Solved blue screen yesterday, can't afford a new computer!

Gateway / Zx4951
August 31, 2013 at 06:02:35
Specs: Windows 7
Have had this desktop for not even 2 yrs and got a blue screen yesterday. I didn't note the code or numbers or anything, I just remember it said something 'your computer did not load properly' or some such.

I am freaking out because the computer before THIS one began randomly getting blue screens about a few months (if that) before it DIED! I almost lost ALL my little boys recent and unsaved pictures! Can't remember now, but somehow I figured out how to get to them and saved them but pfewf!

Can someone help me here? My Kaspersky AV doesn't seem to pick anything up. I just ran a vulnerability scan and nothing.

What I can say is, is that awhile ago, when I would click on a website's 'contact us' icon-if it would direct me to an EMAIL link, (where it pulls up my email account with a fresh page for me to email them), that makes my computer go berserk. By that, I mean the smaller, empty pages pop up uncontrollably, I mean 20-40 of them and I can't stop them they just keep reappearing over each other....so, I have to sit there until they stop and then usually I will then have to totally RESTART the computer in order to get rid of them! Could this be the culprit?

Please help! We can't afford a new computer right now...and when we DO replace-I want an apple computer! Sick of these junk ones (HP, Gateway, Asus)!!

Thanks in advance!


See More: blue screen yesterday, cant afford a new computer!

Report •


✔ Best Answer
August 31, 2013 at 16:05:09
This should give us the info needed. Copy & Paste the contents of the logs please, you will need to break it into parts & do multi posts.
Or use this uploader & give us the links.

I upload to Imgur.com for images & load.to for files.
Image Uploader
http://www.softpedia.com/get/Intern...
http://www.softpedia.com/progScreen...
http://zenden.ws/imageuploader_ru
How to use for images.
http://i.imgur.com/mWxzNlv.gif
http://i.imgur.com/ODCCcPf.gif
http://i.imgur.com/zalhLtW.gif
For other files.
http://i.imgur.com/FhtnM6c.gif
http://i.imgur.com/AT6bjjD.gif
http://i.imgur.com/txFkgpT.gif

Download OTL from any of the following links and save to your desktop.
http://itxassociates.com/OT-Tools/O...
http://oldtimer.geekstogo.com/OTL.exe
http://www.itxassociates.com/OT-Too...
Double click the OTL icon to start the tool. (Note: If you are running on Vista or Windows 7 accept UAC alert)
When the window appears, underneath Output at the top, make sure Standard output is selected.
Select Scan all users
Change Drivers to All
Under the Extra Registry section, check Use SafeList
In the lower right corner, checkmark "LOP Check" and checkmark "Purity Check".
Click Run Scan and let the program run uninterrupted.
When the scan is complete, two text files will be created on your Desktop.
OTL.Txt <- this one will be opened
Extras.txt <- this one will be minimized



#1
August 31, 2013 at 06:32:03
click start and in the search box begin typing "memory diagnostic" and you should see the search bring up "Windows Memory Diagnostic" utility. select to restart now and run the diagnostic. Blue screens are caused by many things and does not mean it is not always a fatal symptom. Bad ram modules can cause lots of issues, the memory diagnostic will do a check of the memory (ram) when the computer restarts, if it says the ram is ok, then we can check other things, but that is not a bad place to start and will help us sort out your problem.

Report •

#2
August 31, 2013 at 08:47:34
Ok, did that memory check, NOTHING FOUND.
Now, what?

message edited by majaca


Report •

#3
August 31, 2013 at 12:56:06
When it happens again note down the error and at least the first set of numbers it shows. If a file is mentioned let us have that too. This should be the first thing you do when you see a blue screen, otherwise we are just guessing.

Always pop back and let us know the outcome - thanks

message edited by Derek


Report •

Related Solutions

#4
August 31, 2013 at 15:13:06
Will it start in Safe mode?

Report •

#5
August 31, 2013 at 15:32:10
Will do, Derek.

Johnw, it's working fine right now. I am just fearing what I went through with the last desktop that went downhill fast after the 1st BSOD. =O

Perhaps this time won't be so bad...I'm just nervous.

What antivirus is better, Kaspersky or ESET? Or other? I have Kaspersky and have been happy with it, but maybe it's not good? I will never buy McAfee again.....


Report •

#6
August 31, 2013 at 15:42:30
"What antivirus is better"
I use Microsoft Security Essentials ( MSE ) & the Windows firewall.
http://www.softpedia.com/get/Antivi...
http://www.softpedia.com/progScreen...
http://www.techsupportalert.com/9be...
http://www.techsupportalert.com/bes...
http://www.microsoft.com/security_e...
http://www.microsoft.com/security_e...
System requirements
http://www.microsoft.com/en-us/secu...
Check list for installing Microsoft Security Essentials
http://experts.windows.com/w/expert...
Can Microsoft Security Essentials ( MSE ) protect me from online banking and shopping.
http://answers.microsoft.com/en-us/...
If you choose to use Security Essentials, please follow the steps in this thread first, especially the part about removing all existing realtime antimalware:
http://kb.eset.com/esetkb/index?pag...

Report •

#7
August 31, 2013 at 15:46:04
"I went through with the last desktop that went downhill fast after the 1st BSOD. =O"
Doubt if you will have that problem, lets look in Event viewer & get the error number.

Event Viewer - Open and Use in Windows 7
http://www.sevenforums.com/tutorial...
http://unlockforus.blogspot.com.au/...


Report •

#8
August 31, 2013 at 15:46:43
Thanks John, but what about the blue screen I got? Is it good that computer is still working fine?
Should I just see if I get another blue screen?

Report •

#9
August 31, 2013 at 15:53:07
I think our posts crossed paths, here is my reply, just in case.

"Is it good that computer is still working fine?"
Maybe, we won't know until you look in Event viewer & give us the error number.


Report •

#10
August 31, 2013 at 16:05:09
✔ Best Answer
This should give us the info needed. Copy & Paste the contents of the logs please, you will need to break it into parts & do multi posts.
Or use this uploader & give us the links.

I upload to Imgur.com for images & load.to for files.
Image Uploader
http://www.softpedia.com/get/Intern...
http://www.softpedia.com/progScreen...
http://zenden.ws/imageuploader_ru
How to use for images.
http://i.imgur.com/mWxzNlv.gif
http://i.imgur.com/ODCCcPf.gif
http://i.imgur.com/zalhLtW.gif
For other files.
http://i.imgur.com/FhtnM6c.gif
http://i.imgur.com/AT6bjjD.gif
http://i.imgur.com/txFkgpT.gif

Download OTL from any of the following links and save to your desktop.
http://itxassociates.com/OT-Tools/O...
http://oldtimer.geekstogo.com/OTL.exe
http://www.itxassociates.com/OT-Too...
Double click the OTL icon to start the tool. (Note: If you are running on Vista or Windows 7 accept UAC alert)
When the window appears, underneath Output at the top, make sure Standard output is selected.
Select Scan all users
Change Drivers to All
Under the Extra Registry section, check Use SafeList
In the lower right corner, checkmark "LOP Check" and checkmark "Purity Check".
Click Run Scan and let the program run uninterrupted.
When the scan is complete, two text files will be created on your Desktop.
OTL.Txt <- this one will be opened
Extras.txt <- this one will be minimized


Report •

#11
September 1, 2013 at 12:50:05
Here is the OTL info (Extras.txt):

OTL Extras logfile created on: 9/1/2013 3:32:39 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\majaca\Pictures
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16660)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.87 Gb Total Physical Memory | 2.38 Gb Available Physical Memory | 61.54% Memory free
7.73 Gb Paging File | 4.54 Gb Available in Paging File | 58.78% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 911.88 Gb Total Space | 725.63 Gb Free Space | 79.58% Space Free | Partition Type: NTFS
Drive D: | 3.75 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF

Computer Name: ANTHONY | User Name: majaca | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 360 Days

[color=#E56717]========== Extra Registry (SafeList) ==========[/color]


[color=#E56717]========== File Associations ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

[color=#E56717]========== Shell Spawning ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.

[color=#E56717]========== Security Center Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

[color=#E56717]========== Firewall Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[color=#E56717]========== Authorized Applications List ==========[/color]


[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{018541D8-B358-4A44-9D72-3EB130E629E7}" = rport=10243 | protocol=6 | dir=out | app=system |
"{04613F02-7311-42D6-B9B9-B74867345E08}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{0757C9FC-95BC-40A3-B7AC-649CCDF55EE2}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{0DD0F200-4C9C-4A19-B9EE-FD0EE7B3311E}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{120AB12D-CF21-443B-890D-D4A22F228478}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{277B57B5-7271-4CE9-8945-DB873AFAD5ED}" = rport=139 | protocol=6 | dir=out | app=system |
"{27C05C98-3B7A-4C79-A3B8-8E833A5352C7}" = rport=138 | protocol=17 | dir=out | app=system |
"{2829C963-4B8F-46A6-93F3-B073EB2682A1}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{2CDB9FD0-D5CD-487F-8AF0-956A7C9FBC01}" = rport=137 | protocol=17 | dir=out | app=system |
"{365DD4AD-BB7B-4039-B6AB-AA952179889D}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{3B285854-1444-40F3-BA45-9F923EF363DF}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{3C7E2084-7B34-4116-A82C-2B14D64D1025}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{402E95B1-26C8-4D84-95C7-8A01C84944DF}" = lport=24727 | protocol=6 | dir=in | name=flipshareserver |
"{510F37E5-DFDB-4112-B059-4E1321619C04}" = lport=24726 | protocol=6 | dir=in | name=flipshareserver |
"{67383E9B-C4B8-46CF-8172-1D953409E13C}" = lport=2869 | protocol=6 | dir=in | app=system |
"{703315C5-218B-4911-BA7D-9A76A8540D6B}" = lport=10243 | protocol=6 | dir=in | app=system |
"{7AB8ED29-1890-43BA-B0C7-53F935B4DE5C}" = rport=445 | protocol=6 | dir=out | app=system |
"{802B7E2F-B437-4127-887D-D14C2AEFDDF0}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{A5D928A6-CF52-4EBF-8AF7-20647D7CCFA5}" = lport=139 | protocol=6 | dir=in | app=system |
"{A71FBCE5-F76F-42AB-B841-9B01F622BD99}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{A982D7FC-4875-46B2-90AC-0E40DA4464D8}" = lport=138 | protocol=17 | dir=in | app=system |
"{C57535F4-EB68-46B3-9AD0-45AD970C702A}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{CB426315-5316-48D4-ADD3-7DEB6EF918F0}" = lport=445 | protocol=6 | dir=in | app=system |
"{EBADEEA4-8B88-4BA4-8A85-8ED1B423654F}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{F304BC93-1C87-42F1-828F-49880D50758C}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{F47444F3-9F63-417E-91A3-8F8FE6BE99DE}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{FFFD55C6-6753-451F-9DED-F1952620ECF8}" = lport=137 | protocol=17 | dir=in | app=system |

[color=#E56717]========== Vista Active Application Exception List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{043E54B9-CA83-4342-AD4B-C7A20E4075BF}" = protocol=6 | dir=in | app=c:\program files (x86)\asus\rt-ac66u wireless router utilities\discovery.exe |
"{047C28D8-989B-4A83-AA90-4585DAE7C028}" = dir=in | app=c:\program files\hp\hp photosmart 6520 series\bin\devicesetup.exe |
"{08782072-F385-4E8B-AE07-E3FAE55D6D16}" = protocol=6 | dir=in | app=c:\program files (x86)\diablo iii\diablo iii.exe |
"{269CC1A3-5891-41B9-B725-B3316E0BB08A}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{306699DF-B0F8-489B-9123-F6917647055E}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{315A2F4D-E226-43E6-B08B-6491BC792223}" = dir=in | app=c:\program files (x86)\gateway\gateway touchportal\touch mvp\touchmusic.exe |
"{37F8A3A4-1109-43DC-8697-090D3EAB1612}" = dir=in | app=c:\program files (x86)\gateway\gateway touchportal\touch movie\touchmovieservice.exe |
"{3B517918-3651-4AA0-B6D0-A62F416CA31F}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1544\agent.exe |
"{4010CA0D-3E36-4658-9017-A770AD2AB415}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{40D41A7A-5560-4728-A831-2D6AF58428F1}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{41048E70-D964-4FB3-8EDA-49F1997C6183}" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
"{4180C0B6-7C4E-465A-82BF-539B6351D510}" = protocol=17 | dir=in | app=c:\program files (x86)\hp\common\hpdevicedetection3.exe |
"{42AD04C4-4513-458D-9311-DF76935F88D9}" = protocol=17 | dir=in | app=c:\program files (x86)\diablo iii\diablo iii.exe |
"{469FE7A3-9C55-46F2-887B-0FF089BBA205}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{5683B0C3-3441-4C81-B11D-E6FE98F13CF9}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{5740083D-2CA2-429B-8A04-F97CD051D976}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{5C0E8522-B435-46FC-B666-EE0D034680B8}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{5F1C8DCD-14C1-4095-9986-D25A747886FE}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{61072DBF-E941-4D65-9002-0E169C9DC72C}" = protocol=6 | dir=in | app=c:\program files (x86)\asus\rt-ac66u wireless router utilities\qiswizard.exe |
"{628A7491-91D7-41B9-A2A3-75B702273719}" = protocol=58 | dir=out | name=@iphlpsvc.dll,-503 |
"{655A35BF-BFF5-4687-8680-2895C7005635}" = dir=in | app=c:\program files\hp\hp photosmart 6520 series\bin\hpnetworkcommunicator.exe |
"{67EE24C6-9191-4715-AD18-5CAA5F9EBB69}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{6828FC94-6AB6-4A2C-B22F-CCA56F7D4E7A}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |
"{706C845C-B212-4305-8F8A-7E5B5FB72040}" = protocol=17 | dir=in | app=c:\program files (x86)\asus\rt-ac66u wireless router utilities\discovery.exe |
"{71070B50-FCD4-46F1-A587-8C778D53E034}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{724C86CA-6E87-47A9-9403-2D0CDC97AC24}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{72E6CE3E-2CD9-42C8-AF47-64320C6A3B5D}" = protocol=17 | dir=in | app=c:\program files (x86)\asus\rt-ac66u wireless router utilities\rescue.exe |
"{78B63B1F-E3B9-459F-98B2-300CD012DA87}" = protocol=17 | dir=in | app=c:\program files (x86)\asus\rt-ac66u wireless router utilities\qiswizard.exe |
"{7CE5ECB2-9D92-4DFD-B00E-381F82E6FBF7}" = dir=in | app=c:\program files (x86)\gateway\gateway touchportal\touch mvp\touchphoto.exe |
"{8320820A-38AA-4B87-875F-9B170F28DC08}" = dir=in | app=c:\program files (x86)\seagate\seagate dashboard\hipservagent\hipservagent.exe |
"{83CE03E5-5A03-4E8F-A4AE-4B2BB0310760}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{857996FA-5D64-48A6-B8DE-78C2596E5565}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe |
"{8A045B4C-A6DA-4BED-A7C4-57237578D137}" = protocol=6 | dir=in | app=c:\program files (x86)\asus\rt-ac66u wireless router utilities\rescue.exe |
"{8A467C83-1DE5-465D-9248-4B02F29EE534}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office14\onenote.exe |
"{935443D8-D45C-4E22-800A-C5CDA3CA56A2}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{996CE312-E592-4809-AB88-523DC368AC56}" = dir=in | app=c:\program files\hp\hp photosmart 6520 series\bin\hpnetworkcommunicatorcom.exe |
"{9B586844-6F5C-412D-86B4-59377A6C63BA}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe |
"{9E9033D4-6C7D-4B97-B4A8-DA4D961B8EBA}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1225\agent.exe |
"{A19856A5-9B4C-4010-818B-FE36CDBE2B5D}" = dir=in | app=c:\program files (x86)\gateway\gateway touchportal\touch mvp\touchvideo.exe |
"{A1C5BA6B-D3EB-4D85-989D-F7B20E88DF5F}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1225\agent.exe |
"{A6931643-B388-488C-B6B0-F9BBBBBD1477}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{AFD68105-ACB0-4BB9-B87E-DE32EFC78E22}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{B25F0F35-6C29-45B5-8ED2-448740B5AB3F}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |
"{BA52A672-E67F-451D-8E81-8A5142572800}" = dir=in | app=c:\program files (x86)\hp\hp software update\hpwucli.exe |
"{C62B87F1-F704-4F25-B056-417A172A964E}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{C9501EF7-1AF2-4E58-9D08-D61BC086027D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{CBC0790D-5AF3-4830-B8D0-EF5DDFD87D67}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{CC9ABC3A-F332-4CB7-BB38-29DEBB1C6C7A}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{CE48F144-CBA2-46F8-9C6F-9997C3F557AC}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{DAC90397-F805-4BC7-B19D-09E1201A2727}" = protocol=6 | dir=out | app=system |
"{EB9EBE03-ED71-4D80-9948-3D1606C8F34D}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{ECDAC6AD-BE25-43E2-97B7-35761524B59F}" = protocol=58 | dir=in | app=system |
"{EDB91C63-A77B-4571-BE18-A61C5ABB0B85}" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
"{F938CAC8-30C0-4F0A-AA2C-256F75B465A8}" = dir=in | app=c:\program files (x86)\windows live\mesh\moe.exe |
"{FB6E47AC-70E9-45D3-849E-FCC61236AC02}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{FBBD1728-C84B-43AB-95E5-AA441C92BFAD}" = protocol=6 | dir=in | app=c:\program files (x86)\hp\common\hpdevicedetection3.exe |
"{FE8C52EF-0C1E-4612-8FDD-71D85352DA73}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1544\agent.exe |
"{FF2A9808-8BDA-4A84-83EE-F3468783460E}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\onenote.exe |
"TCP Query User{07FA7E78-5116-4295-93FF-9067EEC467BC}C:\program files (x86)\hp\common\hpdevicedetection3.exe" = protocol=6 | dir=in | app=c:\program files (x86)\hp\common\hpdevicedetection3.exe |
"TCP Query User{252BDDE8-39BA-4328-A847-72D2FFA7D243}C:\windows\syswow64\javaw.exe" = protocol=6 | dir=in | app=c:\windows\syswow64\javaw.exe |
"TCP Query User{C76CF9C1-57FA-4000-9EDD-F154C4C8E3B5}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
"UDP Query User{085BD24D-CA68-4729-8C82-EEE4E76B9AAE}C:\program files (x86)\hp\common\hpdevicedetection3.exe" = protocol=17 | dir=in | app=c:\program files (x86)\hp\common\hpdevicedetection3.exe |
"UDP Query User{1953ECF7-9F6B-4D67-9871-91799AF464E4}C:\windows\syswow64\javaw.exe" = protocol=17 | dir=in | app=c:\windows\syswow64\javaw.exe |
"UDP Query User{3897B7A3-EAAC-4648-AA6E-2C9CDA9DD4E3}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |

[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = TouchCam
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1
"{14C52FEF-0236-4D8C-BBE2-E6D7C4F2926D}" = Cooliris for Internet Explorer
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{20400DBD-E6DB-45B8-9B6B-1DD7033818EC}" = Nero InfoTool Help
"{2348B586-C9AE-46CE-936C-A68E9426E214}" = Nero StartSmart Help
"{251C65C0-15FF-4603-98BB-E4A61C7DA424}" = CarMD
"{2637C347-9DAD-11D6-9EA2-00055D0CA761}" = Touch MVP
"{266E41AB-D928-4AF2-A8E4-B24E31F5758C}" = ASUS RT-AC66U Wireless Router Utilities
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java(TM) 6 Update 31
"{26A24AE4-039D-4CA4-87B4-2F83217025FF}" = Java 7 Update 25
"{287ECFA4-719A-2143-A09B-D6A12DE54E40}" = Acrobat.com
"{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections
"{2A3FC24C-6EC0-4519-A52B-FDA4EA9B2D24}" = Windows Live Messenger
"{2C303EE0-A595-3543-A71A-931C7AC40EDE}" = Microsoft Primary Interoperability Assemblies 2005
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{33CF58F5-48D8-4575-83D6-96F574E4D83A}" = Nero DriveSpeed
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{3898934B-05AE-41CD-96BE-70DA9BFBCE1F}" = Microsoft XNA Framework Redistributable 3.0
"{3D5D6CFC-3097-425A-8D8F-7EAF5D57641D}" = Garmin USB Drivers
"{415FA9AD-DA10-4ABE-97B6-5051D4795C90}" = HP FWUpdateEDO2
"{423D8FBE-EC52-40FD-B2A0-8C9C8F973FD7}" = Microsoft Research AutoCollage 2008 version 1.1
"{4968622A-4D3F-489E-9ACE-5FEC4CC0BDE3}" = MediaShow Espresso
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4D43D635-6FDA-4FA5-AA9B-23CF73D058EA}" = Nero StartSmart OEM
"{553C904F-57A2-4113-888E-BA0C3D1C69C0}" = Microsoft VC9 runtime libraries
"{560985FB-4B76-4121-9189-7A2CDC7886D6}" = Kaspersky Anti-Virus 2013
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{595A3116-40BB-4E0F-A2E8-D7951DA56270}" = NeroExpress
"{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}" = Apple Application Support
"{647BB978-2876-487B-9B0E-FDB73F0EA4A2}" = Garmin Communicator Plugin
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6E6D21BA-82D7-451A-8B2C-465B3AC9824E}" = Publish to Photo Frame
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{75880CD4-9436-4EDD-B7E7-400EBFD60B2C}" = TouchSettings
"{7748AC8C-18E3-43BB-959B-088FAEA16FB2}" = Nero StartSmart
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{7EEB72E4-2150-49F8-BC51-B63AF7B9E2F2}" = GEAR driver installer 4.019
"{7F811A54-5A09-4579-90E1-C93498E230D9}" = Gateway Recovery Management
"{83202942-84B3-4C50-8622-B8C0AA2D2885}" = Nero Express Help
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{846B5DED-DC8C-4E1A-B5B4-9F5B39A0CACE}" = HPDiagnosticAlert
"{869200DB-287A-4DC0-B02B-2B6787FBCD4C}" = Nero DiscSpeed
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver For Windows 7
"{8A9FC225-75F6-4B5D-911C-0ED230565643}" = HP Product Detection
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8E666407-AC41-46a2-9692-6C7BFCBFDD37}" = Memeo Instant Backup
"{8f5b80bf-e9f9-42ba-b189-e33808dc3c9f}" = Nero 9 Essentials
"{8FF90DB8-6DED-44A3-B182-244FEC09012F}" = Microsoft Touch Pack for Windows 7
"{90140000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2010
"{90140000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2010
"{90140000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010
"{90140000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2010
"{90140000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2010
"{90140000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010
"{90140000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010
"{90140000-003D-0000-0000-0000000FF1CE}" = Microsoft Office Single Image 2010
"{90140000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010
"{90140000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2010
"{90140000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010
"{90140000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2010
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95140000-007D-0409-0000-0000000FF1CE}" = Microsoft Outlook Social Connector Provider for Windows Live Messenger 32-bit
"{95140000-0080-0409-0000-0000000FF1CE}" = Microsoft Office Outlook Connector
"{97486FBE-A3FC-4783-8D55-EA37E9D171CC}" = HP Update
"{97BE901A-9940-4ACF-9921-A6FAA284AC03}" = THX TruStudio Pro
"{97C658D2-61FB-027F-0D76-E9CDC84AFEC7}" = FlipShare
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9AAD03E8-4F65-4DE2-8F6C-1B079C0C8521}" = Garmin Lifetime Updater
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AC76BA86-7AD7-1033-7B44-AB0000000001}" = Adobe Reader XI (11.0.03)
"{B2EC4A38-B545-4A00-8214-13FE0E915E6D}" = Advertising Center
"{B67BAFBA-4C9F-48FA-9496-933E3B255044}" = QuickTime
"{B906C11A-D193-4143-9FA7-E2EE8A5A8F21}" = Touch Movie
"{BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A}" = Nero ControlCenter
"{C3A11907-930D-41AC-A135-CC3B12F92011}" = Seagate Dashboard
"{C652F86F-348A-4A65-8BE8-A3F7A6370D98}" = Gateway TouchPortal
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{C779648B-410E-4BBA-B75B-5815BCEFE71D}" = Safari
"{C81A2FE0-3574-00A9-CED4-BDAA334CBE8E}" = Nero Online Upgrade
"{CC019E3F-59D2-4486-8D4B-878105B62A71}" = Nero DiscSpeed Help
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D3293275-1002-41F5-BC37-099B4251FF5B}" = HP Photosmart 6520 series Help
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger
"{E5C7D048-F9B4-4219-B323-8BDB01A2563D}" = Nero DriveSpeed Help
"{E8A80433-302B-4FF1-815D-FCC8EAC482FF}" = Nero Installer
"{EE171732-BEB4-4576-887D-CB62727F01CA}" = Gateway Updater
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Graphics Media Accelerator Driver
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F4041DCE-3FE1-4E18-8A9E-9DE65231EE36}" = Nero ControlCenter
"{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel(R) Control Center
"{FBBC4667-2521-4E78-B1BD-8706F774549B}" = Best Buy pc app
"{FBCDFD61-7DCF-4E71-9226-873BA0053139}" = Nero InfoTool
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Diablo III" = Diablo III
"ESET Online Scanner" = ESET Online Scanner v3
"Gateway Game Console" = Gateway Game Console
"Gateway InfoCentre" = Gateway InfoCentre
"Gateway Registration" = Gateway Registration
"Gateway Screensaver" = Gateway ScreenSaver
"Gateway Welcome Center" = Welcome Center
"Hotkey Utility" = Hotkey Utility
"Iconix eMail ID" = Iconix® eMail ID
"Identity Card" = Identity Card
"InstallWIX_{560985FB-4B76-4121-9189-7A2CDC7886D6}" = Kaspersky Anti-Virus 2013
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.75.0.1300
"Office14.SingleImage" = Microsoft Office Home and Student 2010
"Safe Saver" = Safe Saver
"WildTangent gateway Master Uninstall" = Gateway Games
"WinLiveSuite" = Windows Live Essentials
"WT088049" = Agatha Christie - Death on the Nile
"WT088062" = Bejeweled 2 Deluxe
"WT088067" = Build-a-lot 2
"WT088074" = Chuzzle Deluxe
"WT088080" = Diner Dash 2 Restaurant Rescue
"WT088115" = Jewel Quest Solitaire 2
"WT088135" = Plants vs. Zombies
"WT088375" = Blackhawk Striker 2
"WT088395" = Dora's Carnival Adventure
"WT088415" = FATE
"WT088447" = John Deere Drive Green
"WT088451" = Penguins!
"WT088455" = Polar Bowler
"WT088459" = Polar Golfer
"WT088507" = Virtual Villagers 4 - The Tree of Life
"WT088546" = Zuma's Revenge
"WT088651" = 18 Wheels of Steel - American Long Haul
"WT088655" = Jewel Quest - Heritage

[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]

[HKEY_USERS\S-1-5-21-2895625322-1127346539-3537988753-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Consumer Input Software" = Consumer Input Software (remove only)

[color=#E56717]========== Last 20 Event Log Errors ==========[/color]

[ Application Events ]
Error - 8/30/2013 5:49:55 PM | Computer Name = Anthony | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 8/30/2013 5:49:56 PM | Computer Name = Anthony | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 15663

Error - 8/30/2013 5:49:56 PM | Computer Name = Anthony | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 15663

Error - 8/30/2013 6:40:55 PM | Computer Name = Anthony | Source = Application Error | ID = 1000
Description = Faulting application name: IEXPLORE.EXE, version: 10.0.9200.16660,
time stamp: 0x51f1c5f3 Faulting module name: MSHTML.dll, version: 10.0.9200.16660,
time stamp: 0x51f1d37a Exception code: 0xc0000005 Fault offset: 0x006fd76d Faulting
process id: 0x978 Faulting application start time: 0x01cea5d173b91a03 Faulting application
path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Faulting module path:
C:\Windows\system32\MSHTML.dll Report Id: 3b1ea9ff-11c5-11e3-9f1c-68a3c466905e

Error - 8/31/2013 9:24:51 AM | Computer Name = Anthony | Source = SideBySide | ID = 16842815
Description = Activation context generation failed for "c:\Program Files (x86)\Common
Files\Adobe AIR\Versions\1.0\Adobe AIR.dll".Error in manifest or policy file "c:\Program
Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" on line 3. The value
"MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" of attribute
"version" in element "assemblyIdentity" is invalid.

Error - 8/31/2013 9:24:52 AM | Computer Name = Anthony | Source = SideBySide | ID = 16842832
Description = Activation context generation failed for "c:\program files (x86)\ESET\eset
online scanner\ESETSmartInstaller.exe".Error in manifest or policy file "" on line
. A component version required by the application conflicts with another component
version already active. Conflicting components are:. Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component
2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error - 8/31/2013 1:35:51 PM | Computer Name = Anthony | Source = Application Error | ID = 1000
Description = Faulting application name: FlipShare.exe, version: 5.12.3.0, time
stamp: 0x4dc45bdb Faulting module name: FlipShare.exe, version: 5.12.3.0, time stamp:
0x4dc45bdb Exception code: 0xc0000005 Fault offset: 0x00087b4c Faulting process id:
0x1b80 Faulting application start time: 0x01cea66a6a3ec1cf Faulting application path:
C:\Program Files (x86)\Flip Video\FlipShare\FlipShare.exe Faulting module path:
C:\Program Files (x86)\Flip Video\FlipShare\FlipShare.exe Report Id: c710e17e-1263-11e3-a4bf-d027885e30ca

Error - 9/1/2013 3:10:46 PM | Computer Name = Anthony | Source = SideBySide | ID = 16842815
Description = Activation context generation failed for "c:\Program Files (x86)\Common
Files\Adobe AIR\Versions\1.0\Adobe AIR.dll".Error in manifest or policy file "c:\Program
Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" on line 3. The value
"MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" of attribute
"version" in element "assemblyIdentity" is invalid.

Error - 9/1/2013 3:10:49 PM | Computer Name = Anthony | Source = SideBySide | ID = 16842832
Description = Activation context generation failed for "c:\program files (x86)\ESET\eset
online scanner\ESETSmartInstaller.exe".Error in manifest or policy file "" on line
. A component version required by the application conflicts with another component
version already active. Conflicting components are:. Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component
2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error - 9/1/2013 3:27:53 PM | Computer Name = Anthony | Source = Application Error | ID = 1000
Description = Faulting application name: Explorer.EXE, version: 6.1.7601.17567,
time stamp: 0x4d672ee4 Faulting module name: msvcrt.dll, version: 7.0.7601.17744,
time stamp: 0x4eeb033f Exception code: 0x40000015 Fault offset: 0x000000000002a84e
Faulting
process id: 0xa64 Faulting application start time: 0x01cea69782b9c648 Faulting application
path: C:\Windows\Explorer.EXE Faulting module path: C:\Windows\system32\msvcrt.dll
Report
Id: 98699517-133c-11e3-a245-d027885e30ca

[ System Events ]
Error - 8/30/2013 4:02:04 PM | Computer Name = Anthony | Source = Service Control Manager | ID = 7023
Description = The HP Network Devices Support service terminated with the following
error: %%126

Error - 8/30/2013 4:47:13 PM | Computer Name = Anthony | Source = Disk | ID = 262155
Description = The driver detected a controller error on \Device\Harddisk2\DR3.

Error - 8/30/2013 4:47:14 PM | Computer Name = Anthony | Source = Disk | ID = 262155
Description = The driver detected a controller error on \Device\Harddisk2\DR3.

Error - 8/30/2013 4:47:15 PM | Computer Name = Anthony | Source = Disk | ID = 262155
Description = The driver detected a controller error on \Device\Harddisk2\DR3.

Error - 8/30/2013 4:47:15 PM | Computer Name = Anthony | Source = Disk | ID = 262155
Description = The driver detected a controller error on \Device\Harddisk2\DR3.

Error - 8/30/2013 4:47:16 PM | Computer Name = Anthony | Source = Disk | ID = 262155
Description = The driver detected a controller error on \Device\Harddisk2\DR3.

Error - 8/31/2013 11:22:35 AM | Computer Name = Anthony | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the IPBusEnum service.

Error - 8/31/2013 11:45:23 AM | Computer Name = Anthony | Source = Service Control Manager | ID = 7023
Description = The HP Network Devices Support service terminated with the following
error: %%126

Error - 8/31/2013 3:00:34 PM | Computer Name = Anthony | Source = Service Control Manager | ID = 7030
Description = The ESET Service service is marked as an interactive service. However,
the system is configured to not allow interactive services. This service may not
function properly.

Error - 8/31/2013 6:17:35 PM | Computer Name = Anthony | Source = Service Control Manager | ID = 7023
Description = The HP Network Devices Support service terminated with the following
error: %%126


< End of report >


Report •

#12
September 1, 2013 at 14:44:05
Thanks for the log majaca, it narrows it down quite a bit.

1: Have you recently been infected?

2: Do you use Internet Connection Sharing (ICS)?
In other words, you have another computer that shares your internet connection.
http://www.windows7library.com/blog...


message edited by Johnw


Report •

#13
September 1, 2013 at 17:58:02
John, I have no idea if I have been infected lately.
I got the blue screen on 8/30 as the log showed.
I have no idea what ICS is. We have one desktop. A wireless router. 2 iPhones, an iPad and an iPod that my children use for games and my husband and I use the iPad to browse the net. If that is Internet Connection Sharing, then I guess we do.
Sorry, but I have no idea about that question.
Can you please tell me what you can see occurred from the log?
Because it's gibberish to me...thanks!

message edited by majaca


Report •

#14
September 1, 2013 at 18:42:37
"I have no idea if I have been infected lately"
You certainly will know when you are infected, all sorts of weird things happen, so I think we can safely assume you havn't been infected.

"Can you please tell me what you can see occurred from the log?"
That is why I have asked you the above questions, it is a process of elimination.

Next steps.

1: Download & run Unhide
http://www.bleepingcomputer.com/for...
http://download.bleepingcomputer.co...
To run Unhide, simply download it to your desktop and then double-click on the Unhide icon. The program will open a black box and start making the files on your fixed disks visible again. Please note, that this program will not unhide removable drives like flash cards and usb drives as the FakeHDD rogues do not target these types of drives. Once it has finished, the program will display a Windows alert stating that your files have been restored. You should then reboot your computer for all of the settings to go into effect.
Copy & Paste the contents of the log. Let me know if it doesn't produce a log please.

2: Reboot

3: Download Security Check by screen317 from one of the following links and save it to your desktop.
http://screen317.spywareinfoforum.o...
http://screen317.changelog.fr/Secur...
Please restart the computer before running this security check..
* Double click SecurityCheck.exe. If you run Windows Vista or 7/8, right click and choose 'Run as Administrator'.
o If you are asked by Windows to run this program or not, please click 'Yes' or 'Run'.
o When you see a console window, press any key to continue scanning.
o Wait while it scans.
o If your firewall alerts you of Security Check, please press 'Allow' or similar.
* A Notepad document should open automatically after scan is completed. It will be called checkup.txt; Please Copy and Paste the contents into your reply.
Note: If a security program requests permission from dig.exe to access the Internet, allow it to do so.


Report •

#15
September 1, 2013 at 19:13:59
Ok I will do that next step tomorrow some time. Thanks!

Report •

#16
September 2, 2013 at 09:09:41
John,
As for being infected, maybe but not recently. About 10 months ago or so, (and it just did it again) when I am on a website and click the 'contact us' or 'email us' link icon, if it's formatted so that it pulls up my actual email (Hotmail) for me to directly email them....my screen goes berserk. (I mentioned this in my OP) A smallish grey box appear with some type of one-lined message saying something like 'Could not perform....blah blah'. And right then, tons and tons of empty pages pop up over one another for many seconds and/or I can make them stop by continually left-clicking my mouse anywhere on the screen. Eventually they will stop. After that, I will inevitably have to restart my computer as there is no way for me to continue on with whatever I was doing on the computer. Today, it just did it again. And for the 1st time, I was able to notice on these pages that pop up, (today there were over 60 of them) that in the left upper corner there seems to be a search box and in that search box, was the email address that I was trying to write to, from a websites 'contact us' icon. Also, my husbands email address won't let us 'send' emails to anyone, but I can send on mine. So, perhaps something attacked HIS email address and that is why these things are popping up when I try to click on a website's 'contact us' icon?

I am writing this to you to see if I should go ahead and do the UNHIDE thing now or should we try to see what this email issue is, first?

Thanks!


Report •

#17
September 2, 2013 at 15:00:04
"Today, it just did it again"
Just to eliminate some other possibles. Try/borrow a mouse & test.
If still giving problems, Try/borrow a keyboard & test.

"I am writing this to you to see if I should go ahead and do the UNHIDE thing"
Yes please.


Report •

#18
September 3, 2013 at 07:43:24
John,
I have a touch screen so instead of borrowing a mouse/keyboard, I just used the touch screen instead of mouse on that same website, I touched the 'contact us' email (same one used yesterday that made computer go berserk) and it did it again. A whole bunch of blank screens with the email address in the 'mail to' search box. I did get a better glimpse of that grey box though with the error message and here's what it said:
"Could not perform this operation because the default mail client is not properly installed'.
Do you know how to fix this?
Is this from a virus-you think?

Thanks!


Report •

#19
September 3, 2013 at 09:20:37
Unhide information:

Unhide by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2013 BleepingComputer.com
More Information about Unhide.exe can be found at this link:
http://www.bleepingcomputer.com/for...

Program started at: 09/03/2013 12:34:02 PM
Windows Version: Windows 7

Please be patient while your files are made visible again.

Processing the C:\ drive
Finished processing the C:\ drive. 222316 files processed.

Processing the E:\ drive
Finished processing the E:\ drive. 0 files processed.

The C:\Users\majaca\AppData\Local\Temp\smtmp\ folder does not exist!!
Unhide cannot restore your missing shortcuts!!
Please see this topic in order to learn how to restore default
Start Menu shortcuts: http://www.bleepingcomputer.com/for...

Searching for Windows Registry changes made by FakeHDD rogues.
- Checking HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
- Checking HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
- Checking HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System
- Checking HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
No registry changes detected.

Program finished at: 09/03/2013 12:40:50 PM
Execution time: 0 hours(s), 6 minute(s), and 48 seconds(s)

message edited by majaca


Report •

#20
September 3, 2013 at 15:18:37
"Could not perform this operation because the default mail client is not properly installed"
What is your default mail client, Outlook or Windows Live mail?

Report •

#21
September 3, 2013 at 15:22:53
"Unhide information"
Thanks.

"Is this from a virus-you think?"
Impossible to know, until we eliminate that possible.

Still waiting on 3: from my post #14

message edited by Johnw


Report •

#22
September 3, 2013 at 15:45:59
Mail client is Windows Live Mail.

Report •

#23
September 3, 2013 at 16:13:16
"Still waiting on 3: from my post #14"
Are you doing this?

Report •

#24
September 3, 2013 at 17:01:52
Right now, hold on....

Report •

#25
September 3, 2013 at 17:14:29
Here you go, sir!

Results of screen317's Security Check version 0.99.73
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 10
[b][u]``````````````Antivirus/Firewall Check:``````````````[/b][/u]
[color=red][b]Windows Security Center service is not running! This report may not be accurate![/b][/color]
Windows Firewall Enabled!
Kaspersky Anti-Virus
ESET Smart Security 6.0
Antivirus up to date! (On Access scanning [b]disabled[/b]!)
[b][u]`````````Anti-malware/Other Utilities Check:`````````[/b][/u]
Malwarebytes Anti-Malware version 1.75.0.1300
JavaFX 2.1.1
Java(TM) 6 Update 31
Java 7 Update 25
Adobe Flash Player 11.8.800.94
Adobe Reader XI
[b][u]````````Process Check: objlist.exe by Laurent````````[/b][/u]
ESET NOD32 Antivirus egui.exe
ESET NOD32 Antivirus ekrn.exe
Kaspersky Lab Kaspersky Anti-Virus 2013 avp.exe
Kaspersky Lab Kaspersky Anti-Virus 2013 x64 wmi64.exe
[b][u]`````````````````System Health check`````````````````[/b][/u]
Total Fragmentation on Drive C: 0%
[b][u]````````````````````End of Log``````````````````````[/b][/u]


Report •

#26
September 3, 2013 at 17:15:53
If you're wondering why I have 2 AV's, Kaspersky is my 'official' one...but the other day, I disabled it for now as I wanted to temporarily 'try' ESET. (Free 30 day trial)

They are both disable right now, in order to run these checks....

message edited by majaca


Report •

#27
September 3, 2013 at 17:21:57
Here are the settings to check, then I shall take the next steps to find out why they changed.

"could not perform this operation because the default mail client is not properly installed"
1. Click START and then Default Programs.
2. Click on ‘Set your default programs’.
3. Look down the list for the email program you use. Click it.
4. Towards the bottom of the page there will be a link that says: Set this program as default. Click it.


Report •

#28
September 3, 2013 at 17:28:52
What changed? "then I shall take the next steps to find out why they changed."

Report •

#29
September 3, 2013 at 17:31:50
Ok, did that.

Report •

#30
September 3, 2013 at 17:46:04
"Could not perform this operation because the default mail client is not properly installed'
Do you still get that message?

Report •

#31
September 3, 2013 at 18:00:55
Yep, still does it. Just had to restart it again due to all the funky pop-ups!
Also, for some reason, still can't send any emails from my husband email. Also, in Windows Live Mail. Mine will send, his won't and hasn't for months now. It just sits in the OUTBOX and keeps giving error messages saying this: SOME ERRORS OCCURRED WHILE PROCESSING THE REQUESTED TASKS. PLEASE REVIEW THE LIST OF ERRORS BELOW FOR MORE DETAILS. Then the list says:

THE CONNECTION TO THE SERVER HAS FAILED.
SUBJECT: 'SMTP.COMCAST.NET'
WINDOWS LIVE MAIL ERROR ID: 0X800CCC0E
PROTOCOL: SMTP
PORT: 25
SECURE(SSL): NO
SOCKET ERROR: 10060

This message won't go away or send the email until I eventually tire of seeing the message and just cancel the whole email from being sent.


What have you deciphered so far from all the checks that I did?

message edited by majaca


Report •

#32
September 3, 2013 at 18:02:03
"If you're wondering why I have 2 AV's, Kaspersky is my 'official' one...but the other day, I disabled it for now as I wanted to temporarily 'try' ESET. (Free 30 day trial)

They are both disable right now, in order to run these checks...."

You now need to use the ESET uninstaller, they will both fight with each other & give problems.

I use ESET all the time to get 2nd opinions, but use their ONLINE version.

ESET uninstaller
http://kb.eset.com/esetkb/index?pag...


Report •

#33
September 3, 2013 at 18:04:59
"What have you deciphered so far from all the checks that I did?"
Still eliminating.

1: Run AdwCleaner
http://www.softpedia.com/get/Antivi...
http://www.softpedia.com/progScreen...
http://general-changelog-team.fr/en...
http://www.raymond.cc/blog/adwclean...
Please download AdwCleaner by Xplode onto your desktop.
Close all open programs and internet browsers.
Double click on AdwCleaner.exe to run the tool.
Click on Delete.
Confirm each time with Ok.
Your computer will be rebooted automatically. A text file will open after the restart.
Please Copy & Paste the contents of that logfile with your next answer.
You can find the logfile at C:\AdwCleaner[S1].txt as well.

2: Run Junkware Removal Tool
http://www.softpedia.com/get/Securi...
http://www.softpedia.com/progScreen...
http://www.bleepingcomputer.com/dow...
http://thisisudax.blogspot.com.au/2...
Download Junkware Removal Tool to your desktop.
Warning! Once the scan is complete JRT will shut down your browser with NO warning.
Shut down your protection software now to avoid potential conflicts.
Temporarily disable your antivirus and any antispyware real time protection before performing a scan. Click this link to see a list of security programs that should be disabled and how to disable them.
http://www.bleepingcomputer.com/for...
http://www.techsupportforum.com/sec...
Run the tool by double-clicking it. If you are using Windows Vista or Windows 7/8, right-click JRT and select Run as Administrator
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
Copy and Paste the contents of the JRT.txt log please.


Report •

#34
September 3, 2013 at 18:11:43
Can I uninstall ESET tomorrow? The process looks lengthy and I have to go quick and tuck the kids in......

Btw, I have done JRT and ADW recently, like a week ago. They were done prior to the blue screen happening. Like a few days prior. But, will run them again after tucking in..and post results within 30 mins.

BTW, PLEASE READ POST 31 AGAIN, I EDITED IT, I THINK AFTER YOU MUST'VE READ IT. IMPORTANT ERROR MESSAGE DETAILS RE; EMAIL ISSUES.....LMK!

message edited by majaca


Report •

#35
September 3, 2013 at 18:32:33
"IMPORTANT ERROR MESSAGE DETAILS RE"
I hadn't seen that, yes very important.

"Also, for some reason, still can't send any emails from my husband email. Also, in Windows Live Mail. Mine will send, his won't and hasn't for months now"

If you both use the same, compare your Outgoing (SMTP ) settings to his & make them the same.
http://customer.comcast.com/help-an...

message edited by Johnw


Report •

#36
September 3, 2013 at 19:15:44
I have to go out now, catch you later.

Report •

#37
September 3, 2013 at 20:42:33
Ok, I got the one email outbox working now, sent emails get sent. Yay. (BUT IT'S STILL DOING THAT FUNKY 70 POP-UP THING W/ERROR MSG! grrr)

Second, in the process of uninstalling ESET (which I didn't finish, see below) it asked me a question of which AV product I wanted to uninstall and then gave me 2 choices:
1. ESS/EAV/EMSX and
2. SEP
I had no idea but/so picked #1. So, that's that.

Third, I was scared to death to follow thru with the ESET removal in Safe Mode. Got an eery error warning...here it is:

"WARNING! Win 7 detected: After running this tool on Win 7, you may observe network outages each time you start OS. NIC drivers re-installation should fix it. If you want to re-install NIC drivers automatically, please switch "/reinst". Please be aware that NIC drivers re-installation causes loss of static IP settings or WIFI settings.

Are you sure you want to uninstall ESS/EAV/EMSX from this OS?"

All that verbiage scared the h*ll out of me and I closed the screen and got out of safe mode.

Should I now do the JRT and ADW? Or, should I get rid of ESET first?

Here's the copy/paste from the ESET uninstall (what part I did complete):

09/03/13 23:25:38] C:\Users\majaca\Desktop\ESETUninstaller.exe 6.0.3.0
[09/03/13 23:25:38] Input arguments:
[09/03/13 23:25:39] Online (PC booted from fixed disk) mode detected.

[09/03/13 23:25:39] WARNING! This tool uninstalls AV product in non-standard way. Your PC can be harmed seriously, please back up Your data.
Please keep in mind that as soon as this application is finished your network connection can be down and you will have to restart your PC.
Are you really sure to continue? (y/n): y


[09/03/13 23:25:42] Scanning available operating systems ...

[09/03/13 23:25:42] Available operating systems, which AV product can be removed from:

[09/03/13 23:25:42] [1]
[09/03/13 23:25:42] Product Name: Windows 7 Home Premium
[09/03/13 23:25:42] Current Version: 6.1.1.7601.WinNT.AMD64
[09/03/13 23:25:42] Volume: C:\
[09/03/13 23:25:42] System Root: C:\Windows
[09/03/13 23:25:42] Program Files: C:\Program Files
[09/03/13 23:25:42] Program Files (x86): C:\Program Files (x86)
[09/03/13 23:25:42] Common files: C:\Program Files\Common Files
[09/03/13 23:25:42] Common files (x86): C:\Program Files (x86)\Common Files
[09/03/13 23:25:42] Common application data folder: C:\ProgramData
[09/03/13 23:25:42] Common programs folder: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
[09/03/13 23:25:42] Device path folder: C:\Windows\inf
[09/03/13 23:25:42] Drives mapping:
[09/03/13 23:25:42] Current Letter: C Native Letter: C

[09/03/13 23:25:42] Building cache: 64bit COM: AppID -> DllName ...
[09/03/13 23:25:42] Building cache: 64bit COM: Category -> ReferenceCounter ...
[09/03/13 23:25:42] Building cache: 32bit COM: AppID -> DllName ...
[09/03/13 23:25:42] Building cache: 32bit COM: Category -> ReferenceCounter ...
[09/03/13 23:25:42] Scanning installed AV products ...

[09/03/13 23:25:43] Installed AV products:
[09/03/13 23:25:43] 1. ESS/EAV/EMSX
[09/03/13 23:25:43] 2. SEP

[09/03/13 23:25:43] Enter sequence number of AV product to uninstall and press ENTER (hint: to abort press 'q'): 1

[09/03/13 23:27:25] WARNING! Win 7 detected: After running this tool on Win 7, you may observe network outages each time you start OS. NIC drivers re-installation should fix it. If you want to re-install NIC drivers automatically, please use switch "/reinst". Please be aware that NIC drivers re-installation causes loss of static IP settings or WIFI settings.

Are you sure to uninstall ESS/EAV/EMSX from this OS? (y/n): n


Talk to you tomorrow!

message edited by majaca


Report •

#38
September 4, 2013 at 00:46:28
"Talk to you tomorrow"
I'm here.
http://www.timeanddate.com/worldclo...

That is a scary message, but, as there are trillions of such messages, we have to use GOOGLE.
Sometimes we have to put all the message, but mostly, part of the message will do.
With these keywords, you will see the very 1st hit has the answer. Naturally you can always refer something you have found & are trying to understand to us, for a 2nd opinion.

WARNING! This tool uninstalls AV product in non-standard way. Your PC can be harmed seriously, please back up Your data
http://is.gd/NtyQz0
https://forum.eset.com/topic/506-no...


Report •

#39
September 4, 2013 at 01:03:19
Now to GOOGLE these.

[09/03/13 23:25:43] Installed AV products:
[09/03/13 23:25:43] 1. ESS/EAV/EMSX
[09/03/13 23:25:43] 2. SEP

ESS/EAV/EMSX is ESET, proceed as before.

SEP is Symantec Endpoint Protection ( Norton ) which at some point must have been installed & not correctly uninstalled.
Gateway ZX4951 comes with Norton preinstalled.
http://support.gateway.com/s/deskto...

Let's see if the ESET uninstaller removes it. After running the uninstaller, run it again & tell me if SEP remains.

message edited by Johnw


Report •

#40
September 4, 2013 at 01:12:44
"Should I now do the JRT and ADW? Or, should I get rid of ESET first?"
Do ESET 1st.

Report •

#41
September 4, 2013 at 09:20:28
John I have a new and more dire issue I think. My boys use this website for math practice. http://xtramath.org/signin/teacher
AS of yesterday morning, when I click on the upper right hand link to SIGN-IN...nothing happens. No boxes pop up for them to sign in their info. Just nothing. I did a search on when nothing happens when link is clicked and it said to do this step:
enter regsvr32 urlmon.dll in start box. I did that and got 'succeeded'. Then, it said if the problem still persisted (it did,still can't open up the math website sign-in boxes) to repeat with the same regsvr32 but then replace with 6 other codes:
shdocvw.dll
actxprxy.dll
oleaut32.dll
mshtml.dll
browseui.dll
shell32.dll
Ok so did all those in start box and out of all of the above codes entered, only 2 of them 'succeeded'. These----> urlmon.dll and shell32.dll ARGH! The other 5 gave me error messages too long to post. Can I add pics here? Cuz I took iPhone pics of the 5 message boxes on my screen....? I really need to fix this!

message edited by majaca


Report •

#42
September 4, 2013 at 09:30:09
I think I've got the registry issue fixed. Back on to uninstalling ESET. John I don't understand you post about doing it, atleast you haven't allayed my fear of this messing up my OS....(uninstalling ESET that way). Please explain how this is safe with such a warning...sorry for my ignorance.
But, as I said, I can't afford a new desktop right now, atleast not an Apple....which is what I want.

message edited by majaca


Report •

#43
September 4, 2013 at 16:29:11
"atleast you haven't allayed my fear of this messing up my OS....(uninstalling ESET that way). Please explain how this is safe with such a warning...sorry for my ignorance."

The link I gave you has it all, explained by a staff member. In essence, backup the registry & then run the uninstaller.

CB530

Group: ESET Staff Posted 05 July 2013 - 06:06 PM
https://forum.eset.com/topic/506-no...


Report •

#44
September 4, 2013 at 19:40:19
In the link you provided just above....Ron T says this "Since I am using only the trial version of NOD32 I'll just wait for the trial expiration at which time I expect it will be deactivated."

Since I am in the same boat, (30 day trial) and since I have no idea how to back up my registry...isnt Ron's idea a good one? To just let ESET deactivate it in 3 wks, problem solved?

And we can get on with JRT and ADW?


Report •

#45
September 4, 2013 at 20:07:02
".isnt Ron's idea a good one?"
Maybe, but don't forget I am trying to eliminate your possible problems now, not in 3 weeks & even then deactivation normally doesn't remove the files. All you get is more popups asking you to buy.

"I have no idea how to back up my registry"
1: Start > Help and Support, type in backup & click on the magnifying glass.
2: Click on > 15 Back up the registry
http://i.imgur.com/GphmlZF.gif
http://i.imgur.com/1f3Gmng.gif

Or,

backup windows 7 registry
http://is.gd/RWTRWN

"And we can get on with JRT and ADW?"
If you prefer to do it that way, that is OK as well.


Report •

#46
September 5, 2013 at 06:38:04
"And we can get on with JRT and ADW?"
If you prefer to do it that way, that is OK as well.

Yes, can we just go forward with the above and skip the ESET uninstall for now?
If in 3wks, if it's causing problems and hasn't been removed by the eventual trial ending deactivation...I promise I will try the complete, freaking me out, uninstall. LOL. I am just nervous with these type warnings, as I am not very tech-y and am afraid I will muck up my computer further. I do sooo appreciate your patience with me, John!

Let me know...and later, when back home, I will see what you said....and then I will do the JRT and ADW.

message edited by majaca


Report •

#47
September 5, 2013 at 15:35:46
"Let me know...and later, when back home, I will see what you said....and then I will do the JRT and ADW."
Go ahead.

Report •

#48
September 9, 2013 at 15:09:04
John, I haven't forgotten! Over the weekend, the new Registry (Easy) that I paid for to take care of my registry, somehow was interfering with the registry keys for my Windows Live Photo Gallery and I was getting an error message and couldn't access my children's videos or pics from the last 2 yrs! This really scared me. As I said in OP, my last computer went sour and I 'almost' lost their toddler pics....long story short-I was able to somehow access them in safe mode (I think?) and ordered them all thru Snapfish before getting rid of that Dell desktop. Pfewf.

So, this weekend was a bad deja vu for me. Thankfully, I was able to restore my computer to an earlier date and voila' my pics were there again. Obviously, I uninstalled Registry Easy, while losing the $30.

My husband and I discussed the computer issue-I feel that it's on its way out and am sick and tired of these crappy name brand computers-HP, Dell, Gateway. They only last a few years and are very prone to all sorts of malware, viruses etc. Our neighbor has 5 Apple pieces-iPhones, iPads and iMac. No issues...and one of her desktops is 6yrs old.

We are going to use some savings and go to Apple store tomorrow and order/build an iMac All-in-one desktop. Obviously, I won't need to finish the JRT or ADW scans on this one now.

I am SO grateful for your time and help! Thank you sooooooooooo much. =)


Report •

#49
September 9, 2013 at 15:15:30
Avoid ALL registry cleaner and fixer programs. At the worst they are scams, at the best they can do more harm than good. If you MUST go that way the one in CCleaner is the safest one I know because it is relatively mild. Unused (invalid) registry entries have precious little affect on performance.

I think Johnw might be away for a day or two.

Always pop back and let us know the outcome - thanks


Report •

#50
September 9, 2013 at 15:49:29
Thank you, Derek. Good to know! I had no idea! I do know that it found over 2,000 issues with my registry and I was then like...'omg, I needed this cleaner'!

I did have CCCleaner but when I did the Registry Easy 'free' first scan and it found over 2k issues, I was like 'CCCleaner missed all those!'

I guess I am pretty naïve! I'm sure John will reply when he can. He was very helpful. =)


Report •

#51
September 9, 2013 at 16:10:05
Same applies to most "magic fix everything" programs you find widely touted on the internet. The only thing they are good at fixing is your wallet - many wreck more than they fix. Stick only to those programs that are recommended on a good computer forum - you'll find they are mostly free too.

One trick scam merchants often employ is to take the text you have input when searching and insert it on the website containing the tool they are pushing. This fools folk into thinking it is specially made to fix their particular problem. Always be suspicious and check them out first.

Always pop back and let us know the outcome - thanks


Report •

#52
September 9, 2013 at 19:25:11
"One trick scam merchants often employ is to take the text you have input when searching and insert it on the website containing the tool they are pushing. This fools folk into thinking it is specially made to fix their particular problem." Exactly! That's what happened to me last week....I fell for it hook, line, and sinker! Now, I'm out $30 and the original registry issues are still present. :(

message edited by majaca


Report •

#53
September 10, 2013 at 08:32:10
Sometimes checking the file name they want you to download is revealing (ie. it says registry fixer or something), although they are well capable of giving that a name based on your search too.

I'm not sure whether Johnw had any more checks in mind but I don't think he will be available for a day or two.

Always pop back and let us know the outcome - thanks


Report •

#54
September 10, 2013 at 14:39:12
That's ok, no more work needed on this desktop. We are going tomorrow to the Apple store to build our iMac.

Report •

#55
September 10, 2013 at 14:53:27
OK, if you can select a Best Answer it will mark this post as solved.

Always pop back and let us know the outcome - thanks


Report •

#56
September 10, 2013 at 19:23:09
Ok, done! Thanks all! Especially, John! =)

message edited by majaca


Report •

#57
September 12, 2013 at 01:38:18
Thanks majaca, another team effort.

Report •


Ask Question