Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Infected Laptop - CPU is 100%

Started by jasmill , Jul 26 2017 07:25 PM

This topic is locked

#1
jasmill

Posted 26 July 2017 - 07:25 PM

Member

Member
50 posts

This laptop is super infected. I ran Malwarebytes before coming here and removed 668 threats. Even after that the CPU is going nuts. It regularly hits 100%.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 26-07-2017

Ran by Dewayne Liggett (administrator) on OWNER-PC (26-07-2017 20:10:12)

Running from C:\Users\Dewayne Liggett\Desktop

Loaded Profiles: Dewayne Liggett (Available Profiles: Owner & Dewayne Liggett)

Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE

(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe

(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\SoftwareDistribution\Download\Install\ndp452-kb2901983-x86-x64-enu.exe

(Microsoft Corporation) C:\afba79d4f42dfbb7a2867349c1167419\Setup.exe

(Microsoft Corporation) C:\Windows\System32\msiexec.exe

(Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [] => [X]

HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{EE3026DA-3F90-4632-9FC8-A9C8F7D4EC3D}: [DhcpNameServer] 192.168.1.1

Internet Explorer:

==================

HKU\S-1-5-21-3039024503-3107911979-1817968902-1003\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/

HKU\S-1-5-21-3039024503-3107911979-1817968902-1003\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://start.toshiba.com/?cid=C001B2Y

SearchScopes: HKLM -> DefaultScope {{67A2568C-7A0A-4EED-AECC-B5405DE63B64}} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNO

SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKLM -> {{67A2568C-7A0A-4EED-AECC-B5405DE63B64}} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNO

SearchScopes: HKLM-x32 -> DefaultScope {{67A2568C-7A0A-4EED-AECC-B5405DE63B64}} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNO

SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKLM-x32 -> {{67A2568C-7A0A-4EED-AECC-B5405DE63B64}} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNO

SearchScopes: HKU\S-1-5-21-3039024503-3107911979-1817968902-1003 -> DefaultScope {29530B11-65C9-42E3-A4C8-6804D8D30EA7} URL = hxxp://www.google.com/search?sourceid=ie9&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNO

SearchScopes: HKU\S-1-5-21-3039024503-3107911979-1817968902-1003 -> {29530B11-65C9-42E3-A4C8-6804D8D30EA7} URL = hxxp://www.google.com/search?sourceid=ie9&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNO

SearchScopes: HKU\S-1-5-21-3039024503-3107911979-1817968902-1003 -> {{67A2568C-7A0A-4EED-AECC-B5405DE63B64}} URL =

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)

BHO-x32: No Name -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> No File

BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)

BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-07-21] (Sun Microsystems, Inc.)

DPF: HKLM-x32 {02BCC737-B171-4746-94C9-0D8A0B2C0089} hxxp://office.microsoft.com/_layouts/ClientBin/ieawsdc32.cab

FireFox:

========

FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_16_0_0_296.dll [2015-01-26] ()

FF Plugin: @microsoft.com/GENUINE -> disabled [No File]

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.31211.0\npctrl.dll [2014-12-11] ( Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_296.dll [2015-01-26] ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-18] ()

FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll [2011-07-21] (Sun Microsystems, Inc.)

FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.31211.0\npctrl.dll [2014-12-11] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-07-25] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-07-25] (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)

Chrome:

=======

CHR Profile: C:\Users\Dewayne Liggett\AppData\Local\Google\Chrome\User Data\Default [2017-07-26]

CHR Extension: (Google Slides) - C:\Users\Dewayne Liggett\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-07-25]

CHR Extension: (Google Docs) - C:\Users\Dewayne Liggett\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-07-25]

CHR Extension: (Google Drive) - C:\Users\Dewayne Liggett\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-07-25]

CHR Extension: (YouTube) - C:\Users\Dewayne Liggett\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-07-25]

CHR Extension: (Google Sheets) - C:\Users\Dewayne Liggett\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-07-25]

CHR Extension: (Google Docs Offline) - C:\Users\Dewayne Liggett\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-07-25]

CHR Extension: (Chrome Web Store Payments) - C:\Users\Dewayne Liggett\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-07-25]

CHR Extension: (Gmail) - C:\Users\Dewayne Liggett\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-07-25]

CHR Extension: (Chrome Media Router) - C:\Users\Dewayne Liggett\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-07-25]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes)

S4 PCCUJobMgr; C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.13.11\ccSvcHst.exe [126392 2011-07-19] (Symantec Corporation)

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

S4 TosCoSrv; "C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe" [X]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 MBAMSwissArmy; C:\windows\System32\drivers\MBAMSwissArmy.sys [253856 2017-07-26] (Malwarebytes)

S3 USBAAPL64; C:\windows\System32\Drivers\usbaapl64.sys [54784 2012-12-13] (Apple, Inc.) [File not signed]

S3 ZTEusbgps; C:\windows\System32\DRIVERS\ZTEusbgps.sys [121344 2010-12-03] (ZTE Incorporated)

S3 ZTEusbnmeaext; C:\windows\System32\DRIVERS\ZTEusbnmeaext.sys [121344 2010-12-03] (ZTE Incorporated)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-07-26 20:10 - 2017-07-26 20:12 - 00010751 _____ C:\Users\Dewayne Liggett\Desktop\FRST.txt

2017-07-26 20:09 - 2017-07-26 20:10 - 00000000 ____D C:\FRST

2017-07-26 20:08 - 2017-07-26 20:08 - 02382848 _____ (Farbar) C:\Users\Dewayne Liggett\Desktop\FRST64.exe

2017-07-26 19:55 - 2017-07-26 19:56 - 00000000 ____D C:\afba79d4f42dfbb7a2867349c1167419

2017-07-25 22:39 - 2017-07-25 22:45 - 00007598 _____ C:\Users\Dewayne Liggett\AppData\Local\Resmon.ResmonCfg

2017-07-25 22:38 - 2017-07-25 22:38 - 00002242 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2017-07-25 22:38 - 2017-07-25 22:38 - 00002230 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2017-07-25 22:35 - 2017-07-25 22:36 - 00000000 ____D C:\Users\Dewayne Liggett\AppData\Local\Deployment

2017-07-25 22:35 - 2017-07-25 22:35 - 00000000 ____D C:\Users\Dewayne Liggett\AppData\Local\Apps\2.0

2017-07-25 22:29 - 2017-07-25 22:29 - 00000000 __SHD C:\Users\Dewayne Liggett\AppData\LocalLow\EmieUserList

2017-07-25 22:29 - 2017-07-25 22:29 - 00000000 __SHD C:\Users\Dewayne Liggett\AppData\LocalLow\EmieSiteList

2017-07-25 22:29 - 2017-07-25 22:29 - 00000000 __SHD C:\Users\Dewayne Liggett\AppData\LocalLow\EmieBrowserModeList

2017-07-25 21:48 - 2017-07-25 21:48 - 00000000 __SHD C:\Users\Dewayne Liggett\AppData\Local\EmieUserList

2017-07-25 21:48 - 2017-07-25 21:48 - 00000000 __SHD C:\Users\Dewayne Liggett\AppData\Local\EmieSiteList

2017-07-25 21:48 - 2017-07-25 21:48 - 00000000 __SHD C:\Users\Dewayne Liggett\AppData\Local\EmieBrowserModeList

2017-07-25 21:27 - 2017-07-25 21:27 - 00000000 ____D C:\Users\Dewayne Liggett\AppData\Local\VS Revo Group

2017-07-25 20:45 - 2017-07-25 20:45 - 00007601 _____ C:\Users\Owner\AppData\Local\Resmon.ResmonCfg

2017-07-25 20:22 - 2017-07-25 20:22 - 01130328 _____ (Google Inc.) C:\Users\Owner\Downloads\ChromeSetup.exe

2017-07-25 19:44 - 2017-07-25 22:24 - 00602358 _____ C:\windows\ntbtlog.txt

2017-07-25 19:38 - 2017-07-26 19:52 - 00253856 _____ (Malwarebytes) C:\windows\system32\Drivers\MBAMSwissArmy.sys

2017-07-25 19:38 - 2017-07-25 19:38 - 00001878 _____ C:\Users\Public\Desktop\Malwarebytes.lnk

2017-07-25 19:38 - 2017-07-25 19:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes

2017-07-25 19:38 - 2017-07-25 19:38 - 00000000 ____D C:\ProgramData\Malwarebytes

2017-07-25 19:38 - 2017-07-25 19:38 - 00000000 ____D C:\Program Files\Malwarebytes

2017-07-25 19:38 - 2017-06-27 12:06 - 00077376 _____ C:\windows\system32\Drivers\mbae64.sys

2017-07-25 19:35 - 2017-07-25 19:35 - 00001088 _____ C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk

2017-07-25 19:35 - 2017-07-25 19:35 - 00000000 ____D C:\Users\Owner\AppData\Local\VS Revo Group

2017-07-25 19:35 - 2017-07-25 19:35 - 00000000 ____D C:\ProgramData\VS Revo Group

2017-07-25 19:35 - 2017-07-25 19:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro

2017-07-25 19:35 - 2016-12-16 08:53 - 00040984 _____ (VS Revo Group) C:\windows\system32\Drivers\revoflt.sys

2017-07-25 19:34 - 2017-07-25 19:34 - 00000000 ____D C:\Program Files\VS Revo Group

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-07-26 20:07 - 2009-07-13 23:45 - 00024608 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2017-07-26 20:07 - 2009-07-13 23:45 - 00024608 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2017-07-26 20:01 - 2011-11-28 09:22 - 00776078 _____ C:\windows\SysWOW64\PerfStringBackup.INI

2017-07-26 20:01 - 2009-07-14 00:13 - 00776078 _____ C:\windows\system32\PerfStringBackup.INI

2017-07-26 20:01 - 2009-07-13 22:20 - 00000000 ____D C:\windows\inf

2017-07-26 19:45 - 2009-07-14 00:08 - 00000006 ____H C:\windows\Tasks\SA.DAT

2017-07-25 22:44 - 2012-10-17 11:19 - 00000830 _____ C:\windows\Tasks\Adobe Flash Player Updater.job

2017-07-25 22:38 - 2013-11-18 16:35 - 00000000 ____D C:\Users\Dewayne Liggett\AppData\Local\Google

2017-07-25 22:38 - 2011-09-14 13:59 - 00000000 ____D C:\Program Files (x86)\Google

2017-07-25 22:36 - 2011-09-14 13:59 - 00003330 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA

2017-07-25 22:36 - 2011-09-14 13:59 - 00003202 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore

2017-07-25 22:26 - 2011-09-14 13:59 - 00000000 ____D C:\Program Files\Google

2017-07-25 22:13 - 2012-11-14 19:13 - 00000000 ____D C:\windows\Minidump

2017-07-25 22:07 - 2011-07-21 20:50 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2017-07-25 22:06 - 2011-07-21 20:56 - 00000000 ____D C:\ProgramData\Toshiba

2017-07-25 22:06 - 2011-07-21 20:54 - 00000000 ____D C:\Program Files (x86)\Toshiba

2017-07-25 22:05 - 2011-07-21 20:49 - 00000000 ____D C:\Program Files\TOSHIBA

2017-07-25 21:49 - 2013-11-18 16:28 - 00001428 _____ C:\Users\Dewayne Liggett\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2017-07-25 21:49 - 2011-09-14 13:58 - 00000000 ____D C:\ProgramData\Google

2017-07-25 21:46 - 2015-01-21 18:50 - 00000000 ____D C:\ProgramData\Yahoo!

2017-07-25 21:45 - 2009-07-14 00:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2017-07-25 21:44 - 2011-09-14 13:54 - 00000000 ____D C:\ProgramData\WildTangent

2017-07-25 21:43 - 2011-09-14 13:49 - 00000000 ____D C:\ProgramData\Norton

2017-07-25 21:41 - 2011-09-14 13:48 - 00000000 ____D C:\Program Files (x86)\NortonInstaller

2017-07-25 21:31 - 2013-06-25 17:49 - 00000000 ____D C:\Users\Owner\AppData\Local\CrashDumps

2017-07-25 20:05 - 2015-01-21 18:50 - 00000000 ____D C:\Users\Owner\AppData\Local\DesktopTemperature

==================== Files in the root of some directories =======

2017-07-25 22:39 - 2017-07-25 22:45 - 0007598 _____ () C:\Users\Dewayne Liggett\AppData\Local\Resmon.ResmonCfg

Some files in TEMP:

====================

2013-05-17 16:16 - 2013-05-17 16:16 - 0388560 _____ (Igor Pavlov) C:\Users\Owner\AppData\Local\Temp\DefaultAssets.exe

2013-05-17 16:16 - 2013-05-17 16:16 - 0286072 _____ (Igor Pavlov) C:\Users\Owner\AppData\Local\Temp\DefaultOfflineContent.exe

2011-11-27 07:41 - 2010-11-09 07:51 - 0073728 ____R () C:\Users\Owner\AppData\Local\Temp\eject.exe

2013-05-17 15:43 - 2013-05-17 16:16 - 0000000 _____ () C:\Users\Owner\AppData\Local\Temp\NLStubInstallerResources.dll

2013-05-17 16:16 - 2013-05-17 16:16 - 14592720 _____ (Symantec Corporation ) C:\Users\Owner\AppData\Local\Temp\PCCU_Installer.exe

2015-01-21 18:51 - 2015-01-21 18:51 - 0008704 _____ (Microsoft Corporation) C:\Users\Owner\AppData\Local\Temp\SpOrder.dll

2015-01-21 18:49 - 2015-01-21 18:49 - 0167776 _____ (Symantec Corporation) C:\Users\Owner\AppData\Local\Temp\SymCCIS.dll

2011-11-14 23:49 - 2011-11-14 23:49 - 0788544 ____N (Symantec Corporation) C:\Users\Owner\AppData\Local\Temp\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}_NIS_25986.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\windows\system32\winlogon.exe => File is digitally signed

C:\windows\system32\wininit.exe => File is digitally signed

C:\windows\SysWOW64\wininit.exe => File is digitally signed

C:\windows\explorer.exe => File is digitally signed

C:\windows\SysWOW64\explorer.exe => File is digitally signed

C:\windows\system32\svchost.exe => File is digitally signed

C:\windows\SysWOW64\svchost.exe => File is digitally signed

C:\windows\system32\services.exe => File is digitally signed

C:\windows\system32\User32.dll => File is digitally signed

C:\windows\SysWOW64\User32.dll => File is digitally signed

C:\windows\system32\userinit.exe => File is digitally signed

C:\windows\SysWOW64\userinit.exe => File is digitally signed

C:\windows\system32\rpcss.dll => File is digitally signed

C:\windows\system32\dnsapi.dll => File is digitally signed

C:\windows\SysWOW64\dnsapi.dll => File is digitally signed

C:\windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-01-27 17:48

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-07-2017

Ran by Dewayne Liggett (26-07-2017 20:14:41)

Running from C:\Users\Dewayne Liggett\Desktop

Windows 7 Home Premium Service Pack 1 (X64) (2011-11-15 02:31:29)

Boot Mode: Normal

==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-3039024503-3107911979-1817968902-500 - Administrator - Disabled)

Dewayne Liggett (S-1-5-21-3039024503-3107911979-1817968902-1003 - Administrator - Enabled) => C:\Users\Dewayne Liggett

Guest (S-1-5-21-3039024503-3107911979-1817968902-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-3039024503-3107911979-1817968902-1002 - Limited - Enabled)

Owner (S-1-5-21-3039024503-3107911979-1817968902-1000 - Administrator - Enabled) => C:\Users\Owner

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.6.0.19140 - Adobe Systems Incorporated)

Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.296 - Adobe Systems Incorporated)

Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.296 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.10) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)

Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

Atheros Communications Inc.® AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.36 - Atheros Communications Inc.)

ATI Catalyst Install Manager (HKLM\...\{4ACA5AE7-E68C-5A48-F8E6-D67946267506}) (Version: 3.0.829.0 - ATI Technologies, Inc.)

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

Canon MP280 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP280_series) (Version: - )

Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.54.1.0 - Conexant)

D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden

ETDWare PS/2-X64 8.0.8.0_R01 (HKLM\...\Elantech) (Version: 8.0.8.0 - ELAN Microelectronic Corp.)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 60.0.3112.78 - Google Inc.)

Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden

Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden

iCloud (HKLM\...\{6096C0CC-7E19-4355-87F0-627EC5AA146D}) (Version: 4.0.3.56 - Apple Inc.)

iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)

Java™ 6 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216025FF}) (Version: 6.0.250 - Oracle)

Junk Mail filter update (HKLM-x32\...\{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Label@Once 1.0 (HKLM-x32\...\{0D795777-9D60-4692-8386-F2B3F2B5E5BF}) (Version: 1.0 - Corel)

Malwarebytes version 3.1.2.1733 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.1.2.1733 - Malwarebytes)

Mesh Runtime (HKLM-x32\...\{8C6D6116-B724-4810-8F2D-D047E6B7D68E}) (Version: 15.4.5722.2 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)

Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Office Click-to-Run 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Office Starter 2010 - English (HKLM-x32\...\{90140011-0066-0409-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.31211.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)

PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)

PlayReady PC Runtime x86 (HKLM-x32\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)

QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)

Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30124 - Realtek Semiconductor Corp.)

Realtek WLAN Driver (HKLM-x32\...\{9D3D8C60-A55F-4fed-B2B9-173001290E16}) (Version: 2.00.0016 - REALTEK Semiconductor Corp.)

Revo Uninstaller Pro 3.1.8 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.8 - VS Revo Group, Ltd.)

Shutterfly Express Uploader (HKLM-x32\...\{7CD0118B-FE1C-6513-7FCC-2D4BC220DD1F}) (Version: 1.2.0 - Shutterfly, Inc.) Hidden

Shutterfly Express Uploader (HKLM-x32\...\com.Shutterfly.ExpressUploader) (Version: 1.2.0.0 - Shutterfly, Inc.)

Skype Launcher (HKLM-x32\...\{DA84ECBF-4B79-47F2-B34C-95C38484C058}) (Version: 2.01 - TOSHIBA Corporation)

TOSHIBA HDD/SSD Alert (HKLM\...\{D4322448-B6AF-4316-B859-D8A0E84DCB38}) (Version: 3.1.64.9 - TOSHIBA Corporation)

TOSHIBA Media Controller (HKLM-x32\...\{C7A4F26F-F9B0-41B2-8659-99181108CDE3}) (Version: 1.0.87.4 - TOSHIBA CORPORATION)

TOSHIBA Web Camera Application (HKLM-x32\...\InstallShield_{6F3C8901-EBD3-470D-87F8-AC210F6E5E02}) (Version: 2.0.3.3 - TOSHIBA Corporation)

Verizon Wireless AC30 Firmware Updates (HKLM-x32\...\{3F46EA41-3D29-4904-97AD-374826F8D9DC}) (Version: 1.0.8 - Smith Micro Software, Inc.)

VZAccess Manager (HKLM-x32\...\{613F2884-08BD-4561-9934-111D80A2F30B}) (Version: 7.3.14.0 - Smith Micro Software Inc.)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)

Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)

ZTE USB Drivers (HKLM-x32\...\{5C5BB2C4-54F9-4A17-8845-090C7BEC232C}) (Version: 1.0.012 - ZTE)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ContextMenuHandlers01: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2014-08-11] (Apple Inc.)

ContextMenuHandlers03: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)

ContextMenuHandlers05: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll [2011-06-08] (Advanced Micro Devices, Inc.)

ContextMenuHandlers06: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)

ContextMenuHandlers06: [RUShellExt] -> {2C5515DC-2A7E-4BFD-B813-CACC2B685EB7} => C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RUExt.dll [2016-12-15] (VS Revo Group)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {31A3E814-2C36-46A5-B721-C24751922E27} - System32\Tasks\Symantec\Norton Error Processor 18.7.1.3 => C:\Program Files (x86)\Norton AntiVirus\Engine\18.7.1.3\SymErr.exe

Task: {784368A9-D099-4025-9F61-1DB3CE7FC8F0} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {8D7DC8E0-B64C-4BC3-95B9-5FB805B2BCA1} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-01-26] (Adobe Systems Incorporated)

Task: {953ACB42-5FB1-414F-85C7-85B1207D4030} - \ArcadeParlor -> No File <==== ATTENTION

Task: {A12518D9-7C98-4321-BC0E-1AEFA639F239} - System32\Tasks\PC Checkup 3 Weekly Scan => C:\Program Files (x86)\PC Checkup\NLAppLauncher.exe

Task: {AD3F19AF-6B9B-4210-9A60-38466E184868} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)

Task: {B79343E5-ED11-47ED-974A-6A404EFCC618} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-07-25] (Google Inc.)

Task: {B8B8D5DA-951B-46A1-BE49-823195496653} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-07-25] (Google Inc.)

Task: {BD826A1E-CA5E-444F-8A2D-B1BAA81E2993} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => %windir%\system32\rundll32.exe aepdu.dll,AePduRunUpdate -nolegacy

Task: {C1414F89-6B38-44EE-B79A-85A63B8A319F} - System32\Tasks\Symantec\Norton Error Analyzer 18.7.1.3 => C:\Program Files (x86)\Norton AntiVirus\Engine\18.7.1.3\SymErr.exe

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMSwissArmy => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMSwissArmy => ""="Driver"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 21:34 - 2009-06-10 16:00 - 00000824 _____ C:\windows\system32\Drivers\etc\hosts

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3039024503-3107911979-1817968902-1003\Control Panel\Desktop\\Wallpaper -> C:\Users\Dewayne Liggett\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 192.168.1.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

MSCONFIG\startupreg: ETDCtrl => %ProgramFiles%\Elantech\ETDCtrl.exe

MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

MSCONFIG\startupreg: Malwarebytes TrayApp => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe

MSCONFIG\startupreg: NortonOnlineBackupReminder => "C:\Program Files (x86)\Toshiba\Toshiba Online Backup\Activation\TOBuActivation.exe" UNATTENDED

MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime

MSCONFIG\startupreg: SmartAudio => C:\Program Files\CONEXANT\SAII\SAIICpl.exe /t

MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

MSCONFIG\startupreg: swg => "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

MSCONFIG\startupreg: TCrdMain => %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe

MSCONFIG\startupreg: ToshibaAppPlace => "C:\Program Files (x86)\Toshiba\Toshiba App Place\ToshibaAppPlace.exe"

MSCONFIG\startupreg: TosNC => %ProgramFiles%\Toshiba\BulletinBoard\TosNcCore.exe

MSCONFIG\startupreg: TosReelTimeMonitor => %ProgramFiles%\TOSHIBA\ReelTime\TosReelTimeMonitor.exe

MSCONFIG\startupreg: TosSENotify => C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe

MSCONFIG\startupreg: TosVolRegulator => C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe

MSCONFIG\startupreg: TPwrMain => %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{E7EC2917-1747-4EA6-A12E-ABD45B120283}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{302B8DE8-7564-4D70-AE6E-28AFE382FECF}] => (Allow) LPort=2869

FirewallRules: [{75A6D0D1-C09F-4402-ACD9-BD39FF813DA6}] => (Allow) LPort=1900

FirewallRules: [{E66B86AE-5796-43D8-A132-770191C88A4B}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

FirewallRules: [{4CC5DA37-317E-4BE9-A02E-D32B62FEAD84}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe

FirewallRules: [TCP Query User{8C39E855-1E81-42D4-A10B-9871045D2A7E}C:\program files (x86)\java\jre6\bin\java.exe] => (Block) C:\program files (x86)\java\jre6\bin\java.exe

