Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Periodic BSOD


  • Please log in to reply
14 replies to this topic

#1 tina107

tina107

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:10:36 AM

Posted 27 December 2013 - 05:17 PM

Hello all,

Every few weeks I get a BSOD. Please tell me what I can do to stop this or do I need a new computer? I'm only slightly computer savvy. 

 

Problem signature:
  Problem Event Name: BlueScreen
  OS Version: 6.1.7601.2.1.0.256.48
  Locale ID: 1033
 
Additional information about the problem:
  BCCode: 7a
  BCP1: FFFFF6FC50020B30
  BCP2: FFFFFFFFC0000185
  BCP3: 0000000016CE6820
  BCP4: FFFFF8A004166174
  OS Version: 6_1_7601
  Service Pack: 1_0
  Product: 256_1
 
Files that help describe the problem:
  C:\Windows\Minidump\122713-21590-01.dmp
  C:\Users\Shannon\AppData\Local\Temp\WER-69498-0.sysdata.xml
 
Thanks for any help.

Edited by hamluis, 30 December 2013 - 09:03 AM.
Moved from Win 7 to Am I Infected - Hamluis.


BC AdBot (Login to Remove)

 


#2 KingdomSeeker

KingdomSeeker

  • Members
  • 458 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:36 PM

Posted 27 December 2013 - 05:55 PM

Hi there, could you please provide us information on your computer and a copy of the dmp file?

 

Please Publish a Snapshot using Speccy - http://www.bleepingcomputer.com/forums/topic323892.html/page__p__1797792#entry1797792 , taking care to post the link of the snapshot in your next post.
 

Please download Mini Toolbox  MiniToolBox  , save it to your desktop and run it.
 
 Checkmark the following checkboxes:
 
• List last 10 Event Viewer log
• List Installed Programs
• List Users, Partitions and Memory size.
• List Minidump Files
 
 Click on Go to start the scan.  Once it is finished highlight the text, copy it and paste it in your next post.
 
Thank you and good luck.


#3 tina107

tina107
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:10:36 AM

Posted 28 December 2013 - 06:08 PM

Here you go.

 

http://speccy.piriform.com/results/QFI28MJw34gmBGy31mi2paN

 

MiniToolBox by Farbar  Version: 18-12-2013
Ran by Shannon (administrator) on 28-12-2013 at 14:58:59
Running from "C:\Users\Shannon\Desktop"
Microsoft Windows 7 Professional  Service Pack 1 (X64)
Boot Mode: Normal
***************************************************************************
 
========================= Event log errors: ===============================
 
Application errors:
==================
Error: (12/28/2013 02:54:48 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (12/28/2013 02:53:19 PM) (Source: Winlogon) (User: )
Description: Windows license activation failed. Error 0x80070005.
 
Error: (12/27/2013 01:41:06 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (12/27/2013 01:39:43 PM) (Source: Winlogon) (User: )
Description: Windows license activation failed. Error 0x80070005.
 
Error: (12/26/2013 06:00:05 PM) (Source: Application Error) (User: )
Description: Faulting application name: chrome.exe, version: 31.0.1650.63, time stamp: 0x529e8b45
Faulting module name: ntdll.dll, version: 6.1.7601.18247, time stamp: 0x521ea8e7
Exception code: 0xc000000d
Fault offset: 0x00098519
Faulting process id: 0x128c
Faulting application start time: 0xchrome.exe0
Faulting application path: chrome.exe1
Faulting module path: chrome.exe2
Report Id: chrome.exe3
 
Error: (12/25/2013 00:56:52 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (12/25/2013 00:55:31 PM) (Source: Winlogon) (User: )
Description: Windows license activation failed. Error 0x80070005.
 
Error: (12/25/2013 00:47:41 AM) (Source: Software Protection Platform Service) (User: )
Description: License Activation Scheduler (sppuinotify.dll) failed with the following error code:
0x80070005
 
Error: (12/24/2013 10:10:58 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (12/24/2013 10:09:41 PM) (Source: Winlogon) (User: )
Description: Windows license activation failed. Error 0x80070005.
 
 
System errors:
=============
Error: (12/27/2013 01:39:30 PM) (Source: BugCheck) (User: )
Description: 0x0000007a (0xfffff6fc50020b30, 0xffffffffc0000185, 0x0000000016ce6820, 0xfffff8a004166174)C:\Windows\MEMORY.DMP122713-21590-01
 
Error: (12/27/2013 01:39:25 PM) (Source: EventLog) (User: )
Description: The previous system shutdown at 8:40:33 PM on ?12/?26/?2013 was unexpected.
 
Error: (12/25/2013 00:47:41 AM) (Source: DCOM) (User: )
Description: C:\Windows\System32\slui.exe -Embedding5{F87B28F1-DA9A-4F35-8EC0-800EFCF26B83}
 
Error: (12/25/2013 00:30:00 AM) (Source: bowser) (User: )
Description: The master browser has received a server announcement from the computer WC-VISTA-SJ
that believes that it is the master browser for the domain on transport NetBT_Tcpip_{6094FC79-7CB4-425E-A9CF-A1AD9B72F68D}.
The master browser is stopping or an election is being forced.
 
Error: (12/24/2013 03:29:52 PM) (Source: bowser) (User: )
Description: The master browser has received a server announcement from the computer WC-VISTA-SJ
that believes that it is the master browser for the domain on transport NetBT_Tcpip_{6094FC79-7CB4-425E-A9CF-A1AD9B72F68D}.
The master browser is stopping or an election is being forced.
 
