosoft's - Balearic Islands X for FS2004 (HKLM\...\{5EE08A0C-9C8B-4FEA-9E1D-31124A90FF75}) (Version: 1.01 - aerosoft)
Apple Application Support (32-bit) (HKLM\...\{AFA1153A-F547-409B-B837-3A0D6C5A3FEC}) (Version: 3.1.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{E1DB0812-2D60-43DB-AE09-6C7027D93B28}) (Version: 8.1.1.3 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ASV - ActiveSky Version 5 (HKLM\...\{349D278F-64F5-4BF3-AD0B-32D3F89017A3}) (Version: 0.1.3141 - HiFi Simulation Software)
ASV - Upgrade from AS2004.5 Installer (HKLM\...\{345643C6-2BBE-4819-B9DB-FBE581D580B9}) (Version: 0.2.0 - HiFi Simulation Software)
Audacity 2.0.3 (HKLM\...\Audacity_is1) (Version: 2.0.3 - Audacity Team)
Blue Sky (HKLM\...\{0B365286-5E64-44A4-A49F-04CF4C85A3B3}) (Version: 1.0.10317 - FS Products)
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
D3DX10 (HKLM\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Disney's Get Ready for School with Mickey (HKLM\...\{31154120-9EB6-11D4-B231-0050DACD394D}) (Version:  - )
FFmpeg v0.6.2 for Audacity (HKLM\...\FFmpeg for Audacity_is1) (Version:  - )
FSNavigator (HKLM\...\{2F76FF6D-B992-4FD9-8686-F09F868B2C58}) (Version: 4.7 - FSNavigator team)
GAP_LGSK 2007 (HKLM\...\GAP_LGSK 2007) (Version:  - )
GAP_LGZA 2006 (HKLM\...\GAP_LGZA 2006) (Version:  - )
Google Earth (HKLM\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Update Helper (HKLM\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.28.1 - Google Inc.) Hidden
Google Update Helper (HKLM\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
iCloud (HKLM\...\{760BB327-3973-4608-85C8-88162E2FF3B6}) (Version: 4.0.6.28 - Apple Inc.)
iFly Jets - 737NG for FS2004 Feature Pack (HKLM\...\iFly Jets - 737NG for FS2004 Feature Pack) (Version:  - )
iFly Jets - The 737NG for FS2004 (HKLM\...\iFly Jets - The 737NG for FS2004) (Version:  - )
iTunes (HKLM\...\{CE1F04C7-79BC-4219-BE6A-BA490224D4B5}) (Version: 12.1.2.27 - Apple Inc.)
Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217040FF}) (Version: 7.0.510 - Oracle)
Java 8 Update 45 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
Java Auto Updater (HKLM\...\{4A03706F-666A-4037-7777-5F2748764D10}) (Version: 2.8.45.15 - Oracle Corporation) Hidden
Junk Mail filter update (HKLM\...\{0BE9E708-5DC0-4963-9CFD-0AA519090E79}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
LAGO Hurghada Scenery FS2004 Version 1.01 (HKLM\...\{72A53810-7DEC-4154-8584-C8C0BEA0CF7E}) (Version: 1.01.00 - )
LAME v3.99.3 (for Windows) (HKLM\...\LAME_is1) (Version:  - )
Learning Ladder Preschool (HKLM\...\{CC0BA5A8-E3EC-11D5-9194-00105A68CFFF}) (Version:  - )
Level-D Simulations 767-300 (HKLM\...\763v2) (Version:  - )
London Control (HKLM\...\{16FA48D5-24F7-4B45-85D0-777510BC0643}) (Version: 1.1 - DM Aviation Limited)
Ltrack 6.8 (HKLM\...\Ltrack_is1) (Version:  - Nigel Thomas)
Malwarebytes Anti-Malware version 2.1.8.1057 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Flight Simulator 2004 A Century of Flight (HKLM\...\Flight Simulator 9.0) (Version: 9.0 - Microsoft)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Movie Maker (HKLM\...\{38F03569-A636-4CF3-BDDE-032C8C251304}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM\...\{EB3DF0F0-0525-4C5A-A2F8-DEC868A3075D}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyDriveConnect 3.3.0.1342 (HKLM\...\MyDriveConnect) (Version: 3.3.0.1342 - TomTom)
NVIDIA 3D Vision Controller Driver 320.49 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 320.49 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 320.49 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 320.49 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.0 - NVIDIA Corporation)
NVIDIA Graphics Driver 320.49 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 320.49 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.24.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.24.2 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.13.0604 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0604 - NVIDIA Corporation)
OpenOffice 4.0.0 (HKLM\...\{EA1DC8F8-C357-44CA-A332-AB9762DF698C}) (Version: 4.00.9702 - Apache Software Foundation)
Photo Common (HKLM\...\{B1D0122C-6BE2-47A2-82AE-0BB3F6C91C49}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Photo Common (HKLM\...\{CAA0F57A-BA8C-4AD8-AA03-F32B0E4F5623}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Photo Gallery (HKLM\...\{07AAB66E-4718-422D-9218-4AFB3C922A71}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Photo Gallery (HKLM\...\{B6A96E8C-FC88-46F5-800E-6845B4ACA459}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Photo Gallery (HKLM\...\{C992FFE0-AC32-4FA9-BC9A-F1637B9E655D}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
QuickTime 7 (HKLM\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Sharepod 4.0.0.4 (HKLM\...\{085BCFB8-F6FB-4600-AFAB-1F6DBC7F5F99}_is1) (Version:  - Macroplant LLC)
SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 1.8.323 - NVIDIA Corporation) Hidden
Skype™ 7.0 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Smart Technology Programming Software 7.0.27.13 (HKLM\...\{5C93C2C2-4EB3-4830-974A-69EDE0E1C37B}) (Version: 7.0.27.13 - Mad Catz)
Soft Data Fax Modem with SmartCP (HKLM\...\CNXT_MODEM_PCI_HSF) (Version:  - )
SquawkBox (HKLM\...\SquawkBox) (Version:  - )
Steam (HKLM\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
swMSM (HKLM\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamViewer 8 (HKLM\...\TeamViewer 8) (Version: 8.0.19617 - TeamViewer)
TomTom HOME (HKLM\...\{0E09BE17-EDEA-42CA-8974-42A587F51510}) (Version: 2.9.8 - TomTom)
TomTom HOME Visual Studio Merge Modules (HKLM\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
UK2000 Gatwick Xtreme FS9  (HKLM\...\UK2000 Gatwick Xtreme FS9) (Version: 3.00 - UK2000 Scenery)
UK2000 Manchester Xtreme FS2004 Uninstall (HKLM\...\UK2000 Manchester Xtreme FS2004) (Version:  - )
Unity Web Player (HKCU\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Visual Studio C++ 10.0 Runtime (HKLM\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
vroute.info (HKCU\...\ea913c639d7ea423) (Version: 1.1.1.3 - vroute)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.00 beta 7 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.00.7 - win.rar GmbH)

========================= Memory info: ===================================

Percentage of memory in use: 50%
Total physical RAM: 2045.97 MB
Available physical RAM: 1017.1 MB
Total Virtual: 4091.94 MB
Available Virtual: 2830.18 MB

========================= Partitions: =====================================

1 Drive c: () (Fixed) (Total:289.02 GB) (Free:166.36 GB) NTFS
8 Drive j: (Seagate Expansion Drive) (Fixed) (Total:931.51 GB) (Free:869.35 GB) NTFS

========================= Users: ========================================

User accounts for \\IAN-PC

Administrator            Guest                    Ian                     

========================= Restore Points ==================================

17-06-2015 22:47:37 Windows Update
21-06-2015 19:05:36 Windows Defender Checkpoint
23-06-2015 21:08:16 Windows Update
01-07-2015 06:50:11 Windows Update
02-07-2015 06:34:04 avast! antivirus system restore point
05-07-2015 10:22:32 Installed Antalya 2010
05-07-2015 10:23:47 Installed Antalya 2010
07-07-2015 10:20:46 Windows Update
09-07-2015 08:12:00 avast! antivirus system restore point
10-07-2015 08:31:01 Restore Point Created by FRST
11-07-2015 06:27:34 Windows Update
12-07-2015 09:17:03 Restore Point Created by FRST
13-07-2015 23:19:59 Windows Update
15-07-2015 09:34:12 Windows Update

**** End of log ****

[zep516]

Hello.

That seems to be a common problem with the Intel® PRO/100 VE adapter.

Uninstall and reinstall the adapter from device manager and then reboot, lets try that first

To do that

Click > Start > click > Control Panel, in the control Panel interface click Device Manger This will open device manger for you.

Once in device Manger Look for Network Adapter to the left of network adapters click on the arrow to expand the list of adapters, in the list look for Intel® PRO/100 VE Right click on it and choose Uninstall. Now reboot the computer, windows will reinstall the adapter for you.

Use the computer for a while and see if any change results.

Thanks
Joe

[cyclops365]

Internet now working fine. Thanks

[zep516]

That's a tricky problem so lets keep our eyes on it for a few days. Is everything else ok ?

[cyclops365]

It seems so, Windows Defender hasn't popped up with anything untoward yet

[zep516]

I think we are good here. Lets remove all the tools an log files from the desktop by following the exercise below;

Download DelFix by Xplode and save it to your desktop.

• Run the tool by right click on the icon and Run as administrator option.
• Make sure that these ones are checked:
  • Remove disinfection tools
  • Purge system restore
  • Reset system settings
• Push Run.
• The program will run for a few seconds and display a notepad report.
  Paste it for my review.