Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Firefox recently started lagging frequently


  • Please log in to reply

#1
debodun

debodun

    Member

  • Member
  • PipPipPip
  • 566 posts

Severe lagging. Sometimes the HD activity light comes on, sometimes it doesn't, but when I check the Task Manager when it gets sluggish, it shows high CPU usage by Firefox (see attached screenshot). Sometimes it's okay for a while, sometimes it does this several times in a short time span. I have version 82.0.2. Any reason to be concerned?

Attached Thumbnails

  • task mgr.jpg

Edited by debodun, 31 October 2020 - 12:37 PM.

  • 0

Advertisements


#2
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,598 posts
  • MVP

Possibly a bad extension.  In Firefox, click on the three bars at the top right and then select Add-ons.

For each extension, click on the blue slider which should change to grey.

When done restart Firefox.   Is it still using too much CPU?  If not turn on a few of the extensions you turned off, restart Firefox and check again.  Try to find the bad extension.

 

If that doesn't help then we will have to move this to the Malware forum so we can run FRST to see what is going on.


  • 0

#3
debodun

debodun

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 566 posts

Attached is a screenshot of my extensions. I disabled the Shockwave Flash but still showing a lot of CPU usage. Occurs when playing online games, even those that aren't Shockwave dependent.  I've had it installed for quite some time and haven't had this problem with it before. Today I had the HD light come on and my system locked up for about 2 minutes. After that I had trouble opening my Yahoo mail - kept saying server closed connection.

Attached Thumbnails

  • extensions.jpg
  • task.jpg

Edited by debodun, 01 November 2020 - 02:51 PM.

  • 0

#4
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,598 posts
  • MVP

Flash is obsolete so can be removed.  You are looking at Plugins.  Try clicking on Extensions.


  • 0

#5
debodun

debodun

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 566 posts

Only UBlock there. Some online games still require Flash like at Lumosity.

Attached Thumbnails

  • ext.jpg

Edited by debodun, 01 November 2020 - 03:35 PM.

  • 0

#6
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,598 posts
  • MVP

OK.  I'll get this moved to Malware.  You can run FRST:

 


  • Get FRST from http://www.bleepingc...very-scan-tool/You need to download the appropriate tool for your PC.  If you don't know if you have a 32 or 64 bit system get them both.  Only one will work and that's the right one.
  • Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
  • Check the Addition.txt box
  • Press Scan button.
  • It will produce a log called FRST.txt in the same directory the tool is run from.  
  • Please copy and paste log back here.
  • It will generate another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.


Smart Screen, Windows Defender and Avast have all been blocking FRST recently.  It's a false positive so pause your antivirus when downloading or running FRST.  If you get a message saying Smart Screen has blocked it you can click on More Info and you will see an option to Run Anyway.




 


  • 0

#7
debodun

debodun

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 566 posts

FRST.txt

 

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 01-11-2020
Ran by Owner (administrator) on OWNER-PC (Hewlett-Packard HP Compaq dc5700 Small Form Factor) (02-11-2020 11:02:47)
Running from C:\Users\Owner\Desktop
Loaded Profiles: Owner
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: English (United States)
Default browser: FF
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(TeamViewer -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1353680 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-21-3384263181-369055421-3260215636-1000\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKLM\...\Windows x64\Print Processors\BJ Print Processor3: C:\Windows\System32\spool\prtprocs\x64\CNBPP3.DLL [83968 2009-07-13] (Microsoft Windows -> CANON INC.)
HKLM\...\Windows x64\Print Processors\hpzppwn7: C:\Windows\System32\spool\prtprocs\x64\hpzppwn7.dll [101376 2009-07-13] (Microsoft Windows -> Hewlett-Packard Corporation)
HKLM\...\Print\Monitors\BJ Language Monitor3_1: C:\Windows\system32\CNBLM3_1.DLL [185344 2009-07-13] (Microsoft Windows -> CANON INC.)
HKLM\...\Print\Monitors\PJL Language Monitor: C:\Windows\system32\PJLMON.DLL [22016 2010-11-20] (Microsoft Windows -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{2D46B6DC-2207-486B-B523-A557E6D54B47}] -> C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{2D46B6DC-2207-486B-B523-A557E6D54B47}] -> C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{A6EADE66-0000-0000-484E-7E8A45000000}] -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Esl\AiodLite.dll [2020-05-03] (Adobe Inc. -> Adobe Systems, Inc.)
GroupPolicy: Restriction - Chrome <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0976F330-BF25-4F6F-B0B1-665D9BF7BCC0} - System32\Tasks\{68760510-2907-489D-B7A2-C35A3446BE71} => C:\Program Files (x86)\Kodak\Kodak EasyShare software\bin\EasyShare.exe [151552 2005-07-22] () [File not signed]
Task: {0A0C5E8A-2FCE-4C99-B12F-00B4B70AFB83} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [561984 2011-06-01] (Apple Inc. -> Apple Inc.)
Task: {0B6F6A06-8A22-4C10-9A50-F1AD415D7F31} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1341008 2020-09-06] (Adobe Inc. -> Adobe Inc.)
Task: {23FEE02C-76D3-45D6-AE9C-92CE8413C37F} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe [667856 2020-10-29] (Mozilla Corporation -> Mozilla Foundation)
Task: {41E2110D-1421-413B-8E62-70C64466298F} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_445_Plugin.exe [1502264 2020-10-14] (Adobe Inc. -> Adobe)
Task: {5D084169-00AD-4D36-A448-C9A76FB459A9} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-10-14] (Adobe Inc. -> Adobe)
Task: {6B4D3DDA-9B0C-4B4E-A917-B9A141F6ED35} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [3129184 2012-09-24] (Piriform Ltd -> Piriform Ltd)
Task: {A149C588-D529-48EB-BAE0-95CA7AC5FE1C} - System32\Tasks\{304152A7-70D0-4E91-9F4E-DBD1652C7AAC} => C:\Program Files (x86)\Kodak\Kodak EasyShare software\bin\EasyShare.exe [151552 2005-07-22] () [File not signed]

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 07 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704 2011-08-30] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 07 C:\Program Files\Bonjour\mdnsNSP.dll [132968 2011-08-30] (Apple Inc. -> Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 209.18.47.61 209.18.47.62
Tcpip\..\Interfaces\{E05E619F-5932-445D-9D21-1FC2630E6BEE}: [DhcpNameServer] 209.18.47.61 209.18.47.62

FireFox:
========
FF DefaultProfile: 8wi3sbs5.default-1412761564967
FF ProfilePath: C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\8wi3sbs5.default-1412761564967 [2020-11-02]
FF Homepage: Mozilla\Firefox\Profiles\8wi3sbs5.default-1412761564967 -> hxxps://www.google.com/?gws_rd=ssl
FF Notifications: Mozilla\Firefox\Profiles\8wi3sbs5.default-1412761564967 -> hxxps://www.sevenforums.com
FF Extension: (uBlock Origin) - C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\8wi3sbs5.default-1412761564967\Extensions\[email protected] [2020-10-20]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_32_0_0_445.dll [2020-10-14] (Adobe Inc. -> )
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation ->  Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_445.dll [2020-10-14] (Adobe Inc. -> )
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll [2012-10-04] (Adobe Systems, Inc.) [File not signed]
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2012-03-06] (Apple Inc. -> )
FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation ->  Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-09-11] (Adobe Inc. -> Adobe Systems Inc.)

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169544 2020-09-06] (Adobe Inc. -> Adobe Inc.)
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-10-14] (Adobe Inc. -> Adobe)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [119864 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation -> Microsoft Corporation)
R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation -> Microsoft Corporation)
S3 rspLLL; C:\Windows\System32\DRIVERS\rspLLL64.sys [26368 2015-07-13] (Daniel Terhell -> Resplendence Software Projects Sp.)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-11-02 11:02 - 2020-11-02 11:04 - 000009604 _____ C:\Users\Owner\Desktop\FRST.txt
2020-11-02 11:00 - 2020-11-02 11:00 - 002298368 _____ (Farbar) C:\Users\Owner\Desktop\FRST64.exe
2020-10-31 09:56 - 2020-10-31 12:17 - 000013307 _____ C:\Users\Owner\Documents\directions.odt
2020-10-31 08:21 - 2020-10-31 08:21 - 000024894 _____ C:\Users\Owner\Documents\Dunbar-Deborah_2020-10-30_Lab-Report_1288784062_1604150414451.pdf
2020-10-31 08:20 - 2020-10-31 08:20 - 000024894 _____ C:\Users\Owner\Documents\Lab-Report_10-30-20.pdf
2020-10-29 15:54 - 2020-10-29 15:54 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla
2020-10-05 13:34 - 2020-10-25 16:48 - 000013261 _____ C:\Users\Owner\Documents\Christmas sale HTML.odt
2020-10-03 14:02 - 2020-10-03 14:02 - 000121956 _____ C:\Users\Owner\Documents\2021.odt

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-11-02 11:03 - 2015-05-23 11:52 - 000000000 ____D C:\FRST
2020-11-02 11:02 - 2016-11-16 12:13 - 000000000 ____D C:\Users\Owner\AppData\LocalLow\Mozilla
2020-11-02 10:52 - 2009-07-13 23:45 - 000026576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2020-11-02 10:52 - 2009-07-13 23:45 - 000026576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2020-11-02 10:49 - 2009-07-14 00:13 - 000782510 _____ C:\Windows\system32\PerfStringBackup.INI
2020-11-02 10:49 - 2009-07-13 22:20 - 000000000 ____D C:\Windows\inf
2020-11-02 10:44 - 2009-07-14 00:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2020-11-01 15:48 - 2017-06-29 10:22 - 000011504 _____ C:\Users\Owner\Documents\riddles.odt
2020-11-01 11:57 - 2019-11-05 11:06 - 000018313 _____ C:\Users\Owner\Documents\Net Worth 2020.ods
2020-11-01 11:19 - 2020-01-02 13:27 - 000019170 _____ C:\Users\Owner\Documents\Celebrity Deaths 2020.odt
2020-10-31 16:33 - 2012-07-22 08:28 - 000000000 ____D C:\ProgramData\TEMP
2020-10-31 16:33 - 2012-07-22 08:28 - 000000000 ____D C:\Program Files (x86)\SpywareBlaster
2020-10-31 16:32 - 2020-06-06 09:07 - 000000000 ____D C:\Users\Owner\Desktop\New
2020-10-31 08:09 - 2012-01-12 11:23 - 000000000 ____D C:\Users\Owner\Desktop\Things For Sale
2020-10-30 10:53 - 2014-11-07 07:53 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2020-10-29 15:59 - 2019-12-28 10:21 - 000023841 _____ C:\Users\Owner\Documents\data.odt
2020-10-29 09:35 - 2012-01-12 11:24 - 000000000 ___RD C:\Users\Owner\Desktop\misc house contents
2020-10-25 16:48 - 2016-09-28 09:41 - 000013227 _____ C:\Users\Owner\Documents\Christmas sale.odt
2020-10-21 08:35 - 2012-01-12 11:21 - 000000000 ____D C:\Users\Owner\Desktop\House Pics
2020-10-19 09:08 - 2012-01-12 11:21 - 000000000 ____D C:\Users\Owner\Desktop\silver, jewelry, coins
2020-10-18 11:04 - 2014-01-13 18:27 - 000018541 _____ C:\Users\Owner\Documents\Home Delivered Meals.ods
2020-10-14 09:58 - 2018-03-13 13:58 - 000004462 _____ C:\Windows\system32\Tasks\Adobe Flash Player NPAPI Notifier
2020-10-14 09:58 - 2013-02-09 10:03 - 000004312 _____ C:\Windows\system32\Tasks\Adobe Flash Player Updater
2020-10-14 09:58 - 2012-03-31 06:33 - 000842296 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerApp.exe
2020-10-14 09:58 - 2011-12-17 15:43 - 000175160 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2020-10-14 09:58 - 2011-12-17 15:43 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2020-10-14 09:58 - 2011-12-17 15:43 - 000000000 ____D C:\Windows\system32\Macromed
2020-10-07 09:43 - 2016-05-26 07:08 - 000024955 _____ C:\Users\Owner\Documents\SCF emails.odt
2020-10-07 09:41 - 2019-09-12 12:54 - 000023338 _____ C:\Users\Owner\Documents\SCF emails alphabetically by first name .odt
2020-10-06 12:40 - 2012-01-12 11:10 - 000000000 ____D C:\Users\Owner\Desktop\DD
2020-10-03 09:21 - 2019-10-05 10:25 - 000011023 _____ C:\Users\Owner\Documents\Weight 2020.ods

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)


LastRegBack: 2020-10-11 13:24
==================== End of FRST.txt ========================


  • 0

#8
debodun

debodun

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 566 posts

Addition.txt

 

 

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-11-2020
Ran by Owner (02-11-2020 11:05:50)
Running from C:\Users\Owner\Desktop
Windows 7 Ultimate Service Pack 1 (X64) (2011-12-17 19:41:25)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3384263181-369055421-3260215636-500 - Administrator - Disabled)
Guest (S-1-5-21-3384263181-369055421-3260215636-501 - Limited - Disabled)
Owner (S-1-5-21-3384263181-369055421-3260215636-1000 - Administrator - Enabled) => C:\Users\Owner

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {71A27EC9-3DA6-45FC-60A7-004F623C6189}
AS: Microsoft Security Essentials (Enabled - Up to date) {CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 20.012.20048 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated)
Adobe Flash Player 32 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 32.0.0.445 - Adobe)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.445 - Adobe)
Adobe Shockwave Player 11.6 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.6.8.638 - Adobe Systems, Inc.)
Apple Application Support (HKLM-x32\...\{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}) (Version: 2.1.7 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{B8AD779A-82DA-4365-A7D0-AD3DCFC55CFF}) (Version: 5.1.1.4 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CardRd81 (HKLM-x32\...\{54C8FE84-89C4-40E8-976C-439EB0729BD6}) (Version: 4.00.0000.0004 - EASTMAN KODAK Company) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 3.23 - Piriform)
CCScore (HKLM-x32\...\{B4B44FE7-41FF-4DAD-8C0A-E406DDA72992}) (Version: 5.00.0000.0011 - EASTMAN KODAK Company) Hidden
CR2 (HKLM-x32\...\{432C3720-37BF-4BD7-8E49-F38E090246D0}) (Version: 4.00.0000.0003 - EASTMAN KODAK Company) Hidden
EKS Dinner With Moriarty (HKLM-x32\...\EKS Dinner With Moriarty) (Version:  - )
EKS Sherlock (HKLM-x32\...\EKS Sherlock) (Version:  - )
ESSBrwr (HKLM-x32\...\{643EAE81-920C-4931-9F0B-4B343B225CA6}) (Version: 5.00.0000.0004 - EASTMAN KODAK Company) Hidden
ESSCDBK (HKLM-x32\...\{AE1FA02D-E6A4-4EA0-8E58-6483CAC016DD}) (Version: 5.00.0000.0004 - EASTMAN KODAK Company) Hidden
ESScore (HKLM-x32\...\{9D8FEE90-0377-49A9-AEFB-525BDE549BA4}) (Version: 5.00.0000.0037 - EASTMAN KODAK Company) Hidden
ESSCT (HKLM-x32\...\{8BB4B58A-A402-4DE8-8FCD-287E60B88DD8}) (Version: 5.00.0000.0003 - EASTMAN KODAK Company) Hidden
ESSgui (HKLM-x32\...\{91517631-A9F3-4B7C-B482-43E0068FD55A}) (Version: 5.00.0000.0013 - EASTMAN KODAK Company) Hidden
ESShelp (HKLM-x32\...\{87843A41-7808-4F2E-B13F-25C1E67CF2FD}) (Version: 5.00.0000.0005 - EASTMAN KODAK Company) Hidden
ESSini (HKLM-x32\...\{8E92D746-CD9F-4B90-9668-42B74C14F765}) (Version: 5.00.0000.0010 - EASTMAN KODAK Company) Hidden
ESSPCD (HKLM-x32\...\{14D4ED84-6A9A-45A0-96F6-1753768C3CB5}) (Version: 5.00.0000.0007 - EASTMAN KODAK Company) Hidden
ESSPDock (HKLM-x32\...\{FCDB1C92-03C6-4C76-8625-371224256091}) (Version: 5.00.0000.0020 - EASTMAN KODAK Company) Hidden
ESSSONIC (HKLM-x32\...\{4F677FC7-7AA8-412B-A957-F13CBE1C7331}) (Version: 5.00.0000.0002 - EASTMAN KODAK Company) Hidden
ESSTOOLS (HKLM-x32\...\{8A502E38-29C9-49FA-BCFA-D727CA062589}) (Version: 5.00.0000.0004 - EASTMAN KODAK Company) Hidden
ESSTUTOR (HKLM-x32\...\{CA60320D-6A16-49C8-A34F-84EEF4799567}) (Version: 5.00.0000.0002 - EASTMAN KODAK Company) Hidden
ESSvpaht (HKLM-x32\...\{A5B3EB8A-4071-42F0-8E8E-7A8342AA8E69}) (Version: 5.00.0000.0001 - EASTMAN KODAK Company) Hidden
ESSvpot (HKLM-x32\...\{48C82F7A-F100-4DAB-A310-8E18BF2159E1}) (Version: 5.00.0000.0001 - EASTMAN KODAK Company) Hidden
Free MIDI to MP3 Converter 1.0 (HKLM-x32\...\{181E1175-1FF8-4EA5-BC08-A7CA39B85502}_is1) (Version:  - PolySoft Solutions)
HLPIndex (HKLM-x32\...\{38441BE7-79B0-42B8-8297-833704F949FE}) (Version: 5.00.0000.0002 - EASTMAN KODAK Company) Hidden
HLPPDOCK (HKLM-x32\...\{154508C0-07C5-4659-A7A0-E49968750D21}) (Version: 5.00.0000.0001 - EASTMAN KODAK Company) Hidden
HLPRFO (HKLM-x32\...\{AADAC983-FDE9-42FA-8FD9-7BB324155593}) (Version: 5.00.0000.0001 - EASTMAN KODAK Company) Hidden
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.6.0 - LIGHTNING UK!)
Intel® Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.15.10.1930 - Intel Corporation)
iTunes (HKLM\...\{4BDE7544-0A08-4AD9-8A8F-4B7944471C36}) (Version: 10.6.0.40 - Apple Inc.)
Kodak EasyShare software (HKLM-x32\...\{D32470A1-B10C-4059-BA53-CF0486F68EBC}) (Version:  - Eastman Kodak Company)
KSU (HKLM-x32\...\{B997C2A0-4383-41BF-B76E-9B8B7ECFB267}) (Version: 632.62.0002.0001 - EASTMAN KODAK Company) Hidden
LatencyMon 6.71 (HKLM\...\LatencyMon_is1) (Version:  - Resplendence Software Projects Sp.)
Malwarebytes Anti-Malware version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.10.209.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Mozilla Firefox 82.0.2 (x64 en-US) (HKLM\...\Mozilla Firefox 82.0.2 (x64 en-US)) (Version: 82.0.2 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Notifier (HKLM-x32\...\{0008546E-DF6E-4CC1-AFD0-2CB8E16C95A2}) (Version: 5.00.0000.0001 - EASTMAN KODAK Company) Hidden
OpenOffice 4.1.1 (HKLM-x32\...\{9395F41D-0F80-432E-9A59-B8E477E7E163}) (Version: 4.11.9775 - Apache Software Foundation)
OTtBP (HKLM-x32\...\{F71760CD-0F8B-4DCC-B7B7-6B223CC3843C}) (Version: 5.00.0000.0003 - EASTMAN KODAK Company) Hidden
OTtBPSDK (HKLM-x32\...\{3CA39B0C-BA85-4D42-AC0F-1FF5F60C3353}) (Version: 4.00.0000.0000 - EASTMAN KODAK Company) Hidden
QuickTime (HKLM-x32\...\QuickTime) (Version:  - )
SFR (HKLM-x32\...\{DB02F716-6275-42E9-B8D2-83BA2BF5100B}) (Version: 5.00.0000.0005 - Eastman Kodak Company) Hidden
SHASTA (HKLM-x32\...\{605A4E39-613C-4A12-B56F-DEFBE6757237}) (Version: 5.00.0000.0003 - EASTMAN KODAK Company) Hidden
SKIN0001 (HKLM-x32\...\{FDF9943A-3D5C-46B3-9679-586BD237DDEE}) (Version: 5.00.0000.0007 - EASTMAN KODAK Company) Hidden
SKINXSDK (HKLM-x32\...\{F4A2E7CC-60CA-4AFA-B67F-AD5E58173C3F}) (Version: 5.00.0000.0004 - EASTMAN KODAK Company) Hidden
Skype™ 5.5 (HKLM-x32\...\{F1CECE09-7CBE-4E98-B435-DA87CDA86167}) (Version: 5.5.124 - Skype Technologies S.A.)
Speccy (HKLM\...\Speccy) (Version: 1.14 - Piriform)
SpywareBlaster 6.0 (HKLM-x32\...\SpywareBlaster_is1) (Version: 6.0.0 - BrightFort LLC)
swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamViewer 7 (HKLM-x32\...\TeamViewer 7) (Version: 7.0.12541 - TeamViewer)
VLC media player 1.1.11 (HKLM-x32\...\VLC media player) (Version: 1.1.11 - VideoLAN)
VPRINTOL (HKLM-x32\...\{999D43F4-9709-4887-9B1A-83EBB15A8370}) (Version: 5.00.0000.0002 - EASTMAN KODAK Company) Hidden
WIRELESS (HKLM-x32\...\{F9593CFB-D836-49BC-BFF1-0E669A411D9F}) (Version: 5.00.0000.0001 - EASTMAN KODAK Company) Hidden

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ContextMenuHandlers1: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => c:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers2: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => c:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamext.dll [2013-04-04] (Malwarebytes Corporation -> Malwarebytes Corporation)
ContextMenuHandlers4: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => c:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2009-09-23] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamext.dll [2013-04-04] (Malwarebytes Corporation -> Malwarebytes Corporation)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

WMI:subscription\__FilterToConsumerBinding->CommandLineEventConsumer.Name=\"BVTConsumer\"",Filter="__EventFilter.Name=\"BVTFilter\"::
WMI:subscription\CommandLineEventConsumer->BVTConsumer::[CommandLineTemplate => cscript KernCap.vbs][WorkingDirectory => C:\\tools\\kernrate]

==================== Loaded Modules (Whitelisted) =============

==================== Alternate Data Streams (Whitelisted) ========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:5C321E34 [136]

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer (Version 11) (Whitelisted) ==========

HKU\S-1-5-21-3384263181-369055421-3260215636-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab

(If an entry is included in the fixlist, it will be removed from the registry.)

