Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Installed Programs dissapearing on reboot


  • Please log in to reply
10 replies to this topic

#1 Endakd

Endakd

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:07:56 AM

Posted 08 October 2012 - 06:12 AM

Hi There,

I've several users (windows 7 & XP) who have recently discovered a problem.

After reboot, they were unable to open PDF's. I checked - and found Adobe reader gone.

It reinstalls perfectly - and then dissapears again when rebooted....

To date, I have:

Run RKill, Unhide, Malwarebytes, F-Secure (the installed antivirus on the machines). ALL come up perfectly clean - nothing at all to report.


I then ran ccleaner, just to try cleaning up the environment. Still didn't sort it, but that TOO dissapeared after reboot so it seems to be NOT limited to Acrobat reader.

This one is doing my head in!! Any help greatly appreciated....

Regards,

Enda.

BC AdBot (Login to Remove)

 


#2 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,364 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:11:56 PM

Posted 08 October 2012 - 08:24 AM

Try doing a System Restore. Choose a date prior to the date you started having this problem.

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#3 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:01:56 AM

Posted 08 October 2012 - 08:30 AM

Do you have any harddrive protection softwares installed?

Download

Autoruns

Extract and launch autoruns.exe

Allow the scan to get finished

Now click on FILE-SAVE

Filename:Autoruns.txt
Save as :Text

Paste the contents of text here

Download

mini toolbox

Checkmark following boxes:

List last 10 Event Viewer log
List Installed Programs

Click Go and post the result.

#4 Endakd

Endakd
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:07:56 AM

Posted 10 October 2012 - 07:34 AM

Thanks for all your help....

I've tried the System Restore but don't seem to be succeeding.

Re the reports, the autorun report is:

"HKLM\Software\Microsoft\Windows\CurrentVersion\Group Policy\Scripts\Startup" "" "" ""
+ "C_auditwizard_for_W7" "" "" "\\dynea.net\netlogon\aw_compatibility.vbs"
+ "CDYNEA Inventory" "" "" "\\dynea.net\sysvol\dynea.net\policies\{a669b290-6503-4d52-8215-d1df4400f972}\machine\scripts\startup\scan32_scheduler.vbs"
+ "CDYNEA NETSET" "" "" "\\dynea.net\sysvol\dynea.net\policies\{af505a8b-23a6-45cc-b389-26bc682068ab}\machine\scripts\startup\cdynea_netset.vbs"
+ "CDYNEA_Default_IE_Policy" "" "" "File not found: \\dynea.net\SysVol\dynea.net\Policies\{443870A4-3DE2-44C9-8024-79039D9DBB0E}\Machine\Scripts\Startup\CDYNEA_IE_ZONE.vbs"
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" "" "" ""
+ "HotKeysCmds" "hkcmd Module" "Intel Corporation" "c:\windows\system32\hkcmd.exe"
+ "hpsysdrv" "hpsysdrv" "Hewlett-Packard" "c:\program files (x86)\hewlett-packard\hp odometer\hpsysdrv.exe"
+ "IgfxTray" "igfxTray Module" "Intel Corporation" "c:\windows\system32\igfxtray.exe"
+ "LogMeIn GUI" "LogMeIn Desktop Application" "LogMeIn, Inc." "c:\program files (x86)\logmein\x64\logmeinsystray.exe"
+ "MfeEpePcMonitor" "McAfee Endpoint Encryption Encryption Monitor" "" "c:\program files\hewlett-packard\drive encryption\epepcmonitor.exe"
+ "Persistence" "persistence Module" "Intel Corporation" "c:\windows\system32\igfxpers.exe"
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run" "" "" ""
+ "Adobe ARM" "Adobe Reader and Acrobat Manager" "Adobe Systems Incorporated" "c:\program files (x86)\common files\adobe\arm\1.0\adobearm.exe"
+ "APSDaemon" "Apple Push" "Apple Inc." "c:\program files (x86)\common files\apple\apple application support\apsdaemon.exe"
+ "F-Secure Manager" "F-Secure Settings and Statistics" "F-Secure Corporation" "c:\program files (x86)\f-secure\common\fsm32.exe"
+ "F-Secure TNB" "TNBUtil" "F-Secure Corporation" "c:\program files (x86)\f-secure\fsgui\tnbutil.exe"
+ "File Sanitizer" "File Sanitizer for HP ProtectTools" "Hewlett-Packard" "c:\program files (x86)\hewlett-packard\file sanitizer\coreshredder.exe"
+ "HP KEYBOARDx" "HP Keyboard Kit OSD" "Hewlett-Packard" "c:\program files (x86)\hewlett-packard\hp desktop keyboard\hpkeyboardx.exe"
+ "iTunesHelper" "iTunesHelper" "Apple Inc." "c:\program files (x86)\itunes\ituneshelper.exe"
+ "PDF Complete" "Sentry for PDF" "PDF Complete Inc" "c:\program files (x86)\pdf complete\pdfsty.exe"
+ "SunJavaUpdateSched" "Java™ Update Scheduler" "Sun Microsystems, Inc." "c:\program files (x86)\common files\java\java update\jusched.exe"
+ "Tiamo BackupServer" "BackupServer starter" "Metrohm AG" "c:\program files (x86)\metrohm\tiamo\bin\backupserver.exe"
"HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components" "" "" ""
+ "Microsoft Windows" "Windows Mail" "Microsoft Corporation" "c:\program files\windows mail\winmail.exe"
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components" "" "" ""
+ "Microsoft Windows" "Windows Mail" "Microsoft Corporation" "c:\program files (x86)\windows mail\winmail.exe"
"HKLM\SOFTWARE\Classes\Protocols\Filter" "" "" ""
+ "text/xml" "Microsoft Office XML MIME Filter" "Microsoft Corporation" "c:\program files\common files\microsoft shared\office14\msoxmlmf.dll"
"HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers" "" "" ""
+ "F-Prot Shell Extension" "FSAV Shell Extension Dll" "F-Secure Corporation" "c:\program files (x86)\f-secure\common\fpshx.dll"
"HKLM\Software\Wow6432Node\Classes\*\ShellEx\ContextMenuHandlers" "" "" ""
+ "FSAV Shell Extension" "FSAV Shell Extension Dll" "F-Secure Corporation" "c:\program files (x86)\f-secure\common\fpshx.dll"
"HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers" "" "" ""
+ "MBAMShlExt" "Malwarebytes Anti-Malware" "Malwarebytes Corporation" "c:\program files (x86)\malwarebytes' anti-malware\mbamext.dll"
"HKLM\Software\Wow6432Node\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers" "" "" ""
+ "F-Prot Shell Extension" "FSAV Shell Extension Dll" "F-Secure Corporation" "c:\program files (x86)\f-secure\common\fpshx.dll"
"HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers" "" "" ""
+ "Gadgets" "Sidebar droptarget" "Microsoft Corporation" "c:\program files\windows sidebar\sbdrop.dll"
+ "igfxcui" "igfxpph Module" "Intel Corporation" "c:\windows\system32\igfxpph.dll"
"HKLM\Software\Wow6432Node\Classes\Directory\Background\ShellEx\ContextMenuHandlers" "" "" ""
+ "Gadgets" "Sidebar droptarget" "Microsoft Corporation" "c:\program files (x86)\windows sidebar\sbdrop.dll"
"HKLM\Software\Wow6432Node\Classes\Folder\Shellex\ColumnHandlers" "" "" ""
+ "PDF Shell Extension" "PDF Shell Extension" "Adobe Systems, Inc." "c:\program files (x86)\common files\adobe\acrobat\activex\pdfshell.dll"
"HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers" "" "" ""
+ "F-Prot Shell Extension" "FSAV Shell Extension Dll" "F-Secure Corporation" "c:\program files (x86)\f-secure\common\fpshx.dll"
+ "MBAMShlExt" "Malwarebytes Anti-Malware" "Malwarebytes Corporation" "c:\program files (x86)\malwarebytes' anti-malware\mbamext.dll"
"HKLM\Software\Wow6432Node\Classes\Folder\ShellEx\ContextMenuHandlers" "" "" ""
+ "FSAV Shell Extension" "FSAV Shell Extension Dll" "F-Secure Corporation" "c:\program files (x86)\f-secure\common\fpshx.dll"
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects" "" "" ""
+ "Office Document Cache Handler" "Microsoft Office Document Cache Handler" "Microsoft Corporation" "c:\program files\microsoft office\office14\urlredir.dll"
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects" "" "" ""
+ "Adobe PDF Link Helper" "Adobe PDF Helper for Internet Explorer" "Adobe Systems Incorporated" "c:\program files (x86)\common files\adobe\acrobat\activex\acroiehelpershim.dll"
+ "Bing Bar Helper" "Bing Client Extensions" "Microsoft Corporation." "c:\program files (x86)\microsoft\bingbar\bingext.dll"
+ "Browsing Protection Class" "Litmus" "F-Secure Corporation" "c:\program files (x86)\f-secure\nrs\iescript\baselitmus.dll"
+ "File Sanitizer for HP ProtectTools" "File Sanitizer for HP ProtectTools" "Hewlett-Packard" "c:\program files (x86)\hewlett-packard\file sanitizer\iebho.dll"
+ "Java™ Plug-In 2 SSV Helper" "Java™ Platform SE binary" "Sun Microsystems, Inc." "c:\program files (x86)\java\jre6\bin\jp2ssv.dll"
+ "Java™ Plug-In SSV Helper" "Java™ Platform SE binary" "Sun Microsystems, Inc." "c:\program files (x86)\java\jre6\bin\ssv.dll"
+ "Office Document Cache Handler" "Microsoft Office Document Cache Handler" "Microsoft Corporation" "c:\program files (x86)\microsoft office\office14\urlredir.dll"
"HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Toolbar" "" "" ""
+ "Bing" "Bing Client Extensions" "Microsoft Corporation." "c:\program files (x86)\microsoft\bingbar\bingext.dll"
+ "Browsing Protection Bar" "Litmus" "F-Secure Corporation" "c:\program files (x86)\f-secure\nrs\iescript\baselitmus.dll"
"HKLM\Software\Microsoft\Internet Explorer\Extensions" "" "" ""
+ "OneNote Lin&ked Notes" "Microsoft OneNote Internet Explorer Add-in" "Microsoft Corporation" "c:\program files\microsoft office\office14\onbttnielinkednotes.dll"
+ "Se&nd to OneNote" "Microsoft OneNote Internet Explorer Add-in" "Microsoft Corporation" "c:\program files\microsoft office\office14\onbttnie.dll"
"HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Extensions" "" "" ""
