Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Help with sluggish computer not rendering images properly

Started by RiffRaffMama , Apr 03 2020 02:23 AM

rendering Revit GPU Dell AMD graphics

Please log in to reply

#61
RiffRaffMama

Posted 20 April 2020 - 04:52 AM

Member

Topic Starter
Member
57 posts

Ahh. Yes, I see. My bad. Ok, the single report is below.

With the virtual memory thing - there is an "initial size" box and a "maximum size" box. Wasn't sure which one you intended me to put the 1600 in, so given what was currently in the boxes was 900 and 2296 I changed them to 1600 and 4000 respectively. Or should I double 900 as the initial size?

As for Firefox, I checked 10 mins ago and it said 12. I turned off OneTab, restarted FF and it said 5. I turned OneTab back on, restarted FF and it still said 5. I've had my laptop on all day watching youtube and netflix. Can you pleeeease tell me why it always says FF is running far more instances than I have windows open? It's always bothered me. I have one FF screen open, but it says I've got 5.

One other thing, when I ran ShellExView yesterday, one of the "no" things that I disabled as per your instructions was a Revit thing. Revit has no fewer than 19 apps listed in my program files list in settings - all of them different. They all invite themselves when you install Revit, you don't get to pick and choose and they're not add-ons. One of them was in the "no" list so I disabled it. I've just gone to open Revit and have been greeted by the warning dialogue below. It's running fine, but I honestly don't know if that's an integral component or what. What do you advise?

Thanks.

Farbar Recovery Scan Tool (x64) Version: 19-04-2020
Ran by tracy (20-04-2020 20:43:46)
Running from C:\Program Files (x86)
Boot Mode: Normal

================== Search Files: "libcef.dll;amdihk64.dll;mscorlib.ni.dll;PresentationCore.ni.dll;atidxx64.dll;System.ni.dll;atiumd64.dll;atiumd6a.dll" =============

C:\Windows\WinSxS\x86_netfx4-system_ni_b03f5f7f11d50a3a_4.0.15788.0_none_304d3dfab4e8f798\system.ni.dll
[2019-03-19 14:46][2019-03-19 14:46] 010842528 _____ (Microsoft Corporation) 0D161DBCB4CAF669A97A468BC7C25638 [File is digitally signed]

C:\Windows\WinSxS\x86_netfx4-mscorlib_ni_b03f5f7f11d50a3a_4.0.15788.328_none_14d40676dad78543\mscorlib.ni.dll
[2020-04-10 21:51][2020-01-10 05:46] 021044584 _____ (Microsoft Corporation) FD9AA28B9A3D2A81AC47E925FFB2100A [File is digitally signed]

C:\Windows\WinSxS\x86_netfx4-mscorlib_ni_b03f5f7f11d50a3a_4.0.15788.297_none_14d3034adad870fc\mscorlib.ni.dll
[2020-02-07 04:25][2019-12-07 16:03] 021044600 _____ (Microsoft Corporation) D3D544D264070F0E62E5941BB41E5FEA [File is digitally signed]

C:\Windows\WinSxS\x86_netfx4-mscorlib_ni_b03f5f7f11d50a3a_4.0.15788.0_none_1c884509d1f23822\mscorlib.ni.dll
[2019-03-19 14:46][2019-03-19 14:46] 021036960 _____ (Microsoft Corporation) 82966551F5F6511EA2E4BE65B961FC97 [File is digitally signed]

C:\Windows\WinSxS\amd64_netfx4-system_ni_b03f5f7f11d50a3a_4.0.15788.0_none_e8a00723a06cce92\system.ni.dll
[2019-03-19 14:46][2019-03-19 14:46] 013043104 _____ (Microsoft Corporation) B0559C126B46E45A10D662C09C4E4D23 [File is digitally signed]

C:\Windows\WinSxS\amd64_netfx4-mscorlib_ni_b03f5f7f11d50a3a_4.0.15788.328_none_cd26cf9fc65b5c3d\mscorlib.ni.dll
[2020-04-10 21:51][2020-01-10 05:46] 023084896 _____ (Microsoft Corporation) 2143CC44A0E2816C369CA40E2F2BFA82 [File is digitally signed]

C:\Windows\WinSxS\amd64_netfx4-mscorlib_ni_b03f5f7f11d50a3a_4.0.15788.297_none_cd25cc73c65c47f6\mscorlib.ni.dll
[2020-02-07 04:25][2019-12-07 16:03] 023084904 _____ (Microsoft Corporation) 3CA9FC6F80077E8CC9D13C20BE684A23 [File is digitally signed]

C:\Windows\WinSxS\amd64_netfx4-mscorlib_ni_b03f5f7f11d50a3a_4.0.15788.0_none_d4db0e32bd760f1c\mscorlib.ni.dll
[2019-03-19 14:46][2019-03-19 14:46] 023114656 _____ (Microsoft Corporation) 30EEBFCBCCAD3E1C32610F92B93AE1F5 [File is digitally signed]

C:\Windows\System32\amdihk64.dll
[2020-04-12 03:27][2020-04-02 19:43] 000198120 _____ (Advanced Micro Devices, Inc.) 73C085A42C9F75266A196D9EBDB72F30 [File is digitally signed]

C:\Windows\System32\atidxx64.dll
[2020-04-12 03:28][2020-04-02 19:44] 000124840 _____ () 8C905337DF10F118F7708E16715FD1D4 [File is digitally signed]

C:\Windows\System32\DriverStore\FileRepository\u0353575.inf_amd64_8e19095ae833d985\B353558\amdihk64.dll
[2020-04-12 03:27][2020-04-02 19:43] 000198120 _____ (Advanced Micro Devices, Inc.) 73C085A42C9F75266A196D9EBDB72F30 [File is digitally signed]

C:\Windows\System32\DriverStore\FileRepository\u0353575.inf_amd64_8e19095ae833d985\B353558\atidxx64.dll
[2020-04-12 03:28][2020-04-02 19:42] 026272272 _____ (Advanced Micro Devices, Inc. ) E364E855901473E5201AE3DED39F574B [File is digitally signed]

C:\Windows\System32\DriverStore\FileRepository\u0353575.inf_amd64_8e19095ae833d985\B353558\atiumd64.dll
[2020-04-12 03:28][2020-04-02 19:42] 013161176 _____ (Advanced Micro Devices, Inc. ) 439D40F4F9DFB9246E6297B0763C6161 [File is digitally signed]

C:\Windows\System32\DriverStore\FileRepository\u0353575.inf_amd64_8e19095ae833d985\B353558\atiumd6a.dll
[2020-04-12 03:28][2020-04-02 19:42] 013860984 _____ (Advanced Micro Devices, Inc. ) 3D72012AAC4B5D44A52CBF1A1C1869F3 [File is digitally signed]

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\NativeImages\mscorlib.ni.dll
[2020-04-10 21:51][2020-01-10 05:46] 023084896 _____ (Microsoft Corporation) 2143CC44A0E2816C369CA40E2F2BFA82 [File is digitally signed]

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\NativeImages\system.ni.dll
[2019-03-19 14:46][2019-03-19 14:46] 013043104 _____ (Microsoft Corporation) B0559C126B46E45A10D662C09C4E4D23 [File is digitally signed]

C:\Windows\Microsoft.NET\Framework\v4.0.30319\NativeImages\mscorlib.ni.dll
[2020-04-10 21:51][2020-01-10 05:46] 021044584 _____ (Microsoft Corporation) FD9AA28B9A3D2A81AC47E925FFB2100A [File is digitally signed]

C:\Windows\Microsoft.NET\Framework\v4.0.30319\NativeImages\system.ni.dll
[2019-03-19 14:46][2019-03-19 14:46] 010842528 _____ (Microsoft Corporation) 0D161DBCB4CAF669A97A468BC7C25638 [File is digitally signed]

C:\Windows\assembly\NativeImages_v4.0.30319_64\System\08f69c55e9284eaab92075159503c897\System.ni.dll
[2020-04-11 03:04][2020-04-11 03:04] 013033472 _____ (Microsoft Corporation) BB298FE873A1CDA55F92E205723698D9 [File not signed]

C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\f80cf74f6d7c21b493fbce27230bd83b\PresentationCore.ni.dll
[2020-04-11 03:06][2020-04-11 03:06] 015029248 _____ (Microsoft Corporation) 7C04E0720052E2BC2474B7A56233CF58 [File not signed]

C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\cea8b8fbc469dcbc6224d523a578e4b3\mscorlib.ni.dll
[2020-04-10 21:51][2020-01-10 05:46] 023084896 _____ (Microsoft Corporation) 2143CC44A0E2816C369CA40E2F2BFA82 [File is digitally signed]

C:\Windows\assembly\NativeImages_v4.0.30319_32\System\f3efcabd0ee45af4d0d9146029f0f860\System.ni.dll
[2020-04-11 03:09][2020-04-11 03:09] 010824192 _____ (Microsoft Corporation) E8897907ECD0C26C9C590C960F56D0A5 [File not signed]

C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\37f0ebe291a71c4e67858a44ab445295\PresentationCore.ni.dll
[2020-04-11 03:10][2020-04-11 03:10] 012821504 _____ (Microsoft Corporation) 3337ACB4259752059DDA1F61B12D09D0 [File not signed]

C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\46c6217a2d77a20d9fff301af2e1d67e\mscorlib.ni.dll
[2020-04-10 21:51][2020-01-10 05:46] 021044584 _____ (Microsoft Corporation) FD9AA28B9A3D2A81AC47E925FFB2100A [File is digitally signed]

C:\Windows\assembly\NativeImages_v2.0.50727_64\System\ac7eb2473049911b6930fdff13dc2392\System.ni.dll
[2019-11-02 14:20][2019-11-02 14:20] 010693632 _____ (Microsoft Corporation) 8649B7B0373FCA6A3449B4480DC3D42F [File not signed]

C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationCore\25cfac82ce9070d94bc14c19cd1c654c\PresentationCore.ni.dll
[2020-01-20 01:01][2020-01-20 01:01] 016566272 _____ (Microsoft Corporation) 7DD7BC0792BDBA11214132E575CBDA37 [File not signed]

C:\Windows\assembly\NativeImages_v2.0.50727_64\mscorlib\3159e818aabf5fe4b3f4e1b6ca686f68\mscorlib.ni.dll
[2019-11-02 14:19][2019-11-02 14:19] 015605248 _____ (Microsoft Corporation) 78A624FCD10BF4289D87DB05FCCFF1D2 [File not signed]

C:\Windows\assembly\NativeImages_v2.0.50727_32\System\e174b53f30801b5836c47881e646c80e\System.ni.dll
[2019-11-02 14:27][2019-11-02 14:27] 008012800 _____ (Microsoft Corporation) AE249AE17A264DB9A4812D727E9FB0B2 [File not signed]

C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\f425b508f0f4829d9a224b92897fd6f6\PresentationCore.ni.dll
[2020-01-20 01:03][2020-01-20 01:03] 012260352 _____ (Microsoft Corporation) C87DF7EF003295361684B26040C5B423 [File not signed]

C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\f6a9799facd58aab04d11863c0101c09\mscorlib.ni.dll
[2019-11-02 14:27][2019-11-02 14:27] 011520512 _____ (Microsoft Corporation) AB93565ACB221DE62592C9319FB195C1 [File not signed]

C:\Users\tracy\Autodesk\Genuine Service\libcef.dll
[2019-01-15 11:41][2019-01-15 11:41] 071818552 _____ () D41D8CD98F00B204E9800998ECF8427E [File is digitally signed]

C:\ProgramData\BlueStacks\CefData\libcef.dll
[2019-12-12 20:24][2019-09-16 20:51] 099684864 _____ () D41D8CD98F00B204E9800998ECF8427E [File not signed]

C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\libcef.dll
[2020-04-06 23:12][2017-09-05 18:09] 059523896 _____ () 140A30CBB41718F1A0F1F723E7E823D9 [File is digitally signed]

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\libcef.dll
[2019-10-12 07:05][2019-10-12 07:05] 099313712 _____ () D41D8CD98F00B204E9800998ECF8427E [File is digitally signed]

C:\Program Files\Autodesk\Revit 2020\CefSharp\libcef.dll
[2018-04-17 10:14][2018-04-17 10:14] 095925248 _____ () D41D8CD98F00B204E9800998ECF8427E [File not signed]

C:\Program Files\Adobe\Adobe Photoshop CC 2019\Required\Plug-ins\Spaces\libcef.dll
[2019-10-17 14:56][2019-10-17 14:56] 098352200 _____ () D41D8CD98F00B204E9800998ECF8427E [File is digitally signed]

C:\Program Files\Adobe\Adobe Photoshop CC 2019\Required\CEP\CEPHtmlEngine\libcef.dll
[2019-10-17 14:56][2019-10-17 14:56] 097374792 _____ () D41D8CD98F00B204E9800998ECF8427E [File is digitally signed]

C:\Autodesk\WI\Autodesk Revit 2020\x64\RVT\PF64\Autodesk\Root\CefSharp\libcef.dll
[2018-04-17 10:14][2018-04-17 10:14] 095925248 _____ () D41D8CD98F00B204E9800998ECF8427E [File not signed]

C:\AMD\Packages\Drivers\Radeon-Software-Adrenalin-2019-19.9.2-u0346940-win10-64bit-190923WHQL\B346681\atidxx64.dll
[2019-09-23 21:24][2019-09-23 21:24] 028171696 _____ (Advanced Micro Devices, Inc. ) 9E0B90C080F39EC66A5299D24F09A71A [File is digitally signed]

C:\AMD\Packages\Drivers\Radeon-Software-Adrenalin-2019-19.9.2-u0346940-win10-64bit-190923WHQL\B346681\atiumd64.dll
[2019-09-23 21:24][2019-09-23 21:24] 013507336 _____ (Advanced Micro Devices, Inc. ) E265585CB5C8CB8D96D32EF19BFE18C4 [File is digitally signed]

C:\AMD\Packages\Drivers\Radeon-Software-Adrenalin-2019-19.9.2-u0346940-win10-64bit-190923WHQL\B346681\atiumd6a.dll
[2019-09-23 21:24][2019-09-23 21:24] 013677792 _____ (Advanced Micro Devices, Inc. ) B07FD8956C8BE1C8CB4994CFAE730EAE [File is digitally signed]

====== End of Search ======

Attached Thumbnails

#62
RKinner

Posted 20 April 2020 - 07:35 AM

Malware Expert

Expert
24,625 posts

You can go back into ShellExView and enable the Revit entry then reboot or restart explorer see if that gets rid of your error.

I found an article on turning it off but it doesn't apply to my PC because I have no Display icon in Control Panel.

https://www.wikihow....re-Acceleration

I have 4 Firefox instances. Doesn't seem to change when I add tabs.

Go into

about:preferences

and scroll down to

Performance and uncheck the box in front of

Use Recommended Performance Settings

Make sure Use Hardware Acceleration is checked and change the

Content Process Limit to 1

Also make sure your PC is set to High Performance. Windows makes it hard to do that but there is a way:

https://tunecomp.net...-power-options/

Looking at these:

C:\Users\tracy\Autodesk\Genuine Service\libcef.dll
[2019-01-15 11:41][2019-01-15 11:41] 071818552 _____ () D41D8CD98F00B204E9800998ECF8427E [File is digitally signed]

C:\ProgramData\BlueStacks\CefData\libcef.dll
[2019-12-12 20:24][2019-09-16 20:51] 099684864 _____ () D41D8CD98F00B204E9800998ECF8427E [File not signed]

C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\libcef.dll
[2020-04-06 23:12][2017-09-05 18:09] 059523896 _____ () 140A30CBB41718F1A0F1F723E7E823D9 [File is digitally signed]

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\libcef.dll
[2019-10-12 07:05][2019-10-12 07:05] 099313712 _____ () D41D8CD98F00B204E9800998ECF8427E [File is digitally signed]

C:\Program Files\Autodesk\Revit 2020\CefSharp\libcef.dll
[2018-04-17 10:14][2018-04-17 10:14] 095925248 _____ () D41D8CD98F00B204E9800998ECF8427E [File not signed]

C:\Program Files\Adobe\Adobe Photoshop CC 2019\Required\Plug-ins\Spaces\libcef.dll
[2019-10-17 14:56][2019-10-17 14:56] 098352200 _____ () D41D8CD98F00B204E9800998ECF8427E [File is digitally signed]

C:\Program Files\Adobe\Adobe Photoshop CC 2019\Required\CEP\CEPHtmlEngine\libcef.dll
[2019-10-17 14:56][2019-10-17 14:56] 097374792 _____ () D41D8CD98F00B204E9800998ECF8427E [File is digitally signed]

C:\Autodesk\WI\Autodesk Revit 2020\x64\RVT\PF64\Autodesk\Root\CefSharp\libcef.dll
[2018-04-17 10:14][2018-04-17 10:14] 095925248 _____ () D41D8CD98F00B204E9800998ECF8427E [File not signed]

I am not impressed by Autodesk. You would think they would use the same version of the file throughout but instead they have different signed and unsigned versions scattered throughout their stuff.