IE restricted site: HKU\S-1-5-21-3384263181-369055421-3260215636-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-3384263181-369055421-3260215636-1000\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-3384263181-369055421-3260215636-1000\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-3384263181-369055421-3260215636-1000\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-3384263181-369055421-3260215636-1000\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-3384263181-369055421-3260215636-1000\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-3384263181-369055421-3260215636-1000\...\0411dd.com -> 0411dd.com
IE restricted site: HKU\S-1-5-21-3384263181-369055421-3260215636-1000\...\0511zfhl.com -> 0511zfhl.com
IE restricted site: HKU\S-1-5-21-3384263181-369055421-3260215636-1000\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-3384263181-369055421-3260215636-1000\...\0632qyw.com -> 0632qyw.com
IE restricted site: HKU\S-1-5-21-3384263181-369055421-3260215636-1000\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-3384263181-369055421-3260215636-1000\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-3384263181-369055421-3260215636-1000\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-3384263181-369055421-3260215636-1000\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-3384263181-369055421-3260215636-1000\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-3384263181-369055421-3260215636-1000\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-3384263181-369055421-3260215636-1000\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-3384263181-369055421-3260215636-1000\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-3384263181-369055421-3260215636-1000\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-3384263181-369055421-3260215636-1000\...\1001movie.com -> 1001movie.com

There are 6091 more sites.


==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 21:34 - 2014-07-05 10:08 - 000000098 _____ C:\Windows\system32\drivers\etc\hosts
127.0.0.1       localhost

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3384263181-369055421-3260215636-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 209.18.47.61 - 209.18.47.62
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\qttask.exe" -atboottime

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{0E227B60-E7FB-4017-9EC7-A62A5EFA8967}] => (Allow) C:\Program Files (x86)\Kodak\Kodak EasyShare software\bin\EasyShare.exe () [File not signed]
FirewallRules: [{C86A2602-2440-441D-972C-BEC7E06FC3E4}] => (Allow) C:\Program Files (x86)\Kodak\Kodak EasyShare software\bin\EasyShare.exe () [File not signed]
FirewallRules: [{217F7D9C-49CD-4ED9-9050-3C2E4E9D8CC2}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{3994F65F-7D58-4F72-86D1-2E5CD9A2AD1F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{D2F24F04-D188-44AF-8CAB-1440B2782E38}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{1A10243C-DC57-4AFE-AD3D-54A683104F27}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{D920EAFE-1F31-4BB5-BC15-E747556F30C0}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{D0FFCD08-CDC4-41E1-B87C-BCCEA99F34B6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

==================== Restore Points =========================

06-07-2018 13:15:59 Windows Update
10-07-2018 12:30:24 Windows Update
14-08-2018 12:35:43 Windows Update
07-09-2018 13:46:51 Scheduled Checkpoint
11-09-2018 12:31:49 Windows Update
26-09-2018 14:33:47 Scheduled Checkpoint
26-11-2018 16:48:35 Windows Update
13-05-2019 15:49:49 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501
13-05-2019 15:50:49 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501
23-11-2019 16:27:35 Scheduled Checkpoint
08-12-2019 19:06:22 Windows Update
29-12-2019 20:07:23 Windows Update
15-01-2020 16:01:55 Windows Update
18-01-2020 17:08:51 Windows Update
29-01-2020 15:45:23 Scheduled Checkpoint
23-05-2020 16:36:36 Windows Update
17-08-2020 12:18:38 Scheduled Checkpoint
26-08-2020 12:35:12 Scheduled Checkpoint
05-09-2020 11:08:19 Scheduled Checkpoint
11-10-2020 13:31:20 Scheduled Checkpoint

==================== Faulty Device Manager Devices ============

Name: PS/2 Compatible Mouse
Description: PS/2 Compatible Mouse
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: ========================

Application errors:
==================
Error: (10/30/2020 03:21:17 PM) (Source: Firefox) (EventID: 1287) (User: )
Description: Event-ID 1287

Error: (10/27/2020 10:14:30 AM) (Source: Firefox) (EventID: 1287) (User: )
Description: Event-ID 1287

Error: (10/22/2020 10:12:10 AM) (Source: Firefox) (EventID: 1287) (User: )
Description: Event-ID 1287

Error: (07/07/2020 08:58:41 AM) (Source: Firefox) (EventID: 1287) (User: )
Description: Event-ID 1287

Error: (05/06/2020 09:12:11 AM) (Source: Firefox) (EventID: 1287) (User: )
Description: Event-ID 1287

Error: (05/02/2020 10:46:11 AM) (Source: Firefox) (EventID: 1287) (User: )
Description: Event-ID 1287

Error: (03/17/2020 02:36:42 PM) (Source: Firefox) (EventID: 1287) (User: )
Description: Event-ID 1287

Error: (02/22/2020 12:30:25 PM) (Source: Firefox) (EventID: 1287) (User: )
Description: Event-ID 1287


System errors:
=============
Error: (10/11/2020 01:38:52 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: The file system structure on the disk is corrupt and unusable.
Please run the chkdsk utility on the volume \Device\HarddiskVolumeShadowCopy1.

Error: (10/11/2020 01:38:47 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: The file system structure on the disk is corrupt and unusable.
Please run the chkdsk utility on the volume \Device\HarddiskVolumeShadowCopy1.

Error: (10/11/2020 01:38:42 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: The file system structure on the disk is corrupt and unusable.
Please run the chkdsk utility on the volume \Device\HarddiskVolumeShadowCopy1.

Error: (10/11/2020 01:38:37 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: The file system structure on the disk is corrupt and unusable.
Please run the chkdsk utility on the volume \Device\HarddiskVolumeShadowCopy1.

Error: (10/11/2020 01:38:31 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: The file system structure on the disk is corrupt and unusable.
Please run the chkdsk utility on the volume \Device\HarddiskVolumeShadowCopy1.

Error: (10/11/2020 01:38:24 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: The file system structure on the disk is corrupt and unusable.
Please run the chkdsk utility on the volume \Device\HarddiskVolumeShadowCopy8.

Error: (10/11/2020 01:38:20 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: The file system structure on the disk is corrupt and unusable.
Please run the chkdsk utility on the volume \Device\HarddiskVolumeShadowCopy8.

Error: (10/11/2020 01:38:16 PM) (Source: Ntfs) (EventID: 55) (User: )
Description: The file system structure on the disk is corrupt and unusable.
Please run the chkdsk utility on the volume \Device\HarddiskVolumeShadowCopy8.


CodeIntegrity:
===================================

Date: 2020-01-29 15:15:02.374
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-securestartup-core_31bf3856ad364e35_6.1.7600.16385_none_34b0fc0c53728e43\fveapibase.dll because the set of per-page image hashes could not be found on the system.

Date: 2020-01-29 15:15:00.673
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-securestartup-core_31bf3856ad364e35_6.1.7600.16385_none_34b0fc0c53728e43\fveapibase.dll because the set of per-page image hashes could not be found on the system.

Date: 2020-01-29 15:14:58.942
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-securestartup-core_31bf3856ad364e35_6.1.7600.16385_none_34b0fc0c53728e43\fveapibase.dll because the set of per-page image hashes could not be found on the system.

Date: 2020-01-29 15:14:52.593
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-s..trics-sensoradapter_31bf3856ad364e35_6.1.7600.16385_none_13881e44d6ccca6b\winbiosensoradapter.dll because the set of per-page image hashes could not be found on the system.

Date: 2020-01-29 15:14:50.923
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-s..trics-sensoradapter_31bf3856ad364e35_6.1.7600.16385_none_13881e44d6ccca6b\winbiosensoradapter.dll because the set of per-page image hashes could not be found on the system.

Date: 2020-01-29 15:14:49.223
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-s..trics-sensoradapter_31bf3856ad364e35_6.1.7600.16385_none_13881e44d6ccca6b\winbiosensoradapter.dll because the set of per-page image hashes could not be found on the system.

Date: 2020-01-29 15:14:45.713
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-s..rics-storageadapter_31bf3856ad364e35_6.1.7600.16385_none_d67ca3c3b6af653e\winbiostorageadapter.dll because the set of per-page image hashes could not be found on the system.

Date: 2020-01-29 15:14:44.028
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-s..rics-storageadapter_31bf3856ad364e35_6.1.7600.16385_none_d67ca3c3b6af653e\winbiostorageadapter.dll because the set of per-page image hashes could not be found on the system.

==================== Memory info ===========================

BIOS: Hewlett-Packard 786E2 v02.04 04/13/2007
Motherboard: Hewlett-Packard 0A60h
Processor: Intel® Core™2 CPU 6300 @ 1.86GHz
Percentage of memory in use: 73%
Total physical RAM: 3063.31 MB
Available physical RAM: 819.32 MB
Total Virtual: 6124.77 MB
Available Virtual: 3668.25 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:929.56 GB) (Free:724.62 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: (OS_TOOLS) (Fixed) (Total:1.95 GB) (Free:1.75 GB) NTFS


==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: CF2E5F36)
Partition 1: (Active) - (Size=929.6 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=2 GB) - (Type=07 NTFS)

==================== End of Addition.txt =======================


  • 0

#9
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,598 posts
  • MVP

Uninstall:

 

Adobe Flash Player 32 ActiveX
Adobe Flash Player 32 NPAPI
Adobe Shockwave Player 11.6

Microsoft Silverlight

These are all now obsolete.

 

You are getting some ntfs errors so I would run chkdsk:

 

1. Double-click My Computer, and then right-click the hard disk that you want to check. C:
2. Click Properties, and then click Tools.
3. Under Error-checking, click Check Now. A dialog box that shows the Check disk options is displayed,
4. Check both boxes and then click Start.
You will receive the following message:
The disk check could not be performed because the disk check utility needs exclusive access to some Windows files on the disk. These files can be accessed by restarting Windows. Do you want to schedule the disk check to occur the next time you restart the computer?
Click Yes to schedule the disk check,

Reboot. The disk check will run and will  take several hours to finish.

 

Download the attached fixlist.txt to the same location as FRST

Attached File  fixlist.txt   2.81KB   209 downloads

Run FRST and press Fix

This will check your system files and should take about 15 minutes.
A fix log will be generated please post that

Reboot if the fix doesn't reboot it for you

Run FRST again but this time make sure Addition.txt is checked and hit Scan.  Post both logs.

 

Download and run Speedy Fox.
http://www.crystalidea.com/speedyfox. Close Chrome/Firefox/Skpe. Hit Optimize.

 

Is Firefox still causing problems?




 


  • 0

#10
debodun

debodun

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 566 posts

The Lumosity game site still uses Flash Player for some of the games. Can I run your directions without totally uninstalling that? Is Flash Player different from Shockwave?  My system seemed better today. The HD light stayed on for a while after I ran the FRST program.

 

I removed Silverlight and the HD light stayed on for about 5 minutes. Is that normal?

 

I will likely have to do the chkdsk in a few days on a day I have to go out and will not need the computer for a while.

 

Thank you for your patience and helping an old lady with her computer problems


Edited by debodun, 03 November 2020 - 11:55 AM.

  • 0

Advertisements


#11
debodun

debodun

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 566 posts
You are getting some ntfs errors so I would run chkdsk:

 

1. Double-click My Computer, and then right-click the hard disk that you want to check. C:

 

 

Where is the MY COMPUTER you mentioned? I don't see it on the desktop and I ran a search and it didn't pull up that named file.





 

 


  • 0

#12
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,598 posts
  • MVP

Sorry.  Old instructions.  Should be just Computer on a Windows 7.