FirewallRules: [UDP Query User{0A479C4A-0FB9-42C8-82F9-41A6F982AEC3}C:\program files (x86)\java\jre6\bin\java.exe] => (Block) C:\program files (x86)\java\jre6\bin\java.exe

FirewallRules: [{98CD549B-F7F9-443D-A531-63BD8C5664A2}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{F7AF6E80-7DBF-4B24-9503-9A7F65E66C1F}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{49273C62-6E33-42B2-9334-F24AEF3D54D8}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{09D0ECDF-7D7E-4699-B4A9-33454FD15DD5}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{ABF0BC24-303A-450B-994E-FC4974BB929F}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe

FirewallRules: [{7B8D37B1-C0D6-4FDE-A439-0D45C7C059C4}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Restore Points =========================

13-12-2014 20:38:44 Windows Update

18-12-2014 17:29:29 Windows Update

19-12-2014 15:59:31 Windows Update

27-12-2014 00:39:33 Windows Update

01-01-2015 14:34:42 Windows Update

06-01-2015 18:34:13 Windows Update

13-01-2015 19:59:41 Windows Update

14-01-2015 17:45:24 Windows Update

15-01-2015 17:22:10 Windows Update

20-01-2015 17:51:38 Windows Update

23-01-2015 18:56:57 Windows Update

27-01-2015 17:48:07 Windows Update

28-01-2015 19:01:12 Windows Update

26-07-2017 19:49:43 Windows Update

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:

==================

Error: (07/26/2017 07:45:52 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (07/25/2017 10:28:19 PM) (Source: WinMgmt) (EventID: 10) (User: )

Error: (07/25/2017 10:06:59 PM) (Source: MsiInstaller) (EventID: 11719) (User: Owner-PC)

Description: Product: TOSHIBA ReelTime -- Error 1719.Windows Installer service could not be accessed. Contact your support personnel to verify that it is properly registered and enabled.

Error: (07/25/2017 10:06:50 PM) (Source: System Restore) (EventID: 8193) (User: )

Description: Failed to create restore point (Process = C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RevoUninPro.exe Files\VS Revo Group\Revo Uninstaller Pro\RevoUninPro.exe" ; Description = Revo Uninstaller Pro's restore point - TOSHIBA ReelTime; Error = 0x8007043c).

Error: (07/25/2017 10:05:57 PM) (Source: System Restore) (EventID: 8193) (User: )

Error: (07/25/2017 10:05:04 PM) (Source: MsiInstaller) (EventID: 11719) (User: Owner-PC)

Description: Product: TOSHIBA Value Added Package -- Error 1719.Windows Installer service could not be accessed. Contact your support personnel to verify that it is properly registered and enabled.

Error: (07/25/2017 10:04:51 PM) (Source: System Restore) (EventID: 8193) (User: )

Error: (07/25/2017 10:04:18 PM) (Source: System Restore) (EventID: 8193) (User: )

Error: (07/25/2017 10:03:36 PM) (Source: System Restore) (EventID: 8193) (User: )

Description: Failed to create restore point (Process = C:\Users\DEWAYN~1\AppData\Local\Temp\set21F1.tmp -deleter -l0x9 -your_launchersetup.exe -clone_of"C:\Program Files (x86)\InstallShield Installation Information\{0AF17224-CF88-40B8-BB1A-D179369847B4}\"; Description = Removed TOSHIBA Supervisor Password; Error = 0x8007043c).

Error: (07/25/2017 10:03:27 PM) (Source: System Restore) (EventID: 8193) (User: )

System errors:

=============

Error: (07/26/2017 08:09:02 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)

Description: Installation Failure: Windows failed to install the following update with error 0x800b0100: Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2 SP1 for x64-based Systems (KB3097989).

Error: (07/25/2017 10:52:49 PM) (Source: DCOM) (EventID: 10010) (User: )

Description: The server {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} did not register with DCOM within the required timeout.

Error: (07/25/2017 10:23:58 PM) (Source: Service Control Manager) (EventID: 7001) (User: )