Browsers Crash, Executable files stall or crash

**Malnutrition** · 11-18-2016, 04:04 AM

Originally posted by Paul Simoes

Should I make the change in Settings to make it start at System Start up?

No, you can just keep the program in a folder and use it when you want to easily change the DNS there is no need to have it run with windows. Once the DNS is changed, then that is it. DNS does not revert if the program is not running. It is just an easy tool to use instead of manually changing the DNS you just choose what one you want and click a button.

**paulwb** · 11-18-2016, 04:08 AM

Here’s the MiniToolBox report …

MiniToolBox by Farbar Version: 17-06-2016
Ran by psimoes (administrator) on 17-11-2016 at 23:02:26
Running from “C:\Users\psimoes\Desktop”
Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86)
Model: Satellite A305 Manufacturer: TOSHIBA
Boot Mode: Normal

========================= Flush DNS: ===================================

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

“Reset IE Proxy Settings”: IE Proxy Settings were reset.

========================= FF Proxy Settings: ==============================

“Reset FF Proxy Settings”: Firefox Proxy settings were reset.

========================= Hosts content: =================================
127.0.0.1 localhost
========================= IP Configuration: ================================

Intel(R) Wireless WiFi Link 4965AGN = Wireless Network Connection (Disconnected)
Realtek PCIe FE Family Controller = Local Area Connection (Connected)
[HEADING=1]----------------------------------[/HEADING]
[HEADING=1]IPv4 Configuration[/HEADING]
[HEADING=1]----------------------------------[/HEADING]
pushd interface ipv4

reset
set global icmpredirects=enabled

popd
[HEADING=1]End of IPv4 configuration[/HEADING]
Windows IP Configuration

Host Name . . . . . . . . . . . . : ps-toshiba
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : Belkin

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : Belkin
Description . . . . . . . . . . . : Realtek PCIe FE Family Controller
Physical Address. . . . . . . . . : 00-1E-33-3E-FA-E9
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 192.168.2.3(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : November-17-16 8:44:03 PM
Lease Expires . . . . . . . . . . : December-25-52 5:30:58 AM
Default Gateway . . . . . . . . . : 192.168.2.1
DHCP Server . . . . . . . . . . . : 192.168.2.1
DNS Servers . . . . . . . . . . . : 8.8.8.8
8.8.4.4
192.168.2.1
NetBIOS over Tcpip. . . . . . . . : Enabled
Server: google-public-dns-a.google.com
Address: 8.8.8.8

Name: google.com
Addresses: 2607:f8b0:400b:80b::200e
172.217.2.142

Pinging google.com [172.217.2.142] with 32 bytes of data:

Reply from 172.217.2.142: bytes=32 time=9ms TTL=58

Reply from 172.217.2.142: bytes=32 time=9ms TTL=58

Ping statistics for 172.217.2.142:

Code:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Code:

Minimum = 9ms, Maximum = 9ms, Average = 9ms

Server: google-public-dns-a.google.com
Address: 8.8.8.8

Name: yahoo.com
Addresses: 2001:4998:c:a06::2:4008
2001:4998:58:c02::a9
2001:4998:44:204::a7
206.190.36.45
98.139.183.24
98.138.253.109

Pinging yahoo.com [206.190.36.45] with 32 bytes of data:

Reply from 206.190.36.45: bytes=32 time=71ms TTL=53

Reply from 206.190.36.45: bytes=32 time=75ms TTL=53

Ping statistics for 206.190.36.45:

Code:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Code:

Minimum = 71ms, Maximum = 75ms, Average = 73ms

Pinging 127.0.0.1 with 32 bytes of data:

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Ping statistics for 127.0.0.1:

Code:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Code:

Minimum = 0ms, Maximum = 0ms, Average = 0ms

[HEADING=1]================================================== =========================
Interface List
18 …00 1e 33 3e fa e9 … Realtek PCIe FE Family Controller
1 … Software Loopback Interface 1[/HEADING]
[HEADING=1]IPv4 Route Table[/HEADING]
[HEADING=1]Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.2.1 192.168.2.3 20
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
192.168.2.0 255.255.255.0 On-link 192.168.2.3 276
192.168.2.3 255.255.255.255 On-link 192.168.2.3 276
192.168.2.255 255.255.255.255 On-link 192.168.2.3 276
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.2.3 276
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.2.3 276[/HEADING]
Persistent Routes:
None
[HEADING=1]IPv6 Route Table[/HEADING]
[HEADING=1]Active Routes:
If Metric Network Destination Gateway
1 306 ::1/128 On-link
1 306 ff00::/8 On-link[/HEADING]
Persistent Routes:
None
========================= Winsock entries =====================================

Catalog5 01 C:\Windows\system32\NLAapi.dll [48640] (Microsoft Corporation)
Catalog5 02 C:\Windows\system32\napinsp.dll [50176] (Microsoft Corporation)
Catalog5 03 C:\Windows\system32\pnrpnsp.dll [62464] (Microsoft Corporation)
Catalog5 04 C:\Windows\system32\pnrpnsp.dll [62464] (Microsoft Corporation)
Catalog5 05 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog5 06 C:\Windows\system32\winrnr.dll [19968] (Microsoft Corporation)
Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [122128] (Apple Inc.)
Catalog9 01 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 02 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 03 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 04 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 05 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 06 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 07 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 08 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 09 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 10 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 11 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 12 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 13 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 14 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 15 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 16 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 17 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 18 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 19 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 20 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 21 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 22 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)

========================= Event log errors: ===============================
[HEADING=1]Application errors:[/HEADING]
Error: (11/17/2016 06:53:15 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description:
Details:
AddWin32ServiceFiles: Unable to back up image of service getPlusHelper since QueryServiceConfig API failed

System Error:
The system cannot find the file specified.

Error: (11/17/2016 06:35:52 PM) (Source: MsiInstaller) (User: PS-TOSHIBA)
Description: Product: iTunes – iTunes requires that your computer is running Windows 7 or newer.

Error: (11/17/2016 06:34:03 PM) (Source: MsiInstaller) (User: PS-TOSHIBA)
Description: Product: Apple Mobile Device Support – Error 1920. Service ‘Apple Mobile Device’ (Apple Mobile Device) failed to start. Verify that you have sufficient privileges to start system services.

Error: (11/17/2016 06:33:57 PM) (Source: Application Error) (User: )
Description: Faulting application AppleMobileDeviceService.exe, version 17.374.70.19, time stamp 0x54dd6d0d, faulting module MSVCP100.dll, version 6.0.6002.19623, time stamp 0x56ec3707, exception code 0xc0000135, fault offset 0x00009f55,
process id 0x1694, application start time 0xAppleMobileDeviceService.exe0.

Error: (11/17/2016 06:33:45 PM) (Source: Application Error) (User: )
Description: Faulting application AppleMobileDeviceService.exe, version 17.374.70.19, time stamp 0x54dd6d0d, faulting module MSVCP100.dll, version 6.0.6002.19623, time stamp 0x56ec3707, exception code 0xc0000135, fault offset 0x00009f55,
process id 0x152c, application start time 0xAppleMobileDeviceService.exe0.