  • 0

#13
debodun

debodun

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 566 posts

Fix List Log

 

 

 

Fix result of Farbar Recovery Scan Tool (x64) Version: 0$-11-2020
Ran by Owner (05-11-2020 14:53:30) Run:5
Running from C:\Users\Owner\Desktop
Loaded Profiles: Owner
Boot Mode: Normal
==============================================

fixlist content:
*****************
Task: {41E2110D-1421-413B-8E62-70C64466298F} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_445_Plugin.exe [1502264 2020-10-14] (Adobe Inc. -> Adobe)
Task: {5D084169-00AD-4D36-A448-C9A76FB459A9} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-10-14] (Adobe Inc. -> Adobe)
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_32_0_0_445.dll [2020-10-14] (Adobe Inc. -> )
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation ->  Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_445.dll [2020-10-14] (Adobe Inc. -> )
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll [2012-10-04] (Adobe Systems, Inc.) [File not signed]
FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation ->  Microsoft Corporation)
CMD: SFC /scannow
CMD: findstr  /c:"[SR]"  \windows\logs\cbs\cbs.log
CMD: FOR /F "usebackq delims==" %i IN (`wevtutil el`) DO wevtutil cl "%i"
Reboot:


*****************

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{41E2110D-1421-413B-8E62-70C64466298F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{41E2110D-1421-413B-8E62-70C64466298F}" => removed successfully
C:\Windows\System32\Tasks\Adobe Flash Player NPAPI Notifier => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Flash Player NPAPI Notifier" => removed successfully
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5D084169-00AD-4D36-A448-C9A76FB459A9} => removed successfully
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5D084169-00AD-4D36-A448-C9A76FB459A9} => removed successfully
C:\Windows\System32\Tasks\Adobe Flash Player Updater => moved successfully
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Flash Player Updater => removed successfully
HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer => removed successfully
C:\Windows\system32\Macromed\Flash\NPSWF64_32_0_0_445.dll => moved successfully
HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0 => not found
"c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll" => not found
"HKLM\Software\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_445.dll [2020-10-14] (Adobe Inc." => not found
C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_445.dll => moved successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer => removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.21.2 => removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation" => not found
"c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll" => not found

========= SFC /scannow =========



Beginning system scan.  This process will take some time.



Beginning verification phase of system scan.

Verification 0% complete.Verification 1% complete.Verification 1% complete.Verification 2% complete.Verification 2% complete.Verification 3% complete.Verification 4% complete.Verification 4% complete.Verification 5% complete.Verification 5% complete.Verification 6% complete.Verification 6% complete.Verification 7% complete.Verification 8% complete.Verification 8% complete.Verification 9% complete.Verification 9% complete.Verification 10% complete.Verification 11% complete.Verification 11% complete.Verification 12% complete.Verification 12% complete.Verification 13% complete.Verification 13% complete.Verification 14% complete.Verification 15% complete.Verification 15% complete.Verification 16% complete.Verification 16% complete.Verification 17% complete.Verification 18% complete.Verification 18% complete.Verification 19% complete.Verification 19% complete.Verification 20% complete.Verification 20% complete.Verification 21% complete.Verification 22% complete.Verification 22% complete.Verification 23% complete.Verification 23% complete.Verification 24% complete.Verification 24% complete.Verification 25% complete.Verification 26% complete.Verification 26% complete.Verification 27% complete.Verification 27% complete.Verification 28% complete.Verification 29% complete.Verification 29% complete.Verification 30% complete.Verification 30% complete.Verification 31% complete.Verification 31% complete.Verification 32% complete.Verification 33% complete.Verification 33% complete.Verification 34% complete.Verification 34% complete.Verification 35% complete.Verification 36% complete.Verification 36% complete.Verification 37% complete.Verification 37% complete.Verification 38% complete.Verification 38% complete.Verification 39% complete.Verification 40% complete.Verification 40% complete.Verification 41% complete.Verification 41% complete.Verification 42% complete.Verification 42% complete.Verification 43% complete.Verification 44% complete.Verification 44% complete.Verification 45% complete.Verification 45% complete.Verification 46% complete.Verification 47% complete.Verification 47% complete.Verification 48% complete.Verification 48% complete.Verification 49% complete.Verification 49% complete.Verification 50% complete.Verification 51% complete.Verification 51% complete.Verification 52% complete.Verification 52% complete.Verification 53% complete.Verification 54% complete.Verification 54% complete.Verification 55% complete.Verification 55% complete.Verification 56% complete.Verification 56% complete.Verification 57% complete.Verification 58% complete.Verification 58% complete.Verification 59% complete.Verification 59% complete.Verification 60% complete.Verification 60% complete.Verification 61% complete.Verification 62% complete.Verification 62% complete.Verification 63% complete.Verification 63% complete.Verification 64% complete.Verification 65% complete.Verification 65% complete.Verification 66% complete.Verification 66% complete.Verification 67% complete.Verification 67% complete.Verification 68% complete.Verification 69% complete.Verification 69% complete.Verification 70% complete.Verification 70% complete.Verification 71% complete.Verification 72% complete.Verification 72% complete.Verification 73% complete.Verification 73% complete.Verification 74% complete.Verification 74% complete.Verification 75% complete.Verification 76% complete.Verification 76% complete.Verification 77% complete.Verification 77% complete.Verification 78% complete.Verification 78% complete.Verification 79% complete.Verification 80% complete.Verification 80% complete.Verification 81% complete.Verification 81% complete.Verification 82% complete.Verification 83% complete.Verification 83% complete.Verification 84% complete.Verification 84% complete.Verification 85% complete.Verification 85% complete.Verification 86% complete.Verification 87% complete.Verification 87% complete.Verification 88% complete.Verification 88% complete.Verification 89% complete.Verification 90% complete.Verification 90% complete.Verification 91% complete.Verification 91% complete.Verification 92% complete.Verification 92% complete.Verification 93% complete.Verification 94% complete.Verification 94% complete.Verification 95% complete.Verification 95% complete.Verification 96% complete.Verification 96% complete.Verification 97% complete.Verification 98% complete.Verification 98% complete.Verification 99% complete.Verification 99% complete.Verification 100% complete.


Windows Resource Protection did not find any integrity violations.