+ "OneNote Lin&ked Notes" "Microsoft OneNote Internet Explorer Add-in" "Microsoft Corporation" "c:\program files (x86)\microsoft office\office14\onbttnielinkednotes.dll"
+ "Se&nd to OneNote" "Microsoft OneNote Internet Explorer Add-in" "Microsoft Corporation" "c:\program files (x86)\microsoft office\office14\onbttnie.dll"
"Task Scheduler" "" "" ""
+ "\Apple\AppleSoftwareUpdate" "Apple Software Update" "Apple Inc." "c:\program files (x86)\apple software update\softwareupdate.exe"
+ "\CCleanerSkipUAC" "CCleaner" "Piriform Ltd" "c:\program files\ccleaner\ccleaner.exe"
+ "\HPCeeScheduleForquinlros" "HP Ceement" "Hewlett-Packard" "c:\program files (x86)\hewlett-packard\hp ceement\hpcee.exe"
+ "\Microsoft\Windows Defender\MP Scheduled Scan" "Microsoft Malware Protection Command Line Utility" "Microsoft Corporation" "c:\program files\windows defender\mpcmdrun.exe"
+ "\Microsoft\Windows\NetTrace\GatherNetworkInfo" "" "" "c:\windows\system32\gathernetworkinfo.vbs"
+ "\Microsoft\Windows\Windows Media Sharing\UpdateLibrary" "Windows Media Player Network Sharing Service Configuration Application" "Microsoft Corporation" "c:\program files\windows media player\wmpnscfg.exe"
"HKLM\System\CurrentControlSet\Services" "" "" ""
+ "AdobeARMservice" "Adobe Acrobat Updater keeps your Adobe software up to date." "Adobe Systems Incorporated" "c:\program files (x86)\common files\adobe\arm\1.0\armsvc.exe"
+ "AdobeFlashPlayerUpdateSvc" "This service keeps your Adobe Flash Player installation up to date with the latest enhancements and security fixes." "Adobe Systems Incorporated" "c:\windows\syswow64\macromed\flash\flashplayerupdateservice.exe"
+ "Apple Mobile Device" "Provides the interface to Apple mobile devices." "Apple Inc." "c:\program files (x86)\common files\apple\mobile device support\applemobiledeviceservice.exe"
+ "BBSvc" "Keeps Bing Bar up-to-date. Disabling this service might prevent updates and expose your computer to security vulnerabilities or functional flaws in Bing Bar." "Microsoft Corporation." "c:\program files (x86)\microsoft\bingbar\bbsvc.exe"
+ "Bonjour Service" "Enables hardware devices and software services to automatically configure themselves on the network and advertise their presence." "Apple Inc." "c:\program files\bonjour\mdnsresponder.exe"
+ "DpHost" "Provides user authentication services." "DigitalPersona, Inc." "c:\program files\hewlett-packard\hp protecttools security manager\bin\dphostw.exe"
+ "F-Secure Gatekeeper Handler Starter" "FSGKHS" "F-Secure Corporation" "c:\program files (x86)\f-secure\anti-virus\fsgk32st.exe"
+ "F-Secure Network Request Broker" "F-Secure Network Request Broker" "F-Secure Corporation" "c:\program files (x86)\f-secure\common\fnrb32.exe"
+ "FLCDLOCK" "Used by HP ProtectTools to lock devices and audit access to drives" "Hewlett-Packard Company" "c:\windows\syswow64\flcdlock.exe"
+ "FSDFWD" "F-Secure Anti-Virus Firewall Daemon" "F-Secure Corporation" "c:\program files (x86)\f-secure\fwes\program\fsdfwd.exe"
+ "FSMA" "F-Secure Management Agent" "F-Secure Corporation" "c:\program files (x86)\f-secure\common\fsma32.exe"
+ "FSORSPClient" "F-Secure ORSP Client" "F-Secure Corporation" "c:\program files (x86)\f-secure\orsp client\fsorsp.exe"
+ "GamesAppService" "WT Games App Services" "WildTangent, Inc." "c:\program files (x86)\wildtangent games\app\gamesappservice.exe"
+ "HP Support Assistant Service" "HP Support Assistant Service" "Hewlett-Packard Company" "c:\program files (x86)\hewlett-packard\hp support framework\hpsa_service.exe"
+ "HPAuto" "HP Usage Improvement Tracking" "Hewlett-Packard" "c:\program files\hewlett-packard\hp auto\hpauto.exe"
+ "HPClientSvc" "HP Client Services" "Hewlett-Packard Company" "c:\program files\hewlett-packard\hp client services\hpclientservices.exe"
+ "HPDrvMntSvc.exe" "HP Quick Synchronization Service" "Hewlett-Packard Company" "c:\program files (x86)\hewlett-packard\shared\hpdrvmntsvc.exe"
+ "HPFSService" "HPFSService Application" "Hewlett-Packard" "c:\program files (x86)\hewlett-packard\file sanitizer\hpfsservice.exe"
+ "hpqwmiex" "hpqwmiex Module" "Hewlett-Packard Company" "c:\program files (x86)\hewlett-packard\shared\hpqwmiex.exe"
+ "iPod Service" "iPod hardware management services" "Apple Inc." "c:\program files\ipod\bin\ipodservice.exe"
+ "jhi_service" "Intel® Identity Protection Technology Host Interface Service - Allows applications to access the local Intel Identity Protection Technology" "Intel Corporation" "c:\program files (x86)\intel\services\ipt\jhi_service.exe"
+ "LMIGuardianSvc" "Support LogMeIn processes with quality assurance feedback" "LogMeIn, Inc." "c:\program files (x86)\logmein\x64\lmiguardiansvc.exe"
+ "LMIMaint" "LogMeIn Maintenance Service" "LogMeIn, Inc." "c:\program files (x86)\logmein\x64\ramaint.exe"
+ "LMS" "Allows applications to access the local Intel® Management and Security Application using its locally-available selected network interfaces." "Intel Corporation" "c:\program files (x86)\intel\intel® management engine components\lms\lms.exe"
+ "LogMeIn" "LogMeIn" "LogMeIn, Inc." "c:\program files (x86)\logmein\x64\logmein.exe"
+ "McAfee Endpoint Encryption Agent" "McAfee Endpoint Encryption Agent Host Service" "" "c:\program files\hewlett-packard\drive encryption\eeagent\mfeepehost.exe"
+ "Metrohm Tiamo Admin Server" "JavaService" "Alexandria Software Consulting" "c:\program files (x86)\metrohm\tiamo\bin\madmin.exe"
+ "Metrohm Tiamo Server" "FastObjects Server 10.0" "Versant Corporation" "c:\program files (x86)\metrohm\tiamo\bin\fastobjectsserver.exe"
+ "Net Driver HPZ12" "Dot4Net Module" "Hewlett-Packard" "c:\windows\system32\hpzinw12.dll"
+ "ose" "Saves installation files used for updates and repairs and is required for the downloading of Setup updates and Watson error reports." "Microsoft Corporation" "c:\program files (x86)\common files\microsoft shared\source engine\ose.exe"
+ "osppsvc" "Office Software Protection Platform Service (unlocalized description)" "Microsoft Corporation" "c:\program files\common files\microsoft shared\officesoftwareprotectionplatform\osppsvc.exe"
+ "pdfcDispatcher" "Manages the PDF document production process. A primary task is to enable the routing of documents from the print spooler to the user. If this service is stopped, PDF documents will be unavailable." "PDF Complete Inc" "c:\program files (x86)\pdf complete\pdfsvc.exe"
+ "Pml Driver HPZ12" "PmlDrv Module" "Hewlett-Packard" "c:\windows\system32\hpzipm12.dll"
+ "SeaPort" "Enables the detection, download and installation of up-to-date configuration files for Bing Bar. Also provides server communication for the customer experience improvement program. Stopping or disabling this service may prevent you from getting the latest updates for Bing Bar, which may expose your computer to security vulnerabilities or functional flaws in the Bing Bar." "Microsoft Corporation" "c:\program files (x86)\microsoft\bingbar\seaport.exe"
+ "UNS" "Intel® Management and Security Application User Notification Service - Updates the Windows Event Log with notifications of pre defined events received from the local Intel® Management and Security Application Device." "Intel Corporation" "c:\program files (x86)\intel\intel® management engine components\uns\uns.exe"
+ "WinDefend" "Protection against spyware and potentially unwanted software" "Microsoft Corporation" "c:\program files\windows defender\mpsvc.dll"
+ "WMPNetworkSvc" "Shares Windows Media Player libraries to other networked players and media devices using Universal Plug and Play" "Microsoft Corporation" "c:\program files\windows media player\wmpnetwk.exe"
+ "XobniService" "Xobni software updates and error recovery" "Xobni Corporation" "c:\program files (x86)\xobni\xobniservice.exe"
"HKLM\System\CurrentControlSet\Services" "" "" ""
+ "adp94xx" "Adaptec Windows SAS/SATA Storport Driver" "Adaptec, Inc." "c:\windows\system32\drivers\adp94xx.sys"
+ "adpahci" "Adaptec Windows SATA Storport Driver" "Adaptec, Inc." "c:\windows\system32\drivers\adpahci.sys"
+ "adpu320" "Adaptec StorPort Ultra320 SCSI Driver (X64)" "Adaptec, Inc." "c:\windows\system32\drivers\adpu320.sys"
+ "aliide" "ALi mini IDE Driver" "Acer Laboratories Inc." "c:\windows\system32\drivers\aliide.sys"
+ "amdsata" "AHCI 1.2 Device Driver" "Advanced Micro Devices" "c:\windows\system32\drivers\amdsata.sys"
+ "amdsbs" "AMD Technology AHCI Compatible Controller Driver for Windows - AMD64 platform" "AMD Technologies Inc." "c:\windows\system32\drivers\amdsbs.sys"
+ "amdxata" "Storage Filter Driver" "Advanced Micro Devices" "c:\windows\system32\drivers\amdxata.sys"
+ "arc" "Adaptec RAID Storport Driver" "Adaptec, Inc." "c:\windows\system32\drivers\arc.sys"
+ "arcsas" "Adaptec SAS RAID WS03 Driver" "Adaptec, Inc." "c:\windows\system32\drivers\arcsas.sys"
+ "b06bdrv" "Broadcom NetXtreme II GigE VBD" "Broadcom Corporation" "c:\windows\system32\drivers\bxvbda.sys"
+ "b57nd60a" "Broadcom NetXtreme Gigabit Ethernet NDIS6.x Unified Driver." "Broadcom Corporation" "c:\windows\system32\drivers\b57nd60a.sys"
+ "BrFiltLo" "Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver" "Brother Industries, Ltd." "c:\windows\system32\drivers\brfiltlo.sys"
+ "BrFiltUp" "Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver" "Brother Industries, Ltd." "c:\windows\system32\drivers\brfiltup.sys"
+ "Brserid" "Brotehr Serial I/F Driver (WDM)" "Brother Industries Ltd." "c:\windows\system32\drivers\brserid.sys"
+ "BrSerWdm" "Brother Serial driver (WDM version)" "Brother Industries Ltd." "c:\windows\system32\drivers\brserwdm.sys"
+ "BrUsbMdm" "Brother USB MDM Driver " "Brother Industries Ltd." "c:\windows\system32\drivers\brusbmdm.sys"
+ "BrUsbSer" "Brother USB Serial Driver" "Brother Industries Ltd." "c:\windows\system32\drivers\brusbser.sys"
+ "catchme" "" "" "File not found: C:\ComboFix\catchme.sys"
+ "cmdide" "CMD PCI IDE Bus Driver" "CMD Technology, Inc." "c:\windows\system32\drivers\cmdide.sys"
+ "DAMDrv" "Device Access Manager DAMDrv" "Hewlett-Packard Company" "c:\windows\system32\drivers\damdrv64.sys"
+ "ebdrv" "Broadcom NetXtreme II 10 GigE VBD" "Broadcom Corporation" "c:\windows\system32\drivers\evbda.sys"
+ "elxstor" "Storport Miniport Driver for LightPulse HBAs" "Emulex" "c:\windows\system32\drivers\elxstor.sys"
+ "F-Secure Gatekeeper" "F-Secure Gatekeeper" "F-Secure Corporation" "c:\program files (x86)\f-secure\anti-virus\minifilter\fsgk.sys"
+ "F-Secure HIPS" "F-Secure HIPS Driver" "F-Secure Corporation" "c:\program files (x86)\f-secure\hips\drivers\fshs.sys"
+ "fsbts" "fsbts" "F-Secure Corporation" "c:\windows\system32\drivers\fsbts.sys"
+ "FSES" "F-Secure Email Scanning Driver (64 bit)" "F-Secure Corporation" "c:\windows\system32\drivers\fses.sys"
+ "FSFW" "F-Secure Internet Shield Driver (64 bit)" "F-Secure Corporation" "c:\windows\system32\drivers\fsdfw.sys"
+ "fsvista" "F-Secure Vista Support Driver" "F-Secure Corporation" "c:\program files (x86)\f-secure\anti-virus\minifilter\fsvista.sys"
+ "GEARAspiWDM" "CD DVD Filter" "GEAR Software Inc." "c:\windows\system32\drivers\gearaspiwdm.sys"
+ "hcw85cir" "Hauppauge WinTV 885 Consumer IR Driver for eHome" "Hauppauge Computer Works, Inc." "c:\windows\system32\drivers\hcw85cir.sys"
+ "HpSAMD" "Smart Array SAS/SATA Controller Media Driver" "Hewlett-Packard Company" "c:\windows\system32\drivers\hpsamd.sys"
+ "iaStor" "Intel Rapid Storage Technology driver - x64" "Intel Corporation" "c:\windows\system32\drivers\iastor.sys"
+ "iaStorV" "Intel Matrix Storage Manager driver - x64" "Intel Corporation" "c:\windows\system32\drivers\iastorv.sys"
+ "igfx" "Intel Graphics Kernel Mode Driver" "Intel Corporation" "c:\windows\system32\drivers\igdkmd64.sys"
+ "iirsp" "Intel/ICP Raid Storport Driver" "Intel Corp./ICP vortex GmbH" "c:\windows\system32\drivers\iirsp.sys"
+ "Impcd" "Intel® Turbo Boost Technology Driver" "Intel Corporation" "c:\windows\system32\drivers\impcd.sys"
+ "IntcAzAudAddService" "Realtek® High Definition Audio Function Driver" "Realtek Semiconductor Corp." "c:\windows\system32\drivers\rtkvhd64.sys"
+ "LMIInfo" "RemotelyAnywhere Kernel Information Provider" "LogMeIn, Inc." "c:\program files (x86)\logmein\x64\rainfo.sys"
+ "lmimirr" "LogMeIn Mirror Miniport Driver" "LogMeIn, Inc." "c:\windows\system32\drivers\lmimirr.sys"
+ "LMIRfsDriver" "LogMeIn Rfs Drivemap Driver" "LogMeIn, Inc." "c:\windows\system32\drivers\lmirfsdriver.sys"
+ "LSI_FC" "LSI Fusion-MPT FC Driver (StorPort)" "LSI Corporation" "c:\windows\system32\drivers\lsi_fc.sys"
+ "LSI_SAS" "LSI Fusion-MPT SAS Driver (StorPort)" "LSI Corporation" "c:\windows\system32\drivers\lsi_sas.sys"
+ "LSI_SAS2" "LSI SAS Gen2 Driver (StorPort)" "LSI Corporation" "c:\windows\system32\drivers\lsi_sas2.sys"
+ "LSI_SCSI" "LSI Fusion-MPT SCSI Driver (StorPort)" "LSI Corporation" "c:\windows\system32\drivers\lsi_scsi.sys"
+ "megasas" "MEGASAS RAID Controller Driver for Windows 7\Server 2008 R2 for x64" "LSI Corporation" "c:\windows\system32\drivers\megasas.sys"
+ "MegaSR" "LSI MegaRAID Software RAID Driver" "LSI Corporation, Inc." "c:\windows\system32\drivers\megasr.sys"
+ "MEIx64" "Intel® Management Engine Interface" "Intel Corporation" "c:\windows\system32\drivers\hecix64.sys"
+ "metr_770_x64" "Metrohm USB Driver" "Metrohm International Headquarters" "c:\windows\system32\drivers\metr_770_x64.sys"
+ "MfeEpeOpal" "McAfee, Inc." "McAfee, Inc." "c:\windows\system32\drivers\mfeepeopal.sys"
+ "MfeEpePc" "McAfee, Inc." "McAfee, Inc." "c:\windows\system32\drivers\mfeepepc.sys"
+ "nfrd960" "IBM ServeRAID Controller Driver" "IBM Corporation" "c:\windows\system32\drivers\nfrd960.sys"
+ "nvraid" "NVIDIA® nForce™ RAID Driver" "NVIDIA Corporation" "c:\windows\system32\drivers\nvraid.sys"
+ "nvstor" "NVIDIA® nForce™ Sata Performance Driver" "NVIDIA Corporation" "c:\windows\system32\drivers\nvstor.sys"
+ "OxPPort" "Device Driver for Parallel Port" "OEM" "c:\windows\system32\drivers\oxpport.sys"
+ "OxSer" "Device Driver for Serial Ports" "OEM" "c:\windows\system32\drivers\oxser.sys"
+ "pmxdrv" "" "" "c:\windows\system32\drivers\pmxdrv.sys"
+ "ql2300" "QLogic Fibre Channel Stor Miniport Driver" "QLogic Corporation" "c:\windows\system32\drivers\ql2300.sys"
+ "ql40xx" "QLogic iSCSI Storport Miniport Driver" "QLogic Corporation" "c:\windows\system32\drivers\ql40xx.sys"
+ "RTL8167" "Realtek 8136/8168/8169 NDIS 6.20 64-bit Driver " "Realtek " "c:\windows\system32\drivers\rt64win7.sys"
+ "secdrv" "Macrovision SECURITY Driver" "Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K." "c:\windows\system32\drivers\secdrv.sys"
+ "SiSRaid2" "SiS RAID Stor Miniport Driver" "Silicon Integrated Systems Corp." "c:\windows\system32\drivers\sisraid2.sys"
+ "SiSRaid4" "SiS AHCI Stor-Miniport Driver" "Silicon Integrated Systems" "c:\windows\system32\drivers\sisraid4.sys"
+ "stexstor" "Promise SuperTrak EX Series Driver for Windows " "Promise Technology" "c:\windows\system32\drivers\stexstor.sys"
+ "StnSport" "Serial driver for PCI-Express Serial Port." "" "c:\windows\system32\drivers\stnsport.sys"
+ "truecrypt" "TrueCrypt Driver" "TrueCrypt Foundation" "c:\windows\system32\drivers\truecrypt.sys"
+ "viaide" "VIA Generic PCI IDE Bus Driver" "VIA Technologies, Inc." "c:\windows\system32\drivers\viaide.sys"
+ "vsmraid" "VIA RAID DRIVER FOR AMD-X86-64" "VIA Technologies Inc.,Ltd" "c:\windows\system32\drivers\vsmraid.sys"
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32" "" "" ""
+ "msacm.l3acm" "MPEG Layer-3 Audio Codec for MSACM" "Fraunhofer Institut Integrierte Schaltungen IIS" "c:\windows\system32\l3codeca.acm"
"HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Drivers32" "" "" ""
+ "msacm.l3acm" "MPEG Layer-3 Audio Codec for MSACM" "Fraunhofer Institut Integrierte Schaltungen IIS" "c:\windows\syswow64\l3codeca.acm"
+ "vidc.cvid" "Cinepak® Codec" "Radius Inc." "c:\windows\syswow64\iccvid.dll"
"HKLM\Software\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance" "" "" ""
+ "LogMeIn Video Decoder" "LogMeIn Video Codec" "LogMeIn, Inc." "c:\program files (x86)\logmein\x64\racodec.ax"
+ "LogMeIn Video Encoder" "LogMeIn Video Codec" "LogMeIn, Inc." "c:\program files (x86)\logmein\x64\racodec.ax"
+ "MS PR Source Filter" "PlayReady DirectShow Source Filter DLL" "Microsoft Corporation" "c:\program files\playready\prsource.dll"
+ "PlayReady DMO Wrapper" "PlayReady DirectShow DMO Wrapper Filter DLL" "Microsoft Corporation" "c:\program files\playready\prdmowrapper.dll"
"HKLM\Software\Wow6432Node\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance" "" "" ""
+ "CyberLink Audio Noise Reduction" "CLAuNR" "CyberLink Corp." "c:\program files (x86)\cyberlink\power2go\p2gaunrwrapper.ax"
+ "CyberLink Audio Resampler" "CLAuRsmpl.ax" "CyberLink Corp." "c:\program files (x86)\cyberlink\power2go\p2gaursmpl.ax"
+ "CyberLink Audio VolumeBooster" "CyberLink Audio Volume Booster Filter" "CyberLink Corp." "c:\program files (x86)\cyberlink\power2go\p2gvb.ax"
+ "CyberLink AudioCD Filter" "CyberLink AudioCD Filter" "CyberLink Corp." "c:\program files (x86)\cyberlink\power2go\p2gaudiocd.ax"
+ "Cyberlink Dump Dispatch Filter" "Cyberlink File Dump Dispatch Filter" "CyberLink Corp." "c:\program files (x86)\cyberlink\power2go\p2gdumpdispatch.ax"
+ "Cyberlink Dump Filter" "Cyberlink File Dump Filter" "CyberLink Corp." "c:\program files (x86)\cyberlink\power2go\p2gdump.ax"
+ "CyberLink Editing Service 3.0 (Source)" "CES Kernel" "CyberLink Corp." "c:\program files (x86)\cyberlink\power2go\p2gedtkrn.dll"
+ "Cyberlink File Reader (Async.)" "Cyberlink MPEG File Reader" "CyberLink Corp." "c:\program files (x86)\cyberlink\power2go\p2greader.ax"
+ "CyberLink Load Image Filter" "CLImage" "CyberLink" "c:\program files (x86)\cyberlink\shared files\climage.ax"
+ "CyberLink M2V Writer" "CLM2VWriter" "CyberLink" "c:\program files (x86)\cyberlink\power2go\p2gm2vwriter.ax"
+ "CyberLink MP3/WAV Wrapper" "CyberLink MP3 Wrapper" "CyberLink Corp." "c:\program files (x86)\cyberlink\power2go\p2gmp3wrap.ax"
+ "CyberLink MPEG Decoder" "CyberLink Video/SP Filter" "CyberLink Corp." "c:\program files (x86)\cyberlink\power2go\p2gmvd.ax"
+ "CyberLink MPEG Muxer" "MpgMux" "CyberLink" "c:\program files (x86)\cyberlink\power2go\p2gmpgmux.ax"
+ "CyberLink MPEG Video Encoder" "CyberLink MPEG Video Encoder " "CyberLink Corp. " "c:\program files (x86)\cyberlink\power2go\p2gvidenc.ax"
+ "CyberLink MPEG-1 Splitter" "CyberLink MPEG Splitter" "CyberLink Corp." "c:\program files (x86)\cyberlink\power2go\p2gm1spliter.ax"
+ "CyberLink MPEG-2 Splitter" "CyberLink MPEG Splitter" "CyberLink Corp." "c:\program files (x86)\cyberlink\power2go\p2gm2spliter.ax"
+ "CyberLink PCM Wrapper" "CyberLink PCM Wrapper" "CyberLink Corp." "c:\program files (x86)\cyberlink\power2go\p2gpcmenc.ax"
+ "CyberLink TimeStretch Filter (CES)" "CLAuTS.ax" "CyberLink Corp." "c:\program files (x86)\cyberlink\power2go\p2gauts.ax"
+ "CyberLink TL MPEG Splitter" "CyberLink MPEG Splitter" "CyberLink Corp." "c:\program files (x86)\cyberlink\power2go\p2gtlmsplter.ax"
+ "CyberLink Video Effect" "CLVidFx" "CyberLink" "c:\program files (x86)\cyberlink\power2go\p2gvidfx.ax"
+ "CyberLink Video Regulator" "CLRGL" "Cyberlink" "c:\program files (x86)\cyberlink\power2go\p2grgl.ax"
+ "CyberLink Video Stabilizer" "CLVideoDeShaking" "CyberLink" "c:\program files (x86)\cyberlink\power2go\p2gvideostabilizer.ax"
+ "LogMeIn Video Decoder" "LogMeIn Video Codec" "LogMeIn, Inc." "c:\program files (x86)\logmein\x86\racodec.ax"
+ "LogMeIn Video Encoder" "LogMeIn Video Codec" "LogMeIn, Inc." "c:\program files (x86)\logmein\x86\racodec.ax"
+ "P2G Audio Decoder" "CyberLink Audio Decoder Filter" "CyberLink Corp." "c:\program files (x86)\cyberlink\power2go\p2gaud.ax"
+ "P2G Audio Encoder" "CyberLink Audio Encoder Filter" "Cyberlink Corp." "c:\program files (x86)\cyberlink\power2go\p2gaudenc.ax"
+ "P2G Video Decoder" "CyberLink Video/SP Filter" "CyberLink Corp." "c:\program files (x86)\cyberlink\power2go\p2gvsd.ax"
+ "P2G Video Regulator" "CyberLink Video Regulator" "CyberLink" "c:\program files (x86)\cyberlink\power2go\p2gresample.ax"
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options" "" "" ""
+ "ehshell.exe" "LogMeIn Desktop Application" "LogMeIn, Inc." "c:\program files (x86)\logmein\x64\logmeinsystray.exe"
"HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options" "" "" ""
+ "ehshell.exe" "LogMeIn Desktop Application" "LogMeIn, Inc." "c:\program files (x86)\logmein\x64\logmeinsystray.exe"
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers" "" "" ""
+ "LogMeInCredProv" "LogMeIn Remote Control Helper" "LogMeIn, Inc." "c:\windows\system32\lmiinit.dll"
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify" "" "" ""
+ "igfxcui" "igfxdev Module" "Intel Corporation" "c:\windows\system32\igfxdev.dll"
"HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries" "" "" ""
+ "mdnsNSP" "Bonjour Namespace Provider" "Apple Inc." "c:\program files (x86)\bonjour\mdnsnsp.dll"
"HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64" "" "" ""
+ "mdnsNSP" "Bonjour Namespace Provider" "Apple Inc." "c:\program files\bonjour\mdnsnsp.dll"
"HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors" "" "" ""
+ "HP Universal Print Monitor" "hpmpw081.dll" "Hewlett-Packard" "c:\windows\system32\hpmpw081.dll"
+ "HPPMOPJL" "Language Monitor for USB composite devices" "Hewlett-Packard Company" "c:\windows\system32\hppmopjl.dll"
+ "LogMeIn Printer Port Monitor" "RemotelyAnywhere Printer Port Monitor" "LogMeIn, Inc." "c:\windows\system32\lmiport.dll"
+ "PDFC" "PDF Complete Print Monitor" "PDF Complete, Inc." "c:\windows\system32\pdfc_port.dll"
"HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Notification Packages" "" "" ""
+ "DPPassFilter" "Password Filter" "DigitalPersona, Inc." "c:\windows\system32\dppassfilter.dll"
"HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order" "" "" ""
+ "LMIRfsClientNP" "LogMeIn Virtual Disk Network" "LogMeIn, Inc." "c:\windows\system32\lmirfsclientnp.dll"
+ "MfeEpePcNP" "McAfee Endpoint Encryption for PC Network Provider" "" "c:\program files\hewlett-packard\drive encryption\epepcnp64.dll"


The Minitoolbox Report is:

MiniToolBox by Farbar Version: 23-07-2012
Ran by quinlros (administrator) on 10-10-2012 at 13:30:05
Microsoft Windows 7 Professional Service Pack 1 (X64)
Boot Mode: Normal
***************************************************************************

========================= Event log errors: ===============================

Application errors:
==================
Error: (10/08/2012 09:48:48 AM) (Source: MsiInstaller) (User: DYNEANET)DYNEANET
Description: Product: iTunes -- This iTunes installer is intended for 32-bit versions of Windows. Please download and install the 64-bit iTunes installer instead.

Error: (10/04/2012 09:10:40 AM) (Source: Application Error) (User: )
Description: Faulting application name: iexplore.exe, version: 8.0.7601.17514, time stamp: 0x4ce79912
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x164415ff
Faulting process id: 0x1a70
Faulting application start time: 0xiexplore.exe0
Faulting application path: iexplore.exe1
Faulting module path: iexplore.exe2
Report Id: iexplore.exe3

Error: (10/04/2012 09:10:37 AM) (Source: Application Error) (User: )
Description: Faulting application name: iexplore.exe, version: 8.0.7601.17514, time stamp: 0x4ce79912
Faulting module name: SeaNote.dll_unloaded, version: 0.0.0.0, time stamp: 0x4d55f072
Exception code: 0xc0000005
Fault offset: 0x71620fd0
Faulting process id: 0x107c
Faulting application start time: 0xiexplore.exe0
Faulting application path: iexplore.exe1
Faulting module path: iexplore.exe2
Report Id: iexplore.exe3

Error: (10/01/2012 01:16:48 PM) (Source: Application Error) (User: )
Description: Faulting application name: iexplore.exe, version: 8.0.7601.17514, time stamp: 0x4ce79912
Faulting module name: ntdll.dll, version: 6.1.7601.17725, time stamp: 0x4ec49b8f
Exception code: 0xc0000374
Fault offset: 0x000ce6c3
Faulting process id: 0x1030
Faulting application start time: 0xiexplore.exe0
Faulting application path: iexplore.exe1
Faulting module path: iexplore.exe2
Report Id: iexplore.exe3

Error: (09/28/2012 01:15:35 PM) (Source: Application Hang) (User: )
Description: The program iexplore.exe version 8.0.7601.17514 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 7b0

Start Time: 01cd9d72a37d6c58

Termination Time: 15

Application Path: C:\Program Files (x86)\Internet Explorer\iexplore.exe

Report Id: 30127740-0966-11e2-9fca-2c4138b830de

Error: (09/28/2012 00:37:21 PM) (Source: Application Error) (User: )
Description: Faulting application name: iexplore.exe, version: 8.0.7601.17514, time stamp: 0x4ce79912
Faulting module name: ntdll.dll, version: 6.1.7601.17725, time stamp: 0x4ec49b8f
Exception code: 0xc0000374
Fault offset: 0x000ce6c3
Faulting process id: 0x678
Faulting application start time: 0xiexplore.exe0
Faulting application path: iexplore.exe1
Faulting module path: iexplore.exe2
Report Id: iexplore.exe3

Error: (09/28/2012 00:17:43 PM) (Source: Application Error) (User: )
Description: Faulting application name: iexplore.exe, version: 8.0.7601.17514, time stamp: 0x4ce79912
Faulting module name: ntdll.dll, version: 6.1.7601.17725, time stamp: 0x4ec49b8f
Exception code: 0xc0000374
Fault offset: 0x000ce6c3
Faulting process id: 0x181c
Faulting application start time: 0xiexplore.exe0
Faulting application path: iexplore.exe1
Faulting module path: iexplore.exe2
Report Id: iexplore.exe3

Error: (09/28/2012 00:17:28 PM) (Source: Application Error) (User: )
Description: Faulting application name: iexplore.exe, version: 8.0.7601.17514, time stamp: 0x4ce79912
Faulting module name: ntdll.dll, version: 6.1.7601.17725, time stamp: 0x4ec49b8f
Exception code: 0xc0000374
Fault offset: 0x000ce6c3
Faulting process id: 0xce0
Faulting application start time: 0xiexplore.exe0
Faulting application path: iexplore.exe1
Faulting module path: iexplore.exe2
Report Id: iexplore.exe3

Error: (09/28/2012 11:06:34 AM) (Source: Application Error) (User: )
Description: Faulting application name: iexplore.exe, version: 8.0.7601.17514, time stamp: 0x4ce79912
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x39010038
Faulting process id: 0x424
Faulting application start time: 0xiexplore.exe0
Faulting application path: iexplore.exe1
Faulting module path: iexplore.exe2
Report Id: iexplore.exe3

Error: (09/28/2012 11:04:50 AM) (Source: Application Error) (User: )
Description: Faulting application name: iexplore.exe, version: 8.0.7601.17514, time stamp: 0x4ce79912
Faulting module name: ntdll.dll, version: 6.1.7601.17725, time stamp: 0x4ec49b8f
Exception code: 0xc0000374
Fault offset: 0x000ce6c3
Faulting process id: 0x1980
Faulting application start time: 0xiexplore.exe0
Faulting application path: iexplore.exe1
Faulting module path: iexplore.exe2
Report Id: iexplore.exe3


System errors:
=============
Error: (10/10/2012 01:22:18 PM) (Source: DCOM) (User: DYNEANET)
Description: machine-defaultLocalActivation{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}DYNEANETQUINLROSS-1-5-21-2833448585-3065204916-914441445-4763LocalHost (Using LRPC)

Error: (10/10/2012 01:22:17 PM) (Source: DCOM) (User: DYNEANET)
Description: machine-defaultLocalActivation{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}DYNEANETQUINLROSS-1-5-21-2833448585-3065204916-914441445-4763LocalHost (Using LRPC)

Error: (10/10/2012 00:22:02 PM) (Source: Application Management Group Policy) (User: NT AUTHORITY)
Description: The removal of the assignment of application Snow Inventory Client (64-bit) from policy CIECOR SWDIST Snow Software x64 failed. The error was : %%2

Error: (10/10/2012 10:43:00 AM) (Source: Application Management Group Policy) (User: NT AUTHORITY)
Description: The removal of the assignment of application Snow Inventory Client (64-bit) from policy CIECOR SWDIST Snow Software x64 failed. The error was : %%2

Error: (10/10/2012 08:59:59 AM) (Source: Application Management Group Policy) (User: NT AUTHORITY)
Description: The removal of the assignment of application Snow Inventory Client (64-bit) from policy CIECOR SWDIST Snow Software x64 failed. The error was : %%2

Error: (10/10/2012 07:27:57 AM) (Source: Application Management Group Policy) (User: NT AUTHORITY)
Description: The removal of the assignment of application Snow Inventory Client (64-bit) from policy CIECOR SWDIST Snow Software x64 failed. The error was : %%2

Error: (10/10/2012 05:44:56 AM) (Source: Application Management Group Policy) (User: NT AUTHORITY)
Description: The removal of the assignment of application Snow Inventory Client (64-bit) from policy CIECOR SWDIST Snow Software x64 failed. The error was : %%2

Error: (10/10/2012 04:14:54 AM) (Source: Application Management Group Policy) (User: NT AUTHORITY)
Description: The removal of the assignment of application Snow Inventory Client (64-bit) from policy CIECOR SWDIST Snow Software x64 failed. The error was : %%2

Error: (10/10/2012 02:40:52 AM) (Source: Application Management Group Policy) (User: NT AUTHORITY)
Description: The removal of the assignment of application Snow Inventory Client (64-bit) from policy CIECOR SWDIST Snow Software x64 failed. The error was : %%2

Error: (10/10/2012 00:43:50 AM) (Source: Application Management Group Policy) (User: NT AUTHORITY)
Description: The removal of the assignment of application Snow Inventory Client (64-bit) from policy CIECOR SWDIST Snow Software x64 failed. The error was : %%2


Microsoft Office Sessions:
=========================
Error: (10/08/2012 09:48:48 AM) (Source: MsiInstaller)(User: DYNEANET)DYNEANET
Description: Product: iTunes -- This iTunes installer is intended for 32-bit versions of Windows. Please download and install the 64-bit iTunes installer instead.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (10/04/2012 09:10:40 AM) (Source: Application Error)(User: )
Description: iexplore.exe8.0.7601.175144ce79912unknown0.0.0.000000000c0000005164415ff1a7001cda207baf67a84C:\Program Files (x86)\Internet Explorer\iexplore.exeunknownfc07d868-0dfa-11e2-97fb-2c4138b830de

Error: (10/04/2012 09:10:37 AM) (Source: Application Error)(User: )
Description: iexplore.exe8.0.7601.175144ce79912SeaNote.dll_unloaded0.0.0.04d55f072c000000571620fd0107c01cda20709bd3f7bC:\Program Files (x86)\Internet Explorer\iexplore.exeSeaNote.dllfa2bc6f8-0dfa-11e2-97fb-2c4138b830de

Error: (10/01/2012 01:16:48 PM) (Source: Application Error)(User: )
Description: iexplore.exe8.0.7601.175144ce79912ntdll.dll6.1.7601.177254ec49b8fc0000374000ce6c3103001cd9fc162c2e34eC:\Program Files (x86)\Internet Explorer\iexplore.exeC:\Windows\SysWOW64\ntdll.dlldf5995ed-0bc1-11e2-996c-2c4138b830de

Error: (09/28/2012 01:15:35 PM) (Source: Application Hang)(User: )
Description: iexplore.exe8.0.7601.175147b001cd9d72a37d6c5815C:\Program Files (x86)\Internet Explorer\iexplore.exe30127740-0966-11e2-9fca-2c4138b830de

Error: (09/28/2012 00:37:21 PM) (Source: Application Error)(User: )
Description: iexplore.exe8.0.7601.175144ce79912ntdll.dll6.1.7601.177254ec49b8fc0000374000ce6c367801cd9d6d8412e85bC:\Program Files (x86)\Internet Explorer\iexplore.exeC:\Windows\SysWOW64\ntdll.dlldd5d3a98-0960-11e2-9fca-2c4138b830de

Error: (09/28/2012 00:17:43 PM) (Source: Application Error)(User: )
Description: iexplore.exe8.0.7601.175144ce79912ntdll.dll6.1.7601.177254ec49b8fc0000374000ce6c3181c01cd9d6ad99c5704C:\Program Files (x86)\Internet Explorer\iexplore.exeC:\Windows\SysWOW64\ntdll.dll1ec96f62-095e-11e2-9fca-2c4138b830de

Error: (09/28/2012 00:17:28 PM) (Source: Application Error)(User: )
Description: iexplore.exe8.0.7601.175144ce79912ntdll.dll6.1.7601.177254ec49b8fc0000374000ce6c3ce001cd9d64e9fe7f6aC:\Program Files (x86)\Internet Explorer\iexplore.exeC:\Windows\SysWOW64\ntdll.dll15b69984-095e-11e2-9fca-2c4138b830de

Error: (09/28/2012 11:06:34 AM) (Source: Application Error)(User: )
Description: iexplore.exe8.0.7601.175144ce79912unknown0.0.0.000000000c00000053901003842401cd9d60b4710542C:\Program Files (x86)\Internet Explorer\iexplore.exeunknown2e2befb0-0954-11e2-9fca-2c4138b830de

Error: (09/28/2012 11:04:50 AM) (Source: Application Error)(User: )
Description: iexplore.exe8.0.7601.175144ce79912ntdll.dll6.1.7601.177254ec49b8fc0000374000ce6c3198001cd9d5ebacc74f3C:\Program Files (x86)\Internet Explorer\iexplore.exeC:\Windows\SysWOW64\ntdll.dllf035970e-0953-11e2-9fca-2c4138b830de


=========================== Installed Programs ============================

64 Bit HP CIO Components Installer (Version: 8.2.4)
Adobe AIR (Version: 2.6.0.19120)
Adobe Flash Player 11 ActiveX (Version: 11.4.402.287)
Adobe Reader X (10.1.4) (Version: 10.1.4)
Agatha Christie - Peril at End House (Version: 2.2.0.95)
Apple Application Support (Version: 2.1.9)
Apple Mobile Device Support (Version: 5.2.0.6)
Apple Software Update (Version: 2.1.3.127)
Bejeweled 3 (Version: 2.2.0.97)
Bing Bar (Version: 7.0.610.0)
Blasterball 3 (Version: 2.2.0.97)
Bonjour (Version: 3.0.0.10)
Bounce Symphony (Version: 2.2.0.97)
Cake Mania (Version: 2.2.0.95)
CCleaner (Version: 3.23)
Chronicles of Albian (Version: 2.2.0.95)
Chuzzle Deluxe (Version: 2.2.0.95)
Cradle of Rome 2 (Version: 2.2.0.95)
Definition update for Microsoft Office 2010 (KB982726)
Device Access Manager for HP ProtectTools (Version: 6.0.0.12)
DirectX for Managed Code Update (Summer 2004) (Version: 9.02.2904)
Drive Encryption For HP ProtectTools (Version: 6.0.79.26218)
F-Secure Browsing Protection
F-Secure Client Security - DeepGuard
F-Secure Client Security - E-Mail Scanning
F-Secure Client Security - Virus & Spy Protection
F-Secure Client Security - Web Traffic Scanning
F-Secure Client Security 9.20 (Version: 9.20)
Farm Frenzy (Version: 2.2.0.95)
FATE (Version: 2.2.0.97)
File Sanitizer For HP ProtectTools (Version: 6.0.0.13)
Governor of Poker 2 Premium Edition (Version: 2.2.0.95)
Hewlett-Packard ACLM.NET v1.1.2.0 (Version: 1.00.0000)
HP Auto (Version: 1.0.12935.3667)
HP Client Services (Version: 1.1.12938.3539)
HP Connect Solutions (Version: 1.0.0.4)
HP Customer Experience Enhancements (Version: 6.0.1.7)
HP Desktop Keyboard (Version: 1.0.0.13)
HP Games (Version: 1.0.2.5)
HP Odometer (Version: 2.10.0000)
HP ProtectTools Security Manager (Version: 6.03.959)
HP Setup (Version: 8.5.4526.3645)
HP Setup Manager (Version: 1.1.13880.3792)
HP Support Assistant (Version: 6.1.12.1)
HP Support Information (Version: 10.1.1000)
HP Vision Hardware Diagnostics (Version: 2.9.0.0)
Intel® Control Center (Version: 1.2.1.1007)
Intel® Identity Protection Technology 1.1.2.0 (Version: 1.1.2.0)
Intel® Management Engine Components (Version: 7.0.0.1144)
Intel® Processor Graphics (Version: 8.15.10.2291)
iTunes (Version: 10.6.3.25)
Java Auto Updater (Version: 2.0.7.1)
Java™ 6 Update 35 (Version: 6.0.350)
Jewel Quest Solitaire (Version: 2.2.0.95)
Jewel Quest: The Sleepless Star - Collector's Edition (Version: 2.2.0.95)
Kobo (Version: 1.6)
LabelPrint (Version: 2.5.3925)
LogMeIn (Version: 4.1.2504)
Mah Jong Medley (Version: 2.2.0.95)
Malwarebytes Anti-Malware version 1.65.0.1400 (Version: 1.65.0.1400)
Metrohm tiamo 2.3 (Version: 2.3)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Office 2010 Service Pack 1 (SP1)
Microsoft Office Access MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Access Setup Metadata MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Excel MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Home and Business 2010 (Version: 14.0.6029.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Outlook MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (Spanish) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proofing (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared 64-bit MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared Setup Metadata MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Single Image 2010 (Version: 14.0.6029.1000)
Microsoft Office Word MUI (English) 2010 (Version: 14.0.6029.1000)
Microsoft Silverlight (Version: 4.1.10329.0)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft_VC90_CRT_x86 (Version: 1.0.0)
Mystery of Mortlake Mansion (Version: 2.2.0.97)
Namco All-Stars: PAC-MAN (Version: 2.2.0.95)
PDF Complete Special Edition (Version: 4.0.54)
Penguins! (Version: 2.2.0.95)
Plants vs. Zombies - Game of the Year (Version: 2.2.0.95)
PlayReady PC Runtime amd64 (Version: 1.3.0)
Polar Bowler (Version: 2.2.0.97)
Power2Go (Version: 6.1.5331)
PressReader (Version: 5.10.1217.0)
Realtek High Definition Audio Driver (Version: 6.0.1.6387)
Recovery Manager (Version: 5.5.0.4222)
Slingo Deluxe (Version: 2.2.0.95)
TrueCrypt (Version: 7.1a)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Update for Microsoft Office 2010 (KB2553065)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553272) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition
Update for Microsoft Office 2010 (KB2566458)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition
Update for Microsoft Office 2010 (KB2598289) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2589345) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2553248) 32-Bit Edition
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition
Update Installer for WildTangent Games App
Vacation Quest - The Hawaiian Islands (Version: 2.2.0.97)
VIP Access SDK (1.0.1.4) (Version: 1.0.1.4)
Virtual Villagers - The Secret City (Version: 2.2.0.95)
WildTangent Games App (HP Games) (Version: 4.0.5.2)
Xobni (Version: 1.9.5.13499)
Xobni Core (Version: 1.0.0)
Zinio Reader 4 (Version: 4.2.4164)
Zuma Deluxe (Version: 2.2.0.95)

**** End of log ****


Thanks in advance!

Enda.

#5 chrisd87

chrisd87

  • Members
  • 811 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NC
  • Local time:01:56 AM

Posted 10 October 2012 - 07:53 AM

try this and see if it'll help.

Go to Control Panel > Under System and Security, click on Action Center up top. Then click on Maintenance, then click on change troubleshooting settings. Click the off button to turn off Computer Maintenance. I know sometimes that will mess up system icons because windows thinks there broken and will delete them.

Also you can try this as well to see if it'll help you.


1. Activate icons by right clicking on desktop, selecting view and un-ticking 'show desktop icons', repeat steps and tick 'show desktop icons'
2. Right click on desktop and select properties.
3. Select change desktop icons. select everything and click ok.
4. Repeat step 1
5. Reboot
6. Repeat step 1
7. Repeat steps 2 and 3 this time removing everything except recycle bin
8. Reboot and it your icons should be there.

"Like car accidents, most hardware problems are due to driver ɹoɹɹǝ."

 


#6 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:01:56 AM

Posted 10 October 2012 - 08:51 AM

I've several users (windows 7 & XP) who have recently discovered a problem.


Did you install any softwares?

When did you install Truecrypt?

When did you enable mcafee endpoint encryption ? I guess this came as part of HP protect tools

"MfeEpePcMonitor" "McAfee Endpoint Encryption Encryption Monitor" "" "c:\program files\hewlett-packard\drive encryption\epepcmonitor.exe"


#7 Endakd

Endakd
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:07:56 AM

Posted 10 October 2012 - 09:56 AM

Thanks for all the ongoing help...

chrisd87 - tried all your ideas - without success I'm afraid...

narenxp - no new software added. Truecrypt was on the machine long before this issue occurred. Yes, Mcafee endpoint protection is part of the HP protect tools, I reckon. It certainly wasn't seperately installed.....

Getting more baffling :blink:

Enda.

#8 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:01:56 AM

Posted 10 October 2012 - 09:59 AM

Disable mcafee endpoint protection.Reboot the PC and let us know if that allows making changes to your harddrive.

#9 Endakd

Endakd
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:07:56 AM

Posted 10 October 2012 - 10:43 AM

Have now disabled all the HP "Utilites" and rebooted.

Still the same I'm afraid....

Enda.

#10 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:01:56 AM

Posted 10 October 2012 - 11:09 AM

Only other thing i can think of is to disable F-Secure and see if that helps.

If that doesnt work,try a clean boot

http://www.askdrtech.com/solutions/post/How-to-perform-a-clean-startup-%28clean-boot%29-in-Windows-7.aspx

Let me know how it goes.

Edited by narenxp, 10 October 2012 - 11:10 AM.


#11 Papakid

Papakid

    Guru at being a Newbie


  • Malware Response Team
  • 6,584 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:56 AM

Posted 10 October 2012 - 09:09 PM

Hi Enda,
I've been having somewhat similar problems on a new PC so if you don't mind, please answer some questions for me and I might be able to help which in turn would help me to troubleshoot as well--assuming that disabling F-Secure and a clean boot haven't worked for you. So please let us know how that went and then I have a couple of ideas of what it might be that we can work on.

1. When you reinstall Adobe Reader, are you uninstalling it first or just installing again "over the top"?

2. When you say you found it gone, what did you check? Are there no icons in the start menu and on the desktop that would allow you to open the Reader without opening a PDF file? Did you also check if there is a Reader folder in Program Files and did you check in Control Panel's uninstall feature to see if there was an icon for it there? The reason I ask is because the data you've submitted says both Reader and CCleaner are installed.

3. In a similar vein to the last question, how are you verifying that the ideas you've received so far haven't worked? Are you trying to open PDF files or are you missing shortcut icons and/or program folder files? Or are you reinstalling, then rebooting and after that finding the shortcuts icons and/or program files gone?

4. Any other programs besides Adobe Reader and CCleaner? Any other problems that are similar, such as failure to save changes such as new folders/files or typed in data that disappears after a reboot?

5. What type of processor are you using--Intel, AMD, etc.?

6. You mention users and machines in the plural and XP along with Windows 7. Could you give me a better idea of the environment you're in? Home network, business office, etc. We have to make certain assumptions, but assumptions are tricky things so I like to be as specific with the details as much as possible and practical. How many machines are we talking about and which are which operating system?

7. As a continuation of the last question, is the data submitted above from your own personal machine? If not please explain, but since it is Windows 7 I am going to assume we are working on that operating system. And is this machine where the problem was first noticed?

Thanks, and good luck.

The fate of all mankind, I see

Is in the hands of fools

--King Crimson





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users