D41D8CD98F00B204E9800998ECF8427E is the hash value of an empty string. It's not clear to me why we are seeing that when the files are obviously not empty. I'm going to ask Farber if he knows what is happening. Might be a bug or it might be caused by permission problems.

Let's use a fixlist to get some more data. fixlist.txt 1.22KB 186 downloads This one should not require a reboot and should be fairly quick.

There will just be one fixlog.

#63
RiffRaffMama

Posted 21 April 2020 - 12:23 PM

Member

Topic Starter
Member
57 posts

Made the change in ShellExView and the error has indeed gone away.

I attempted to turn off hardware acceleration, but the instructions in your article were for Win 7 and it didn't leave enough breadcrumbs for Win 10 to find its way home, so I couldn't find how to do it. The FF changes I managed though.

High performance power profile is now set up and running the show.

Here is the requested fixlist log:

Fix result of Farbar Recovery Scan Tool (x64) Version: 20-04-2020
Ran by tracy (22-04-2020 03:31:53) Run:2
Running from C:\Program Files (x86)
Loaded Profiles: tracy (Available Profiles: tracy)
Boot Mode: Normal
==============================================

fixlist content:
*****************
File: "C:\Users\tracy\Autodesk\Genuine Service\libcef.dll"
File: C:\ProgramData\BlueStacks\CefData\libcef.dll
File: "C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\libcef.dll"
File: "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\libcef.dll"
File: "C:\Program Files\Autodesk\Revit 2020\CefSharp\libcef.dll"
File: "C:\Program Files\Adobe\Adobe Photoshop CC 2019\Required\Plug-ins\Spaces\libcef.dll"
File: "C:\Program Files\Adobe\Adobe Photoshop CC 2019\Required\CEP\CEPHtmlEngine\libcef.dll"
File: "C:\Autodesk\WI\Autodesk Revit 2020\x64\RVT\PF64\Autodesk\Root\CefSharp\libcef.dll"

*****************

========================= File: "C:\Users\tracy\Autodesk\Genuine Service\libcef.dll" ========================

C:\Users\tracy\Autodesk\Genuine Service\libcef.dll
File is digitally signed
MD5: D41D8CD98F00B204E9800998ECF8427E <==== ATTENTION (zero byte File/Folder)
Creation and modification date: 2019-01-15 11:41 - 2019-01-15 11:41
Size: 071818552
Attributes: ----A
Company Name: Autodesk, Inc. ->
Internal Name: libcef
Original Name: libcef.dll
Product: Chromium Embedded Framework (CEF) Dynamic Link Library
Description: Chromium Embedded Framework (CEF) Dynamic Link Library
File Version: 3.3112.1658.g3d5ae83
Product Version: 3.3112.1658.g3d5ae83
Copyright: Copyright © 2017 The Chromium Embedded Framework Authors
VirusTotal: 0-byte

====== End of File: ======

========================= File: C:\ProgramData\BlueStacks\CefData\libcef.dll ========================

C:\ProgramData\BlueStacks\CefData\libcef.dll
File not signed
MD5: D41D8CD98F00B204E9800998ECF8427E <==== ATTENTION (zero byte File/Folder)
Creation and modification date: 2019-12-12 20:24 - 2019-09-16 20:51
Size: 099684864
Attributes: ----A
Company Name:
Internal Name: libcef
Original Name: libcef.dll
Product: Chromium Embedded Framework (CEF) Dynamic Link Library
Description: Chromium Embedded Framework (CEF) Dynamic Link Library
File Version: 3.3239.1723.g071d1c1
Product Version: 3.3239.1723.g071d1c1
Copyright: Copyright © 2018 The Chromium Embedded Framework Authors
VirusTotal: 0-byte

====== End of File: ======

========================= File: "C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\libcef.dll" ========================

C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\libcef.dll
File is digitally signed
MD5: 140A30CBB41718F1A0F1F723E7E823D9
Creation and modification date: 2020-04-06 23:12 - 2017-09-05 18:09
Size: 059523896
Attributes: ----A
Company Name: Autodesk, Inc. ->
Internal Name: libcef
Original Name: libcef.dll
Product: Chromium Embedded Framework (CEF) Dynamic Link Library
Description: Chromium Embedded Framework (CEF) Dynamic Link Library
File Version: 3.2704.1434.gec3e9ed
Product Version: 3.2704.1434.gec3e9ed
Copyright: Copyright © 2016 The Chromium Embedded Framework Authors
VirusTotal: https://www.virustot...sis/1532544036/

====== End of File: ======

========================= File: "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\libcef.dll" ========================

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\libcef.dll
File is digitally signed
MD5: D41D8CD98F00B204E9800998ECF8427E <==== ATTENTION (zero byte File/Folder)
Creation and modification date: 2019-10-12 07:05 - 2019-10-12 07:05
Size: 099313712
Attributes: ----A
Company Name: Adobe Inc. ->
Internal Name: libcef
Original Name: libcef.dll
Product: Chromium Embedded Framework (CEF) Dynamic Link Library
Description: Chromium Embedded Framework (CEF) Dynamic Link Library
File Version: 3.5200.0.0
Product Version: 3.5200.0.0
Copyright: Copyright © 2019 The Chromium Embedded Framework Authors
VirusTotal: 0-byte

====== End of File: ======

========================= File: "C:\Program Files\Autodesk\Revit 2020\CefSharp\libcef.dll" ========================

C:\Program Files\Autodesk\Revit 2020\CefSharp\libcef.dll
File not signed
MD5: D41D8CD98F00B204E9800998ECF8427E <==== ATTENTION (zero byte File/Folder)
Creation and modification date: 2018-04-17 10:14 - 2018-04-17 10:14
Size: 095925248
Attributes: ----A
Company Name:
Internal Name: libcef
Original Name: libcef.dll
Product: Chromium Embedded Framework (CEF) Dynamic Link Library
Description: Chromium Embedded Framework (CEF) Dynamic Link Library
File Version: 3.3325.1758.g9aea513
Product Version: 3.3325.1758.g9aea513
Copyright: Copyright © 2018 The Chromium Embedded Framework Authors
VirusTotal: 0-byte

====== End of File: ======

========================= File: "C:\Program Files\Adobe\Adobe Photoshop CC 2019\Required\Plug-ins\Spaces\libcef.dll" ========================

C:\Program Files\Adobe\Adobe Photoshop CC 2019\Required\Plug-ins\Spaces\libcef.dll
File is digitally signed
MD5: D41D8CD98F00B204E9800998ECF8427E <==== ATTENTION (zero byte File/Folder)
Creation and modification date: 2019-10-17 14:56 - 2019-10-17 14:56
Size: 098352200
Attributes: ----A
Company Name: Adobe Inc. ->
Internal Name: libcef
Original Name: libcef.dll
Product: Chromium Embedded Framework (CEF) Dynamic Link Library
Description: Chromium Embedded Framework (CEF) Dynamic Link Library
File Version: 3.3071.1605.gb7ab3f2
Product Version: 3.3071.1605.gb7ab3f2
Copyright: Copyright © 2017 The Chromium Embedded Framework Authors
VirusTotal: 0-byte

====== End of File: ======

========================= File: "C:\Program Files\Adobe\Adobe Photoshop CC 2019\Required\CEP\CEPHtmlEngine\libcef.dll" ========================

C:\Program Files\Adobe\Adobe Photoshop CC 2019\Required\CEP\CEPHtmlEngine\libcef.dll
File is digitally signed
MD5: D41D8CD98F00B204E9800998ECF8427E <==== ATTENTION (zero byte File/Folder)
Creation and modification date: 2019-10-17 14:56 - 2019-10-17 14:56
Size: 097374792
Attributes: ----A
Company Name: Adobe Inc. ->
Internal Name: libcef
Original Name: libcef.dll
Product: Chromium Embedded Framework (CEF) Dynamic Link Library
Description: Chromium Embedded Framework (CEF) Dynamic Link Library
File Version: 3.3163.1672.g9853b0d
Product Version: 3.3163.1672.g9853b0d
Copyright: Copyright © 2017 The Chromium Embedded Framework Authors
VirusTotal: 0-byte

====== End of File: ======

========================= File: "C:\Autodesk\WI\Autodesk Revit 2020\x64\RVT\PF64\Autodesk\Root\CefSharp\libcef.dll" ========================

C:\Autodesk\WI\Autodesk Revit 2020\x64\RVT\PF64\Autodesk\Root\CefSharp\libcef.dll
File not signed
MD5: D41D8CD98F00B204E9800998ECF8427E <==== ATTENTION (zero byte File/Folder)
Creation and modification date: 2018-04-17 10:14 - 2018-04-17 10:14
Size: 095925248
Attributes: ----A
Company Name:
Internal Name: libcef
Original Name: libcef.dll
Product: Chromium Embedded Framework (CEF) Dynamic Link Library
Description: Chromium Embedded Framework (CEF) Dynamic Link Library
File Version: 3.3325.1758.g9aea513
Product Version: 3.3325.1758.g9aea513
Copyright: Copyright © 2018 The Chromium Embedded Framework Authors
VirusTotal: 0-byte

====== End of File: ======

==== End of Fixlog 03:32:40 ====

#64
RiffRaffMama

Posted 21 April 2020 - 12:25 PM

Member

Topic Starter
Member
57 posts

Oh, forgot to mention, when I attempted to open the AMD settings it promptly told me that the driver version I was running was no good (I had rolled back as recommended by you) and it reinstalled the latest driver again, which seems to be working fine.

#65
RKinner

Posted 21 April 2020 - 01:09 PM

Malware Expert

Expert
24,625 posts

Let's look at the permissions for the various libcef.dll files.

Please download GrantPerms.zip
http://download.blee.../GrantPerms.zip
and save it to your desktop.
Unzip the file and run GrantPerms.exe by right clicking and Run As Admin
Copy and paste the following in the edit box:

"C:\Users\tracy\Autodesk\Genuine Service\libcef.dll"
C:\ProgramData\BlueStacks\CefData\libcef.dll
"C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\libcef.dll"
"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\libcef.dll"
"C:\Program Files\Autodesk\Revit 2020\CefSharp\libcef.dll"
"C:\Program Files\Adobe\Adobe Photoshop CC 2019\Required\Plug-ins\Spaces\libcef.dll"
"C:\Program Files\Adobe\Adobe Photoshop CC 2019\Required\CEP\CEPHtmlEngine\libcef.dll"
"C:\Autodesk\WI\Autodesk Revit 2020\x64\RVT\PF64\Autodesk\Root\CefSharp\libcef.dll"

Click List Permissions and post the result (Perms.txt) that pops up. A copy of Perms.txt will be saved in the same directory the tool is run.

#66
RiffRaffMama

Posted 22 April 2020 - 02:46 PM

Member

Topic Starter
Member
57 posts

I tried to clear some photos off my iphone earlier tonight and received the error shown below and had to reinstall iTunes With it of course came Bonjour (v. 3.1.0.1).

Grant Perms Report:

GrantPerms by Farbar
Ran by tracy (administrator) at 2020-04-23 06:45:30

===============================================
\\?\C:\Users\tracy\Autodesk\Genuine Service\libcef.dll

   Owner: BUILTIN\Administrators

   DACL(not_protected):
         RIFFRAFFDELL\tracy   FULL   ALLOW   pseudo_(I)

\\?\C:\ProgramData\BlueStacks\CefData\libcef.dll

   Owner: BUILTIN\Administrators

   DACL(NP)(AI):
   Everyone   FULL   ALLOW   pseudo_(I)
   Everyone   FULL   ALLOW   (I)
   NT AUTHORITY\SYSTEM   FULL   ALLOW   (I)
   BUILTIN\Administrators   FULL   ALLOW   (I)
   BUILTIN\Users   READ/EXECUTE   ALLOW   (I)

\\?\C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\libcef.dll

   Owner: BUILTIN\Administrators

   DACL(NP)(AI):
   NT AUTHORITY\SYSTEM   FULL   ALLOW   (I)
   BUILTIN\Administrators   FULL   ALLOW   (I)
   BUILTIN\Users   READ/EXECUTE   ALLOW   (I)
   APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES   READ/EXECUTE   ALLOW   (I)
   APPLICATION PACKAGE AUTHORITY\ALL RESTRICTED APP PACKAGES   READ/EXECUTE   ALLOW   (I)

\\?\C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\libcef.dll

   Owner: NT AUTHORITY\SYSTEM

   DACL(not_protected):
   NT AUTHORITY\SYSTEM   FULL   ALLOW   (I)
   BUILTIN\Administrators   FULL   ALLOW   (I)
   BUILTIN\Users   READ/EXECUTE   ALLOW   (I)
   APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES   READ/EXECUTE   ALLOW   (I)
   APPLICATION PACKAGE AUTHORITY\ALL RESTRICTED APP PACKAGES   READ/EXECUTE   ALLOW   (I)

\\?\C:\Program Files\Autodesk\Revit 2020\CefSharp\libcef.dll

   Owner: NT AUTHORITY\SYSTEM

   DACL(NP)(AI):
   NT AUTHORITY\SYSTEM   FULL   ALLOW   (I)
   BUILTIN\Administrators   FULL   ALLOW   (I)
   BUILTIN\Users   READ/EXECUTE   ALLOW   (I)
   APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES   READ/EXECUTE   ALLOW   (I)
   APPLICATION PACKAGE AUTHORITY\ALL RESTRICTED APP PACKAGES   READ/EXECUTE   ALLOW   (I)

\\?\C:\Program Files\Adobe\Adobe Photoshop CC 2019\Required\Plug-ins\Spaces\libcef.dll

   Owner: BUILTIN\Administrators

   DACL(NP)(AI):
   NT AUTHORITY\SYSTEM   FULL   ALLOW   (I)
   BUILTIN\Administrators   FULL   ALLOW   (I)
   BUILTIN\Users   READ/EXECUTE   ALLOW   (I)
   APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES   READ/EXECUTE   ALLOW   (I)
   APPLICATION PACKAGE AUTHORITY\ALL RESTRICTED APP PACKAGES   READ/EXECUTE   ALLOW   (I)

\\?\C:\Program Files\Adobe\Adobe Photoshop CC 2019\Required\CEP\CEPHtmlEngine\libcef.dll

   Owner: BUILTIN\Administrators

   DACL(NP)(AI):
   NT AUTHORITY\SYSTEM   FULL   ALLOW   (I)
   BUILTIN\Administrators   FULL   ALLOW   (I)
   BUILTIN\Users   READ/EXECUTE   ALLOW   (I)
   APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES   READ/EXECUTE   ALLOW   (I)
   APPLICATION PACKAGE AUTHORITY\ALL RESTRICTED APP PACKAGES   READ/EXECUTE   ALLOW   (I)

\\?\C:\Autodesk\WI\Autodesk Revit 2020\x64\RVT\PF64\Autodesk\Root\CefSharp\libcef.dll

   Owner: BUILTIN\Administrators

   DACL(NP)(AI):
               BUILTIN\Administrators   FULL   ALLOW   (I)
   NT AUTHORITY\SYSTEM   FULL   ALLOW   (I)
   NT AUTHORITY\Authenticated Users   change   ALLOW   (I)
   BUILTIN\Users   READ/EXECUTE   ALLOW   (I)

#67
RKinner

Posted 22 April 2020 - 07:05 PM

Malware Expert

Expert
24,625 posts

Run GrantPerms again with the same file list but this time:

Click Unlock. When it is done click "OK".
Click List Permissions and post the result (Perms.txt) that pops up. A copy of Perms.txt will be saved in the same directory the tool is run.

Then bring up FRST (Remember to right click and Run As Admin) and put libcef.dll in the search box again and hit Search Files. You will get one log. Please post.

#68
RiffRaffMama

Posted 23 April 2020 - 07:34 AM

Member

Topic Starter
Member
57 posts

GrantPerms by Farbar
Ran by tracy (administrator) at 2020-04-23 23:33:52

===============================================
\\?\C:\Users\tracy\Autodesk\Genuine Service\libcef.dll

   Owner: BUILTIN\Administrators

   DACL(NP)(AI):
         BUILTIN\Users   READ/EXECUTE   ALLOW   (NI)
   NT AUTHORITY\SYSTEM   FULL   ALLOW   (I)
   BUILTIN\Administrators   FULL   ALLOW   (I)
   RIFFRAFFDELL\tracy   FULL   ALLOW   (I)

\\?\C:\ProgramData\BlueStacks\CefData\libcef.dll

   Owner: BUILTIN\Administrators

   DACL(NP)(AI):
            Everyone   FULL   ALLOW   (I)
   NT AUTHORITY\SYSTEM   FULL   ALLOW   (I)
   BUILTIN\Administrators   FULL   ALLOW   (I)
   BUILTIN\Users   READ/EXECUTE   ALLOW   (I)

\\?\C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\libcef.dll

   Owner: BUILTIN\Administrators

   DACL(NP)(AI):
            NT AUTHORITY\SYSTEM   FULL   ALLOW   (I)
   BUILTIN\Administrators   FULL   ALLOW   (I)
   BUILTIN\Users   READ/EXECUTE   ALLOW   (I)
   APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES   READ/EXECUTE   ALLOW   (I)
   APPLICATION PACKAGE AUTHORITY\ALL RESTRICTED APP PACKAGES   READ/EXECUTE   ALLOW   (I)

\\?\C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\libcef.dll

   Owner: BUILTIN\Administrators

   DACL(NP)(AI):
            NT AUTHORITY\SYSTEM   FULL   ALLOW   (I)
   BUILTIN\Administrators   FULL   ALLOW   (I)
   BUILTIN\Users   READ/EXECUTE   ALLOW   (I)
   APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES   READ/EXECUTE   ALLOW   (I)
   APPLICATION PACKAGE AUTHORITY\ALL RESTRICTED APP PACKAGES   READ/EXECUTE   ALLOW   (I)

\\?\C:\Program Files\Autodesk\Revit 2020\CefSharp\libcef.dll

   Owner: BUILTIN\Administrators

   DACL(NP)(AI):
            NT AUTHORITY\SYSTEM   FULL   ALLOW   (I)
   BUILTIN\Administrators   FULL   ALLOW   (I)
   BUILTIN\Users   READ/EXECUTE   ALLOW   (I)
   APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES   READ/EXECUTE   ALLOW   (I)
   APPLICATION PACKAGE AUTHORITY\ALL RESTRICTED APP PACKAGES   READ/EXECUTE   ALLOW   (I)

\\?\C:\Program Files\Adobe\Adobe Photoshop CC 2019\Required\Plug-ins\Spaces\libcef.dll

   Owner: BUILTIN\Administrators

   DACL(NP)(AI):
            NT AUTHORITY\SYSTEM   FULL   ALLOW   (I)
   BUILTIN\Administrators   FULL   ALLOW   (I)
   BUILTIN\Users   READ/EXECUTE   ALLOW   (I)
   APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES   READ/EXECUTE   ALLOW   (I)
   APPLICATION PACKAGE AUTHORITY\ALL RESTRICTED APP PACKAGES   READ/EXECUTE   ALLOW   (I)

\\?\C:\Program Files\Adobe\Adobe Photoshop CC 2019\Required\CEP\CEPHtmlEngine\libcef.dll

   Owner: BUILTIN\Administrators

   DACL(NP)(AI):
            NT AUTHORITY\SYSTEM   FULL   ALLOW   (I)
   BUILTIN\Administrators   FULL   ALLOW   (I)
   BUILTIN\Users   READ/EXECUTE   ALLOW   (I)
   APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES   READ/EXECUTE   ALLOW   (I)
   APPLICATION PACKAGE AUTHORITY\ALL RESTRICTED APP PACKAGES   READ/EXECUTE   ALLOW   (I)

\\?\C:\Autodesk\WI\Autodesk Revit 2020\x64\RVT\PF64\Autodesk\Root\CefSharp\libcef.dll

   Owner: BUILTIN\Administrators

   DACL(NP)(AI):
            BUILTIN\Administrators   FULL   ALLOW   (I)
   NT AUTHORITY\SYSTEM   FULL   ALLOW   (I)
   NT AUTHORITY\Authenticated Users   change   ALLOW   (I)
   BUILTIN\Users   READ/EXECUTE   ALLOW   (I)

#69
RiffRaffMama

Posted 23 April 2020 - 07:39 AM

Member

Topic Starter
Member
57 posts

Farbar Recovery Scan Tool (x64) Version: 22-04-2020
Ran by tracy (23-04-2020 23:35:09)
Running from C:\Program Files (x86)
Boot Mode: Normal

================== Search Files: "libcef.dll" =============

C:\Users\tracy\Autodesk\Genuine Service\libcef.dll
[2019-01-15 11:41][2019-01-15 11:41] 071818552 _____ () D41D8CD98F00B204E9800998ECF8427E [File is digitally signed]

C:\ProgramData\BlueStacks\CefData\libcef.dll
[2019-12-12 20:24][2019-09-16 20:51] 099684864 _____ () D41D8CD98F00B204E9800998ECF8427E [File is in use]

C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\libcef.dll
[2020-04-06 23:12][2017-09-05 18:09] 059523896 _____ () 140A30CBB41718F1A0F1F723E7E823D9 [File is digitally signed]

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\libcef.dll
[2019-10-12 07:05][2019-10-12 07:05] 099313712 _____ () D41D8CD98F00B204E9800998ECF8427E [File is digitally signed]

C:\Program Files\Autodesk\Revit 2020\CefSharp\libcef.dll
[2018-04-17 10:14][2018-04-17 10:14] 095925248 _____ () D41D8CD98F00B204E9800998ECF8427E [File is in use]

C:\Program Files\Adobe\Adobe Photoshop CC 2019\Required\Plug-ins\Spaces\libcef.dll
[2019-10-17 14:56][2019-10-17 14:56] 098352200 _____ () D41D8CD98F00B204E9800998ECF8427E [File is digitally signed]

C:\Program Files\Adobe\Adobe Photoshop CC 2019\Required\CEP\CEPHtmlEngine\libcef.dll
[2019-10-17 14:56][2019-10-17 14:56] 097374792 _____ () D41D8CD98F00B204E9800998ECF8427E [File is digitally signed]

C:\Autodesk\WI\Autodesk Revit 2020\x64\RVT\PF64\Autodesk\Root\CefSharp\libcef.dll
[2018-04-17 10:14][2018-04-17 10:14] 095925248 _____ () D41D8CD98F00B204E9800998ECF8427E [File is in use]

====== End of Search ======

#70
RKinner

Posted 24 April 2020 - 09:53 PM

Malware Expert

Expert
24,625 posts

Sorry for the delay. I have been talking to Farbar and he has redone some section of his code to give me a more accurate checksum. Let's redo the search we did earlier.

Copy the next line:

libcef.dll;amdihk64.dll;mscorlib.ni.dll;PresentationCore.ni.dll;atidxx64.dll;System.ni.dll;atiumd64.dll;atiumd6a.dll

Open FRST (right click & run as admin)

click on the search box then Ctrl +v. The copied line should appear. Click on Search Files. You will get one file please post.

#71
RiffRaffMama

Posted 25 April 2020 - 11:04 AM

Member

Topic Starter
Member
57 posts

No worries at all, thanks for going the extra mile and consulting another expert about my problems.

Report:

Farbar Recovery Scan Tool (x64) Version: 24-04-2020
Ran by tracy (26-04-2020 03:00:43)
Running from C:\Program Files (x86)
Boot Mode: Normal

================== Search Files: "libcef.dll;amdihk64.dll;mscorlib.ni.dll;PresentationCore.ni.dll;atidxx64.dll;System.ni.dll;atiumd64.dll;atiumd6a.dll" =============

C:\Windows\WinSxS\x86_netfx4-system_ni_b03f5f7f11d50a3a_4.0.15788.0_none_304d3dfab4e8f798\system.ni.dll
[2019-03-19 14:46][2019-03-19 14:46] 010842528 _____ (Microsoft Corporation) 0D161DBCB4CAF669A97A468BC7C25638 [File is digitally signed]

C:\Windows\WinSxS\x86_netfx4-mscorlib_ni_b03f5f7f11d50a3a_4.0.15788.328_none_14d40676dad78543\mscorlib.ni.dll
[2020-04-10 21:51][2020-01-10 05:46] 021044584 _____ (Microsoft Corporation) FD9AA28B9A3D2A81AC47E925FFB2100A [File is digitally signed]

C:\Windows\WinSxS\x86_netfx4-mscorlib_ni_b03f5f7f11d50a3a_4.0.15788.297_none_14d3034adad870fc\mscorlib.ni.dll
[2020-02-07 04:25][2019-12-07 16:03] 021044600 _____ (Microsoft Corporation) D3D544D264070F0E62E5941BB41E5FEA [File is digitally signed]

C:\Windows\WinSxS\x86_netfx4-mscorlib_ni_b03f5f7f11d50a3a_4.0.15788.0_none_1c884509d1f23822\mscorlib.ni.dll
[2019-03-19 14:46][2019-03-19 14:46] 021036960 _____ (Microsoft Corporation) 82966551F5F6511EA2E4BE65B961FC97 [File is digitally signed]

C:\Windows\WinSxS\amd64_netfx4-system_ni_b03f5f7f11d50a3a_4.0.15788.0_none_e8a00723a06cce92\system.ni.dll
[2019-03-19 14:46][2019-03-19 14:46] 013043104 _____ (Microsoft Corporation) B0559C126B46E45A10D662C09C4E4D23 [File is digitally signed]

C:\Windows\WinSxS\amd64_netfx4-mscorlib_ni_b03f5f7f11d50a3a_4.0.15788.328_none_cd26cf9fc65b5c3d\mscorlib.ni.dll
[2020-04-10 21:51][2020-01-10 05:46] 023084896 _____ (Microsoft Corporation) 2143CC44A0E2816C369CA40E2F2BFA82 [File is digitally signed]

C:\Windows\WinSxS\amd64_netfx4-mscorlib_ni_b03f5f7f11d50a3a_4.0.15788.297_none_cd25cc73c65c47f6\mscorlib.ni.dll
[2020-02-07 04:25][2019-12-07 16:03] 023084904 _____ (Microsoft Corporation) 3CA9FC6F80077E8CC9D13C20BE684A23 [File is digitally signed]

C:\Windows\WinSxS\amd64_netfx4-mscorlib_ni_b03f5f7f11d50a3a_4.0.15788.0_none_d4db0e32bd760f1c\mscorlib.ni.dll
[2019-03-19 14:46][2019-03-19 14:46] 023114656 _____ (Microsoft Corporation) 30EEBFCBCCAD3E1C32610F92B93AE1F5 [File is digitally signed]

C:\Windows\System32\amdihk64.dll
[2020-04-12 03:27][2020-04-02 19:43] 000198120 _____ (Advanced Micro Devices, Inc.) 73C085A42C9F75266A196D9EBDB72F30 [File is digitally signed]

C:\Windows\System32\atidxx64.dll
[2020-04-12 03:28][2020-04-02 19:44] 000124840 _____ () 8C905337DF10F118F7708E16715FD1D4 [File is digitally signed]

C:\Windows\System32\DriverStore\FileRepository͓575.inf_amd64_8e19095ae833d985\B353558\amdihk64.dll
[2020-04-12 03:27][2020-04-02 19:43] 000198120 _____ (Advanced Micro Devices, Inc.) 73C085A42C9F75266A196D9EBDB72F30 [File is digitally signed]

C:\Windows\System32\DriverStore\FileRepository͓575.inf_amd64_8e19095ae833d985\B353558\atidxx64.dll
[2020-04-12 03:28][2020-04-02 19:42] 026272272 _____ (Advanced Micro Devices, Inc. ) E364E855901473E5201AE3DED39F574B [File is digitally signed]

C:\Windows\System32\DriverStore\FileRepository͓575.inf_amd64_8e19095ae833d985\B353558\atiumd64.dll
[2020-04-12 03:28][2020-04-02 19:42] 013161176 _____ (Advanced Micro Devices, Inc. ) 439D40F4F9DFB9246E6297B0763C6161 [File is digitally signed]

C:\Windows\System32\DriverStore\FileRepository͓575.inf_amd64_8e19095ae833d985\B353558\atiumd6a.dll
[2020-04-12 03:28][2020-04-02 19:42] 013860984 _____ (Advanced Micro Devices, Inc. ) 3D72012AAC4B5D44A52CBF1A1C1869F3 [File is digitally signed]

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\NativeImages\mscorlib.ni.dll
[2020-04-10 21:51][2020-01-10 05:46] 023084896 _____ (Microsoft Corporation) 2143CC44A0E2816C369CA40E2F2BFA82 [File is digitally signed]

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\NativeImages\system.ni.dll
[2019-03-19 14:46][2019-03-19 14:46] 013043104 _____ (Microsoft Corporation) B0559C126B46E45A10D662C09C4E4D23 [File is digitally signed]

C:\Windows\Microsoft.NET\Framework\v4.0.30319\NativeImages\mscorlib.ni.dll
[2020-04-10 21:51][2020-01-10 05:46] 021044584 _____ (Microsoft Corporation) FD9AA28B9A3D2A81AC47E925FFB2100A [File is digitally signed]

C:\Windows\Microsoft.NET\Framework\v4.0.30319\NativeImages\system.ni.dll
[2019-03-19 14:46][2019-03-19 14:46] 010842528 _____ (Microsoft Corporation) 0D161DBCB4CAF669A97A468BC7C25638 [File is digitally signed]

C:\Windows\assembly\NativeImages_v4.0.30319_64\System\08f69c55e9284eaab92075159503c897\System.ni.dll
[2020-04-11 03:04][2020-04-11 03:04] 013033472 _____ (Microsoft Corporation) BB298FE873A1CDA55F92E205723698D9 [File not signed]

C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\f80cf74f6d7c21b493fbce27230bd83b\PresentationCore.ni.dll
[2020-04-11 03:06][2020-04-11 03:06] 015029248 _____ (Microsoft Corporation) 7C04E0720052E2BC2474B7A56233CF58 [File not signed]

C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\cea8b8fbc469dcbc6224d523a578e4b3\mscorlib.ni.dll
[2020-04-10 21:51][2020-01-10 05:46] 023084896 _____ (Microsoft Corporation) 2143CC44A0E2816C369CA40E2F2BFA82 [File is digitally signed]

C:\Windows\assembly\NativeImages_v4.0.30319_32\System\f3efcabd0ee45af4d0d9146029f0f860\System.ni.dll
[2020-04-11 03:09][2020-04-11 03:09] 010824192 _____ (Microsoft Corporation) E8897907ECD0C26C9C590C960F56D0A5 [File not signed]

C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\37f0ebe291a71c4e67858a44ab445295\PresentationCore.ni.dll
[2020-04-11 03:10][2020-04-11 03:10] 012821504 _____ (Microsoft Corporation) 3337ACB4259752059DDA1F61B12D09D0 [File not signed]

C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\46c6217a2d77a20d9fff301af2e1d67e\mscorlib.ni.dll
[2020-04-10 21:51][2020-01-10 05:46] 021044584 _____ (Microsoft Corporation) FD9AA28B9A3D2A81AC47E925FFB2100A [File is digitally signed]

C:\Windows\assembly\NativeImages_v2.0.50727_64\System\ac7eb2473049911b6930fdff13dc2392\System.ni.dll
[2019-11-02 14:20][2019-11-02 14:20] 010693632 _____ (Microsoft Corporation) 8649B7B0373FCA6A3449B4480DC3D42F [File not signed]

C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationCore\25cfac82ce9070d94bc14c19cd1c654c\PresentationCore.ni.dll
[2020-01-20 01:01][2020-01-20 01:01] 016566272 _____ (Microsoft Corporation) 7DD7BC0792BDBA11214132E575CBDA37 [File not signed]

C:\Windows\assembly\NativeImages_v2.0.50727_64\mscorlib\3159e818aabf5fe4b3f4e1b6ca686f68\mscorlib.ni.dll
[2019-11-02 14:19][2019-11-02 14:19] 015605248 _____ (Microsoft Corporation) 78A624FCD10BF4289D87DB05FCCFF1D2 [File not signed]

C:\Windows\assembly\NativeImages_v2.0.50727_32\System\e174b53f30801b5836c47881e646c80e\System.ni.dll
[2019-11-02 14:27][2019-11-02 14:27] 008012800 _____ (Microsoft Corporation) AE249AE17A264DB9A4812D727E9FB0B2 [File not signed]

C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\f425b508f0f4829d9a224b92897fd6f6\PresentationCore.ni.dll
[2020-01-20 01:03][2020-01-20 01:03] 012260352 _____ (Microsoft Corporation) C87DF7EF003295361684B26040C5B423 [File not signed]

C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\f6a9799facd58aab04d11863c0101c09\mscorlib.ni.dll
[2019-11-02 14:27][2019-11-02 14:27] 011520512 _____ (Microsoft Corporation) AB93565ACB221DE62592C9319FB195C1 [File not signed]

C:\Users\tracy\Autodesk\Genuine Service\libcef.dll
[2019-01-15 11:41][2019-01-15 11:41] 071818552 _____ () 85CCCC540A1CB2C2F1281A55523D0739 [File is digitally signed]

C:\ProgramData\BlueStacks\CefData\libcef.dll
[2019-12-12 20:24][2019-09-16 20:51] 099684864 _____ () EBB618D07B4B0F167130AE312818590A [File not signed]

C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\libcef.dll
[2020-04-06 23:12][2017-09-05 18:09] 059523896 _____ () 140A30CBB41718F1A0F1F723E7E823D9 [File is digitally signed]

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\libcef.dll
[2019-10-12 07:05][2019-10-12 07:05] 099313712 _____ () 49ADA02B2925EF02648ADC854505639F [File is digitally signed]

C:\Program Files\Autodesk\Revit 2020\CefSharp\libcef.dll
[2018-04-17 10:14][2018-04-17 10:14] 095925248 _____ () 8C671CA122833A95BDCE3C71736DBE94 [File not signed]

C:\Program Files\Adobe\Adobe Photoshop CC 2019\Required\Plug-ins\Spaces\libcef.dll
[2019-10-17 14:56][2019-10-17 14:56] 098352200 _____ () FEC1167433F27E0F997186053032DCB5 [File is digitally signed]

C:\Program Files\Adobe\Adobe Photoshop CC 2019\Required\CEP\CEPHtmlEngine\libcef.dll
[2019-10-17 14:56][2019-10-17 14:56] 097374792 _____ () DD60C901D69AFC815B1D2284ABD2975F [File is digitally signed]

C:\Autodesk\WI\Autodesk Revit 2020\x64\RVT\PF64\Autodesk\Root\CefSharp\libcef.dll
[2018-04-17 10:14][2018-04-17 10:14] 095925248 _____ () 8C671CA122833A95BDCE3C71736DBE94 [File not signed]

C:\AMD\Packages\Drivers\Radeon-Software-Adrenalin-2019-19.9.2-u0346940-win10-64bit-190923WHQL\B346681\atidxx64.dll
[2019-09-23 21:24][2019-09-23 21:24] 028171696 _____ (Advanced Micro Devices, Inc. ) 9E0B90C080F39EC66A5299D24F09A71A [File is digitally signed]

C:\AMD\Packages\Drivers\Radeon-Software-Adrenalin-2019-19.9.2-u0346940-win10-64bit-190923WHQL\B346681\atiumd64.dll
[2019-09-23 21:24][2019-09-23 21:24] 013507336 _____ (Advanced Micro Devices, Inc. ) E265585CB5C8CB8D96D32EF19BFE18C4 [File is digitally signed]

C:\AMD\Packages\Drivers\Radeon-Software-Adrenalin-2019-19.9.2-u0346940-win10-64bit-190923WHQL\B346681\atiumd6a.dll
[2019-09-23 21:24][2019-09-23 21:24] 013677792 _____ (Advanced Micro Devices, Inc. ) B07FD8956C8BE1C8CB4994CFAE730EAE [File is digitally signed]

====== End of Search ======

#72
RKinner

Posted 25 April 2020 - 04:05 PM

Malware Expert

Expert
24,625 posts

I'm looking at your dump file that you posted earlier. There are three files that it can't find:

Unable to load image C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\13f4543f755b32b6ebe0edeb92bb52a8\mscorlib.ni.dll, Win32 error 0n2
Unable to load image C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\6228d402fdebfae866e84fdfe08773bf\PresentationCore.ni.dll, Win32 error 0n2
Unable to load image C:\Windows\assembly\NativeImages_v4.0.30319_64\System\01a3608d87251d7ea99342a88d079c23\System.ni.dll, Win32 error 0n2

I don't have them on my PC either. There are similar files but the long number like: 13f4543f755b32b6ebe0edeb92bb52a8 is different. What I think happened is some idiot programmer did not allow for updates to the .NET software. Suspect that's why it also complains about timestamps and checksums for the other files.

Let's verify that the files do not exist on your PC. Following fixlist will not require a reboot. Please post the file you get.

Attached Files

fixlist.txt 446bytes 173 downloads

#73
RiffRaffMama

Posted 26 April 2020 - 06:17 AM

Member

Topic Starter
Member
57 posts

Fix result of Farbar Recovery Scan Tool (x64) Version: 24-04-2020
Ran by tracy (26-04-2020 22:17:03) Run:3
Running from C:\Program Files (x86)
Loaded Profiles: tracy (Available Profiles: tracy)
Boot Mode: Normal
==============================================

fixlist content:
*****************
CMD: dir /a /s C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib
CMD: dir /a /s C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationCore
CMD: dir /a /s C:\Windows\assembly\NativeImages_v4.0.30319_64\System

*****************

========= dir /a /s C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib =========

Volume in drive C is SSD
Volume Serial Number is 36BD-A1E8

Directory of C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib

11/04/2020 06:12 PM    <DIR>          .
11/04/2020 06:12 PM    <DIR>          ..
11/04/2020 03:03 AM    <DIR>          cea8b8fbc469dcbc6224d523a578e4b3
               0 File(s)              0 bytes

Directory of C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\cea8b8fbc469dcbc6224d523a578e4b3

11/04/2020 03:03 AM    <DIR>          .
11/04/2020 03:03 AM    <DIR>          ..
10/01/2020 05:46 AM        23,084,896 mscorlib.ni.dll
11/04/2020 03:03 AM               176 mscorlib.ni.dll.aux
               2 File(s)     23,085,072 bytes

     Total Files Listed:
               2 File(s)     23,085,072 bytes
               5 Dir(s) 107,056,218,112 bytes free

========= End of CMD: =========

========= dir /a /s C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationCore =========

Volume in drive C is SSD
Volume Serial Number is 36BD-A1E8

Directory of C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationCore

11/04/2020 03:09 AM    <DIR>          .
11/04/2020 03:09 AM    <DIR>          ..
11/04/2020 03:06 AM    <DIR>          f80cf74f6d7c21b493fbce27230bd83b
               0 File(s)              0 bytes

Directory of C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\f80cf74f6d7c21b493fbce27230bd83b

11/04/2020 03:06 AM    <DIR>          .
11/04/2020 03:06 AM    <DIR>          ..
11/04/2020 03:06 AM        15,029,248 PresentationCore.ni.dll
11/04/2020 03:06 AM             1,832 PresentationCore.ni.dll.aux
               2 File(s)     15,031,080 bytes

     Total Files Listed:
               2 File(s)     15,031,080 bytes
               5 Dir(s) 107,056,218,112 bytes free

========= End of CMD: =========

========= dir /a /s C:\Windows\assembly\NativeImages_v4.0.30319_64\System =========

Volume in drive C is SSD
Volume Serial Number is 36BD-A1E8

Directory of C:\Windows\assembly\NativeImages_v4.0.30319_64\System

11/04/2020 06:12 PM    <DIR>          .
11/04/2020 06:12 PM    <DIR>          ..
11/04/2020 03:04 AM    <DIR>          08f69c55e9284eaab92075159503c897
               0 File(s)              0 bytes

Directory of C:\Windows\assembly\NativeImages_v4.0.30319_64\System\08f69c55e9284eaab92075159503c897

11/04/2020 03:04 AM    <DIR>          .
11/04/2020 03:04 AM    <DIR>          ..
11/04/2020 03:04 AM        13,033,472 System.ni.dll
11/04/2020 03:04 AM               620 System.ni.dll.aux
               2 File(s)     13,034,092 bytes

     Total Files Listed:
               2 File(s)     13,034,092 bytes
               5 Dir(s) 107,056,218,112 bytes free

========= End of CMD: =========

==== End of Fixlog 22:17:04 ====

#74
RKinner

Posted 26 April 2020 - 10:13 AM

Malware Expert

Expert
24,625 posts

Try this fixlist:

fixlist.txt 1.77KB 175 downloads

should be very quick and no reboot. All it does is try to make the directories the bump file was looking in then copies the files from the current directories into the new directories. Then it checks to make sure it worked. Don't know if it will make any difference to your Revit but shouldn't hurt and can easily be undone if it causes a problem. If you get a new dump after running the fixlist I would like to see it.

#75
RiffRaffMama

Posted 27 April 2020 - 12:56 AM

Member

Topic Starter
Member
57 posts

This one ran super quick.

As a side note, do you know any site I can use to compare the specs of my current laptop with the specs of a specific new one? Thanks.

Fix result of Farbar Recovery Scan Tool (x64) Version: 26-04-2020
Ran by tracy (27-04-2020 16:54:00) Run:4
Running from C:\Program Files (x86)
Loaded Profiles: tracy (Available Profiles: tracy)
Boot Mode: Normal
==============================================

fixlist content:
*****************
CMD: mkdir C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\13f4543f755b32b6ebe0edeb92bb52a8
CMD: mkdir C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\6228d402fdebfae866e84fdfe08773bf
CMD: mkdir C:\Windows\assembly\NativeImages_v4.0.30319_64\System\01a3608d87251d7ea99342a88d079c23
CMD: copy C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\cea8b8fbc469dcbc6224d523a578e4b3\mscorlib.ni.dll C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\13f4543f755b32b6ebe0edeb92bb52a8
CMD: copy C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\f80cf74f6d7c21b493fbce27230bd83b\PresentationCore.ni.dll C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\6228d402fdebfae866e84fdfe08773bf
CMD: copy C:\Windows\assembly\NativeImages_v4.0.30319_64\System\08f69c55e9284eaab92075159503c897\System.ni.dll C:\Windows\assembly\NativeImages_v4.0.30319_64\System\01a3608d87251d7ea99342a88d079c23
CMD: copy C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\cea8b8fbc469dcbc6224d523a578e4b3\mscorlib.ni.dll.aux C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\13f4543f755b32b6ebe0edeb92bb52a8
CMD: copy C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\f80cf74f6d7c21b493fbce27230bd83b\PresentationCore.ni.dll.aux C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\6228d402fdebfae866e84fdfe08773bf
CMD: copy C:\Windows\assembly\NativeImages_v4.0.30319_64\System\08f69c55e9284eaab92075159503c897\System.ni.dll.aux C:\Windows\assembly\NativeImages_v4.0.30319_64\System\01a3608d87251d7ea99342a88d079c23
CMD: dir /a /s C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib
CMD: dir /a /s C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationCore
CMD: dir /a /s C:\Windows\assembly\NativeImages_v4.0.30319_64\System

*****************

========= mkdir C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\13f4543f755b32b6ebe0edeb92bb52a8 =========

========= End of CMD: =========

========= mkdir C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\6228d402fdebfae866e84fdfe08773bf =========

========= End of CMD: =========

========= mkdir C:\Windows\assembly\NativeImages_v4.0.30319_64\System\01a3608d87251d7ea99342a88d079c23 =========

========= End of CMD: =========

========= copy C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\cea8b8fbc469dcbc6224d523a578e4b3\mscorlib.ni.dll C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\13f4543f755b32b6ebe0edeb92bb52a8 =========

        1 file(s) copied.

========= End of CMD: =========

========= copy C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\f80cf74f6d7c21b493fbce27230bd83b\PresentationCore.ni.dll C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\6228d402fdebfae866e84fdfe08773bf =========

        1 file(s) copied.

========= End of CMD: =========

========= copy C:\Windows\assembly\NativeImages_v4.0.30319_64\System\08f69c55e9284eaab92075159503c897\System.ni.dll C:\Windows\assembly\NativeImages_v4.0.30319_64\System\01a3608d87251d7ea99342a88d079c23 =========

        1 file(s) copied.

========= End of CMD: =========

========= copy C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\cea8b8fbc469dcbc6224d523a578e4b3\mscorlib.ni.dll.aux C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\13f4543f755b32b6ebe0edeb92bb52a8 =========

        1 file(s) copied.

========= End of CMD: =========

========= copy C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\f80cf74f6d7c21b493fbce27230bd83b\PresentationCore.ni.dll.aux C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\6228d402fdebfae866e84fdfe08773bf =========

        1 file(s) copied.

========= End of CMD: =========

========= copy C:\Windows\assembly\NativeImages_v4.0.30319_64\System\08f69c55e9284eaab92075159503c897\System.ni.dll.aux C:\Windows\assembly\NativeImages_v4.0.30319_64\System\01a3608d87251d7ea99342a88d079c23 =========

        1 file(s) copied.

========= End of CMD: =========

========= dir /a /s C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib =========

Volume in drive C is SSD
Volume Serial Number is 36BD-A1E8

Directory of C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib

27/04/2020 04:54 PM    <DIR>          .
27/04/2020 04:54 PM    <DIR>          ..
27/04/2020 04:54 PM    <DIR>          13f4543f755b32b6ebe0edeb92bb52a8
11/04/2020 03:03 AM    <DIR>          cea8b8fbc469dcbc6224d523a578e4b3
               0 File(s)              0 bytes

Directory of C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\13f4543f755b32b6ebe0edeb92bb52a8

27/04/2020 04:54 PM    <DIR>          .
27/04/2020 04:54 PM    <DIR>          ..
10/01/2020 05:46 AM        23,084,896 mscorlib.ni.dll
11/04/2020 03:03 AM               176 mscorlib.ni.dll.aux
               2 File(s)     23,085,072 bytes

Directory of C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\cea8b8fbc469dcbc6224d523a578e4b3

11/04/2020 03:03 AM    <DIR>          .
11/04/2020 03:03 AM    <DIR>          ..
10/01/2020 05:46 AM        23,084,896 mscorlib.ni.dll
11/04/2020 03:03 AM               176 mscorlib.ni.dll.aux
               2 File(s)     23,085,072 bytes

     Total Files Listed:
               4 File(s)     46,170,144 bytes
               8 Dir(s) 107,435,352,064 bytes free

========= End of CMD: =========

========= dir /a /s C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationCore =========

Volume in drive C is SSD
Volume Serial Number is 36BD-A1E8

Directory of C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationCore

27/04/2020 04:54 PM    <DIR>          .
27/04/2020 04:54 PM    <DIR>          ..
27/04/2020 04:54 PM    <DIR>          6228d402fdebfae866e84fdfe08773bf
11/04/2020 03:06 AM    <DIR>          f80cf74f6d7c21b493fbce27230bd83b
               0 File(s)              0 bytes

Directory of C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\6228d402fdebfae866e84fdfe08773bf

27/04/2020 04:54 PM    <DIR>          .
27/04/2020 04:54 PM    <DIR>          ..
11/04/2020 03:06 AM        15,029,248 PresentationCore.ni.dll
11/04/2020 03:06 AM             1,832 PresentationCore.ni.dll.aux
               2 File(s)     15,031,080 bytes

Directory of C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\f80cf74f6d7c21b493fbce27230bd83b

11/04/2020 03:06 AM    <DIR>          .
11/04/2020 03:06 AM    <DIR>          ..
11/04/2020 03:06 AM        15,029,248 PresentationCore.ni.dll
11/04/2020 03:06 AM             1,832 PresentationCore.ni.dll.aux
               2 File(s)     15,031,080 bytes

     Total Files Listed:
               4 File(s)     30,062,160 bytes
               8 Dir(s) 107,435,352,064 bytes free

========= End of CMD: =========

========= dir /a /s C:\Windows\assembly\NativeImages_v4.0.30319_64\System =========

Volume in drive C is SSD
Volume Serial Number is 36BD-A1E8

Directory of C:\Windows\assembly\NativeImages_v4.0.30319_64\System

27/04/2020 04:54 PM    <DIR>          .
27/04/2020 04:54 PM    <DIR>          ..
27/04/2020 04:54 PM    <DIR>          01a3608d87251d7ea99342a88d079c23
11/04/2020 03:04 AM    <DIR>          08f69c55e9284eaab92075159503c897
               0 File(s)              0 bytes

Directory of C:\Windows\assembly\NativeImages_v4.0.30319_64\System\01a3608d87251d7ea99342a88d079c23

27/04/2020 04:54 PM    <DIR>          .
27/04/2020 04:54 PM    <DIR>          ..
11/04/2020 03:04 AM        13,033,472 System.ni.dll
11/04/2020 03:04 AM               620 System.ni.dll.aux
               2 File(s)     13,034,092 bytes

Directory of C:\Windows\assembly\NativeImages_v4.0.30319_64\System\08f69c55e9284eaab92075159503c897

11/04/2020 03:04 AM    <DIR>          .
11/04/2020 03:04 AM    <DIR>          ..
11/04/2020 03:04 AM        13,033,472 System.ni.dll
11/04/2020 03:04 AM               620 System.ni.dll.aux
               2 File(s)     13,034,092 bytes

     Total Files Listed:
               4 File(s)     26,068,184 bytes
               8 Dir(s) 107,435,352,064 bytes free

========= End of CMD: =========

==== End of Fixlog 16:54:03 ====

Back to Hardware, Components and Peripherals · Next Unread Topic →

Also tagged with one or more of these keywords: rendering, Revit, GPU, Dell, AMD, graphics

Answered Operating Systems → Windows 11 → System Crash, Sluggish Performance Afterwards Started by Solice93 , 29 Oct 2023 crash, software, game, slow and 4 more...	6 replies 1,205 views	Solice93 29 Oct 2023
Software → Applications → Adobe Premiere Pro user - PC for faster export Started by adamgoodwin98 , 30 Mar 2021 premiere pro, adobe, computer and 5 more...	1 reply 2,653 views	zep516 30 Mar 2021
Software → Mobile Apps, Games and Themes → Games run horribly. Not really sure why. Started by Matias Cooke , 28 Dec 2019 Game, Video Game, Performance and 5 more... 1 2 3	Hot 35 replies 32,670 views	Matias Cooke 21 Aug 2020
Hardware → System Building and Upgrading → Gamer PC - Help im confused Started by Sammiconfusedmum , 12 Sep 2018 Gamers, Gaming PC, Graphics	6 replies 2,535 views	iammykyl 13 Sep 2018
Hardware → Hardware, Components and Peripherals → CPU usage is going up and down contantely Started by HelpNeederr , 28 Aug 2018 CPU, GPU, lagg and 3 more...	2 replies 4,120 views	phillpower2 15 Sep 2018