========= End of CMD: =========


========= findstr  /c:"[SR]"  \windows\logs\cbs\cbs.log =========

2020-11-05 14:53:48, Info                  CSI    00000009 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:53:48, Info                  CSI    0000000a [SR] Beginning Verify and Repair transaction
2020-11-05 14:53:50, Info                  CSI    0000000c [SR] Verify complete
2020-11-05 14:53:51, Info                  CSI    0000000d [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:53:51, Info                  CSI    0000000e [SR] Beginning Verify and Repair transaction
2020-11-05 14:53:52, Info                  CSI    00000010 [SR] Verify complete
2020-11-05 14:53:53, Info                  CSI    00000011 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:53:53, Info                  CSI    00000012 [SR] Beginning Verify and Repair transaction
2020-11-05 14:53:55, Info                  CSI    00000014 [SR] Verify complete
2020-11-05 14:53:55, Info                  CSI    00000015 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:53:55, Info                  CSI    00000016 [SR] Beginning Verify and Repair transaction
2020-11-05 14:53:57, Info                  CSI    00000018 [SR] Verify complete
2020-11-05 14:53:58, Info                  CSI    00000019 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:53:58, Info                  CSI    0000001a [SR] Beginning Verify and Repair transaction
2020-11-05 14:53:59, Info                  CSI    0000001c [SR] Verify complete
2020-11-05 14:54:00, Info                  CSI    0000001d [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:54:00, Info                  CSI    0000001e [SR] Beginning Verify and Repair transaction
2020-11-05 14:54:01, Info                  CSI    00000020 [SR] Verify complete
2020-11-05 14:54:02, Info                  CSI    00000021 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:54:02, Info                  CSI    00000022 [SR] Beginning Verify and Repair transaction
2020-11-05 14:54:04, Info                  CSI    00000024 [SR] Verify complete
2020-11-05 14:54:04, Info                  CSI    00000025 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:54:04, Info                  CSI    00000026 [SR] Beginning Verify and Repair transaction
2020-11-05 14:54:06, Info                  CSI    00000028 [SR] Verify complete
2020-11-05 14:54:07, Info                  CSI    00000029 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:54:07, Info                  CSI    0000002a [SR] Beginning Verify and Repair transaction
2020-11-05 14:54:08, Info                  CSI    0000002c [SR] Verify complete
2020-11-05 14:54:09, Info                  CSI    0000002d [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:54:09, Info                  CSI    0000002e [SR] Beginning Verify and Repair transaction
2020-11-05 14:54:10, Info                  CSI    00000030 [SR] Verify complete
2020-11-05 14:54:11, Info                  CSI    00000031 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:54:11, Info                  CSI    00000032 [SR] Beginning Verify and Repair transaction
2020-11-05 14:54:13, Info                  CSI    00000034 [SR] Verify complete
2020-11-05 14:54:13, Info                  CSI    00000035 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:54:13, Info                  CSI    00000036 [SR] Beginning Verify and Repair transaction
2020-11-05 14:54:15, Info                  CSI    00000038 [SR] Verify complete
2020-11-05 14:54:15, Info                  CSI    00000039 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:54:15, Info                  CSI    0000003a [SR] Beginning Verify and Repair transaction
2020-11-05 14:54:17, Info                  CSI    0000003c [SR] Verify complete
2020-11-05 14:54:18, Info                  CSI    0000003d [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:54:18, Info                  CSI    0000003e [SR] Beginning Verify and Repair transaction
2020-11-05 14:54:19, Info                  CSI    00000040 [SR] Verify complete
2020-11-05 14:54:20, Info                  CSI    00000041 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:54:20, Info                  CSI    00000042 [SR] Beginning Verify and Repair transaction
2020-11-05 14:54:21, Info                  CSI    00000044 [SR] Verify complete
2020-11-05 14:54:22, Info                  CSI    00000045 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:54:22, Info                  CSI    00000046 [SR] Beginning Verify and Repair transaction
2020-11-05 14:54:24, Info                  CSI    00000048 [SR] Verify complete
2020-11-05 14:54:24, Info                  CSI    00000049 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:54:24, Info                  CSI    0000004a [SR] Beginning Verify and Repair transaction
2020-11-05 14:54:26, Info                  CSI    0000004c [SR] Verify complete
2020-11-05 14:54:26, Info                  CSI    0000004d [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:54:26, Info                  CSI    0000004e [SR] Beginning Verify and Repair transaction
2020-11-05 14:54:28, Info                  CSI    00000050 [SR] Verify complete
2020-11-05 14:54:29, Info                  CSI    00000051 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:54:29, Info                  CSI    00000052 [SR] Beginning Verify and Repair transaction
2020-11-05 14:54:30, Info                  CSI    00000054 [SR] Verify complete
2020-11-05 14:54:31, Info                  CSI    00000055 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:54:31, Info                  CSI    00000056 [SR] Beginning Verify and Repair transaction
2020-11-05 14:54:32, Info                  CSI    00000058 [SR] Verify complete
2020-11-05 14:54:33, Info                  CSI    00000059 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:54:33, Info                  CSI    0000005a [SR] Beginning Verify and Repair transaction
2020-11-05 14:54:35, Info                  CSI    0000005c [SR] Verify complete
2020-11-05 14:54:35, Info                  CSI    0000005d [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:54:35, Info                  CSI    0000005e [SR] Beginning Verify and Repair transaction
2020-11-05 14:54:37, Info                  CSI    00000060 [SR] Verify complete
2020-11-05 14:54:37, Info                  CSI    00000061 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:54:37, Info                  CSI    00000062 [SR] Beginning Verify and Repair transaction
2020-11-05 14:54:39, Info                  CSI    00000064 [SR] Verify complete
2020-11-05 14:54:39, Info                  CSI    00000065 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:54:39, Info                  CSI    00000066 [SR] Beginning Verify and Repair transaction
2020-11-05 14:54:41, Info                  CSI    00000068 [SR] Verify complete
2020-11-05 14:54:41, Info                  CSI    00000069 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:54:41, Info                  CSI    0000006a [SR] Beginning Verify and Repair transaction
2020-11-05 14:54:43, Info                  CSI    0000006c [SR] Verify complete
2020-11-05 14:54:44, Info                  CSI    0000006d [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:54:44, Info                  CSI    0000006e [SR] Beginning Verify and Repair transaction
2020-11-05 14:54:45, Info                  CSI    00000070 [SR] Verify complete
2020-11-05 14:54:46, Info                  CSI    00000071 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:54:46, Info                  CSI    00000072 [SR] Beginning Verify and Repair transaction
2020-11-05 14:54:47, Info                  CSI    00000074 [SR] Verify complete
2020-11-05 14:54:48, Info                  CSI    00000075 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:54:48, Info                  CSI    00000076 [SR] Beginning Verify and Repair transaction
2020-11-05 14:54:49, Info                  CSI    00000078 [SR] Verify complete
2020-11-05 14:54:50, Info                  CSI    00000079 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:54:50, Info                  CSI    0000007a [SR] Beginning Verify and Repair transaction
2020-11-05 14:54:51, Info                  CSI    0000007c [SR] Verify complete
2020-11-05 14:54:52, Info                  CSI    0000007d [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:54:52, Info                  CSI    0000007e [SR] Beginning Verify and Repair transaction
2020-11-05 14:54:54, Info                  CSI    00000080 [SR] Verify complete
2020-11-05 14:54:54, Info                  CSI    00000081 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:54:54, Info                  CSI    00000082 [SR] Beginning Verify and Repair transaction
2020-11-05 14:54:55, Info                  CSI    00000084 [SR] Verify complete
2020-11-05 14:54:56, Info                  CSI    00000085 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:54:56, Info                  CSI    00000086 [SR] Beginning Verify and Repair transaction
2020-11-05 14:54:58, Info                  CSI    00000088 [SR] Verify complete
2020-11-05 14:54:59, Info                  CSI    00000089 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:54:59, Info                  CSI    0000008a [SR] Beginning Verify and Repair transaction
2020-11-05 14:55:01, Info                  CSI    0000008c [SR] Verify complete
2020-11-05 14:55:02, Info                  CSI    0000008d [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:55:02, Info                  CSI    0000008e [SR] Beginning Verify and Repair transaction
2020-11-05 14:55:03, Info                  CSI    00000090 [SR] Verify complete
2020-11-05 14:55:04, Info                  CSI    00000091 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:55:04, Info                  CSI    00000092 [SR] Beginning Verify and Repair transaction
2020-11-05 14:55:05, Info                  CSI    00000094 [SR] Verify complete
2020-11-05 14:55:06, Info                  CSI    00000095 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:55:06, Info                  CSI    00000096 [SR] Beginning Verify and Repair transaction
2020-11-05 14:55:08, Info                  CSI    00000098 [SR] Verify complete
2020-11-05 14:55:09, Info                  CSI    00000099 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:55:09, Info                  CSI    0000009a [SR] Beginning Verify and Repair transaction
2020-11-05 14:55:10, Info                  CSI    0000009c [SR] Verify complete
2020-11-05 14:55:11, Info                  CSI    0000009d [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:55:11, Info                  CSI    0000009e [SR] Beginning Verify and Repair transaction
2020-11-05 14:55:12, Info                  CSI    000000a0 [SR] Verify complete
2020-11-05 14:55:13, Info                  CSI    000000a1 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:55:13, Info                  CSI    000000a2 [SR] Beginning Verify and Repair transaction
2020-11-05 14:55:15, Info                  CSI    000000a4 [SR] Verify complete
2020-11-05 14:55:15, Info                  CSI    000000a5 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:55:15, Info                  CSI    000000a6 [SR] Beginning Verify and Repair transaction
2020-11-05 14:55:17, Info                  CSI    000000a8 [SR] Verify complete
2020-11-05 14:55:17, Info                  CSI    000000a9 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:55:17, Info                  CSI    000000aa [SR] Beginning Verify and Repair transaction
2020-11-05 14:55:19, Info                  CSI    000000ac [SR] Verify complete
2020-11-05 14:55:19, Info                  CSI    000000ad [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:55:19, Info                  CSI    000000ae [SR] Beginning Verify and Repair transaction
2020-11-05 14:55:21, Info                  CSI    000000b0 [SR] Verify complete
2020-11-05 14:55:22, Info                  CSI    000000b1 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:55:22, Info                  CSI    000000b2 [SR] Beginning Verify and Repair transaction
2020-11-05 14:55:23, Info                  CSI    000000b4 [SR] Verify complete
2020-11-05 14:55:24, Info                  CSI    000000b5 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:55:24, Info                  CSI    000000b6 [SR] Beginning Verify and Repair transaction
2020-11-05 14:55:25, Info                  CSI    000000b8 [SR] Verify complete
2020-11-05 14:55:26, Info                  CSI    000000b9 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:55:26, Info                  CSI    000000ba [SR] Beginning Verify and Repair transaction
2020-11-05 14:55:27, Info                  CSI    000000bc [SR] Verify complete
2020-11-05 14:55:28, Info                  CSI    000000bd [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:55:28, Info                  CSI    000000be [SR] Beginning Verify and Repair transaction
2020-11-05 14:55:29, Info                  CSI    000000c0 [SR] Verify complete
2020-11-05 14:55:30, Info                  CSI    000000c1 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:55:30, Info                  CSI    000000c2 [SR] Beginning Verify and Repair transaction
2020-11-05 14:55:32, Info                  CSI    000000c4 [SR] Verify complete
2020-11-05 14:55:32, Info                  CSI    000000c5 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:55:32, Info                  CSI    000000c6 [SR] Beginning Verify and Repair transaction
2020-11-05 14:55:34, Info                  CSI    000000c8 [SR] Verify complete
2020-11-05 14:55:34, Info                  CSI    000000c9 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:55:34, Info                  CSI    000000ca [SR] Beginning Verify and Repair transaction
2020-11-05 14:55:37, Info                  CSI    000000cc [SR] Verify complete
2020-11-05 14:55:38, Info                  CSI    000000cd [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:55:38, Info                  CSI    000000ce [SR] Beginning Verify and Repair transaction
2020-11-05 14:55:39, Info                  CSI    000000d0 [SR] Verify complete
2020-11-05 14:55:40, Info                  CSI    000000d1 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:55:40, Info                  CSI    000000d2 [SR] Beginning Verify and Repair transaction
2020-11-05 14:55:42, Info                  CSI    000000d4 [SR] Verify complete
2020-11-05 14:55:43, Info                  CSI    000000d5 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:55:43, Info                  CSI    000000d6 [SR] Beginning Verify and Repair transaction
2020-11-05 14:55:49, Info                  CSI    000000d9 [SR] Verify complete
2020-11-05 14:55:49, Info                  CSI    000000da [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:55:49, Info                  CSI    000000db [SR] Beginning Verify and Repair transaction
2020-11-05 14:55:55, Info                  CSI    000000df [SR] Verify complete
2020-11-05 14:55:55, Info                  CSI    000000e0 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:55:55, Info                  CSI    000000e1 [SR] Beginning Verify and Repair transaction
2020-11-05 14:55:58, Info                  CSI    000000e4 [SR] Verify complete
2020-11-05 14:55:59, Info                  CSI    000000e5 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:55:59, Info                  CSI    000000e6 [SR] Beginning Verify and Repair transaction
2020-11-05 14:56:03, Info                  CSI    000000e9 [SR] Verify complete
2020-11-05 14:56:03, Info                  CSI    000000ea [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:56:03, Info                  CSI    000000eb [SR] Beginning Verify and Repair transaction
2020-11-05 14:56:08, Info                  CSI    000000ed [SR] Verify complete
2020-11-05 14:56:08, Info                  CSI    000000ee [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:56:08, Info                  CSI    000000ef [SR] Beginning Verify and Repair transaction
2020-11-05 14:56:16, Info                  CSI    00000114 [SR] Verify complete
2020-11-05 14:56:16, Info                  CSI    00000115 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:56:16, Info                  CSI    00000116 [SR] Beginning Verify and Repair transaction