Error: (12/24/2013 02:53:53 PM) (Source: bowser) (User: )
Description: The master browser has received a server announcement from the computer WC-VISTA-SJ
that believes that it is the master browser for the domain on transport NetBT_Tcpip_{6094FC79-7CB4-425E-A9CF-A1AD9B72F68D}.
The master browser is stopping or an election is being forced.
 
Error: (12/24/2013 02:29:48 PM) (Source: bowser) (User: )
Description: The master browser has received a server announcement from the computer WC-VISTA-SJ
that believes that it is the master browser for the domain on transport NetBT_Tcpip_{6094FC79-7CB4-425E-A9CF-A1AD9B72F68D}.
The master browser is stopping or an election is being forced.
 
Error: (12/24/2013 02:17:47 PM) (Source: bowser) (User: )
Description: The master browser has received a server announcement from the computer WC-VISTA-SJ
that believes that it is the master browser for the domain on transport NetBT_Tcpip_{6094FC79-7CB4-425E-A9CF-A1AD9B72F68D}.
The master browser is stopping or an election is being forced.
 
Error: (12/24/2013 01:53:45 PM) (Source: bowser) (User: )
Description: The master browser has received a server announcement from the computer WC-VISTA-SJ
that believes that it is the master browser for the domain on transport NetBT_Tcpip_{6094FC79-7CB4-425E-A9CF-A1AD9B72F68D}.
The master browser is stopping or an election is being forced.
 
Error: (12/24/2013 01:17:46 PM) (Source: bowser) (User: )
Description: The master browser has received a server announcement from the computer WC-VISTA-SJ
that believes that it is the master browser for the domain on transport NetBT_Tcpip_{6094FC79-7CB4-425E-A9CF-A1AD9B72F68D}.
The master browser is stopping or an election is being forced.
 
 
Microsoft Office Sessions:
=========================
Error: (12/28/2013 02:54:48 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (12/28/2013 02:53:19 PM) (Source: Winlogon)(User: )
Description: 0x800700050x00000000
 
Error: (12/27/2013 01:41:06 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (12/27/2013 01:39:43 PM) (Source: Winlogon)(User: )
Description: 0x800700050x00000000
 
Error: (12/26/2013 06:00:05 PM) (Source: Application Error)(User: )
Description: chrome.exe31.0.1650.63529e8b45ntdll.dll6.1.7601.18247521ea8e7c000000d00098519128c01cf02a75bacf1b1C:\Program Files (x86)\Google\Chrome\Application\chrome.exeC:\Windows\SysWOW64\ntdll.dll9a7b7b39-6e9a-11e3-982b-001d72ec6146
 
Error: (12/25/2013 00:56:52 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (12/25/2013 00:55:31 PM) (Source: Winlogon)(User: )
Description: 0x800700050x00000000
 
Error: (12/25/2013 00:47:41 AM) (Source: Software Protection Platform Service)(User: )
Description: 0x80070005
 
Error: (12/24/2013 10:10:58 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (12/24/2013 10:09:41 PM) (Source: Winlogon)(User: )
Description: 0x800700050x00000000
 
 
=========================== Installed Programs ============================
 
64 Bit HP CIO Components Installer (Version: 7.2.8)
7-Zip 9.20
Adobe Reader XI (11.0.02) (Version: 11.0.02)
Amazon Browser Bar (Version: 3.0)
Apple Application Support (Version: 2.3.3)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (Version: 2.1.3.127)
avast! Free Antivirus (Version: 9.0.2008)
Bonjour (Version: 3.0.0.10)
Calendar Creator (Version: 12.00)
CCleaner (Version: 4.08)
Coupon Printer for Windows (Version: 5.0.0.0)
Curse Client (Version: 5.1.1.644)
Epson Print CD (Version: 2.00.00)
EPSON Printer Software
Facebook Video Calling 1.2.0.287 (Version: 1.2.287)
Free Realms
Google Chrome (Version: 31.0.1650.63)
Google Update Helper (Version: 1.3.22.3)
Happy Cloud Client (Version: 3.41)
HDAUDIO Soft Data Fax Modem with SmartCP
IGG Web3D Player version 1.0.0.38 (Version: 1.0.0.38)
iTunes (Version: 11.0.2.26)
Java 7 Update 25 (Version: 7.0.250)
Java Auto Updater (Version: 2.1.9.5)
LibreOffice 4.0 Help Pack (English) (Version: 4.0.4.2)
LibreOffice 4.0.4.2 (Version: 4.0.4.2)
lightshot-4.4.2.10 (Version: 4.4.2.10)
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 (Version: 1.1.4322)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Web Publishing Wizard 1.52
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
Notepad++ (Version: 6.5.1)
NVIDIA Control Panel 314.07 (Version: 314.07)
NVIDIA Graphics Driver 314.07 (Version: 314.07)
NVIDIA HD Audio Driver 1.3.23.1 (Version: 1.3.23.1)
NVIDIA Install Application (Version: 2.1002.109.718)
NVIDIA PhysX (Version: 9.12.1031)
NVIDIA PhysX System Software 9.12.1031 (Version: 9.12.1031)
NVIDIA Update 1.12.12 (Version: 1.12.12)
NVIDIA Update Components (Version: 1.12.12)
ROBLOX Player for Shannon
ROBLOX Studio 2013 for Shannon
SOE Web Installer (Version: 1.0.3.171)
Square Enix Secure Launcher (Version: 1.0.0.108)
Unity Web Player (Version: )
Ventrilo Client for Windows x64 (Version: 3.0.8.0)
Wizard101 (Version: 1.0.0)
 
========================= Memory info: ===================================
 
Percentage of memory in use: 40%
Total physical RAM: 4090.88 MB
Available physical RAM: 2432.59 MB
Total Pagefile: 8179.95 MB
Available Pagefile: 6478.66 MB
Total Virtual: 4095.88 MB
Available Virtual: 3954.52 MB
 
========================= Partitions: =====================================
 
1 Drive c: (ACER) (Fixed) (Total:288.09 GB) (Free:239.9 GB) NTFS
 
========================= Users: ========================================
 
User accounts for \\SHANNON-PC
 
Administrator            ASPNET                   Guest                    
Shannon                  UpdatusUser              
 
========================= Minidump Files ==================================
 
No minidump file found
 
 
**** End of log ****
 
Thanks!


#4 KingdomSeeker

KingdomSeeker

  • Members
  • 458 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:36 PM

Posted 28 December 2013 - 07:21 PM

Go to safemode (F8) on early boot up and disable Automatic Restart.

Download SecurityCheck.exe from Here

. Run SecurityCheck and follow the instruction from inside the code box.
. When the scan is finished, a notepad will automatically open as check.txt
Please copy and paste the contents here on your next reply.



#5 tina107

tina107
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:10:36 AM

Posted 29 December 2013 - 02:41 PM

Here are the SecurityCheck Results:
 
Results of screen317's Security Check version 0.99.77  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
 Windows Security Center service is not running! This report may not be accurate! 
 Windows Firewall Enabled!  
avast! Antivirus   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Java 7 Update 25  
 Java version out of Date! 
 Adobe Reader XI  
 Google Chrome 31.0.1650.57  
 Google Chrome 31.0.1650.63  
````````Process Check: objlist.exe by Laurent````````  
 AVAST Software Avast AvastSvc.exe  
 AVAST Software Avast AvastUI.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C: 0% 
````````````````````End of Log`````````````````````` 
 
Thank you!


#6 KingdomSeeker

KingdomSeeker

  • Members
  • 458 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:36 PM

Posted 29 December 2013 - 04:03 PM

Please download and run http://www.malwarebytes.org using the full scan AND ALSO,

 

Please download Junkware Removal Tool to your desktop.
  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.


#7 tina107

tina107
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:10:36 AM

Posted 29 December 2013 - 09:34 PM

Hello - here is the JRT log, did you need to see the malwarebytes log too?

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Professional x64
Ran by Shannon on Sun 12/29/2013 at 17:58:27.16
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 
~~~ Services
 
Successfully stopped: [Service] dealplylivem 
Successfully deleted: [Service] dealplylivem 
 
 
 
~~~ Registry Values
 
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-21-1339778699-1821461227-2962276123-1000\Software\Microsoft\Internet Explorer\Main\\Start Page
 
 
 
~~~ Registry Keys
 
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\dealplylive.exe
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\scripthelper.exe
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\viprotocol.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\webcakeieclient.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{F511AFDB-726E-4458-90E7-1ECB97406544}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\babylontoolbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\dealply
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\dealplylive
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\distromatic
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\pc optimizer pro
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\pc speed maximizer
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\sweetim
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\ezlyrics
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\happylyrics
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1339778699-1821461227-2962276123-1000\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\babylon
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\conduit
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\dealply
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\dealplylive
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\installiq
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\updater by sweetpacks
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\alxssb.alxtbssb
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\alxssb.alxtbssb.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\alxtb2.toolbarproxy
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\alxtb2.toolbarproxy.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\prod.cap
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\protocols\handler\viprotocol
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\scripthelper.scripthelperapi
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\scripthelper.scripthelperapi.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\viprotocol.viprotocolole
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\viprotocol.viprotocolole.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\au__rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\au__rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\mybabylontb_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\mybabylontb_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\webcakedesktop_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\webcakedesktop_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\HappyLyrics_2802-7edf9df5_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\HappyLyrics_2802-7edf9df5_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\HappyLyrics_2802-7edf9df5_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\HappyLyrics_2802-7edf9df5_RASMANCS
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{B3B3A6AC-74EC-BD56-BCDB-EFA4799FB9DF}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Successfully deleted: [Registry Key] "hkey_current_user\software\apn pip"
 
 
 
~~~ Files
 
Successfully deleted: [File] C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job
Successfully deleted: [File] C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job
Successfully deleted: [File] "C:\end"
 
