This topic is locked
Hello my name is Tristen and I need help ridding my computer of the requested resource in use virus. I have tried everything and i cannot run any kind of antvirus or Malware remover. I am at a loss. Can u Please help? I tried to follow the instructions you left in another thread but i could not open the apps needed. I got the same error message.
Thank you
LastRegBack: 2015-07-18 18:37
==================== End of FRST.txt ============================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-03-2017
Ran by Tristen (08-04-2017 09:48:01)
Running from C:\Users\Tristen\Desktop
Windows 7 Ultimate Service Pack 1 (X64) (2017-04-07 17:56:54)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-1336182512-3399560752-349346916-500 - Administrator - Disabled)
Guest (S-1-5-21-1336182512-3399560752-349346916-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1336182512-3399560752-349346916-1002 - Limited - Enabled)
Tristen (S-1-5-21-1336182512-3399560752-349346916-1000 - Administrator - Enabled) => C:\Users\Tristen
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avast Antivirus (Disabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Disabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov)
BitTorrent (HKU\S-1-5-21-1336182512-3399560752-349346916-1000\...\BitTorrent) (Version: 7.10.0.43581 - BitTorrent Inc.)
DragonBoost (HKU\S-1-5-21-1336182512-3399560752-349346916-1000\...\DragonBoost) (Version: - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 57.0.2987.133 - Google Inc.)
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
Intel® Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.15.10.1930 - Intel Corporation)
SafeZone Stable 3.55.2393.596 (x32 Version: 3.55.2393.596 - Avast Software) Hidden
WinRAR 5.40 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {5C845B23-CA74-4CBB-A34B-5CD8FE5188D1} - System32\Tasks\DriverUpdate Startup.job => C:\Program Files\DriverUpdate\DriverUpdate.exe
Task: {6599B4DE-2EAF-4664-831C-239C2F3F7B2E} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2017-04-07] (AVAST Software)
Task: {CAE4C472-ACD9-4B6B-9FAD-815EDBD89201} - System32\Tasks\SafeZone scheduled Autoupdate 1491590369 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2017-03-22] (Avast Software)
Task: {D007D36E-596F-42C6-9EEA-FE543D25586F} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-04-07] (AVAST Software)
Task: {DFAB22F1-0DAF-493D-A84B-9477F25FC44B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-04-07] (Google Inc.)
Task: {FFF02F7F-4D7E-4A50-9030-CDEB4E0DFE67} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-04-07] (Google Inc.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
==================== Loaded Modules (Whitelisted) ==============
2017-01-05 17:36 - 2017-01-05 17:36 - 00077824 _____ () C:\Users\Tristen\AppData\Local\ntuserlitelist\dataup\dataup.exe
2017-03-29 19:04 - 2017-03-29 19:04 - 00833024 ____N () C:\windows\system32\tprdpw32.exe
2017-01-13 20:09 - 2017-01-13 20:09 - 00896512 _____ () C:\Users\Tristen\AppData\Local\ntuserlitelist\svcvmx\svcvmx.exe
2017-01-20 20:18 - 2017-01-20 20:18 - 01087488 _____ () C:\Users\Tristen\AppData\Local\ntuserlitelist\svcvmx\vmxclient.exe
2016-09-21 23:32 - 2016-09-21 23:32 - 00224768 _____ () C:\Users\Tristen\AppData\Local\ntuserlitelist\dataup\help_dll.dll
2017-01-14 19:40 - 2017-01-14 19:40 - 53460992 _____ () C:\Users\Tristen\AppData\Local\ntuserlitelist\svcvmx\libcef.dll
2016-06-15 17:15 - 2016-06-15 17:15 - 17599640 _____ () C:\Users\Tristen\AppData\Local\ntuserlitelist\svcvmx\pepflashplayer.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-13 22:34 - 2009-06-10 17:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-1336182512-3399560752-349346916-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Tristen\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{F2982C82-869C-46CC-9FD6-501D898061B8}] => (Allow) %SystemRoot%\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
FirewallRules: [{0A7A773F-930E-4A0A-A55E-74FFFF4568F3}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{2F1485D9-5E89-4BB5-9C02-EAC25B34BA78}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.596\SZBrowser.exe
FirewallRules: [TCP Query User{BB06EA5A-55F2-4038-B656-484130CBD771}C:\users\tristen\downloads\bittorrent.exe] => (Allow) C:\users\tristen\downloads\bittorrent.exe
FirewallRules: [UDP Query User{BAA466E0-2753-40B2-A32D-0A24D0F48D00}C:\users\tristen\downloads\bittorrent.exe] => (Allow) C:\users\tristen\downloads\bittorrent.exe
FirewallRules: [TCP Query User{2B3B8088-1D59-467A-A4F8-CCC21372B091}C:\users\tristen\downloads\bittorrent (1).exe] => (Allow) C:\users\tristen\downloads\bittorrent (1).exe
FirewallRules: [UDP Query User{975871EB-AF26-4FAA-9F09-1A40619861C0}C:\users\tristen\downloads\bittorrent (1).exe] => (Allow) C:\users\tristen\downloads\bittorrent (1).exe
FirewallRules: [{8C70164A-7CC9-43A2-8270-8DA0A28244DB}] => (Allow) C:\Users\Tristen\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{D7B1D7A1-97C9-47B1-8EE9-F4C17C16B70E}] => (Allow) C:\Users\Tristen\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{1676521B-7899-46A0-9EB5-8CB3F48BE864}] => (Allow) C:\Windows\system32\rundll32.exe
==================== Restore Points =========================
07-04-2017 14:35:21 Removed DriverUpdate
07-04-2017 14:45:20 Windows Update
07-04-2017 15:26:01 Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215
07-04-2017 15:27:00 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501
07-04-2017 18:37:05 Installed WeatherBuddy
07-04-2017 18:54:24 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501
08-04-2017 02:53:21 Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215
==================== Faulty Device Manager Devices =============
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (04/08/2017 09:11:01 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (04/08/2017 09:07:32 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (04/08/2017 09:04:08 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (04/08/2017 07:51:03 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (04/08/2017 04:42:51 AM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_64) - Failed to compile: System.AddIn.Contract, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a . Error code = 0x80070002
Error: (04/08/2017 04:42:05 AM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_64) - Failed to compile: PresentationFramework.Aero, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35 . Error code = 0x80070002
Error: (04/08/2017 03:24:51 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program SisterLocation.exe version 1.0.0.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: 13f8
Start Time: 01d2b037afe34df6
Termination Time: 665
Application Path: C:\Users\Tristen\Desktop\SisterLocation.exe
Report Id: 6886077e-1c2c-11e7-987e-00188b01b4d4
Error: (04/08/2017 02:47:06 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (04/08/2017 02:34:35 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program BlueStacks.exe version 2.6.108.8112 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: 1044
Start Time: 01d2b02bc1bf02c5
Termination Time: 2616
Application Path: C:\Program Files (x86)\BlueStacks\BlueStacks.exe
Report Id: 5bfcf501-1c25-11e7-bdc6-00188b01b4d4
Error: (04/08/2017 02:26:19 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 4101) (User: )
Description: Failed auto update retrieval of third-party root certificate from: <http://ctldl.windows...A77BB70D54.crt>with error: This operation returned because the timeout period expired.
.
System errors:
=============
Error: (04/08/2017 09:09:22 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Avast Antivirus service failed to start due to the following error:
The requested resource is in use.
Error: (04/08/2017 09:08:20 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: The server {3EB3C877-1F16-487C-9050-104DBCD66683} did not register with DCOM within the required timeout.
Error: (04/08/2017 09:07:36 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
The dependency service or group failed to start.
Error: (04/08/2017 09:06:28 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
The dependency service or group failed to start.
Error: (04/08/2017 09:06:28 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
The dependency service or group failed to start.
Error: (04/08/2017 09:06:28 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
The dependency service or group failed to start.
Error: (04/08/2017 09:06:28 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
The dependency service or group failed to start.
Error: (04/08/2017 09:06:28 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
The dependency service or group failed to start.
Error: (04/08/2017 09:06:28 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:
The dependency service or group failed to start.
Error: (04/08/2017 09:06:28 AM) (Source: DCOM) (EventID: 10005) (User: )
Description: DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server:
{9E175B6D-F52A-11D8-B9A5-505054503030}
==================== Memory info ===========================
Processor: Intel® Pentium® 4 CPU 3.00GHz
Percentage of memory in use: 67%
Total physical RAM: 2550.14 MB
Available physical RAM: 819.41 MB
Total Virtual: 5098.49 MB
Available Virtual: 3016.6 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:222.79 GB) (Free:73.17 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: (RECOVERY) (Fixed) (Total:10 GB) (Free:5.76 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.8 GB) (Disk ID: E8000000)
Partition 1: (Not Active) - (Size=39 MB) - (Type=DE)
Partition 2: (Not Active) - (Size=10 GB) - (Type=07 NTFS)
Partition 3: (Active) - (Size=222.8 GB) - (Type=07 NTFS)
==================== End of Addition.txt ============================
Sign In
Create Account