2020-11-05 14:56:21, Info                  CSI    00000118 [SR] Verify complete
2020-11-05 14:56:22, Info                  CSI    00000119 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:56:22, Info                  CSI    0000011a [SR] Beginning Verify and Repair transaction
2020-11-05 14:56:26, Info                  CSI    0000011c [SR] Verify complete
2020-11-05 14:56:26, Info                  CSI    0000011d [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:56:26, Info                  CSI    0000011e [SR] Beginning Verify and Repair transaction
2020-11-05 14:56:30, Info                  CSI    00000120 [SR] Verify complete
2020-11-05 14:56:31, Info                  CSI    00000121 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:56:31, Info                  CSI    00000122 [SR] Beginning Verify and Repair transaction
2020-11-05 14:56:36, Info                  CSI    00000124 [SR] Verify complete
2020-11-05 14:56:36, Info                  CSI    00000125 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:56:36, Info                  CSI    00000126 [SR] Beginning Verify and Repair transaction
2020-11-05 14:56:39, Info                  CSI    00000128 [SR] Verify complete
2020-11-05 14:56:40, Info                  CSI    00000129 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:56:40, Info                  CSI    0000012a [SR] Beginning Verify and Repair transaction
2020-11-05 14:56:46, Info                  CSI    0000012c [SR] Verify complete
2020-11-05 14:56:46, Info                  CSI    0000012d [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:56:46, Info                  CSI    0000012e [SR] Beginning Verify and Repair transaction
2020-11-05 14:56:56, Info                  CSI    00000151 [SR] Verify complete
2020-11-05 14:56:56, Info                  CSI    00000152 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:56:56, Info                  CSI    00000153 [SR] Beginning Verify and Repair transaction
2020-11-05 14:57:02, Info                  CSI    00000155 [SR] Verify complete
2020-11-05 14:57:03, Info                  CSI    00000156 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:57:03, Info                  CSI    00000157 [SR] Beginning Verify and Repair transaction
2020-11-05 14:57:14, Info                  CSI    00000159 [SR] Verify complete
2020-11-05 14:57:14, Info                  CSI    0000015a [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:57:14, Info                  CSI    0000015b [SR] Beginning Verify and Repair transaction
2020-11-05 14:57:22, Info                  CSI    0000015f [SR] Verify complete
2020-11-05 14:57:22, Info                  CSI    00000160 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:57:22, Info                  CSI    00000161 [SR] Beginning Verify and Repair transaction
2020-11-05 14:57:25, Info                  CSI    00000163 [SR] Verify complete
2020-11-05 14:57:25, Info                  CSI    00000164 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:57:25, Info                  CSI    00000165 [SR] Beginning Verify and Repair transaction
2020-11-05 14:57:26, Info                  CSI    00000167 [SR] Verify complete
2020-11-05 14:57:26, Info                  CSI    00000168 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:57:26, Info                  CSI    00000169 [SR] Beginning Verify and Repair transaction
2020-11-05 14:57:28, Info                  CSI    0000016b [SR] Verify complete
2020-11-05 14:57:29, Info                  CSI    0000016c [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:57:29, Info                  CSI    0000016d [SR] Beginning Verify and Repair transaction
2020-11-05 14:57:38, Info                  CSI    00000180 [SR] Verify complete
2020-11-05 14:57:38, Info                  CSI    00000181 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:57:38, Info                  CSI    00000182 [SR] Beginning Verify and Repair transaction
2020-11-05 14:57:40, Info                  CSI    00000184 [SR] Verify complete
2020-11-05 14:57:40, Info                  CSI    00000185 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:57:40, Info                  CSI    00000186 [SR] Beginning Verify and Repair transaction
2020-11-05 14:57:42, Info                  CSI    00000188 [SR] Verify complete
2020-11-05 14:57:43, Info                  CSI    00000189 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:57:43, Info                  CSI    0000018a [SR] Beginning Verify and Repair transaction
2020-11-05 14:57:45, Info                  CSI    0000018c [SR] Verify complete
2020-11-05 14:57:46, Info                  CSI    0000018d [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:57:46, Info                  CSI    0000018e [SR] Beginning Verify and Repair transaction
2020-11-05 14:57:51, Info                  CSI    00000190 [SR] Verify complete
2020-11-05 14:57:51, Info                  CSI    00000191 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:57:51, Info                  CSI    00000192 [SR] Beginning Verify and Repair transaction
2020-11-05 14:58:03, Info                  CSI    00000196 [SR] Verify complete
2020-11-05 14:58:04, Info                  CSI    00000197 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:58:04, Info                  CSI    00000198 [SR] Beginning Verify and Repair transaction
2020-11-05 14:58:08, Info                  CSI    0000019a [SR] Verify complete
2020-11-05 14:58:08, Info                  CSI    0000019b [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:58:08, Info                  CSI    0000019c [SR] Beginning Verify and Repair transaction
2020-11-05 14:58:09, Info                  CSI    0000019e [SR] Verify complete
2020-11-05 14:58:09, Info                  CSI    0000019f [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:58:09, Info                  CSI    000001a0 [SR] Beginning Verify and Repair transaction
2020-11-05 14:58:15, Info                  CSI    000001a2 [SR] Verify complete
2020-11-05 14:58:16, Info                  CSI    000001a3 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:58:16, Info                  CSI    000001a4 [SR] Beginning Verify and Repair transaction
2020-11-05 14:58:20, Info                  CSI    000001a6 [SR] Verify complete
2020-11-05 14:58:21, Info                  CSI    000001a7 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:58:21, Info                  CSI    000001a8 [SR] Beginning Verify and Repair transaction
2020-11-05 14:58:25, Info                  CSI    000001aa [SR] Verify complete
2020-11-05 14:58:26, Info                  CSI    000001ab [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:58:26, Info                  CSI    000001ac [SR] Beginning Verify and Repair transaction
2020-11-05 14:58:35, Info                  CSI    000001b2 [SR] Verify complete
2020-11-05 14:58:36, Info                  CSI    000001b3 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:58:36, Info                  CSI    000001b4 [SR] Beginning Verify and Repair transaction
2020-11-05 14:58:43, Info                  CSI    000001c8 [SR] Verify complete
2020-11-05 14:58:43, Info                  CSI    000001c9 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:58:43, Info                  CSI    000001ca [SR] Beginning Verify and Repair transaction
2020-11-05 14:58:49, Info                  CSI    000001cc [SR] Verify complete
2020-11-05 14:58:49, Info                  CSI    000001cd [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:58:49, Info                  CSI    000001ce [SR] Beginning Verify and Repair transaction
2020-11-05 14:59:05, Info                  CSI    000001d0 [SR] Verify complete
2020-11-05 14:59:06, Info                  CSI    000001d1 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:59:06, Info                  CSI    000001d2 [SR] Beginning Verify and Repair transaction
2020-11-05 14:59:16, Info                  CSI    000001d5 [SR] Verify complete
2020-11-05 14:59:17, Info                  CSI    000001d6 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:59:17, Info                  CSI    000001d7 [SR] Beginning Verify and Repair transaction
2020-11-05 14:59:24, Info                  CSI    000001d9 [SR] Verify complete
2020-11-05 14:59:25, Info                  CSI    000001da [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:59:25, Info                  CSI    000001db [SR] Beginning Verify and Repair transaction
2020-11-05 14:59:29, Info                  CSI    000001dd [SR] Verify complete
2020-11-05 14:59:29, Info                  CSI    000001de [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:59:29, Info                  CSI    000001df [SR] Beginning Verify and Repair transaction
2020-11-05 14:59:34, Info                  CSI    000001e1 [SR] Verify complete
2020-11-05 14:59:35, Info                  CSI    000001e2 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:59:35, Info                  CSI    000001e3 [SR] Beginning Verify and Repair transaction
2020-11-05 14:59:39, Info                  CSI    000001e5 [SR] Verify complete
2020-11-05 14:59:39, Info                  CSI    000001e6 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:59:39, Info                  CSI    000001e7 [SR] Beginning Verify and Repair transaction
2020-11-05 14:59:44, Info                  CSI    000001eb [SR] Verify complete
2020-11-05 14:59:45, Info                  CSI    000001ec [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:59:45, Info                  CSI    000001ed [SR] Beginning Verify and Repair transaction
2020-11-05 14:59:56, Info                  CSI    000001ef [SR] Verify complete
2020-11-05 14:59:56, Info                  CSI    000001f0 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 14:59:56, Info                  CSI    000001f1 [SR] Beginning Verify and Repair transaction
2020-11-05 15:00:04, Info                  CSI    000001f4 [SR] Verify complete
2020-11-05 15:00:04, Info                  CSI    000001f5 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:00:04, Info                  CSI    000001f6 [SR] Beginning Verify and Repair transaction
2020-11-05 15:00:10, Info                  CSI    000001f8 [SR] Verify complete
2020-11-05 15:00:11, Info                  CSI    000001f9 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:00:11, Info                  CSI    000001fa [SR] Beginning Verify and Repair transaction
2020-11-05 15:00:16, Info                  CSI    000001fd [SR] Verify complete
2020-11-05 15:00:16, Info                  CSI    000001fe [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:00:16, Info                  CSI    000001ff [SR] Beginning Verify and Repair transaction
2020-11-05 15:00:23, Info                  CSI    00000201 [SR] Verify complete
2020-11-05 15:00:23, Info                  CSI    00000202 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:00:23, Info                  CSI    00000203 [SR] Beginning Verify and Repair transaction
2020-11-05 15:00:31, Info                  CSI    00000206 [SR] Verify complete
2020-11-05 15:00:32, Info                  CSI    00000207 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:00:32, Info                  CSI    00000208 [SR] Beginning Verify and Repair transaction
2020-11-05 15:00:37, Info                  CSI    0000020a [SR] Verify complete
2020-11-05 15:00:37, Info                  CSI    0000020b [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:00:37, Info                  CSI    0000020c [SR] Beginning Verify and Repair transaction
2020-11-05 15:00:42, Info                  CSI    0000020e [SR] Verify complete
2020-11-05 15:00:43, Info                  CSI    0000020f [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:00:43, Info                  CSI    00000210 [SR] Beginning Verify and Repair transaction
2020-11-05 15:00:50, Info                  CSI    00000212 [SR] Verify complete
2020-11-05 15:00:50, Info                  CSI    00000213 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:00:50, Info                  CSI    00000214 [SR] Beginning Verify and Repair transaction
2020-11-05 15:00:55, Info                  CSI    00000217 [SR] Verify complete
2020-11-05 15:00:55, Info                  CSI    00000218 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:00:55, Info                  CSI    00000219 [SR] Beginning Verify and Repair transaction
2020-11-05 15:01:02, Info                  CSI    0000021b [SR] Verify complete
2020-11-05 15:01:02, Info                  CSI    0000021c [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:01:02, Info                  CSI    0000021d [SR] Beginning Verify and Repair transaction
2020-11-05 15:01:06, Info                  CSI    00000220 [SR] Verify complete
2020-11-05 15:01:07, Info                  CSI    00000221 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:01:07, Info                  CSI    00000222 [SR] Beginning Verify and Repair transaction
2020-11-05 15:01:13, Info                  CSI    00000225 [SR] Verify complete
2020-11-05 15:01:13, Info                  CSI    00000226 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:01:13, Info                  CSI    00000227 [SR] Beginning Verify and Repair transaction
2020-11-05 15:01:19, Info                  CSI    00000229 [SR] Verify complete
2020-11-05 15:01:20, Info                  CSI    0000022a [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:01:20, Info                  CSI    0000022b [SR] Beginning Verify and Repair transaction
2020-11-05 15:01:25, Info                  CSI    0000022f [SR] Verify complete
2020-11-05 15:01:26, Info                  CSI    00000230 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:01:26, Info                  CSI    00000231 [SR] Beginning Verify and Repair transaction
2020-11-05 15:01:32, Info                  CSI    00000233 [SR] Verify complete
2020-11-05 15:01:32, Info                  CSI    00000234 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:01:32, Info                  CSI    00000235 [SR] Beginning Verify and Repair transaction
2020-11-05 15:01:39, Info                  CSI    00000238 [SR] Verify complete
2020-11-05 15:01:39, Info                  CSI    00000239 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:01:39, Info                  CSI    0000023a [SR] Beginning Verify and Repair transaction
2020-11-05 15:01:45, Info                  CSI    0000023c [SR] Verify complete
2020-11-05 15:01:45, Info                  CSI    0000023d [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:01:45, Info                  CSI    0000023e [SR] Beginning Verify and Repair transaction
2020-11-05 15:01:47, Info                  CSI    00000240 [SR] Verify complete
2020-11-05 15:01:47, Info                  CSI    00000241 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:01:47, Info                  CSI    00000242 [SR] Beginning Verify and Repair transaction
2020-11-05 15:01:52, Info                  CSI    00000244 [SR] Verify complete
2020-11-05 15:01:52, Info                  CSI    00000245 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:01:52, Info                  CSI    00000246 [SR] Beginning Verify and Repair transaction
2020-11-05 15:01:57, Info                  CSI    00000248 [SR] Verify complete
2020-11-05 15:01:58, Info                  CSI    00000249 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:01:58, Info                  CSI    0000024a [SR] Beginning Verify and Repair transaction
2020-11-05 15:02:04, Info                  CSI    0000024c [SR] Verify complete
2020-11-05 15:02:05, Info                  CSI    0000024d [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:02:05, Info                  CSI    0000024e [SR] Beginning Verify and Repair transaction
2020-11-05 15:02:08, Info                  CSI    00000250 [SR] Verify complete
2020-11-05 15:02:08, Info                  CSI    00000251 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:02:08, Info                  CSI    00000252 [SR] Beginning Verify and Repair transaction
2020-11-05 15:02:13, Info                  CSI    00000254 [SR] Verify complete
2020-11-05 15:02:13, Info                  CSI    00000255 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:02:13, Info                  CSI    00000256 [SR] Beginning Verify and Repair transaction
2020-11-05 15:02:23, Info                  CSI    00000258 [SR] Verify complete
2020-11-05 15:02:24, Info                  CSI    00000259 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:02:24, Info                  CSI    0000025a [SR] Beginning Verify and Repair transaction
2020-11-05 15:02:39, Info                  CSI    0000025c [SR] Verify complete
2020-11-05 15:02:39, Info                  CSI    0000025d [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:02:39, Info                  CSI    0000025e [SR] Beginning Verify and Repair transaction
2020-11-05 15:02:43, Info                  CSI    00000260 [SR] Verify complete
2020-11-05 15:02:43, Info                  CSI    00000261 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:02:43, Info                  CSI    00000262 [SR] Beginning Verify and Repair transaction
2020-11-05 15:02:48, Info                  CSI    00000264 [SR] Verify complete
2020-11-05 15:02:49, Info                  CSI    00000265 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:02:49, Info                  CSI    00000266 [SR] Beginning Verify and Repair transaction
2020-11-05 15:02:51, Info                  CSI    00000268 [SR] Verify complete
2020-11-05 15:02:51, Info                  CSI    00000269 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:02:51, Info                  CSI    0000026a [SR] Beginning Verify and Repair transaction
2020-11-05 15:02:55, Info                  CSI    0000026c [SR] Verify complete
2020-11-05 15:02:55, Info                  CSI    0000026d [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:02:55, Info                  CSI    0000026e [SR] Beginning Verify and Repair transaction
2020-11-05 15:03:00, Info                  CSI    00000270 [SR] Verify complete
2020-11-05 15:03:00, Info                  CSI    00000271 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:03:00, Info                  CSI    00000272 [SR] Beginning Verify and Repair transaction
2020-11-05 15:03:03, Info                  CSI    00000274 [SR] Verify complete
2020-11-05 15:03:03, Info                  CSI    00000275 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:03:03, Info                  CSI    00000276 [SR] Beginning Verify and Repair transaction
2020-11-05 15:03:04, Info                  CSI    00000278 [SR] Verify complete
2020-11-05 15:03:05, Info                  CSI    00000279 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:03:05, Info                  CSI    0000027a [SR] Beginning Verify and Repair transaction
2020-11-05 15:03:10, Info                  CSI    00000282 [SR] Verify complete
2020-11-05 15:03:10, Info                  CSI    00000283 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:03:10, Info                  CSI    00000284 [SR] Beginning Verify and Repair transaction
2020-11-05 15:03:14, Info                  CSI    00000286 [SR] Verify complete
2020-11-05 15:03:15, Info                  CSI    00000287 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:03:15, Info                  CSI    00000288 [SR] Beginning Verify and Repair transaction
2020-11-05 15:03:18, Info                  CSI    0000028a [SR] Verify complete
2020-11-05 15:03:19, Info                  CSI    0000028b [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:03:19, Info                  CSI    0000028c [SR] Beginning Verify and Repair transaction
2020-11-05 15:03:21, Info                  CSI    0000028e [SR] Verify complete
2020-11-05 15:03:22, Info                  CSI    0000028f [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:03:22, Info                  CSI    00000290 [SR] Beginning Verify and Repair transaction
2020-11-05 15:03:26, Info                  CSI    00000292 [SR] Verify complete
2020-11-05 15:03:27, Info                  CSI    00000293 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:03:27, Info                  CSI    00000294 [SR] Beginning Verify and Repair transaction
2020-11-05 15:03:33, Info                  CSI    00000296 [SR] Verify complete
2020-11-05 15:03:33, Info                  CSI    00000297 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:03:33, Info                  CSI    00000298 [SR] Beginning Verify and Repair transaction
2020-11-05 15:03:40, Info                  CSI    0000029b [SR] Verify complete
2020-11-05 15:03:40, Info                  CSI    0000029c [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:03:40, Info                  CSI    0000029d [SR] Beginning Verify and Repair transaction
2020-11-05 15:03:43, Info                  CSI    0000029f [SR] Verify complete
2020-11-05 15:03:43, Info                  CSI    000002a0 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:03:43, Info                  CSI    000002a1 [SR] Beginning Verify and Repair transaction
2020-11-05 15:03:47, Info                  CSI    000002a3 [SR] Verify complete
2020-11-05 15:03:47, Info                  CSI    000002a4 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:03:47, Info                  CSI    000002a5 [SR] Beginning Verify and Repair transaction
2020-11-05 15:04:01, Info                  CSI    000002aa [SR] Verify complete
2020-11-05 15:04:01, Info                  CSI    000002ab [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:04:01, Info                  CSI    000002ac [SR] Beginning Verify and Repair transaction
2020-11-05 15:04:08, Info                  CSI    000002b1 [SR] Verify complete
2020-11-05 15:04:09, Info                  CSI    000002b2 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:04:09, Info                  CSI    000002b3 [SR] Beginning Verify and Repair transaction
2020-11-05 15:04:16, Info                  CSI    000002b5 [SR] Verify complete
2020-11-05 15:04:17, Info                  CSI    000002b6 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:04:17, Info                  CSI    000002b7 [SR] Beginning Verify and Repair transaction
2020-11-05 15:04:24, Info                  CSI    000002c5 [SR] Verify complete
2020-11-05 15:04:24, Info                  CSI    000002c6 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:04:24, Info                  CSI    000002c7 [SR] Beginning Verify and Repair transaction
2020-11-05 15:04:31, Info                  CSI    000002cd [SR] Verify complete
2020-11-05 15:04:32, Info                  CSI    000002ce [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:04:32, Info                  CSI    000002cf [SR] Beginning Verify and Repair transaction
2020-11-05 15:04:37, Info                  CSI    000002d1 [SR] Verify complete
2020-11-05 15:04:37, Info                  CSI    000002d2 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:04:37, Info                  CSI    000002d3 [SR] Beginning Verify and Repair transaction
2020-11-05 15:04:41, Info                  CSI    000002d7 [SR] Verify complete
2020-11-05 15:04:41, Info                  CSI    000002d8 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:04:41, Info                  CSI    000002d9 [SR] Beginning Verify and Repair transaction
2020-11-05 15:04:45, Info                  CSI    000002db [SR] Verify complete
2020-11-05 15:04:46, Info                  CSI    000002dc [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:04:46, Info                  CSI    000002dd [SR] Beginning Verify and Repair transaction
2020-11-05 15:04:52, Info                  CSI    00000302 [SR] Verify complete
2020-11-05 15:04:53, Info                  CSI    00000303 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:04:53, Info                  CSI    00000304 [SR] Beginning Verify and Repair transaction
2020-11-05 15:04:57, Info                  CSI    00000306 [SR] Verify complete
2020-11-05 15:04:58, Info                  CSI    00000307 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:04:58, Info                  CSI    00000308 [SR] Beginning Verify and Repair transaction
2020-11-05 15:05:01, Info                  CSI    0000030a [SR] Verify complete
2020-11-05 15:05:02, Info                  CSI    0000030b [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:05:02, Info                  CSI    0000030c [SR] Beginning Verify and Repair transaction
2020-11-05 15:05:06, Info                  CSI    0000030e [SR] Verify complete
2020-11-05 15:05:07, Info                  CSI    0000030f [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:05:07, Info                  CSI    00000310 [SR] Beginning Verify and Repair transaction
2020-11-05 15:05:11, Info                  CSI    0000031e [SR] Verify complete
2020-11-05 15:05:11, Info                  CSI    0000031f [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:05:11, Info                  CSI    00000320 [SR] Beginning Verify and Repair transaction
2020-11-05 15:05:19, Info                  CSI    00000322 [SR] Verify complete
2020-11-05 15:05:19, Info                  CSI    00000323 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:05:19, Info                  CSI    00000324 [SR] Beginning Verify and Repair transaction
2020-11-05 15:05:26, Info                  CSI    00000332 [SR] Verify complete
2020-11-05 15:05:26, Info                  CSI    00000333 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:05:26, Info                  CSI    00000334 [SR] Beginning Verify and Repair transaction
2020-11-05 15:05:29, Info                  CSI    00000336 [SR] Verify complete
2020-11-05 15:05:30, Info                  CSI    00000337 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:05:30, Info                  CSI    00000338 [SR] Beginning Verify and Repair transaction
2020-11-05 15:05:33, Info                  CSI    0000033a [SR] Verify complete
2020-11-05 15:05:34, Info                  CSI    0000033b [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:05:34, Info                  CSI    0000033c [SR] Beginning Verify and Repair transaction
2020-11-05 15:05:39, Info                  CSI    0000033f [SR] Verify complete
2020-11-05 15:05:39, Info                  CSI    00000340 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:05:39, Info                  CSI    00000341 [SR] Beginning Verify and Repair transaction
2020-11-05 15:05:40, Info                  CSI    00000343 [SR] Verify complete
2020-11-05 15:05:41, Info                  CSI    00000344 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:05:41, Info                  CSI    00000345 [SR] Beginning Verify and Repair transaction
2020-11-05 15:05:46, Info                  CSI    00000347 [SR] Verify complete
2020-11-05 15:05:46, Info                  CSI    00000348 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:05:46, Info                  CSI    00000349 [SR] Beginning Verify and Repair transaction
2020-11-05 15:05:51, Info                  CSI    0000034b [SR] Verify complete
2020-11-05 15:05:51, Info                  CSI    0000034c [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:05:51, Info                  CSI    0000034d [SR] Beginning Verify and Repair transaction
2020-11-05 15:05:56, Info                  CSI    0000034f [SR] Verify complete
2020-11-05 15:05:56, Info                  CSI    00000350 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:05:56, Info                  CSI    00000351 [SR] Beginning Verify and Repair transaction
2020-11-05 15:06:05, Info                  CSI    0000036b [SR] Verify complete
2020-11-05 15:06:05, Info                  CSI    0000036c [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:06:05, Info                  CSI    0000036d [SR] Beginning Verify and Repair transaction
2020-11-05 15:06:18, Info                  CSI    0000036f [SR] Verify complete
2020-11-05 15:06:18, Info                  CSI    00000370 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:06:18, Info                  CSI    00000371 [SR] Beginning Verify and Repair transaction
2020-11-05 15:06:22, Info                  CSI    00000373 [SR] Verify complete
2020-11-05 15:06:22, Info                  CSI    00000374 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:06:22, Info                  CSI    00000375 [SR] Beginning Verify and Repair transaction
2020-11-05 15:06:26, Info                  CSI    00000377 [SR] Verify complete
2020-11-05 15:06:26, Info                  CSI    00000378 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:06:26, Info                  CSI    00000379 [SR] Beginning Verify and Repair transaction
2020-11-05 15:06:29, Info                  CSI    0000037d [SR] Verify complete
2020-11-05 15:06:29, Info                  CSI    0000037e [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:06:29, Info                  CSI    0000037f [SR] Beginning Verify and Repair transaction
2020-11-05 15:06:33, Info                  CSI    00000381 [SR] Verify complete
2020-11-05 15:06:33, Info                  CSI    00000382 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:06:33, Info                  CSI    00000383 [SR] Beginning Verify and Repair transaction
2020-11-05 15:06:38, Info                  CSI    00000385 [SR] Verify complete
2020-11-05 15:06:38, Info                  CSI    00000386 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:06:38, Info                  CSI    00000387 [SR] Beginning Verify and Repair transaction
2020-11-05 15:06:42, Info                  CSI    00000389 [SR] Verify complete
2020-11-05 15:06:42, Info                  CSI    0000038a [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:06:42, Info                  CSI    0000038b [SR] Beginning Verify and Repair transaction
2020-11-05 15:06:46, Info                  CSI    0000038e [SR] Verify complete
2020-11-05 15:06:47, Info                  CSI    0000038f [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:06:47, Info                  CSI    00000390 [SR] Beginning Verify and Repair transaction
2020-11-05 15:06:50, Info                  CSI    00000392 [SR] Verify complete
2020-11-05 15:06:51, Info                  CSI    00000393 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:06:51, Info                  CSI    00000394 [SR] Beginning Verify and Repair transaction
2020-11-05 15:06:55, Info                  CSI    00000396 [SR] Verify complete
2020-11-05 15:06:55, Info                  CSI    00000397 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:06:55, Info                  CSI    00000398 [SR] Beginning Verify and Repair transaction
2020-11-05 15:06:59, Info                  CSI    0000039a [SR] Verify complete
2020-11-05 15:06:59, Info                  CSI    0000039b [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:06:59, Info                  CSI    0000039c [SR] Beginning Verify and Repair transaction
2020-11-05 15:07:05, Info                  CSI    0000039f [SR] Verify complete
2020-11-05 15:07:05, Info                  CSI    000003a0 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:07:05, Info                  CSI    000003a1 [SR] Beginning Verify and Repair transaction
2020-11-05 15:07:09, Info                  CSI    000003a3 [SR] Verify complete
2020-11-05 15:07:09, Info                  CSI    000003a4 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:07:09, Info                  CSI    000003a5 [SR] Beginning Verify and Repair transaction
2020-11-05 15:07:14, Info                  CSI    000003a7 [SR] Verify complete
2020-11-05 15:07:14, Info                  CSI    000003a8 [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:07:14, Info                  CSI    000003a9 [SR] Beginning Verify and Repair transaction
2020-11-05 15:07:18, Info                  CSI    000003ab [SR] Verify complete
2020-11-05 15:07:18, Info                  CSI    000003ac [SR] Verifying 100 (0x0000000000000064) components
2020-11-05 15:07:18, Info                  CSI    000003ad [SR] Beginning Verify and Repair transaction
2020-11-05 15:07:23, Info                  CSI    000003af [SR] Verify complete
2020-11-05 15:07:24, Info                  CSI    000003b0 [SR] Verifying 17 (0x0000000000000011) components
2020-11-05 15:07:24, Info                  CSI    000003b1 [SR] Beginning Verify and Repair transaction
2020-11-05 15:07:24, Info                  CSI    000003b3 [SR] Verify complete
2020-11-05 15:07:24, Info                  CSI    000003b4 [SR] Repairing 0 components
2020-11-05 15:07:24, Info                  CSI    000003b5 [SR] Beginning Verify and Repair transaction
2020-11-05 15:07:24, Info                  CSI    000003b7 [SR] Repair complete