 
 
~~~ Folders
 
Successfully deleted: [Folder] "C:\ProgramData\babylon"
Successfully deleted: [Folder] "C:\ProgramData\dealplylive"
Successfully deleted: [Folder] "C:\ProgramData\pc optimizer pro"
Successfully deleted: [Folder] "C:\ProgramData\tarma installer"
Successfully deleted: [Folder] "C:\Users\Shannon\AppData\Roaming\babylon"
Successfully deleted: [Folder] "C:\Users\Shannon\AppData\Roaming\dealply"
Successfully deleted: [Folder] "C:\Users\Shannon\AppData\Roaming\defaulttab"
Successfully deleted: [Folder] "C:\Users\Shannon\appdata\local\dealplylive"
Successfully deleted: [Folder] "C:\Program Files (x86)\amazon browser bar"
Successfully deleted: [Folder] "C:\Program Files (x86)\coupons"
Successfully deleted: [Folder] "C:\Program Files (x86)\dealply"
Successfully deleted: [Folder] "C:\Program Files (x86)\dealplylive"
Successfully deleted: [Folder] "C:\Program Files (x86)\mypc backup"
Successfully deleted: [Folder] "C:\Program Files (x86)\oapps"
Successfully deleted: [Folder] "C:\Program Files (x86)\pc speed maximizer"
Successfully deleted: [Folder] "C:\Users\Shannon\AppData\Roaming\microsoft\windows\start menu\programs\dealply"
 
 
 
~~~ Chrome
 
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Google [Blacklisted Policy]
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\fjoijdanhaiflhibkljeklcghcmmfffh
 
 
~~~ Event Viewer Logs were cleared
 
 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Sun 12/29/2013 at 18:07:35.24
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


#8 KingdomSeeker

KingdomSeeker

  • Members
  • 458 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:36 PM

Posted 29 December 2013 - 09:49 PM

If you could post the Malwarbytes log I'd appreciate it. Your computer was infected. Conduit was removed my the program. I'd like to seee what Malwarebytes has to say. Then I'll probably have you run a couple more security programs.

.



#9 tina107

tina107
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:10:36 AM

Posted 29 December 2013 - 10:37 PM

Here is the Malwarebytes log:

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org
 
Database version: v2013.12.29.06
 
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
Shannon :: SHANNON-PC [administrator]
 
12/29/2013 2:26:28 PM
mbam-log-2013-12-29 (14-26-28).txt
 
Scan type: Full scan (C:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 383663
Time elapsed: 3 hour(s), 16 minute(s), 23 second(s)
 
Memory Processes Detected: 1
C:\Program Files (x86)\Amazon Browser Bar\ToolbarUpdaterService.exe (PUP.Optional.AmazonTB.A) -> 1632 -> No action taken.
 
Memory Modules Detected: 0
(No malicious items detected)
 
Registry Keys Detected: 98
HKCR\CLSID\{8D03FA45-4B8C-4427-BE67-EE8885147151} (PUP.Optional.AmazonTB.A) -> No action taken.
HKCR\Interface\{8D03FA45-4B8C-4427-BE67-EE8885147151} (PUP.Optional.AmazonTB.A) -> No action taken.
HKCR\TypeLib\{DA9FC525-41ED-4C00-B046-946DA7CDD305} (PUP.Optional.AmazonTB.A) -> No action taken.
HKLM\SYSTEM\CurrentControlSet\Services\Updater Service for AMZN (PUP.Optional.AmazonTB.A) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Amazon Browser Bar (PUP.Optional.AmazonTB.A) -> No action taken.
HKCR\AppID\DealPlyLive.exe (PUP.Optional.DealPly.A) -> No action taken.
HKCR\AppID\WebCakeIEClient.DLL (PUP.WebCake) -> No action taken.
HKCU\SOFTWARE\BabylonToolbar (PUP.Optional.BabylonToolBar.A) -> No action taken.
HKCU\SOFTWARE\DealPlyLive (PUP.Optional.DealPly.A) -> No action taken.
HKCU\SOFTWARE\DEALPLY (PUP.Optional.DealPly.A) -> No action taken.
HKCU\Software\DataMngr (PUP.Optional.DataMngr.A) -> No action taken.
HKCU\Software\Alexa Internet\Alexa9\Amazon (PUP.Optional.AmazonTB.A) -> No action taken.
HKCU\Software\Distromatic\Toolbars (PUP.Optional.AlexaTB.A) -> No action taken.
HKCU\SOFTWARE\SWEETIM (PUP.Optional.SweetIM.A) -> No action taken.
HKLM\SOFTWARE\DealPlyLive (PUP.Optional.DealPly.A) -> No action taken.
HKLM\SOFTWARE\Updater By SweetPacks (PUP.Optional.SweetPacks.A) -> No action taken.
HKLM\SOFTWARE\DEALPLY (PUP.Optional.DealPly.A) -> No action taken.
HKLM\SOFTWARE\Google\Chrome\Extensions\fjoijdanhaiflhibkljeklcghcmmfffh (PUP.WebCake) -> No action taken.
HKLM\SOFTWARE\MozillaPlugins\@tools.dpliveupdate.com/DealPlyLive Update;version=3 (PUP.Optional.DealPly.A) -> No action taken.
HKLM\SOFTWARE\MozillaPlugins\@tools.dpliveupdate.com/DealPlyLive Update;version=9 (PUP.Optional.DealPly.A) -> No action taken.
HKLM\SOFTWARE\Wow6432Node\Updater By SweetPacks (PUP.Optional.SweetPacks.A) -> No action taken.
HKLM\SYSTEM\CurrentControlSet\Services\dealplylivem (PUP.Optional.DealPly.A) -> No action taken.
HKLM\SOFTWARE\SWEETIM (PUP.Optional.SweetIM.A) -> No action taken.
HKLM\SYSTEM\CurrentControlSet\Services\dealplylive (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DEALPLYLIVE.EXE (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\AppID\{7169BBB3-3289-4696-B35D-4A88BCF6FB12} (PUP.Optional.WebCake.A) -> Quarantined and deleted successfully.
HKCR\AppID\{72D89EBF-0C5D-4190-91FD-398E45F1D007} (PUP.Optional.DefaultTab.A) -> Quarantined and deleted successfully.
HKCR\AppID\{80FABB17-63AF-4655-9F07-B6509EE37AF2} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{80FABB17-63AF-4655-9F07-B6509EE37AF2} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\DealPlyLiveUpdate.OnDemandCOMClassSvc.1.0 (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\DealPlyLiveUpdate.OnDemandCOMClassSvc (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} (PUP.Optional.Delta.A) -> Quarantined and deleted successfully.
HKCR\AppID\{F48FC5B2-094A-44C7-B48C-289738C9582D} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{F48FC5B2-094A-44C7-B48C-289738C9582D} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\DealPlyLiveUpdate.Update3COMClassService.1.0 (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\DealPlyLiveUpdate.Update3COMClassService (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\AppID\{F85FA3F2-D2C8-4D4D-BB1C-3181E691AF2B} (PUP.FaceThemes) -> Quarantined and deleted successfully.
HKCR\CLSID\{1E0C9B2A-6447-452C-B012-2314A0C29412} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\DealPlyLiveUpdate.OnDemandCOMClassMachineFallback.1.0 (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\DealPlyLiveUpdate.OnDemandCOMClassMachineFallback (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{34A8CEB6-89BB-49F1-B5E4-0D0D6C21F3B1} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\DealPlyLiveUpdate.CredentialDialogMachine.1.0 (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\DealPlyLiveUpdate.CredentialDialogMachine (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{3A4DBD3A-98CC-41CE-AD21-352D42B6F754} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\DealPlyLiveUpdate.CoCreateAsync.1.0 (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\DealPlyLiveUpdate.CoCreateAsync (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{4F8A50F6-69DE-4BE3-A33A-A1079B9AC0DB} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\DealPlyLiveUpdate.Update3WebMachineFallback.1.0 (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\DealPlyLiveUpdate.Update3WebMachineFallback (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{501CB57A-D4E2-4855-96AD-EDB0A9083395} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\DealPlyLiveUpdate.CoreMachineClass.1 (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\DealPlyLiveUpdate.CoreMachineClass (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{6FF2C4DD-77A4-4BB5-BA4C-B42DEFBF9137} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\DealPlyLiveUpdate.ProcessLauncher.1.0 (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\DealPlyLiveUpdate.ProcessLauncher (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{83ABA270-8390-4CA6-AE48-FC089F55629E} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\DealPlyLiveUpdate.OnDemandCOMClassMachine.1.0 (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\DealPlyLiveUpdate.OnDemandCOMClassMachine (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{8B218A5F-1A3D-4347-94EF-A79575EB8094} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{0D89DE71-3D99-4288-84DC-F18F1047A7D8} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{8C338DDB-19FC-4C1F-B74D-6931EE55F7A1} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{7F1796B2-BEC6-427B-B734-F9C75ED94A80} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\DealPlyLive.OneClickCtrl.9 (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F1796B2-BEC6-427B-B734-F9C75ED94A80} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F1796B2-BEC6-427B-B734-F9C75ED94A80} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\DealPlyLive.Update3WebControl.3 (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8C338DDB-19FC-4C1F-B74D-6931EE55F7A1} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8C338DDB-19FC-4C1F-B74D-6931EE55F7A1} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{9BDB5E09-4BBA-4422-8C2B-529B281C32B8} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{ae48ed75-5a56-4c5f-bbce-6f1ac3875f66} (PUP.DealPly) -> Quarantined and deleted successfully.
HKCR\CLSID\{BB975E58-E769-4E5A-BA12-B765BC559FF3} (PUP.Optional.WebCake.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{C536F080-57B7-46D6-8894-C647553F2889} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\DealPlyLive.OneClickProcessLauncherMachine.1.0 (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\DealPlyLive.OneClickProcessLauncherMachine (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C536F080-57B7-46D6-8894-C647553F2889} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{CA5D945F-E738-4D0B-A0B5-25AC51C64659} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\DealPlyLiveUpdate.CoreClass.1 (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\DealPlyLiveUpdate.CoreClass (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{EA582743-9076-4178-9AA6-7393FDF4D5CE} (PUP.Optional.AmazonTB.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{008f6853-9cb4-41c5-a950-39d55e5e06ba} (PUP.Optional.AmazonTB.A) -> Quarantined and deleted successfully.
HKCR\TypeLib\{33D0AD98-3347-4A54-8929-5163EBEB9F72} (PUP.Optional.AmazonTB.A) -> Quarantined and deleted successfully.
HKCR\Interface\{0923E315-2D8B-48CE-A37C-AE9A42F9711C} (PUP.Optional.AmazonTB.A) -> Quarantined and deleted successfully.
HKCR\AlxTB2.TBLayoutBHO.1 (PUP.Optional.AmazonTB.A) -> Quarantined and deleted successfully.
HKCR\AlxTB2.TBLayoutBHO (PUP.Optional.AmazonTB.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{F443A627-5009-4323-9C1D-7FD598D0D712} (PUP.Optional.AmazonTB.A) -> Quarantined and deleted successfully.
HKCR\AlxTB2.AlxHelper.1 (PUP.Optional.AmazonTB.A) -> Quarantined and deleted successfully.
HKCR\AlxTB2.AlxHelper (PUP.Optional.AmazonTB.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F443A627-5009-4323-9C1D-7FD598D0D712} (PUP.Optional.AmazonTB.A) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{F443A627-5009-4323-9C1D-7FD598D0D712} (PUP.Optional.AmazonTB.A) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{F443A627-5009-4323-9C1D-7FD598D0D712} (PUP.Optional.AmazonTB.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{F7698761-4ABA-45C2-A5BB-D2163922C725} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\DealPlyLiveUpdate.Update3WebSvc.1.0 (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\DealPlyLiveUpdate.Update3WebSvc (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{FFCC53E6-2655-47FC-A89B-54E8D7F305D1} (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\DealPlyLiveUpdate.Update3WebMachine.1.0 (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\DealPlyLiveUpdate.Update3WebMachine (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
HKCR\Typelib\{A3F56272-CDB4-4310-9BB1-9A0D0757A3B3} (PUP.FaceThemes) -> Quarantined and deleted successfully.
HKCR\Interface\{D6975F9E-15B2-4FE7-9D16-FC2E85CB201B} (PUP.FaceThemes) -> Quarantined and deleted successfully.
 
Registry Values Detected: 6
HKCU\SOFTWARE\DealPly|Partner (PUP.Optional.DealPly.A) -> Data: sft3 -> No action taken.
HKCU\Software\SweetIM|simapp_id (PUP.Optional.SweetIM.A) -> Data: {6177B924-9E87-11E2-863F-001D72EC6146} -> No action taken.
HKLM\SOFTWARE\DealPly|ChromeCrxPath (PUP.Optional.DealPly.A) -> Data: C:\Program Files (x86)\DealPly\DealPly.crx -> No action taken.
HKLM\Software\SweetIM|simapp_id (PUP.Optional.SweetIM.A) -> Data: {6177B924-9E87-11E2-863F-001D72EC6146} -> No action taken.
HKLM\SOFTWARE\Mozilla\Firefox\Extensions\{C4CFC0DE-134F-4466-B2A2-FF7C59A8BFAD} (PUP.Optional.SweetPacks) -> Data:  -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Mozilla\Firefox\Extensions|{C4CFC0DE-134F-4466-B2A2-FF7C59A8BFAD} (PUP.Optional.SweetPacks) -> Data: C:\Program Files\Updater By SweetPacks\Firefox -> Quarantined and deleted successfully.
 
Registry Data Items Detected: 0
(No malicious items detected)
 
Folders Detected: 18
C:\ProgramData\Tarma Installer\{C4ED781C-7394-4906-AAFF-D6AB64FF7C38} (PUP.WebCake) -> No action taken.
C:\Users\Shannon\AppData\Roaming\Babylon (PUP.Optional.Babylon.A) -> No action taken.
C:\Users\Shannon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly (PUP.OPtional.Dealply.A) -> No action taken.
C:\Program Files (x86)\Amazon Browser Bar (PUP.Optional.AmazonTB.A) -> No action taken.
C:\ProgramData\DealPlyLive (PUP.Optional.DealPly.A) -> No action taken.
C:\ProgramData\DealPlyLive\Update (PUP.Optional.DealPly.A) -> No action taken.
C:\ProgramData\DealPlyLive\Update\Log (PUP.Optional.DealPly.A) -> No action taken.
C:\Users\Shannon\AppData\Roaming\Dealply (PUP.Optional.DealPly.A) -> No action taken.
C:\Users\Shannon\AppData\Roaming\Dealply\UpdateProc (PUP.Optional.DealPly.A) -> No action taken.
C:\Program Files (x86)\DealPlyLive (PUP.Optional.DealPly.A) -> No action taken.
C:\Program Files (x86)\DealPlyLive\CrashReports (PUP.Optional.DealPly.A) -> No action taken.
C:\Program Files (x86)\DealPlyLive\Update (PUP.Optional.DealPly.A) -> No action taken.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0 (PUP.Optional.DealPly.A) -> No action taken.
C:\Program Files (x86)\DealPlyLive\Update\Download (PUP.Optional.DealPly.A) -> No action taken.
C:\Program Files (x86)\DealPlyLive\Update\Install (PUP.Optional.DealPly.A) -> No action taken.
C:\Users\Shannon\AppData\Local\DealPlyLive (PUP.Optional.DealPly.A) -> No action taken.
C:\Users\Shannon\AppData\Local\DealPlyLive\CrashReports (PUP.Optional.DealPly.A) -> No action taken.
C:\Users\Shannon\AppData\Roaming\DefaultTab\DefaultTab (PUP.Optional.DefaultTab.A) -> No action taken.
 
Files Detected: 97
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_th.dll (PUP.Optional.DealPly.A) -> No action taken.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_tr.dll (PUP.Optional.DealPly.A) -> No action taken.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_uk.dll (PUP.Optional.DealPly.A) -> No action taken.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ur.dll (PUP.Optional.DealPly.A) -> No action taken.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_vi.dll (PUP.Optional.DealPly.A) -> No action taken.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_zh-CN.dll (PUP.Optional.DealPly.A) -> No action taken.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_zh-TW.dll (PUP.Optional.DealPly.A) -> No action taken.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\psuser.dll (PUP.Optional.DealPly.A) -> No action taken.
C:\Users\Shannon\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabBHO.dll (PUP.Optional.DefaultTab) -> No action taken.
C:\Users\Shannon\Downloads\7zip_bimo_d154539.exe (PUP.Optional.InstallIQ) -> No action taken.
C:\Users\Shannon\Downloads\BearShareSetup.exe (PUP.Optional.MusicToolbar.A) -> No action taken.
C:\Users\Shannon\Downloads\Express_Installer.exe (PUP.Optional.Ibryte) -> No action taken.
C:\Users\Shannon\Downloads\minecraft setup (1).exe (PUP.Optional.Soft32.A) -> No action taken.
C:\Users\Shannon\Downloads\setup (4).exe (PUP.Optional.Bundlore) -> No action taken.
C:\Users\Shannon\Downloads\VLCMediaPlayerSetup-93kn5Po.exe (PUP.Optional.Somoto) -> No action taken.
C:\ProgramData\Tarma Installer\{C4ED781C-7394-4906-AAFF-D6AB64FF7C38}\Setup.ico (PUP.WebCake) -> No action taken.
C:\ProgramData\Tarma Installer\{C4ED781C-7394-4906-AAFF-D6AB64FF7C38}\Setup.exe (PUP.WebCake) -> No action taken.
C:\ProgramData\Tarma Installer\{C4ED781C-7394-4906-AAFF-D6AB64FF7C38}\_Setup.dll (PUP.WebCake) -> No action taken.
C:\ProgramData\Tarma Installer\{C4ED781C-7394-4906-AAFF-D6AB64FF7C38}\_Setupx.dll (PUP.WebCake) -> No action taken.
C:\Users\Shannon\AppData\Roaming\Babylon\log_file.txt (PUP.Optional.Babylon.A) -> No action taken.
C:\Users\Shannon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly\Uninstall DealPly.lnk (PUP.OPtional.Dealply.A) -> No action taken.
C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job (PUP.Optional.DealPly.A) -> No action taken.
C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job (PUP.Optional.DealPly.A) -> No action taken.
C:\Program Files (x86)\Amazon Browser Bar\ToolbarUpdaterService.ini (PUP.Optional.AmazonTB.A) -> No action taken.
C:\Program Files (x86)\Amazon Browser Bar\AlxSSBPS.dll (PUP.Optional.AmazonTB.A) -> No action taken.
C:\Program Files (x86)\Amazon Browser Bar\AmazonBrowserBar.3.0.Uninstall.exe (PUP.Optional.AmazonTB.A) -> No action taken.
C:\Program Files (x86)\Amazon Browser Bar\AmazonBrowserBarSSB.3.0.dll (PUP.Optional.AmazonTB.A) -> No action taken.
C:\Program Files (x86)\Amazon Browser Bar\ToolbarUpdaterService.exe (PUP.Optional.AmazonTB.A) -> No action taken.
C:\Program Files (x86)\Amazon Browser Bar\uninstall.exe (PUP.Optional.AmazonTB.A) -> No action taken.
C:\Program Files (x86)\Amazon Browser Bar\uninstall.ico (PUP.Optional.AmazonTB.A) -> No action taken.
C:\Program Files (x86)\Amazon Browser Bar\update.xml (PUP.Optional.AmazonTB.A) -> No action taken.
C:\ProgramData\DealPlyLive\Update\Log\DealPlyLive.log (PUP.Optional.DealPly.A) -> No action taken.
C:\Users\Shannon\AppData\Roaming\Dealply\UpdateProc\config.dat (PUP.Optional.DealPly.A) -> No action taken.
C:\Users\Shannon\AppData\Roaming\Dealply\UpdateProc\TTL.DAT (PUP.Optional.DealPly.A) -> No action taken.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\DealPlyLiveHelper.msi (PUP.Optional.DealPly.A) -> No action taken.
C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\psmachine.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\npGoogleUpdate3.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPly\DealPlyIE.dll (PUP.DealPly) -> Quarantined and deleted successfully.
C:\Program Files (x86)\Amazon Browser Bar\AmazonBrowserBar.3.0.dll (PUP.Optional.AmazonTB.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\Amazon Browser Bar\search_protect.exe (PUP.Optional.Searchprotect) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPly\DealPlyUpdateVer.exe (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\DealPlyLive.exe (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\DealPlyLiveBroker.exe (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\DealPlyLiveHandler.exe (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\DealPlyLiveOnDemand.exe (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdate.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_am.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ar.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_bg.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_bn.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ca.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_cs.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_da.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_de.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_el.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_en-GB.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_en.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_es-419.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_es.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_et.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_fa.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_fi.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_fil.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_fr.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_gu.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_hi.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_hr.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_hu.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_id.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_is.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_it.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_iw.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ja.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_kn.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ko.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_lt.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_lv.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ml.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_mr.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ms.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_nl.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_no.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_pl.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_pt-BR.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_pt-PT.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ro.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ru.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_sk.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_sl.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_sr.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_sv.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_sw.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ta.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_te.dll (PUP.Optional.DealPly.A) -> Quarantined and deleted successfully.
C:\Users\Shannon\Downloads\FlashPlayer_V.78047820c.exe (Adware.DomaIQ) -> Quarantined and deleted successfully.
C:\Windows\Setup\scripts\faXcooL.exe (HackTool.Wpakill) -> Quarantined and deleted successfully.
 
(end)


#10 KingdomSeeker

KingdomSeeker

  • Members
  • 458 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:36 PM

Posted 29 December 2013 - 10:46 PM

I am concerned that your system may still be infected. I've asked the moderator to review this and possibly move it to our Virus removal forum that i s staffed with experts on malware removal. He may also have an easy fix to suggest. I'll keep following this thread to see how you do.



#11 Anshad Edavana

Anshad Edavana

  • Members
  • 2,805 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:12:06 AM

Posted 29 December 2013 - 11:57 PM

Hi

 

The WER ( Windows Error Reporting) data you posted in the first post shows bugcheck 0x7A is the blue screen you are experiencing. This particular stop code is always storage related.

 

MSDN Reference - http://msdn.microsoft.com/en-us/library/windows/hardware/ff559211(v=vs.85).aspx

 

Scroll down to the bottom and you will see the common causes for 0x7A BSOD. As you can see a failing hard drive is the number one reason for this blue screen error.

 

 

 
  • 0xC000009A, or STATUS_INSUFFICIENT_RESOURCES, indicates a lack of nonpaged pool resources.

  • 0xC000009C, or STATUS_DEVICE_DATA_ERROR, typically indicates bad blocks (sectors) on the hard disk.

  • 0xC000009D, or STATUS_DEVICE_NOT_CONNECTED, indicates defective or loose cabling, termination, or that the controller does not see the hard disk.

  • 0xC000016A, or STATUS_DISK_OPERATION_FAILED, indicates bad blocks (sectors) on the hard disk.

  • 0xC0000185, or STATUS_IO_DEVICE_ERROR, indicates improper termination or defective cabling on SCSI devices or that two devices are trying to use the same IRQ.

  • 0xC000000E, or STATUS_NO_SUCH_DEVICE, indicates a hardware failure or an incorrect drive configuration. Check your cables and check the drive with the diagnostic utility available from your drive manufacturer. If you are using older PATA (IDE) drives, this status code can indicate an incorrect master/subordinate drive configuration.

 

Now check the SMART data of your hard drive  collected by Speccy and you will see large number of Current Pending Sectors

 

C5 Current Pending Sector Count: 100 (100) Data 000000002B

 

2B in Hexadecimal means 43 in decimal. It means there is a minimum of 43 bad sectors in the hard drive surface which is severe. An ideal healthy drive should show zero "Current Pending Sectors". At work, i will replace the drive even if there is one or two bad sectors. However i would suggest running a diagnostic test to confirm before replacing the drive. 

 Your drive is a Hitachi one and their own tool won't work with primary hard drives. So i suggest using Seagate Seatools which supports diagnosing all manufacturer's hard drive. Please follow the below steps.

 

1. Backup all your important data to an external medium immediately as this drive can fial fully t any time. Also it is generally recommended to backup data before executing the test as an insurance.

 

2. Download and install Seagate Seatools from the below link (need DotNet Framework 4).

   http://www.seagate.com/in/en/support/downloads/item/seatools-win-master/

 

3. Run the tool and select your hard drive from the list. 

   3898-1.jpg

 

4. Then select Basic Tests --> Long Generic which will scan the full hard drive surface for bad sectors.

  3898-2.jpg

 

Please report the result of test with next reply.

 

 

 

 

 

 


Edited by Anshad Edavana, 30 December 2013 - 12:05 AM.


#12 tina107

tina107
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:10:36 AM

Posted 30 December 2013 - 01:35 AM

It just says that it failed. Here is the log:

 

--------------- SeaTools for Windows v1.2.0.10 ---------------
12/29/2013 10:24:40 PM
Model: Hitachi HTS723232L9A360
Serial Number: 090303FC1400NEGT71PG
Firmware Revision: FC4OC30F
Long Generic - Started 12/29/2013 10:24:40 PM
Long Generic - FAIL 12/29/2013 10:26:16 PM
Long Generic - Started 12/29/2013 10:30:32 PM
Long Generic - FAIL 12/29/2013 10:32:06 PM
 
I ran it twice because I wasn't sure it ran at all it was pretty fast.


#13 Anshad Edavana

Anshad Edavana

  • Members
  • 2,805 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:12:06 AM

Posted 30 December 2013 - 05:35 AM

--------------- SeaTools for Windows v1.2.0.10 ---------------
12/29/2013 10:24:40 PM
Model: Hitachi HTS723232L9A360
Serial Number: 090303FC1400NEGT71PG
Firmware Revision: FC4OC30F
Long Generic - Started 12/29/2013 10:24:40 PM
Long Generic - FAIL 12/29/2013 10:26:16 PM
Long Generic - Started 12/29/2013 10:30:32 PM
Long Generic - FAIL 12/29/2013 10:32:06 PM

The test will be terminated quickly if major failure is detected (to not make the damage worse). So as i expected, the drive's condition is severe so you should replace it as soon as possible.



#14 tina107

tina107
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:10:36 AM

Posted 30 December 2013 - 03:01 PM

Thank you for your help!!



#15 tina107

tina107
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:10:36 AM

Posted 31 December 2013 - 08:28 PM

I have ordered a replacement drive. It should be coming by the end of January. What do I need to do in preparation of replacing the drive? Do I need to make a recovery disc? How do I insure my operating system gets installed on the new hard drive. My laptop did not come with any installation disks.

Thanks for any help.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users