Error: (11/17/2016 06:33:34 PM) (Source: Application Error) (User: )
Description: Faulting application AppleMobileDeviceService.exe, version 17.374.70.19, time stamp 0x54dd6d0d, faulting module MSVCP100.dll, version 6.0.6002.19623, time stamp 0x56ec3707, exception code 0xc0000135, fault offset 0x00009f55,
process id 0x544, application start time 0xAppleMobileDeviceService.exe0.

Error: (11/17/2016 06:33:23 PM) (Source: Application Error) (User: )
Description: Faulting application AppleMobileDeviceService.exe, version 17.374.70.19, time stamp 0x54dd6d0d, faulting module MSVCP100.dll, version 6.0.6002.19623, time stamp 0x56ec3707, exception code 0xc0000135, fault offset 0x00009f55,
process id 0xd5c, application start time 0xAppleMobileDeviceService.exe0.

Error: (11/17/2016 06:33:12 PM) (Source: Application Error) (User: )
Description: Faulting application AppleMobileDeviceService.exe, version 17.374.70.19, time stamp 0x54dd6d0d, faulting module MSVCP100.dll, version 6.0.6002.19623, time stamp 0x56ec3707, exception code 0xc0000135, fault offset 0x00009f55,
process id 0x1538, application start time 0xAppleMobileDeviceService.exe0.

Error: (11/17/2016 06:33:02 PM) (Source: Application Error) (User: )
Description: Faulting application AppleMobileDeviceService.exe, version 17.374.70.19, time stamp 0x54dd6d0d, faulting module MSVCP100.dll, version 6.0.6002.19623, time stamp 0x56ec3707, exception code 0xc0000135, fault offset 0x00009f55,
process id 0x948, application start time 0xAppleMobileDeviceService.exe0.

Error: (11/17/2016 06:32:50 PM) (Source: Application Error) (User: )
Description: Faulting application AppleMobileDeviceService.exe, version 17.374.70.19, time stamp 0x54dd6d0d, faulting module MSVCP100.dll, version 6.0.6002.19623, time stamp 0x56ec3707, exception code 0xc0000135, fault offset 0x00009f55,
process id 0x344, application start time 0xAppleMobileDeviceService.exe0.
[HEADING=1]System errors:[/HEADING]
Error: (11/17/2016 08:45:58 PM) (Source: Service Control Manager) (User: )
Description: Cdr4_xp

Error: (11/17/2016 08:45:40 PM) (Source: Service Control Manager) (User: )
Description: TOSHIBA SMART Log Service%%3 = The system cannot find the path specified.

Error: (11/17/2016 08:45:40 PM) (Source: Service Control Manager) (User: )
Description: TOSHIBA Bluetooth Service%%2 = The system cannot find the file specified.

Error: (11/17/2016 08:45:40 PM) (Source: Service Control Manager) (User: )
Description: TOSHIBA Power Saver%%3 = The system cannot find the path specified.

Error: (11/17/2016 08:45:40 PM) (Source: Service Control Manager) (User: )
Description: Apple Mobile Device%%1053 = The service did not respond to the start or control request in a timely fashion.

Error: (11/17/2016 08:45:40 PM) (Source: Service Control Manager) (User: )
Description: 30000Apple Mobile Device

Error: (11/17/2016 08:40:07 PM) (Source: DCOM) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (11/17/2016 07:51:41 PM) (Source: Service Control Manager) (User: )
Description: Cdr4_xp

Error: (11/17/2016 07:51:23 PM) (Source: Service Control Manager) (User: )
Description: TOSHIBA SMART Log Service%%3 = The system cannot find the path specified.

Error: (11/17/2016 07:51:23 PM) (Source: Service Control Manager) (User: )
Description: TOSHIBA Bluetooth Service%%2 = The system cannot find the file specified.
[HEADING=1]Microsoft Office Sessions:[/HEADING]
[HEADING=1]CodeIntegrity Errors:[/HEADING]
Date: 2016-11-17 22:20:03.195
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\P SINReg.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-11-17 22:20:02.667
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\P SINReg.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-11-17 22:20:02.135
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\P SINReg.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-11-17 22:20:01.606
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\P SINReg.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-11-17 22:20:01.074
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\P SINReg.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-11-17 22:20:00.544
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\P SINReg.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-11-17 22:19:59.997
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\P SINReg.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-11-17 22:19:59.469
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\P SINReg.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-11-17 22:19:58.859
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\P SINProt.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-11-17 22:19:58.330
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\P SINProt.sys because the set of per-page image hashes could not be found on the system.