========= End of CMD: =========


========= FOR /F "usebackq delims==" %i IN (`wevtutil el`) DO wevtutil cl "%i" =========


========= End of CMD: =========



The system needed a reboot.

==== End of Fixlog 15:07:57 ====


  • 0

#14
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,598 posts
  • MVP

Need a FRST scan now.


  • 0

#15
debodun

debodun

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 566 posts

FRST SCAN

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 0$-11-2020
Ran by Owner (administrator) on OWNER-PC (Hewlett-Packard HP Compaq dc5700 Small Form Factor) (05-11-2020 16:29:13)
Running from C:\Users\Owner\Desktop
Loaded Profiles: Owner
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: English (United States)
Default browser: FF
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(TeamViewer -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1353680 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-21-3384263181-369055421-3260215636-1000\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKLM\...\Windows x64\Print Processors\BJ Print Processor3: C:\Windows\System32\spool\prtprocs\x64\CNBPP3.DLL [83968 2009-07-13] (Microsoft Windows -> CANON INC.)
HKLM\...\Windows x64\Print Processors\hpzppwn7: C:\Windows\System32\spool\prtprocs\x64\hpzppwn7.dll [101376 2009-07-13] (Microsoft Windows -> Hewlett-Packard Corporation)
HKLM\...\Print\Monitors\BJ Language Monitor3_1: C:\Windows\system32\CNBLM3_1.DLL [185344 2009-07-13] (Microsoft Windows -> CANON INC.)
HKLM\...\Print\Monitors\PJL Language Monitor: C:\Windows\system32\PJLMON.DLL [22016 2010-11-20] (Microsoft Windows -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{2D46B6DC-2207-486B-B523-A557E6D54B47}] -> C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{2D46B6DC-2207-486B-B523-A557E6D54B47}] -> C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{A6EADE66-0000-0000-484E-7E8A45000000}] -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Esl\AiodLite.dll [2020-05-03] (Adobe Inc. -> Adobe Systems, Inc.)
GroupPolicy: Restriction - Chrome <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0976F330-BF25-4F6F-B0B1-665D9BF7BCC0} - System32\Tasks\{68760510-2907-489D-B7A2-C35A3446BE71} => C:\Program Files (x86)\Kodak\Kodak EasyShare software\bin\EasyShare.exe [151552 2005-07-22] () [File not signed]
Task: {0A0C5E8A-2FCE-4C99-B12F-00B4B70AFB83} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [561984 2011-06-01] (Apple Inc. -> Apple Inc.)
Task: {0B6F6A06-8A22-4C10-9A50-F1AD415D7F31} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1341008 2020-09-06] (Adobe Inc. -> Adobe Inc.)
Task: {23FEE02C-76D3-45D6-AE9C-92CE8413C37F} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe [667856 2020-10-29] (Mozilla Corporation -> Mozilla Foundation)
Task: {6B4D3DDA-9B0C-4B4E-A917-B9A141F6ED35} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [3129184 2012-09-24] (Piriform Ltd -> Piriform Ltd)
Task: {A149C588-D529-48EB-BAE0-95CA7AC5FE1C} - System32\Tasks\{304152A7-70D0-4E91-9F4E-DBD1652C7AAC} => C:\Program Files (x86)\Kodak\Kodak EasyShare software\bin\EasyShare.exe [151552 2005-07-22] () [File not signed]

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 07 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704 2011-08-30] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 07 C:\Program Files\Bonjour\mdnsNSP.dll [132968 2011-08-30] (Apple Inc. -> Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 209.18.47.61 209.18.47.62
Tcpip\..\Interfaces\{E05E619F-5932-445D-9D21-1FC2630E6BEE}: [DhcpNameServer] 209.18.47.61 209.18.47.62

FireFox:
========
FF DefaultProfile: 8wi3sbs5.default-1412761564967
FF ProfilePath: C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\8wi3sbs5.default-1412761564967 [2020-11-05]
FF Homepage: Mozilla\Firefox\Profiles\8wi3sbs5.default-1412761564967 -> hxxps://www.google.com/?gws_rd=ssl
FF Notifications: Mozilla\Firefox\Profiles\8wi3sbs5.default-1412761564967 -> hxxps://www.sevenforums.com
FF Extension: (uBlock Origin) - C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\8wi3sbs5.default-1412761564967\Extensions\[email protected] [2020-10-20]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_445.dll [No File]
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2012-03-06] (Apple Inc. -> )
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-10-22] (Adobe Inc. -> Adobe Systems Inc.)

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169544 2020-09-06] (Adobe Inc. -> Adobe Inc.)
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-10-14] (Adobe Inc. -> Adobe)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [119864 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation -> Microsoft Corporation)
R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation -> Microsoft Corporation)
S3 rspLLL; C:\Windows\System32\DRIVERS\rspLLL64.sys [26368 2015-07-13] (Daniel Terhell -> Resplendence Software Projects Sp.)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-11-05 16:29 - 2020-11-05 16:30 - 000008511 _____ C:\Users\Owner\Desktop\FRST.txt
2020-11-04 16:47 - 2020-11-04 16:47 - 000003664 ____N C:\bootsqm.dat
2020-11-03 12:25 - 2020-11-03 12:25 - 000011076 _____ C:\Users\Owner\Documents\Paraprosdokian.odt
2020-11-02 11:00 - 2020-11-05 14:53 - 002298368 _____ (Farbar) C:\Users\Owner\Desktop\FRST64.exe
2020-10-31 09:56 - 2020-10-31 12:17 - 000013307 _____ C:\Users\Owner\Documents\directions.odt
2020-10-31 08:21 - 2020-10-31 08:21 - 000024894 _____ C:\Users\Owner\Documents\Dunbar-Deborah_2020-10-30_Lab-Report_1288784062_1604150414451.pdf
2020-10-31 08:20 - 2020-10-31 08:20 - 000024894 _____ C:\Users\Owner\Documents\Lab-Report_10-30-20.pdf
2020-10-29 15:54 - 2020-10-29 15:54 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-11-05 16:30 - 2015-05-23 11:52 - 000000000 ____D C:\FRST
2020-11-05 16:26 - 2016-11-16 12:13 - 000000000 ____D C:\Users\Owner\AppData\LocalLow\Mozilla
2020-11-05 15:17 - 2009-07-13 23:45 - 000026576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2020-11-05 15:17 - 2009-07-13 23:45 - 000026576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2020-11-05 15:13 - 2009-07-14 00:13 - 000782510 _____ C:\Windows\system32\PerfStringBackup.INI
2020-11-05 15:13 - 2009-07-13 22:20 - 000000000 ____D C:\Windows\inf
2020-11-05 15:09 - 2009-07-14 00:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2020-11-03 15:21 - 2020-06-06 09:07 - 000000000 ____D C:\Users\Owner\Desktop\New
2020-11-03 11:45 - 2012-01-12 11:24 - 000077312 _____ C:\Users\Owner\Documents\Playing Cards.xls
2020-11-03 10:47 - 2015-11-01 15:14 - 000002059 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2020-11-02 13:37 - 2020-10-05 13:34 - 000013731 _____ C:\Users\Owner\Documents\Christmas sale HTML.odt
2020-11-02 13:36 - 2016-09-28 09:41 - 000013673 _____ C:\Users\Owner\Documents\Christmas sale.odt
2020-11-01 15:48 - 2017-06-29 10:22 - 000011504 _____ C:\Users\Owner\Documents\riddles.odt
2020-11-01 11:57 - 2019-11-05 11:06 - 000018313 _____ C:\Users\Owner\Documents\Net Worth 2020.ods
2020-11-01 11:19 - 2020-01-02 13:27 - 000019170 _____ C:\Users\Owner\Documents\Celebrity Deaths 2020.odt
2020-10-31 16:33 - 2012-07-22 08:28 - 000000000 ____D C:\ProgramData\TEMP
2020-10-31 16:33 - 2012-07-22 08:28 - 000000000 ____D C:\Program Files (x86)\SpywareBlaster
2020-10-31 08:09 - 2012-01-12 11:23 - 000000000 ____D C:\Users\Owner\Desktop\Things For Sale
2020-10-30 10:53 - 2014-11-07 07:53 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2020-10-29 17:06 - 2010-11-20 22:27 - 000795000 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2020-10-29 15:59 - 2019-12-28 10:21 - 000023841 _____ C:\Users\Owner\Documents\data.odt
2020-10-29 09:35 - 2012-01-12 11:24 - 000000000 ___RD C:\Users\Owner\Desktop\misc house contents
2020-10-21 08:35 - 2012-01-12 11:21 - 000000000 ____D C:\Users\Owner\Desktop\House Pics
2020-10-19 09:08 - 2012-01-12 11:21 - 000000000 ____D C:\Users\Owner\Desktop\silver, jewelry, coins
2020-10-18 11:04 - 2014-01-13 18:27 - 000018541 _____ C:\Users\Owner\Documents\Home Delivered Meals.ods
2020-10-14 09:58 - 2012-03-31 06:33 - 000842296 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerApp.exe
2020-10-14 09:58 - 2011-12-17 15:43 - 000175160 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2020-10-14 09:58 - 2011-12-17 15:43 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2020-10-14 09:58 - 2011-12-17 15:43 - 000000000 ____D C:\Windows\system32\Macromed
2020-10-07 09:43 - 2016-05-26 07:08 - 000024955 _____ C:\Users\Owner\Documents\SCF emails.odt
2020-10-07 09:41 - 2019-09-12 12:54 - 000023338 _____ C:\Users\Owner\Documents\SCF emails alphabetically by first name .odt
2020-10-06 12:40 - 2012-01-12 11:10 - 000000000 ____D C:\Users\Owner\Desktop\DD

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)


LastRegBack: 2020-10-11 13:24
==================== End of FRST.txt ========================


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP