[honshu]

https://www.dropbox....kgoYH91L4a?dl=0

 

 

 

[Advertisements]

the vew files

 

 

i wonder what happened, there were no programs installed in the meantime

 

Attached Files

•  VEW application.txt   78.56KB   292 downloads
•  VEW.txt   11.45KB   411 downloads

Edited by honshu, 19 January 2015 - 11:29 AM.

[honshu]

the vew files

 

 

i wonder what happened, there were no programs installed in the meantime

 

Attached Files

•  VEW application.txt   78.56KB   292 downloads
•  VEW.txt   11.45KB   411 downloads

Edited by honshu, 19 January 2015 - 11:29 AM.

[honshu]

who is making the backup i wonder

[RKinner]

Run Autoruns and look for more yellow items.  I think these:  UimBus Uim_DEVIM Uim_IM are left from paragon uninstall.  Should have been removed but weren't.

 

Log: 'Application' Date/Time: 19/01/2015 15:00:23

Type: Waarschuwing Category: 0

Event: 1530 Source: Microsoft-Windows-User Profiles Service

Uw registerbestand is nog steeds in gebruik door andere toepassingen of services. Het bestand wordt nu verwijderd. De toepassingen en services die het registerbestand nu gebruiken, werken achteraf mogelijk niet meer goed.     DETAIL -   5 user registry handles leaked from \Registry\User\S-1-5-21-1109764070-618117929-3508857997-1001_Classes:

Process 6080 (\Device\HarddiskVolume4\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE) has opened key \REGISTRY\USER\S-1-5-21-1109764070-618117929-3508857997-1001_CLASSES

Process 6080 (\Device\HarddiskVolume4\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE) has opened key \REGISTRY\USER\S-1-5-21-1109764070-618117929-3508857997-1001_CLASSES

Process 6080 (\Device\HarddiskVolume4\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE) has opened key \REGISTRY\USER\S-1-5-21-1109764070-618117929-3508857997-1001_CLASSES\.htm

Process 6080 (\Device\HarddiskVolume4\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE) has opened key \REGISTRY\USER\S-1-5-21-1109764070-618117929-3508857997-1001_CLASSES\.htm

Process 6080 (\Device\HarddiskVolume4\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE) has opened key \REGISTRY\USER\S-1-5-21-1109764070-618117929-3508857997-1001_CLASSES\MIME\Database

 

 

I suspect Outlook may be causing the boot problems.  It should not be holding open the registry when you shutdown.  When you get a good boot next time do not start outlook.  Then shutdown and see if you get a second good boot.

 

Also there is something from Winmail:

 

Log: 'Application' Date/Time: 19/01/2015 14:54:33

Type: Fout Category: 3

Event: 215 Source: ESENT

WinMail (6824) WindowsMail0: Het maken van de back-up is gestopt, omdat deze door de client is gestopt of omdat de verbinding met de client is mislukt.

[RKinner]

Forgot to ask if the dropbox file shows a bad boot or a good one.

[honshu]

a bad one

 

and i don't even us winmail

[honshu]

outlook will take a long time opening the profile during a bad boot

[RKinner]

Let me see the two FRST files.  I may be able to make some sense of it.

[RKinner]

Also I think you need to uninstall mbam.  Fully 1/2 of the proc mon log is made up from mbam actions.

[honshu]

https://www.dropbox....kgoYH91L4a?dl=0

[RKinner]

This log is only about 4 minutes long.  Major thing I see happening is some updates  (KB2492386, KB2868725, KB2923545, KB3023266, KB2726535,and a bunch of others) getting installed  wonder if they get reinstalled every time or if this was just a one time thing.

 

Guess we are going to need another boot log to see.  Wonder if this is related to not showing any updates in the speccy log.  

[honshu]

history of update only showing some 6 updates as well, programs as earlierer mentioned, shows all updates installed

[honshu]

indeed strange this update matter, installed one with date of 14th june

 

 

https://www.dropbox....kgoYH91L4a?dl=0

[honshu]

Ron,

 

just found a system repair disc date sept 2011, and I think it is the one i made after installening win 7 on the SSD

 

would it make sense to run it?

[RKinner]

Up to you.  Might be faster than trying to fix whatever is broken.  You will need to install a bunch of updates.  I would not let ccleaner do anything other than clean the temp files.  It sometimes gets carried away.