=========================== Installed Programs ============================

7-Zip 4.65 (HKLM...\7-Zip) (Version: - )
7-Zip 9.20 (HKLM...{23170F69-40C1-2701-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Acrobat.com (HKLM...{77DCDCE3-2DED-62F3-8154-05E745472D07}) (Version: 0.0.0 - Adobe Systems Incorporated) Hidden
Acrobat.com (HKLM...\com.adobe.mauby.4875E02D9FB21EE389F73B8D1 702B320485DF8CE.1) (Version: 1.1.377 - Adobe Systems Incorporated)
Adobe AIR (HKLM...{BBEC10F9-AC15-41EE-A271-0B1077F53740}) (Version: 23.0.0.257 - Adobe Systems Incorporated) Hidden
Adobe AIR (HKLM...\Adobe AIR) (Version: 23.0.0.257 - Adobe Systems Incorporated)
Adobe Flash Player 23 ActiveX (HKLM...\Adobe Flash Player ActiveX) (Version: 23.0.0.207 - Adobe Systems Incorporated)
Adobe Flash Player 23 NPAPI (HKLM...\Adobe Flash Player NPAPI) (Version: 23.0.0.207 - Adobe Systems Incorporated)
Adobe Flash Player 23 PPAPI (HKLM...\Adobe Flash Player PPAPI) (Version: 23.0.0.207 - Adobe Systems Incorporated)
Adobe Reader X (10.1.16) (HKLM...{AC76BA86-7AD7-1033-7B44-AA1000000001}) (Version: 10.1.16 - Adobe Systems Incorporated)
Adobe Refresh Manager (HKLM...{AC76BA86-0804-1033-1959-001824166751}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
Aiseesoft Blu-ray Ripper (HKLM...\Aiseesoft Blu-ray Ripper_is1) (Version: - )
Aiseesoft Streaming Video Recorder (HKLM...\Aiseesoft Streaming Video Recorder_is1) (Version: - )
AOMEI Backupper Standard Edition 2.0.2 (HKLM...{A83692F5-3E9B-4E95-9E7E-B5DF5536C09F}is1) (Version: - AOMEI Technology Co., Ltd.)
Apple Mobile Device Support (HKLM...{D9F3D66A-9885-4DDD-A800-9DDF488359A1}) (Version: 10.0.1.3 - Apple Inc.)
Apple Software Update (HKLM...{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
ATI Catalyst Install Manager (HKLM...{53BB9294-6E76-4853-4130-1CD0A01EAE45}) (Version: 3.0.657.0 - ATI Technologies, Inc.)
Belkin Setup and Router Monitor (HKLM...\Belkin Setup and Router Monitor_is1) (Version: - )
Belkin USB Print and Storage Center (HKLM...\Belkin USB Print and Storage Center) (Version: 1.1.4 - Belkin International, Inc.)
Bluetooth Stack for Windows by Toshiba (HKLM...{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}) (Version: v6.10.02(T) - TOSHIBA CORPORATION)
Bonjour (HKLM...{D168AAD0-6686-47C1-B599-CDD4888B9D1A}) (Version: 3.1.0.1 - Apple Inc.)
Camera Assistant Software for Toshiba (HKLM...{37C866E4-AA67-4725-9E95-A39968DD7960}) (Version: 1.7.175.0123 - Chicony Electronics Co.,Ltd.)
Catalyst Control Center - Branding (HKLM...{D58A1E94-9EEA-4C6E-B9FB-D7C63DC6C941}) (Version: 1.00.0000 - ATI)
Catalyst Control Center Core Implementation (HKLM...{91B067A5-89C8-3C29-57EE-597034D56D42}) (Version: 2008.0130.1509.26922 - ATI) Hidden
Catalyst Control Center Graphics Full Existing (HKLM...{44AB916C-E8AE-3A81-269A-2A55C4802C7A}) (Version: 2008.0130.1509.26922 - ATI) Hidden
Catalyst Control Center Graphics Full New (HKLM...{1D88A6A6-C2C6-3E2F-DDB6-A635090141B0}) (Version: 2008.0130.1509.26922 - ATI) Hidden
Catalyst Control Center Graphics Light (HKLM...{507DB37B-FFE7-429E-FF1B-D46F3BB0FE96}) (Version: 2008.0130.1509.26922 - ATI) Hidden
Catalyst Control Center Graphics Previews Vista (HKLM...{CB685FA8-9C7A-73F5-3BBF-38B8F63A1C48}) (Version: 2008.0130.1509.26922 - ATI) Hidden
Catalyst Control Center Localization Chinese Standard (HKLM...{C19D5636-D868-57D1-A36E-EF1056E9813C}) (Version: 2008.0130.1509.26922 - ATI) Hidden
Catalyst Control Center Localization Chinese Traditional (HKLM...{09527978-C15B-6AF8-5582-C9784F8F3B69}) (Version: 2008.0130.1509.26922 - ATI) Hidden
Catalyst Control Center Localization Dutch (HKLM...{EFD48405-94CC-71B6-A915-5B0121C6C7E3}) (Version: 2008.0130.1509.26922 - ATI) Hidden
Catalyst Control Center Localization French (HKLM...{DECF4937-8E72-5723-E82E-74A566F73197}) (Version: 2008.0130.1509.26922 - ATI) Hidden
Catalyst Control Center Localization German (HKLM...{9607BEEE-ED89-FE20-C992-AF3DC46EBEB5}) (Version: 2008.0130.1509.26922 - ATI) Hidden
Catalyst Control Center Localization Italian (HKLM...{54E1A977-FC97-AAAB-A3C2-CA8ED6545951}) (Version: 2008.0130.1509.26922 - ATI) Hidden
Catalyst Control Center Localization Japanese (HKLM...{0AB16A24-2465-0F1A-C12E-BFAB6F612191}) (Version: 2008.0130.1509.26922 - ATI) Hidden
Catalyst Control Center Localization Korean (HKLM...{48284361-3F81-8AD3-0630-72AEDB614936}) (Version: 2008.0130.1509.26922 - ATI) Hidden
Catalyst Control Center Localization Portuguese (HKLM...{16E42331-56E6-53BC-428C-6E2020E58025}) (Version: 2008.0130.1509.26922 - ATI) Hidden
Catalyst Control Center Localization Spanish (HKLM...{25F83D04-6D32-5AAD-C057-AEA7B8C746E3}) (Version: 2008.0130.1509.26922 - ATI) Hidden
Catalyst Control Center Localization Swedish (HKLM...{0A6A6F94-7EFC-2FEA-CC70-FB6A22188F88}) (Version: 2008.0130.1509.26922 - ATI) Hidden
CCC Help Chinese Standard (HKLM...{9317BC0B-8869-8D99-41F3-DE4ECE37A8A4}) (Version: 2008.0130.1508.26922 - ATI) Hidden
CCC Help Chinese Traditional (HKLM...{74D7540C-9E12-A710-00CF-D8F4DC7465F4}) (Version: 2008.0130.1508.26922 - ATI) Hidden
CCC Help Dutch (HKLM...{D580C9A6-3240-721A-19F0-E4C8A1F400DA}) (Version: 2008.0130.1508.26922 - ATI) Hidden
CCC Help English (HKLM...{A98321B3-98EE-4BB3-B55A-C6DFD3A47933}) (Version: 2008.0130.1508.26922 - ATI) Hidden
CCC Help French (HKLM...{0C36CB3D-A859-B0CE-253A-89C27BAB2AA4}) (Version: 2008.0130.1508.26922 - ATI) Hidden
CCC Help German (HKLM...{3573E889-A6BA-DADE-8F70-8B756D0A6573}) (Version: 2008.0130.1508.26922 - ATI) Hidden
CCC Help Italian (HKLM...{3FD66338-6A62-96FE-BE27-957F1D5A4C1C}) (Version: 2008.0130.1508.26922 - ATI) Hidden
CCC Help Japanese (HKLM...{9D32CC0B-4B40-F54A-AAF1-39E9173500AD}) (Version: 2008.0130.1508.26922 - ATI) Hidden
CCC Help Korean (HKLM...{8750318B-6559-BD76-E8C5-1DE2C8CA961A}) (Version: 2008.0130.1508.26922 - ATI) Hidden
CCC Help Portuguese (HKLM...{86BBFA80-9ED0-793A-0A10-6CB37BF6409C}) (Version: 2008.0130.1508.26922 - ATI) Hidden
CCC Help Spanish (HKLM...{F041BEBB-2E74-01BC-7DAB-CF352809FE79}) (Version: 2008.0130.1508.26922 - ATI) Hidden
CCC Help Swedish (HKLM...{80B0B1FC-41C9-D8B9-D183-D31218875F73}) (Version: 2008.0130.1508.26922 - ATI) Hidden
ccc-core-static (HKLM...{AF8B7B36-0427-22DD-8005-07869A67CE20}) (Version: 2008.0130.1509.26922 - ATI) Hidden
CCleaner (HKLM...\CCleaner) (Version: 5.24 - Piriform)
Cisco WebEx Meetings (HKLM...\ActiveTouchMeetingClient) (Version: - Cisco WebEx LLC)
Citrix Online Launcher (HKLM...{678753E6-E526-4AE5-A144-00240772543A}) (Version: 1.0.393 - Citrix)
Compatibility Pack for the 2007 Office system (HKLM...{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6425.1000 - Microsoft Corporation)
Cover Commander 3.0 by Insofta Development (HKLM...\Cover Commander) (Version: 3.0 - Insofta Development)
CyberLink PowerCinema for TOSHIBA (HKLM...{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 6.0.1414 - CyberLink Corp.) Hidden
CyberLink PowerCinema for TOSHIBA (HKLM...\InstallShield{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 6.0.1414 - CyberLink Corp.)
D3DX10 (HKLM...{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
DVD MovieFactory for TOSHIBA (HKLM...{F214EAA4-A069-4BAF-9DA4-4DB8BEEDE485}) (Version: 5.51 - Ulead Systems, Inc.)
FileASSASSIN (HKLM...\FileASSASSIN) (Version: 1.06 - Malwarebytes)
Folder Lock (HKCU...\FolderLock6) (Version: - New Sofware.net Inc.)
FXCM Trading Station (HKLM...{494367EC-82A9-4C0D-A788-74A967998E8C}) (Version: 010311 - FXCM) Hidden
GearDrvs (HKLM...{206FD69B-F9FE-4164-81BD-D52552BC9C23}) (Version: 1 - Symantec Corporation) Hidden
Gizmo Central (HKLM...\Gizmo Central) (Version: v2.7.9 - Arainia Solutions, LLC)
Google Chrome (HKLM...\Google Chrome) (Version: 49.0.2623.112 - Google Inc.)
Google Desktop (HKLM...\Google Desktop) (Version: - - Google)
Google Talk Plugin (HKLM...{F9B579C2-D854-300A-BE62-A09EB9D722E4}) (Version: 5.41.3.0 - Google)
Google Update Helper (HKLM...{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.31.5 - Google Inc.) Hidden
Google Update Helper (HKLM...{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
GoToMeeting 7.16.0.4800 (HKCU...\GoToMeeting) (Version: 7.16.0.4800 - CitrixOnline)
HTC BMP USB Driver (HKLM...{31A559C1-9E4D-423B-9DD3-34A6C5398752}) (Version: 1.0.5375 - HTC)
HTC Driver Installer (HKLM...{6D6664A9-3342-4948-9B7E-034EFE366F0F}) (Version: 3.0.0.021 - HTC Corporation)
Ideal DVD Copy V4.1.2 (HKLM...\Ideal DVD Copy_is1) (Version: - Ideal DVD Software, Inc.)
ImgBurn (HKLM...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Intel(R) PROSet/Wireless Software (HKLM...\ProInst) (Version: 11.5.0000 - Intel Corporation)
Intel® Matrix Storage Manager (HKLM...{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version: - )
IPTInstaller (HKLM...{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.9 - HTC)
Junk Mail filter update (HKLM...{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Logitech Unifying Software 2.50 (HKLM...\Logitech Unifying) (Version: 2.50.25 - Logitech)
magicJack (HKCU...\magicJack) (Version: 4.1.7574.5297 - magicJack L.P.)
Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
mCorev32.ism_new (HKLM...{A945BD16-4774-4A1F-96A7-118BEC004881}) (Version: 11.02.0000 - Intel Corporation) Hidden
mCPlug (HKLM...{F32ED8B1-2442-4B0E-8DEC-3F3BFC1C2B7F}) (Version: 11.02.0000 - Intel Corporation) Hidden
mHelp (HKLM...{8C6BB412-D3A8-4AAE-A01B-35B681789D68}) (Version: 11.02.0000 - Intel) Hidden
Microsoft .NET Framework 3.5 SP1 (HKLM...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM...{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Silverlight (HKLM...{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM...{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM...{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM...{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM...{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM...{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 (HKLM...{E503B4BF-F7BB-3D5F-8BC8-F694B1CFF942}) (Version: 9.0.21022.218 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM...{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM...{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM...{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Works (HKLM...{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}) (Version: 9.7.0621 - Microsoft Corporation)
mMHouse (HKLM...{F0BFC7EF-9CF8-44EE-91B0-158884CD87C5}) (Version: 11.02.0000 - Intel Corporation) Hidden
Mozilla Firefox 50.0 (x86 en-US) (HKLM...\Mozilla Firefox 50.0 (x86 en-US)) (Version: 50.0 - Mozilla)
Mozilla Maintenance Service (HKLM...\MozillaMaintenanceService) (Version: 50.0 - Mozilla)
mPfMgr (HKLM...{8B928BA1-EDEC-4227-A2DA-DD83026C36F5}) (Version: 11.02.0000 - Intel Corporation) Hidden
MSVC90_x86 (HKLM...{AF111648-99A1-453E-81DD-80DBBF6DAD0D}) (Version: 1.0.1.2 - Nokia) Hidden
MSXML 4.0 SP2 (KB941833) (HKLM...{C523D256-313D-4866-B36A-F3DE528246EF}) (Version: 4.20.9849.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM...{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM...{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM...{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM...{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM...{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM...{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
Network Recording Player (HKLM...{FDA24BB0-8462-4356-B30E-C74FDC25C6DF}) (Version: 28.7.0.15458 - Cisco WebEx LLC)
Nokia Connectivity Cable Driver (HKLM...{2D99A593-C841-43A7-B7C9-D6F3AE70B756}) (Version: 7.1.45.0 - Nokia)
Nokia PC Suite (HKLM...{D0D14551-3A2D-433B-861F-F4DCE5422759}) (Version: 7.1.62.1 - Nokia) Hidden
Nokia PC Suite (HKLM...\Nokia PC Suite) (Version: 7.1.62.1 - Nokia)
Online Armor 6.0 (HKLM...\OnlineArmor_is1) (Version: 6.0 - Emsisoft GmbH)
Opera Stable 36.0.2130.80 (HKLM...\Opera 36.0.2130.80) (Version: 36.0.2130.80 - Opera Software)
Panda Devices Agent (HKLM...{3F9548B2-0B34-4453-A92E-35056B053F19}) (Version: 1.08.00 - Panda Security) Hidden
Panda Devices Agent (HKLM...\Panda Devices Agent) (Version: 1.03.08 - Panda Security) Hidden
Panda Free Antivirus (HKLM...{62692A64-8661-4040-AC6C-F24E48393E20}) (Version: 8.31.00 - Panda Security) Hidden
Panda Free Antivirus (HKLM...\Panda Universal Agent Endpoint) (Version: 17.00.01.0000 - Panda Security)
Panda Safe Web (HKLM...\pandasecuritytb) (Version: 4.3.1.20 - Panda Security and Visicom Media Inc.)
PC Connectivity Solution (HKLM...{C373F7C4-05D2-4047-96D1-6AF30661C6AA}) (Version: 11.4.19.0 - Nokia)
Picasa 3 (HKLM...\Picasa 3) (Version: 3.9 - Google, Inc.)
QuickTime (HKLM...{AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}) (Version: 7.73.80.64 - Apple Inc.)
Realtek 8169, 8168, 8101E and 8102E Ethernet Network Card Driver for Windows Vista (HKLM...{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0000 - Realtek)
Realtek High Definition Audio Driver (HKLM...{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5559 - Realtek Semiconductor Corp.)
Revo Uninstaller 2.0.1 (HKLM...{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}is1) (Version: 2.0.1 - VS Revo Group, Ltd.)
RICOH R5C83x/84x Flash Media Controller Driver Ver.3.51.01 (HKLM...{59F6A514-9813-47A3-948C-8A155460CC2A}) (Version: 3.51.01 - )
Segoe UI (HKLM...{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}) (Version: 15.4.2271.0615 - Microsoft Corp) Hidden
Skins (HKLM...{F06B8809-3C26-E6A0-3D80-084331666B73}) (Version: 2008.0130.1509.26922 - ATI) Hidden
Skype™ 7.29 (HKLM...{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.29.102 - Skype Technologies S.A.)
Snagit 11 (HKLM...{A56C6348-59D0-433B-A48A-75914858664E}) (Version: 11.2.1 - TechSmith Corporation)
SnagIt 9 (HKLM...{59991D18-A988-45AB-B1BF-5ADE6E64CD3F}) (Version: 9.0.0 - TechSmith Corporation)
Spelling Dictionaries Support For Adobe Reader 9 (HKLM...{AC76BA86-7AD7-5464-3428-900000000004}) (Version: 9.0.0 - Adobe Systems Incorporated)
Synaptics Pointing Device Driver (HKLM...\SynTPDeinstKey) (Version: 11.2.4.0 - Synaptics)
TOSHIBA Software Upgrades (HKLM...{425A2BC2-AA64-4107-9C29-484245BBEA05}) (Version: 4.3 - TOSHIBA)
TOSHIBA Speech System Applications (HKLM...{EE033C1F-443E-41EC-A0E2-559B539A4E4D}) (Version: - )
TOSHIBA Speech System SR Engine(U.S.) Version1.0 (HKLM...{008D69EB-70FF-46AB-9C75-924620DF191A}) (Version: - )
TOSHIBA Speech System TTS Engine(U.S.) Version1.0 (HKLM...{3FBF6F99-8EC6-41B4-8527-0A32241B5496}) (Version: - )
TOSHIBA Supervisor Password (HKLM...{4B1E87C3-00DE-4898-8E39-E390AAEF2391}) (Version: 2.00.03 - )
TOSHIBA Value Added Package (HKLM...\InstallShield{FEDD27A0-B306-45EF-BF58-B527406B42C8}) (Version: 1.1.14 - TOSHIBA Corporation)
TrueSuite Access Manager (HKLM...{A2075A09-28AA-4D30-9BCC-82EAD9FA51BD}) (Version: 1.1.13.13 - ABIG)
TRW conferencing (HKLM...{E23E9487-2B6B-42CA-AE8D-E2369563AB02}) (Version: 7.71 - Digitalweb)
TurboMeeting (HKCU...\TurboMeeting) (Version: 3.0.300 - RHUB Communications, Inc.)
Unlocker 1.9.0 (HKLM...\Unlocker) (Version: 1.9.0 - Cedrick Collomb)
Video Mover (HKLM...\Video Mover_is1) (Version: - )
VLC media player (HKLM...\VLC media player) (Version: 2.2.4 - VideoLAN)
Windows Driver Package - Nokia Modem (02/25/2011 4.7) (HKLM...\E0AC723A3DE3A04256288CADBBB011B112AED454) (Version: 02/25/2011 4.7 - Nokia)
Windows Driver Package - Nokia Modem (02/25/2011 7.01.0.9) (HKLM...\72A50F48CC5601190B9C4E74D81161693133E7F7) (Version: 02/25/2011 7.01.0.9 - Nokia)
Windows Driver Package - Nokia pccsmcfd (08/22/2008 7.0.0.0) (HKLM...\504244733D18C8F63FF584AEB290E3904E791693) (Version: 08/22/2008 7.0.0.0 - Nokia)
Windows Live Essentials (HKLM...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
Windows Media Encoder 9 Series (HKLM...\Windows Media Encoder 9) (Version: - )
WinPcap 4.1.2 (HKLM...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
Your monster voice 1 (HKLM...\Your monster voice 1) (Version: - )
Zemana AntiMalware (HKLM...{8F0CD7D1-42F3-4195-95CD-833578D45057}_is1) (Version: 2.60.1 - Zemana Ltd.)

========================= Devices: ================================

Name: Intel(R) Wireless WiFi Link 4965AGN
Description: Intel(R) Wireless WiFi Link 4965AGN
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Intel Corporation
Service: NETw4v32
Device ID: PCI\VEN_8086&DEV_4229&SUBSYS_11008086&REV_61\4&163 5E7F9&0&00E1
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click “Action”, and then click “Enable Device”. This starts the Enable Device wizard. Follow the instructions.

Name:
Description:
Class Guid:
Manufacturer:
Service:
Device ID: ROOT\LEGACY_CATCHME\0000
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click “Update Driver”, which starts the Hardware Update wizard.

========================= Memory info: ===================================

Percentage of memory in use: 46%
Total physical RAM: 3069.21 MB
Available physical RAM: 1651.38 MB
Total Virtual: 6346.66 MB
Available Virtual: 4833.16 MB

========================= Partitions: =====================================

1 Drive c: (SQ004710V01) (Fixed) (Total:184.85 GB) (Free:6.11 GB) NTFS
2 Drive d: () (Fixed) (Total:186.31 GB) (Free:92.98 GB) NTFS

========================= Users: ========================================

User accounts for \PS-TOSHIBA

Administrator Guest psimoes
torrents

**** End of log ****

**Malnutrition** · 11-18-2016, 04:14 AM

I’d still remove these.

TOSHIBA Software Upgrades (HKLM...{425A2BC2-AA64-4107-9C29-484245BBEA05}) (Version: 4.3 - TOSHIBA)
TOSHIBA Speech System Applications (HKLM...{EE033C1F-443E-41EC-A0E2-559B539A4E4D}) (Version: - )
TOSHIBA Speech System SR Engine(U.S.) Version1.0 (HKLM...{008D69EB-70FF-46AB-9C75-924620DF191A}) (Version: - )
TOSHIBA Speech System TTS Engine(U.S.) Version1.0 (HKLM...{3FBF6F99-8EC6-41B4-8527-0A32241B5496}) (Version: - )
TOSHIBA Supervisor Password (HKLM...{4B1E87C3-00DE-4898-8E39-E390AAEF2391}) (Version: 2.00.03 - )
TOSHIBA Value Added Package (HKLM...\InstallShield_{FEDD27A0-B306-45EF-BF58-B527406B42C8}) (Version: 1.1.14 - TOSHIBA Corporation)
GearDrvs (HKLM...{206FD69B-F9FE-4164-81BD-D52552BC9C23}) (Version: 1 - Symantec Corporation) Hidden
Online Armor 6.0 (HKLM...\OnlineArmor_is1) (Version: 6.0 - Emsisoft GmbH)

Also, would be a good idea to clean your machine with Privazer — 1 Drive c: (SQ004710V01) (Fixed) (Total:184.85 GB) (Free:6.11 GB) NTFS

**paulwb** · 11-18-2016, 04:32 AM

The TOSHIBA files are very resistant to removal. I get an error message when using geek uninstaller … see below. And dUninstaller says they have been removed.

[ATTACH]809[/ATTACH]

I will try again with geek and dUninstaller.
I have several gigs of files to transfer to an external HD but didn’t want to do it until the PC was clean. Will do tonight and then use Privaser.

**Malnutrition** · 11-18-2016, 04:38 AM

Skip trying to remove the Toshiba files, they can stay. If they are resistant to Force Removal via Geek Uninstaller.

**Malnutrition** · 11-18-2016, 04:40 AM

FRST Fix

Download attached fixlist.txt file and save it to the Desktop. NOTE. It’s important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work. NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system Run FRST/FRST64 and press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run. When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

**paulwb** · 11-18-2016, 05:23 AM

This FRST scan crashed about half way through … here is the log …

[ATTACH]811[/ATTACH]

Fix result of Farbar Recovery Scan Tool (x86) Version: 17-11-2016
Ran by psimoes (17-11-2016 23:57:07) Run:2
Running from C:\Users\psimoes\Desktop
Loaded Profiles: psimoes (Available Profiles: psimoes & torrents & Guest)
Boot Mode: Normal

==============================================

fixlist content:

start
CreateRestorePoint:
CloseProcesses:
DeleteKey: HKLM\SOFTWARE\Eset
DeleteKey: HKLM\SOFTWARE\F-Secure
DeleteKey: HKLM\SOFTWARE\GEAR Software
DeleteKey: HKLM\SOFTWARE\IObit
DeleteKey: HKLM\SOFTWARE\McAfee
DeleteKey: HKLM\SOFTWARE\MicroWorld
DeleteKey: HKLM\SOFTWARE\SymNRT
DeleteKey: HKLM\SOFTWARE\TeamViewer
DeleteKey: HKLM\SOFTWARE\TrendMicro
DeleteKey: HKCU\SOFTWARE\AnVir
DeleteKey: HKCU\SOFTWARE\ComodoGroup
DeleteKey: HKCU\SOFTWARE\ESET
DeleteKey: HKCU\SOFTWARE\Facebook
DeleteKey: HKCU\SOFTWARE\McAfee
DeleteKey: HKCU\SOFTWARE\MicroWorld
DeleteKey: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\U ninstall{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uni nstall{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\ LEGACY_TLJKVA
DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\ LEGACY_TLJKVA\0000
DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\ LEGACY_TLJKVA
DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\ LEGACY_TLJKVA\0000
DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_TLJKVA
DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_TLJKVA\0000
DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\ LEGACY_WAYUIA
DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\ LEGACY_WAYUIA\0000
DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\ LEGACY_WAYUIA
DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\ LEGACY_WAYUIA\0000
DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_WAYUIA
DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_WAYUIA\0000
C:\ProgramData\Kaspersky Lab
C:\ProgramData\McAfee
C:\ProgramData\MicroWorld
C:\Program Files\Common Files\Symantec Shared
C:\Users\psimoes\AppData\Roaming\BitDefender
C:\Users\psimoes\AppData\Roaming\IObit
C:\Users\psimoes\AppData\Local\AnVir
C:\Users\psimoes\AppData\Local\ESET
C:\Users\psimoes\AppData\Local\Facebook
C:\Windows\System32\Config\systemprofile\AppData\R oaming\360safe
C:\Windows\System32\drivers\teamviewervpn.sys
C:\Windows\System32\drivers\trufos.sys
Hosts:
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state Off
RemoveProxy:
CMD: ipconfig /flushdns
Emptytemp:
reboot:
end

Restore point was successfully created.
Processes closed successfully.
HKLM\SOFTWARE\Eset => key removed successfully.
HKLM\SOFTWARE\F-Secure => key removed successfully.
HKLM\SOFTWARE\GEAR Software => key removed successfully.
HKLM\SOFTWARE\IObit => key removed successfully.
HKLM\SOFTWARE\McAfee => key removed successfully.
HKLM\SOFTWARE\MicroWorld => key removed successfully.
HKLM\SOFTWARE\SymNRT => key removed successfully.
HKLM\SOFTWARE\TeamViewer => key removed successfully.
HKLM\SOFTWARE\TrendMicro => key removed successfully.
HKCU\SOFTWARE\AnVir => key removed successfully.
HKCU\SOFTWARE\ComodoGroup => key removed successfully.
HKCU\SOFTWARE\ESET => key removed successfully.
HKCU\SOFTWARE\Facebook => key removed successfully.
HKCU\SOFTWARE\McAfee => key removed successfully.
HKCU\SOFTWARE\MicroWorld => key removed successfully.
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\U ninstall{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} => key removed successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uni nstall{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} => could not remove key.: incorrect path.

**Malnutrition** · 11-18-2016, 05:24 AM

Originally posted by Paul Simoes

This FRST scan crashed about half way through … here is the log …

Reboot and re-run. If a problem arises again, then run it in safe mode.

**paulwb** · 11-18-2016, 08:34 AM

FRST worked in Safe Mode. Here is the log …

Fix result of Farbar Recovery Scan Tool (x86) Version: 17-11-2016
Ran by psimoes (18-11-2016 02:16:37) Run:4
Running from C:\Users\psimoes\Desktop
Loaded Profiles: psimoes (Available Profiles: psimoes & torrents & Guest)
Boot Mode: Safe Mode (with Networking)

==============================================

fixlist content:

start
CreateRestorePoint:
CloseProcesses:
DeleteKey: HKLM\SOFTWARE\Eset
DeleteKey: HKLM\SOFTWARE\F-Secure
DeleteKey: HKLM\SOFTWARE\GEAR Software
DeleteKey: HKLM\SOFTWARE\IObit
DeleteKey: HKLM\SOFTWARE\McAfee
DeleteKey: HKLM\SOFTWARE\MicroWorld
DeleteKey: HKLM\SOFTWARE\SymNRT
DeleteKey: HKLM\SOFTWARE\TeamViewer
DeleteKey: HKLM\SOFTWARE\TrendMicro
DeleteKey: HKCU\SOFTWARE\AnVir
DeleteKey: HKCU\SOFTWARE\ComodoGroup
DeleteKey: HKCU\SOFTWARE\ESET
DeleteKey: HKCU\SOFTWARE\Facebook
DeleteKey: HKCU\SOFTWARE\McAfee
DeleteKey: HKCU\SOFTWARE\MicroWorld
DeleteKey: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\U ninstall{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uni nstall{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\ LEGACY_TLJKVA
DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\ LEGACY_TLJKVA\0000
DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\ LEGACY_TLJKVA
DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\ LEGACY_TLJKVA\0000
DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_TLJKVA
DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_TLJKVA\0000
DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\ LEGACY_WAYUIA
DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\ LEGACY_WAYUIA\0000
DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\ LEGACY_WAYUIA
DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\ LEGACY_WAYUIA\0000
DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_WAYUIA
DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_WAYUIA\0000
C:\ProgramData\Kaspersky Lab
C:\ProgramData\McAfee
C:\ProgramData\MicroWorld
C:\Program Files\Common Files\Symantec Shared
C:\Users\psimoes\AppData\Roaming\BitDefender
C:\Users\psimoes\AppData\Roaming\IObit
C:\Users\psimoes\AppData\Local\AnVir
C:\Users\psimoes\AppData\Local\ESET
C:\Users\psimoes\AppData\Local\Facebook
C:\Windows\System32\Config\systemprofile\AppData\R oaming\360safe
C:\Windows\System32\drivers\teamviewervpn.sys
C:\Windows\System32\drivers\trufos.sys
Hosts:
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state Off
RemoveProxy:
CMD: ipconfig /flushdns
Emptytemp:
reboot:
end

Error: Restore point can only be created in normal mode.
Processes closed successfully.
HKLM\SOFTWARE\Eset => could not remove key. ErrorCode: 0xC0000033
HKLM\SOFTWARE\F-Secure => could not remove key. ErrorCode: 0xC0000033
HKLM\SOFTWARE\GEAR Software => could not remove key.: incorrect path.
HKLM\SOFTWARE\IObit => could not remove key.: incorrect path.
HKLM\SOFTWARE\McAfee => could not remove key.: incorrect path.
HKLM\SOFTWARE\MicroWorld => could not remove key.: incorrect path.
HKLM\SOFTWARE\SymNRT => could not remove key.: incorrect path.
HKLM\SOFTWARE\TeamViewer => could not remove key.: incorrect path.
HKLM\SOFTWARE\TrendMicro => could not remove key.: incorrect path.
HKCU\SOFTWARE\AnVir => could not remove key.: incorrect path.
HKCU\SOFTWARE\ComodoGroup => could not remove key. ErrorCode: 0xC0000033
HKCU\SOFTWARE\ESET => could not remove key. ErrorCode: 0xC0000033
HKCU\SOFTWARE\Facebook => could not remove key. ErrorCode: 0xC0000033
HKCU\SOFTWARE\McAfee => could not remove key.: incorrect path.
HKCU\SOFTWARE\MicroWorld => could not remove key.: incorrect path.
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\U ninstall{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} => could not remove key. ErrorCode: 0xC0000033
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uni nstall{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} => could not remove key.: incorrect path.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\ LEGACY_TLJKVA => key removed successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\ LEGACY_TLJKVA\0000 => could not remove key. ErrorCode: 0xC0000033
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\ LEGACY_TLJKVA => key removed successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\ LEGACY_TLJKVA\0000 => could not remove key. ErrorCode: 0xC0000033
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_TLJKVA => could not remove key. ErrorCode: 0xC0000033
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_TLJKVA\0000 => could not remove key. ErrorCode: 0xC0000033
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\ LEGACY_WAYUIA => key removed successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\ LEGACY_WAYUIA\0000 => could not remove key. ErrorCode: 0xC0000033
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\ LEGACY_WAYUIA => key removed successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\ LEGACY_WAYUIA\0000 => could not remove key. ErrorCode: 0xC0000033
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_WAYUIA => could not remove key. ErrorCode: 0xC0000033
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\R oot\LEGACY_WAYUIA\0000 => could not remove key. ErrorCode: 0xC0000033
C:\ProgramData\Kaspersky Lab => moved successfully
C:\ProgramData\McAfee => moved successfully
C:\ProgramData\MicroWorld => moved successfully
C:\Program Files\Common Files\Symantec Shared => moved successfully
C:\Users\psimoes\AppData\Roaming\BitDefender => moved successfully
C:\Users\psimoes\AppData\Roaming\IObit => moved successfully
C:\Users\psimoes\AppData\Local\AnVir => moved successfully
C:\Users\psimoes\AppData\Local\ESET => moved successfully
C:\Users\psimoes\AppData\Local\Facebook => moved successfully
C:\Windows\System32\Config\systemprofile\AppData\R oaming\360safe => moved successfully
C:\Windows\System32\drivers\teamviewervpn.sys => moved successfully
C:\Windows\System32\drivers\trufos.sys => moved successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

========= netsh advfirewall reset =========

Ok.

========= End of CMD: =========

========= netsh advfirewall set allprofiles state Off =========

Ok.

========= End of CMD: =========

========= RemoveProxy: =========

HKU.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVers ion\Internet Settings\Connections\DefaultConnectionSettings => value removed successfully.
HKU.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVers ion\Internet Settings\Connections\SavedLegacySettings => value removed successfully.
HKU\S-1-5-21-3399307451-3074549587-1771456082-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Int ernet Settings\Connections\DefaultConnectionSettings => value removed successfully.
HKU\S-1-5-21-3399307451-3074549587-1771456082-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Int ernet Settings\Connections\SavedLegacySettings => value removed successfully.

========= End of RemoveProxy: =========

========= ipconfig /flushdns =========

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========= End of CMD: =========

=========== EmptyTemp: ==========

BITS transfer queue => 4194304 B
DOMStoree, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 16572153 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 1334784 B
Edge => 0 B
Chrome => 266696313 B
Firefox => 10974102 B
Opera => 5937520 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 1346 B
LocalService => 66228 B
NetworkService => 66228 B
psimoes => 460840545 B
torrents => 0 B
Guest => 0 B

RecycleBin => 32760466 B
EmptyTemp: => 762.4 MB temporary data Removed.

================================

The system needed a reboot.

==== End of Fixlog 03:18:03 ====

**Malnutrition** · 11-18-2016, 10:53 AM

Can you tell me if there are any issues with the machine please… ?

**paulwb** · 11-18-2016, 03:37 PM

Good morning M,
The laptop had slowed somewhat after the two previous failed FRST scans, but now better after running successfully in Safe Mode.
Boot time, systray icons load fairly quickly. Browsers & programs (MS Office, & others ) open quickly. Thanks for that.

Tried to launch Windows Defender just now and got the following error message …

[ATTACH]816[/ATTACH]

**Malnutrition** · 11-18-2016, 03:52 PM

Run chkdsk /f /r from elevated command prompt.

Open the Start Menu, click on All Programs and Accessories, right click on Command Prompt, and click on Run as administrator.

[MEDIA=youtube]4feZG3LebOg[/MEDIA]

As far as windows defender, forget about it as it is useless. No need to have it on any machine, consider this a blessing. In fact you can completely remove it.

Open autoruns and untick the following items under the task scheduler tab.

“\Adobe Acrobat Update Task” “Adobe Reader and Acrobat Manager” “Adobe Systems Incorporated” “c:\program files\common files\adobe\arm\1.0\adobearm.exe” “14/12/2015 2:38 AM” “”
“\Adobe Flash Player Updater” “Adobe® Flash® Player Update Service 23.0 r0” “Adobe Systems Incorporated” “c:\windows\system32\macromed\flash\flashplayerupd ateservice.exe” “25/10/2016 9:04 PM” “”
“\CCleanerSkipUAC” “CCleaner” “Piriform Ltd” “c:\program files\ccleaner\ccleaner.exe” “16/09/2015 3:14 PM” “”
“\CrystalDiskInfo” “CrystalDiskInfo” “Crystal Dew World” “c:\users\psimoes\desktop\antiv\crystaldiskinfo6_2 _2\diskinfo.exe” “04/12/2014 8:17 PM” “”
“\GoogleUpdateTaskMachineCore” “Google Installer” “Google Inc.” “c:\program files\google\update\googleupdate.exe” “21/08/2015 9:13 PM” “”
“\GoogleUpdateTaskMachineUA” “Google Installer” “Google Inc.” “c:\program files\google\update\googleupdate.exe” “21/08/2015 9:13 PM” “”
“\GoogleUpdateTaskUserS-1-5-21-3399307451-3074549587-1771456082-1000Core” “Google Installer” “Google Inc.” “c:\users\psimoes\appdata\local\google\update\goog leupdate.exe” “21/08/2015 9:13 PM” “”
“\GoogleUpdateTaskUserS-1-5-21-3399307451-3074549587-1771456082-1000UA” “Google Installer” “Google Inc.” “c:\users\psimoes\appdata\local\google\update\goog leupdate.exe” “21/08/2015 9:13 PM” “”
“\Microsoft\Windows Defender\MP Scheduled Scan” “Windows Defender Command Line Utility” “Microsoft Corporation” “c:\program files\windows defender\mpcmdrun.exe” “19/01/2008 12:42 AM” “”
“\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task” “Windows Live Social Object Extractor Engine” “Microsoft Corporation” “c:\program files\windows live\soxe\wlsoxe.dll” “13/05/2011 5:21 PM” “”
“\Microsoft\Windows\Wired\GatherWiredInfo” “” “” “c:\windows\system32\gatherwiredinfo.vbs” “20/01/2008 9:24 PM” “”
“\Microsoft\Windows\Wireless\GatherWirelessInfo” “” “” “c:\windows\system32\gatherwirelessinfo.vbs” “20/01/2008 9:23 PM” “”
“\Opera scheduled Autoupdate 1382066025” “Opera Internet Browser” “Opera Software” “c:\program files\opera\launcher.exe” “18/07/2016 9:14 PM” “”
“\PCMAgent.exe_1826580705” “CyberLink PowerCinema Resident Program” “CyberLink Corp.” “c:\program files\cyberlink\powercinema for toshiba\pcmagent.exe” “13/12/2007 6:45 AM” “”
“\SafeZone scheduled Autoupdate 1458652480” “” “” “File not found: C:\Program Files\AVAST Software\SZBrowser\launcher.exe” “” “”
“{C074CB77-8752-4695-819D-DF00F7AAE9A6}” “” “” “File not found: c:\users\psimoes\appdata\local\google\chrome\appli cation\chrome.exe” “” “”
“{EB5A17F7-59B1-4914-80F9-8981CBF7FF0B}” “Gizmo Central” “Arainia Solutions” “c:\program files\gizmo\gizmo.exe” “07/05/2011 10:55 AM” “”

Reboot the machine and give it a defrag with ToolWhiz Defrag.

**paulwb** · 11-19-2016, 05:04 PM

Tasks below all done …

Originally posted by Malnutrition

Run chkdsk /f /r from elevated command prompt.

Open the Start Menu, click on All Programs and Accessories, right click on Command Prompt, and click on Run as administrator.

[MEDIA=youtube]4feZG3LebOg[/MEDIA]

As far as windows defender, forget about it as it is useless. No need to have it on any machine, consider this a blessing. In fact you can completely remove it.

Open autoruns and untick the following items under the task scheduler tab.

“\Adobe Acrobat Update Task” “Adobe Reader and Acrobat Manager” “Adobe Systems Incorporated” “c:\program files\common files\adobe\arm\1.0\adobearm.exe” “14/12/2015 2:38 AM” “”
“\Adobe Flash Player Updater” “Adobe® Flash® Player Update Service 23.0 r0” “Adobe Systems Incorporated” “c:\windows\system32\macromed\flash\flashplayerupd ateservice.exe” “25/10/2016 9:04 PM” “”
“\CCleanerSkipUAC” “CCleaner” “Piriform Ltd” “c:\program files\ccleaner\ccleaner.exe” “16/09/2015 3:14 PM” “”
“\CrystalDiskInfo” “CrystalDiskInfo” “Crystal Dew World” “c:\users\psimoes\desktop\antiv\crystaldiskinfo6_2 _2\diskinfo.exe” “04/12/2014 8:17 PM” “”
“\GoogleUpdateTaskMachineCore” “Google Installer” “Google Inc.” “c:\program files\google\update\googleupdate.exe” “21/08/2015 9:13 PM” “”
“\GoogleUpdateTaskMachineUA” “Google Installer” “Google Inc.” “c:\program files\google\update\googleupdate.exe” “21/08/2015 9:13 PM” “”
“\GoogleUpdateTaskUserS-1-5-21-3399307451-3074549587-1771456082-1000Core” “Google Installer” “Google Inc.” “c:\users\psimoes\appdata\local\google\update\goog leupdate.exe” “21/08/2015 9:13 PM” “”
“\GoogleUpdateTaskUserS-1-5-21-3399307451-3074549587-1771456082-1000UA” “Google Installer” “Google Inc.” “c:\users\psimoes\appdata\local\google\update\goog leupdate.exe” “21/08/2015 9:13 PM” “”
“\Microsoft\Windows Defender\MP Scheduled Scan” “Windows Defender Command Line Utility” “Microsoft Corporation” “c:\program files\windows defender\mpcmdrun.exe” “19/01/2008 12:42 AM” “”
“\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task” “Windows Live Social Object Extractor Engine” “Microsoft Corporation” “c:\program files\windows live\soxe\wlsoxe.dll” “13/05/2011 5:21 PM” “”
“\Microsoft\Windows\Wired\GatherWiredInfo” “” “” “c:\windows\system32\gatherwiredinfo.vbs” “20/01/2008 9:24 PM” “”
“\Microsoft\Windows\Wireless\GatherWirelessInfo” “” “” “c:\windows\system32\gatherwirelessinfo.vbs” “20/01/2008 9:23 PM” “”
“\Opera scheduled Autoupdate 1382066025” “Opera Internet Browser” “Opera Software” “c:\program files\opera\launcher.exe” “18/07/2016 9:14 PM” “”
“\PCMAgent.exe_1826580705” “CyberLink PowerCinema Resident Program” “CyberLink Corp.” “c:\program files\cyberlink\powercinema for toshiba\pcmagent.exe” “13/12/2007 6:45 AM” “”
“\SafeZone scheduled Autoupdate 1458652480” “” “” “File not found: C:\Program Files\AVAST Software\SZBrowser\launcher.exe” “” “”
“{C074CB77-8752-4695-819D-DF00F7AAE9A6}” “” “” “File not found: c:\users\psimoes\appdata\local\google\chrome\appli cation\chrome.exe” “” “”
“{EB5A17F7-59B1-4914-80F9-8981CBF7FF0B}” “Gizmo Central” “Arainia Solutions” “c:\program files\gizmo\gizmo.exe” “07/05/2011 10:55 AM” “”

Reboot the machine and give it a defrag with ToolWhiz Defrag.

**paulwb** · 11-19-2016, 05:09 PM

From what I’ve read, TinyWall (not Firewwall ) sits on top of Windows Firewall. But if Windows Updates don’t work, which happens often, then the firewall won’t be updated. Am I right?
Which other free firewall would you recommend?
What about free and paid Antivirus? I’m currently using Panda AV which does a good job as per https://www.av-test.org/en/antivirus...windows-vista/
Bitdefender always shows well.

**Malnutrition** · 11-21-2016, 12:53 AM

Originally posted by paulwb

But if Windows Updates don’t work, which happens often, then the firewall won’t be updated. Am I right?

No, they are two separate programs, the firewall will be just fine even if you turn windows updates off.

Originally posted by paulwb

Which other free firewall would you recommend?

Using the built in firewall is sufficient, I have used tinywall and private wall before, and they get the job done. You can control what connects to the internet through windows firewall easily.

Originally posted by paulwb

What about free and paid Antivirus?

360 Total Security
SecureAplus

Browsers Crash, Executable files stall or crash

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment