Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Startup repair loop [Solved]

Started by Jiracev , Jul 11 2015 05:07 PM
boot Startuprepairoofline

  • This topic is locked This topic is locked

#1
Jiracev
Posted 11 July 2015 - 05:07 PM

Jiracev

    New Member

  • Member
  • Pip
  • 7 posts

Hello everyone, i've posted this on windows 7 thread before and someone told me to post it here, so here i am.
The problem started after i came back of 1 hour inactivity (i wasn't looking at pc for an hour, it was on and i did not lo out of the user or so). When i came back, i see this message of "systemrecoveryoffline failed to repair" i first tried to restore to a previous time but it did not work, it still can't boot. My pc works with two hdd, the first 1 with 3 partitions (one with windows) and the other one without partitions and with windows installed in it two. The bios is set up to run from the hdd 1 (the one with 3 partitions) i saw something about frst so i run it, and then i realized it took the second hdd as c: and d: was the one that should boot from (this kind of confused me). Now i'm running frst64 fom disk d: with dis options marked (registry, serices, drivers, knownDLLs) i did not mark (list BCD, drivers MD5, 90 days files) if you want me to run frst again marking something else, tell me and i will. Please notice that i'm running it from cmd.
Here is the frst log
 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:09-07-2015
Ran by SYSTEM on MININT-F577KFK on 11-07-2015 19:57:57
Running from H:\
Platform: Windows 7 Ultimate (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST must be run from normal or Safe mode to create a complete log.

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2754704 2015-06-24] (NVIDIA Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2015-02-03] (Adobe Systems Incorporated)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8067616 2009-08-18] (Realtek Semiconductor)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-25] (Avast Software s.r.o.)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [226560 2014-11-17] ()
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [1851040 2015-03-16] (Adobe Systems Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-26] (Microsoft Corporation)
HKLM\...\RunOnce: [*Restore] => C:\Windows\system32\rstrui.exe [296960 2015-03-16] (Microsoft Corporation)

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-05-24] (Avast Software s.r.o.)
S2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
S2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
S2 FontCache; C:\Windows\system32\FntCache.dll [1179136 2015-04-19] ()
S2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-06-24] (NVIDIA Corporation)
S3 IKEEXT; C:\Windows\System32\ikeext.dll [859648 2013-10-11] ()
S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1868432 2015-06-24] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [23007376 2015-06-24] (NVIDIA Corporation)
S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-26] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S0 ACPI; C:\Windows\System32\drivers\ACPI.sys [334208 2010-11-20] ()
S1 AFD; C:\Windows\system32\drivers\afd.sys [497152 2014-05-29] ()
S2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-05-24] ()
S2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-05-24] (Avast Software s.r.o.)
S1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-05-24] (Avast Software s.r.o.)
S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-05-24] ()
S1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-05-24] (Avast Software s.r.o.)
S1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-07-01] (Avast Software s.r.o.)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-05-24] (Avast Software s.r.o.)
S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-05-24] ()
S3 DXGKrnl; C:\Windows\System32\drivers\dxgkrnl.sys [985536 2014-06-15] ()
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-06-24] (NVIDIA Corporation)
S3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [46768 2015-05-18] (NVIDIA Corporation)
S1 Psched; C:\Windows\System32\DRIVERS\pacer.sys [131584 2010-11-20] ()
S3 tunnel; C:\Windows\System32\DRIVERS\tunnel.sys [125440 2010-11-20] ()
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-10 23:26 - 2015-07-11 19:57 - 00000000 ____D C:\FRST
2015-07-10 07:40 - 2015-07-10 07:41 - 00022656 _____ C:\Users\Jirace\Downloads\The Mentalist_4x13_HDTV.LOL.en.zip
2015-07-09 19:21 - 2015-07-09 19:28 - 00000000 ____D C:\Users\Jirace\AppData\Roaming\Synthesia
2015-07-09 19:20 - 2015-07-10 20:15 - 00000000 ____D C:\Program Files (x86)\Synthesia
2015-07-09 18:24 - 2015-07-09 18:24 - 00000000 __SHD C:\Users\Jirace\AppData\Local\EmieUserList
2015-07-09 18:24 - 2015-07-09 18:24 - 00000000 __SHD C:\Users\Jirace\AppData\Local\EmieSiteList
2015-07-09 18:24 - 2015-07-09 18:24 - 00000000 __SHD C:\Users\Jirace\AppData\Local\EmieBrowserModeList
2015-07-08 10:06 - 2015-07-08 10:06 - 00049104 _____ C:\Users\Jirace\Downloads\ePSXe190.zip
2015-07-08 08:47 - 2015-07-08 08:47 - 00024076 _____ C:\Users\Jirace\Downloads\The Mentalist_4x03_HDTV.en(1).zip
2015-07-08 08:40 - 2015-07-08 08:40 - 00024152 _____ C:\Users\Jirace\Downloads\The Mentalist_4x03_HDTV.The.Mentalist.S04E03.720p.HDTV.x264-TLA.en.zip
2015-07-08 08:24 - 2015-07-08 08:24 - 486359257 _____ C:\Users\Jirace\Downloads\Final Fantasy VII (Disc 1).7z
2015-07-07 17:36 - 2015-07-07 17:36 - 00025017 _____ C:\Users\Jirace\Downloads\The Mentalist_4x02_HDTV.en.zip
2015-07-07 12:16 - 2015-07-07 12:17 - 00018817 _____ C:\Users\Jirace\Downloads\The Mentalist_4x01_HDTV.ASAP.en.zip
2015-07-07 12:03 - 2015-07-07 12:03 - 00599480 _____ C:\Users\Jirace\Downloads\[kat.cr]the.mentalist.season.4.complete.hdtv.xvid.mp3.x264.torrent
2015-07-07 10:10 - 2015-07-07 10:10 - 01510325 _____ C:\Users\Jirace\Downloads\The_Mentalist - season 3.en.zip
2015-07-06 14:15 - 2015-07-06 14:15 - 00803827 _____ C:\Users\Jirace\Downloads\SkinSpotlightsReplays-2.0.0.13.zip
2015-07-05 09:16 - 2015-07-10 20:48 - 00000000 ____D C:\Windows\LastGood
2015-07-05 09:15 - 2015-05-18 19:29 - 00046768 _____ (NVIDIA Corporation) C:\Windows\System32\Drivers\nvvad64v.sys
2015-07-05 09:15 - 2015-05-18 19:14 - 00057520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2015-07-05 09:13 - 2015-07-05 09:13 - 00000000 ____D C:\Program Files\Speccy
2015-07-05 09:11 - 2015-07-05 09:12 - 05127432 _____ (Piriform Ltd) C:\Users\Jirace\Downloads\spsetup128.exe
2015-07-05 08:40 - 2015-07-05 08:40 - 00000331 _____ C:\Users\Jirace\Desktop\to check.txt
2015-07-05 08:31 - 2015-07-05 08:31 - 00347816 _____ (Microsoft Corporation) C:\Users\Jirace\Desktop\MicrosoftFixit.Pictures.MATSKB.Run.exe

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-10 20:48 - 2015-05-31 08:14 - 00000000 ____D C:\Users\Jirace\AppData\Roaming\5kplayer
2015-07-10 20:48 - 2015-05-24 10:37 - 00000000 ____D C:\Users\Jirace\AppData\Roaming\qBittorrent
2015-07-10 20:48 - 2015-05-24 10:15 - 00000000 ____D C:\ProgramData\NVIDIA
2015-07-10 20:48 - 2015-05-24 10:14 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2015-07-10 20:48 - 2015-05-24 10:10 - 00000000 ____D C:\Program Files (x86)\LSI
2015-07-10 20:48 - 2015-05-24 10:08 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2015-07-10 20:48 - 2015-05-24 09:50 - 00000000 ____D C:\users\Jirace
2015-07-10 20:48 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\registration
2015-07-10 20:48 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\Help
2015-07-10 20:48 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\AppCompat
2015-07-10 20:47 - 2015-05-24 10:14 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-07-10 20:15 - 2015-05-24 11:38 - 00000000 ____D C:\ProgramData\Riot Games
2015-07-09 18:16 - 2015-05-24 13:55 - 00000000 ____D C:\Temp
2015-07-09 18:14 - 2015-05-29 16:40 - 00000000 ____D C:\ProgramData\boost_interprocess
2015-07-05 10:29 - 2015-05-24 10:11 - 00000390 _____ C:\Windows\Tasks\update-S-1-5-21-3761918697-3428231966-3298801265-1000.job
2015-07-05 10:16 - 2015-05-24 10:05 - 00001036 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-07-05 10:16 - 2015-05-24 10:05 - 00001032 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-07-05 09:16 - 2009-07-13 20:51 - 00028343 _____ C:\Windows\setupact.log
2015-07-05 08:48 - 2009-07-13 20:45 - 00014016 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-07-05 08:48 - 2009-07-13 20:45 - 00014016 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-07-05 08:43 - 2015-05-24 09:28 - 01593580 _____ C:\Windows\WindowsUpdate.log
2015-07-05 08:40 - 2009-07-13 21:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-05 07:19 - 2015-05-24 10:11 - 00000390 _____ C:\Windows\Tasks\update-sys.job
2015-07-04 06:56 - 2015-05-24 09:53 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2015-07-01 13:57 - 2015-05-24 11:11 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-07-01 13:48 - 2015-05-24 09:52 - 00442264 _____ (Avast Software s.r.o.) C:\Windows\System32\Drivers\aswsp.sys
2015-06-24 03:36 - 2015-05-29 16:41 - 01756424 _____ (NVIDIA Corporation) C:\Windows\System32\nvspbridge64.dll
2015-06-24 03:36 - 2015-05-29 16:41 - 01571696 _____ (NVIDIA Corporation) C:\Windows\System32\nvspcap64.dll
2015-06-24 03:36 - 2015-05-29 16:41 - 01320120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2015-06-24 03:36 - 2015-05-29 16:41 - 01316000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2015-06-20 16:19 - 2015-05-24 10:10 - 00000000 ____D C:\Users\Jirace\AppData\Local\LSI
2015-06-20 07:06 - 2015-05-24 10:16 - 00058778 _____ C:\Windows\PFRO.log
2015-06-19 19:06 - 2015-05-29 16:54 - 00000000 ____D C:\Users\Jirace\AppData\Roaming\Skype
2015-06-11 10:59 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\LiveKernelReports

Some files in TEMP:
====================
C:\Users\Jirace\AppData\Local\Temp\130772133961054688.exe
C:\Users\Jirace\AppData\Local\Temp\13077213402962890615.exe
C:\Users\Jirace\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Jirace\AppData\Local\Temp\nvStInst.exe


==================== Known DLLs (Whitelisted) ================

[2015-05-24 16:38] - [2015-03-04 21:12] - 0404480 ____A () C:\Windows\System32\gdi32.dll

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== Restore Points =========================

Restore point made on: 2015-07-05 10:54:19

==================== Memory info ===========================

Percentage of memory in use: 16%
Total physical RAM: 3519.3 MB
Available physical RAM: 2923.54 MB
Total Virtual: 3517.45 MB
Available Virtual: 2912.99 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:97.65 GB) (Free:32.06 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive e: (jirace) (Fixed) (Total:172.8 GB) (Free:7.51 GB) NTFS
Drive f: () (Fixed) (Total:195.31 GB) (Free:11.74 GB) NTFS
Drive h: () (Removable) (Total:7.24 GB) (Free:4.24 GB) FAT32
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: () (Fixed) (Total:149.05 GB) (Free:3.33 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 149.1 GB) (Disk ID: 440B440A)
Partition 1: (Active) - (Size=149 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 336D1186)
Partition 1: (Active) - (Size=97.7 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=195.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=172.8 GB) - (Type=OF Extended)

========================================================
Disk: 2 (Size: 7.3 GB) (Disk ID: 02D0E3CB)
Partition 1: (Active) - (Size=7.3 GB) - (Type=0B)


LastRegBack: 2015-07-04 07:50

==================== End of log ============================

Thanks beforehand


  • 0

Advertisements

#2
Essexboy
Posted 12 July 2015 - 06:32 AM

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts

Hi there, disconnect all drives except for the one that you are using as boot and then try again


  • 0

#3
Jiracev
Posted 12 July 2015 - 07:11 AM

Jiracev

    New Member

  • Topic Starter
  • Member
  • Pip
  • 7 posts

Hi, thanks for replying. This is the result.
 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:09-07-2015
Ran by SYSTEM on MININT-JES8277 on 12-07-2015 10:04:29
Running from F:\
Platform: Windows 7 Ultimate (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST must be run from normal or Safe mode to create a complete log.

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2754704 2015-06-24] (NVIDIA Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2015-02-03] (Adobe Systems Incorporated)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8067616 2009-08-18] (Realtek Semiconductor)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-25] (Avast Software s.r.o.)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [226560 2014-11-17] ()
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [1851040 2015-03-16] (Adobe Systems Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-26] (Microsoft Corporation)
HKLM\...\RunOnce: [*Restore] => C:\Windows\system32\rstrui.exe [296960 2015-03-16] (Microsoft Corporation)

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-05-24] (Avast Software s.r.o.)
S2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
S2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
S2 FontCache; C:\Windows\system32\FntCache.dll [1179136 2015-04-19] ()
S2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-06-24] (NVIDIA Corporation)
S3 IKEEXT; C:\Windows\System32\ikeext.dll [859648 2013-10-11] ()
S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1868432 2015-06-24] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [23007376 2015-06-24] (NVIDIA Corporation)
S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-26] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S0 ACPI; C:\Windows\System32\drivers\ACPI.sys [334208 2010-11-20] ()
S1 AFD; C:\Windows\system32\drivers\afd.sys [497152 2014-05-29] ()
S2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-05-24] ()
S2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-05-24] (Avast Software s.r.o.)
S1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-05-24] (Avast Software s.r.o.)
S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-05-24] ()
S1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-05-24] (Avast Software s.r.o.)
S1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-07-01] (Avast Software s.r.o.)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-05-24] (Avast Software s.r.o.)
S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-05-24] ()
S3 DXGKrnl; C:\Windows\System32\drivers\dxgkrnl.sys [985536 2014-06-15] ()
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-06-24] (NVIDIA Corporation)
S3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [46768 2015-05-18] (NVIDIA Corporation)
S1 Psched; C:\Windows\System32\DRIVERS\pacer.sys [131584 2010-11-20] ()
S3 tunnel; C:\Windows\System32\DRIVERS\tunnel.sys [125440 2010-11-20] ()
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-10 23:26 - 2015-07-12 10:04 - 00000000 ____D C:\FRST
2015-07-10 07:40 - 2015-07-10 07:41 - 00022656 _____ C:\Users\Jirace\Downloads\The Mentalist_4x13_HDTV.LOL.en.zip
2015-07-09 19:21 - 2015-07-09 19:28 - 00000000 ____D C:\Users\Jirace\AppData\Roaming\Synthesia
2015-07-09 19:20 - 2015-07-10 20:15 - 00000000 ____D C:\Program Files (x86)\Synthesia
2015-07-09 18:24 - 2015-07-09 18:24 - 00000000 __SHD C:\Users\Jirace\AppData\Local\EmieUserList
2015-07-09 18:24 - 2015-07-09 18:24 - 00000000 __SHD C:\Users\Jirace\AppData\Local\EmieSiteList
2015-07-09 18:24 - 2015-07-09 18:24 - 00000000 __SHD C:\Users\Jirace\AppData\Local\EmieBrowserModeList
2015-07-08 10:06 - 2015-07-08 10:06 - 00049104 _____ C:\Users\Jirace\Downloads\ePSXe190.zip
2015-07-08 08:47 - 2015-07-08 08:47 - 00024076 _____ C:\Users\Jirace\Downloads\The Mentalist_4x03_HDTV.en(1).zip
2015-07-08 08:40 - 2015-07-08 08:40 - 00024152 _____ C:\Users\Jirace\Downloads\The Mentalist_4x03_HDTV.The.Mentalist.S04E03.720p.HDTV.x264-TLA.en.zip
2015-07-08 08:24 - 2015-07-08 08:24 - 486359257 _____ C:\Users\Jirace\Downloads\Final Fantasy VII (Disc 1).7z
2015-07-07 17:36 - 2015-07-07 17:36 - 00025017 _____ C:\Users\Jirace\Downloads\The Mentalist_4x02_HDTV.en.zip
2015-07-07 12:16 - 2015-07-07 12:17 - 00018817 _____ C:\Users\Jirace\Downloads\The Mentalist_4x01_HDTV.ASAP.en.zip
2015-07-07 12:03 - 2015-07-07 12:03 - 00599480 _____ C:\Users\Jirace\Downloads\[kat.cr]the.mentalist.season.4.complete.hdtv.xvid.mp3.x264.torrent
2015-07-07 10:10 - 2015-07-07 10:10 - 01510325 _____ C:\Users\Jirace\Downloads\The_Mentalist - season 3.en.zip
2015-07-06 14:15 - 2015-07-06 14:15 - 00803827 _____ C:\Users\Jirace\Downloads\SkinSpotlightsReplays-2.0.0.13.zip
2015-07-05 09:16 - 2015-07-10 20:48 - 00000000 ____D C:\Windows\LastGood
2015-07-05 09:15 - 2015-05-18 19:29 - 00046768 _____ (NVIDIA Corporation) C:\Windows\System32\Drivers\nvvad64v.sys
2015-07-05 09:15 - 2015-05-18 19:14 - 00057520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2015-07-05 09:13 - 2015-07-05 09:13 - 00000000 ____D C:\Program Files\Speccy
2015-07-05 09:11 - 2015-07-05 09:12 - 05127432 _____ (Piriform Ltd) C:\Users\Jirace\Downloads\spsetup128.exe
2015-07-05 08:40 - 2015-07-05 08:40 - 00000331 _____ C:\Users\Jirace\Desktop\to check.txt
2015-07-05 08:31 - 2015-07-05 08:31 - 00347816 _____ (Microsoft Corporation) C:\Users\Jirace\Desktop\MicrosoftFixit.Pictures.MATSKB.Run.exe

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-10 20:48 - 2015-05-31 08:14 - 00000000 ____D C:\Users\Jirace\AppData\Roaming\5kplayer
2015-07-10 20:48 - 2015-05-24 10:37 - 00000000 ____D C:\Users\Jirace\AppData\Roaming\qBittorrent
2015-07-10 20:48 - 2015-05-24 10:15 - 00000000 ____D C:\ProgramData\NVIDIA
2015-07-10 20:48 - 2015-05-24 10:14 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2015-07-10 20:48 - 2015-05-24 10:10 - 00000000 ____D C:\Program Files (x86)\LSI
2015-07-10 20:48 - 2015-05-24 10:08 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2015-07-10 20:48 - 2015-05-24 09:50 - 00000000 ____D C:\users\Jirace
2015-07-10 20:48 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\registration
2015-07-10 20:48 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\Help
2015-07-10 20:48 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\AppCompat
2015-07-10 20:47 - 2015-05-24 10:14 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-07-10 20:15 - 2015-05-24 11:38 - 00000000 ____D C:\ProgramData\Riot Games
2015-07-09 18:16 - 2015-05-24 13:55 - 00000000 ____D C:\Temp
2015-07-09 18:14 - 2015-05-29 16:40 - 00000000 ____D C:\ProgramData\boost_interprocess
2015-07-05 10:29 - 2015-05-24 10:11 - 00000390 _____ C:\Windows\Tasks\update-S-1-5-21-3761918697-3428231966-3298801265-1000.job
2015-07-05 10:16 - 2015-05-24 10:05 - 00001036 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-07-05 10:16 - 2015-05-24 10:05 - 00001032 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-07-05 09:16 - 2009-07-13 20:51 - 00028343 _____ C:\Windows\setupact.log
2015-07-05 08:48 - 2009-07-13 20:45 - 00014016 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-07-05 08:48 - 2009-07-13 20:45 - 00014016 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-07-05 08:43 - 2015-05-24 09:28 - 01593580 _____ C:\Windows\WindowsUpdate.log
2015-07-05 08:40 - 2009-07-13 21:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-05 07:19 - 2015-05-24 10:11 - 00000390 _____ C:\Windows\Tasks\update-sys.job
2015-07-04 06:56 - 2015-05-24 09:53 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2015-07-01 13:57 - 2015-05-24 11:11 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-07-01 13:48 - 2015-05-24 09:52 - 00442264 _____ (Avast Software s.r.o.) C:\Windows\System32\Drivers\aswsp.sys
2015-06-24 03:36 - 2015-05-29 16:41 - 01756424 _____ (NVIDIA Corporation) C:\Windows\System32\nvspbridge64.dll
2015-06-24 03:36 - 2015-05-29 16:41 - 01571696 _____ (NVIDIA Corporation) C:\Windows\System32\nvspcap64.dll
2015-06-24 03:36 - 2015-05-29 16:41 - 01320120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2015-06-24 03:36 - 2015-05-29 16:41 - 01316000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2015-06-20 16:19 - 2015-05-24 10:10 - 00000000 ____D C:\Users\Jirace\AppData\Local\LSI
2015-06-20 07:06 - 2015-05-24 10:16 - 00058778 _____ C:\Windows\PFRO.log
2015-06-19 19:06 - 2015-05-29 16:54 - 00000000 ____D C:\Users\Jirace\AppData\Roaming\Skype

Some files in TEMP:
====================
C:\Users\Jirace\AppData\Local\Temp\130772133961054688.exe
C:\Users\Jirace\AppData\Local\Temp\13077213402962890615.exe
C:\Users\Jirace\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Jirace\AppData\Local\Temp\nvStInst.exe


==================== Known DLLs (Whitelisted) ================

[2015-05-24 16:38] - [2015-03-04 21:12] - 0404480 ____A () C:\Windows\System32\gdi32.dll

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== Restore Points =========================

Restore point made on: 2015-07-05 10:54:19

==================== Memory info ===========================

Percentage of memory in use: 15%
Total physical RAM: 3519.3 MB
Available physical RAM: 2958.38 MB
Total Virtual: 3517.45 MB
Available Virtual: 2944.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:97.65 GB) (Free:32.06 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (jirace) (Fixed) (Total:172.8 GB) (Free:7.51 GB) NTFS
Drive e: () (Fixed) (Total:195.31 GB) (Free:11.74 GB) NTFS
Drive f: () (Removable) (Total:7.24 GB) (Free:4.24 GB) FAT32
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 336D1186)
Partition 1: (Active) - (Size=97.7 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=195.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=172.8 GB) - (Type=OF Extended)

========================================================
Disk: 1 (Size: 7.3 GB) (Disk ID: 02D0E3CB)
Partition 1: (Active) - (Size=7.3 GB) - (Type=0B)


LastRegBack: 2015-07-04 07:50

==================== End of log ============================


  • 0

#4
Essexboy
Posted 12 July 2015 - 08:11 AM

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Hmm I can see nothing untoward

Download the attached fixlist to the same location as FRST
Start FRST as before and press fix
On completion try a normal boot
Attached File  fixlist.txt   31bytes   213 downloads
  • 0

#5
Jiracev
Posted 12 July 2015 - 08:27 AM

Jiracev

    New Member

  • Topic Starter
  • Member
  • Pip
  • 7 posts

Did it, and nothing happened.


  • 0

#6
Essexboy
Posted 12 July 2015 - 03:00 PM

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Unfortunately I do not believe there is anything further that can be done except for a repair of windows http://www.sevenforu...ir-install.html
  • 0

#7
Jiracev
Posted 12 July 2015 - 03:31 PM

Jiracev

    New Member

  • Topic Starter
  • Member
  • Pip
  • 7 posts

Ok thanks, i'll try that, hmm should i (if i'm able which i don't know) close the topic or post how i solved and so?


  • 0

#8
Essexboy
Posted 13 July 2015 - 07:30 AM

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
No need as I can close this but let me know if you decide to go that way
  • 0

#9
Jiracev
Posted 13 July 2015 - 12:24 PM

Jiracev

    New Member

  • Topic Starter
  • Member
  • Pip
  • 7 posts

Well, i've tried, will end up formatting, thanks a lot for all your time and help!


  • 0

#10
Essexboy
Posted 13 July 2015 - 12:39 PM

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Sorry it was not a better result
  • 0

#11
Essexboy
Posted 15 July 2015 - 07:43 AM

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. :)

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.


  • 0
Back to Virus, Spyware, Malware Removal · Next Unread Topic →




Similar Topics


Also tagged with one or more of these keywords: boot, Startuprepairoofline

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Virus, Spyware, Malware Removal

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP