Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Programs won't run on Windows 8.1


  • Please log in to reply
12 replies to this topic

#1 phantomshark

phantomshark

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:16 AM

Posted 12 June 2014 - 03:22 PM

When I try to run anything, it says 'Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item'. If I try and run as administrator, nothing happens. I can't even open a cmd window.

 

Programs will run in safe mode, but my Malwarebytes finds nothing wrong. I cannot reactivate my Windows security program. I'm tearing my hair out right now, I really hope someone can help.



BC AdBot (Login to Remove)

 


m

#2 Netghost56

Netghost56

  • Members
  • 973 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Texas
  • Local time:12:16 AM

Posted 12 June 2014 - 03:31 PM

Do you have an administrator level account?



#3 phantomshark

phantomshark
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:16 AM

Posted 12 June 2014 - 03:38 PM

Yes, although I can't open it to verify. In regular mode, if I click on user accounts nothing opens. In safe mode if I click on user accounts it shows me as an administrator, but when I try to open the account to make changes nothing opens.



#4 phantomshark

phantomshark
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:16 AM

Posted 12 June 2014 - 03:59 PM

I'm sure this is relevant and forgot to mention it. Upon booting it goes to a black screen with a white cursor (only in normal mode not safe mode). After a very long time if I mash some buttons, it will go to a normal screen.



#5 scotty_ncc1701

scotty_ncc1701

  • Members
  • 520 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:16 AM

Posted 12 June 2014 - 04:07 PM

Try one of the programs.  Right click on it, and open the properties  window.  Then click Compatibility, then select for example Windows 7, Windows XP, etc.  Click OK, and they it again.

 

The only program that I've had issues with was my older Development Environment, which required .NET 1.x, and Windows 8 doesn't support .Net 1.x.  So I'm on a new development platform.

 

Best of luck!


Edited by scotty_ncc1701, 12 June 2014 - 04:08 PM.


#6 phantomshark

phantomshark
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:16 AM

Posted 12 June 2014 - 04:12 PM

I can't make any changes. Hell, even the task manager won't open unless I go into safe mode.



#7 phantomshark

phantomshark
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:16 AM

Posted 12 June 2014 - 04:18 PM

Compatibility mode does nothing, still says don't have the appropriate permissions.



#8 Netghost56

Netghost56

  • Members
  • 973 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Texas
  • Local time:12:16 AM

Posted 12 June 2014 - 04:24 PM

I'm sure this is relevant and forgot to mention it. Upon booting it goes to a black screen with a white cursor (only in normal mode not safe mode). After a very long time if I mash some buttons, it will go to a normal screen.

 

Very relevant.

 

You should download and run Farbar x64 (available on this site in Downloads). Copy it to a flash drive and run it from the command prompt option in Troubleshoot- Additional Options.

 

It's possible you could have a rpcss.dll virus infection, but I wouldn't rule anything out at this point.



#9 phantomshark

phantomshark
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:16 AM

Posted 12 June 2014 - 04:40 PM

I ran it, and here is the log

 

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-06-2014 02
Ran by SYSTEM on MININT-K8LH3CS on 12-06-2014 17:35:04
Running from J:\
Platform: Windows 8.1 (X64) OS Language: English(US)
Internet Explorer Version 11
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.


The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6548112 2012-06-12] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1212560 2012-06-13] (Realtek Semiconductor)
HKLM\...\Run: [BtTray] => C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtTray.exe [757888 2012-07-02] (Qualcomm Atheros)
HKLM\...\Run: [BtvStack] => C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe [127104 2012-07-02] (Qualcomm Atheros Commnucations)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [277504 2012-07-09] (Intel Corporation)
HKLM-x32\...\Run: [Shwicon9106] => C:\Program Files (x86)\Multimedia Card Reader(9106)\Shwicon9106.exe [262144 2012-06-28] ()
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-07] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-04] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [143888 2012-06-01] (CyberLink Corp.)
HKLM\...\Runonce: [ASYNCMAC] - rundll32.exe streamci,StreamingDeviceSetup {eeab7790-c514-11d1-b42b-00805fc1270e},asyncmac,{ad498944-762f-11d0-8dcb-00c04fc3358c},C:\WINDOWS\INF\netrasa.inf,Ndis-Mp-AsyncMac
HKLM\...\Runonce: [MSPCLOCK] - rundll32.exe streamci,StreamingDeviceSetup {97ebaacc-95bd-11d0-a3ea-00a0c9223196},{53172480-4791-11D0-A5D6-28DB04C10000},{53172480-4791-11D0-A5D6-28DB04C10000}
HKLM\...\Runonce: [MSPQM] - rundll32.exe streamci,StreamingDeviceSetup {DDF4358E-BB2C-11D0-A42F-00A0C9223196},{97EBAACB-95BD-11D0-A3EA-00A0C9223196},{97EBAACB-95BD-11D0-A3EA-00A0C9223196}
HKLM\...\Runonce: [MSKSSRV] - rundll32.exe streamci,StreamingDeviceSetup {96E080C7-143C-11D1-B40F-00A0C9223196},{3C0D501A-140B-11D1-B40F-00A0C9223196},{3C0D501A-140B-11D1-B40F-00A0C9223196}
HKLM\...\Runonce: [MSTEE.CxTransform] - rundll32.exe streamci,StreamingDeviceSetup {cfd669f1-9bc2-11d0-8299-0000f822fe8a},{CF1DDA2C-9743-11D0-A3EE-00A0C9223196},{CF1DDA2C-9743-11D0-A3EE-00A0C9223196},C:\WINDOWS\inf\ksfilter.inf,MSTEE.Interface.Install
HKLM\...\Runonce: [MSTEE.Splitter] - rundll32.exe streamci,StreamingDeviceSetup {cfd669f1-9bc2-11d0-8299-0000f822fe8a},{0A4252A0-7E70-11D0-A5D6-28DB04C10000},{0A4252A0-7E70-11D0-A5D6-28DB04C10000},C:\WINDOWS\inf\ksfilter.inf,MSTEE.Interface.Install
HKLM\...\Runonce: [WDM_DRMKAUD] - rundll32.exe streamci,StreamingDeviceSetup {EEC12DB6-AD9C-4168-8658-B03DAEF417FE},{ABD61E00-9350-47e2-A632-4438B90C6641},{FFBB6E3F-CCFE-4D84-90D9-421418B03A8E},C:\WINDOWS\inf\WDMAUDIO.inf,WDM_DRMKAUD.Interface.Install
HKLM-x32\...\RunOnce: [Malwarebytes Anti-Malware (cleanup)] - rundll32.exe "C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll",ProcessCleanupScript [1127496 2013-04-04] (Malwarebytes Corporation)
HKU\MICHAEL\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\MICHAEL\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3588952 2014-05-19] (Electronic Arts)
AppInit_DLLs: C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL => C:\PROGRA~2\NVIDIA Corporation\3D Vision\nvStInit64.dll [21864 2012-07-25] (NVIDIA Corporation)

==================== Services (Whitelisted) =================

S2 AtherosSvc; C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe [128640 2012-07-02] (Qualcomm Atheros Commnucations)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
S2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512 2012-04-24] ()
S2 SftService; C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe [1914728 2012-11-25] (SoftThinks SAS)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-23] (Microsoft Corporation)
S2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-23] (Microsoft Corporation)
S2 ZAtheros Wlan Agent; C:\Program Files (x86)\Dell Wireless\Ath_WlanAgent.exe [77824 2012-06-19] (Atheros)
S2 postgresql-x64-9.0; C:/Program Files/PostgreSQL/9.0/bin/pg_ctl.exe runservice -N "postgresql-x64-9.0" -D "C:/Program Files/PostgreSQL/9.0/data" -w [X]

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-12] (Windows ® Win 7 DDK provider)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [76952 2012-07-02] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
S1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
S3 DellRbtn; C:\Windows\System32\drivers\DellRbtn.sys [10752 2012-08-04] (OSR Open Systems Resources, Inc.)
S1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-03-19] (Disc Soft Ltd)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-09] (Intel Corporation)
S0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2014-03-28] (Microsoft Corporation)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
S3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924504 2014-02-22] (Microsoft Corporation)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2014-03-28] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-11-13] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-23] (Microsoft Corporation)
S0 Wof; C:\Windows\System32\Drivers\Wof.sys [157016 2014-03-13] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-12 13:28 - 2014-06-12 13:28 - 02081792 _____ (Farbar) C:\Users\MICHAEL\Downloads\FRST64.exe
2014-06-12 12:15 - 2014-06-12 12:53 - 00003176 _____ () C:\Windows\setupact.log
2014-06-12 12:15 - 2014-06-12 12:15 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-12 11:44 - 2014-06-12 11:53 - 00420036 _____ () C:\Windows\WindowsUpdate.log
2014-06-12 11:43 - 2014-06-12 11:43 - 00000320 _____ () C:\Windows\PFRO.log
2014-06-12 11:38 - 2014-06-12 11:39 - 00000000 ____D () C:\Users\MICHAEL\AppData\Local\Google
2014-06-12 11:38 - 2014-06-12 11:38 - 00002277 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-06-12 11:38 - 2014-06-12 11:38 - 00000922 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-12 11:38 - 2014-06-12 11:38 - 00000836 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-06-12 11:38 - 2014-06-12 11:38 - 00000000 ____D () C:\Program Files\CCleaner
2014-06-12 11:38 - 2014-06-12 11:38 - 00000000 ____D () C:\Program Files (x86)\Google
2014-06-12 11:34 - 2014-06-12 11:35 - 04748896 _____ (Piriform Ltd) C:\Users\MICHAEL\Downloads\ccsetup414.exe
2014-06-03 13:34 - 2014-06-03 13:34 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-03 12:30 - 2014-06-03 12:30 - 00001513 _____ () C:\Users\MICHAEL\Desktop\ark.txt
2014-06-03 12:10 - 2014-06-03 12:11 - 106838808 _____ (Microsoft Corporation) C:\Users\MICHAEL\Downloads\msert.exe
2014-06-03 12:02 - 2014-06-03 12:02 - 05697760 _____ () C:\Users\MICHAEL\Downloads\bitdefender_isecurity_[quickscan].exe
2014-06-03 11:26 - 2014-06-03 11:26 - 07747104 _____ (Malwarebytes Corporation ) C:\Users\MICHAEL\Desktop\mbam-rules.exe
2014-06-03 11:25 - 2014-01-28 14:36 - 00380416 _____ () C:\Users\MICHAEL\Desktop\gmer.exe
2014-06-03 11:23 - 2014-06-03 11:23 - 00370943 _____ () C:\Users\MICHAEL\Desktop\gmer.zip
2014-06-03 11:18 - 2014-06-03 12:00 - 00000000 ____D () C:\Users\MICHAEL\AppData\Roaming\QuickScan
2014-06-03 11:12 - 2014-06-03 11:12 - 00688992 _____ (Swearware) C:\Users\MICHAEL\Desktop\dds.scr
2014-06-03 09:48 - 2014-06-03 09:48 - 00000000 ____D () C:\Users\MICHAEL\Desktop\Old Firefox Data
2014-06-03 09:29 - 2014-05-01 12:30 - 00693240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-06-03 09:29 - 2014-05-01 12:30 - 00105464 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-26 08:39 - 2014-05-26 08:39 - 00003783 _____ () C:\Users\MICHAEL\Downloads\game1.sav
2014-05-26 08:17 - 2014-05-26 08:17 - 07359228 _____ () C:\Users\MICHAEL\Downloads\HorizonsDC21.zip
2014-05-26 08:17 - 2011-07-29 06:08 - 08169094 ____N () C:\Users\MICHAEL\Downloads\HorizonsDC21.gam
2014-05-26 08:16 - 2014-05-26 08:16 - 00004441 _____ () C:\Users\MICHAEL\Downloads\Peril_in_Pleasantville_Part_1.torrent
2014-05-23 19:16 - 2014-05-23 19:16 - 00000000 ____D () C:\ProgramData\PopCap Games
2014-05-23 19:15 - 2014-05-23 19:15 - 00000000 ____D () C:\ProgramData\EA Core
2014-05-19 13:10 - 2014-05-19 13:10 - 00001293 _____ () C:\Users\Public\Desktop\Plants vs. Zombies.lnk
2014-05-19 13:06 - 2014-05-19 13:07 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2014-05-19 13:05 - 2014-06-03 09:45 - 00000000 ____D () C:\Users\MICHAEL\AppData\Roaming\Origin
2014-05-19 13:04 - 2014-05-23 19:15 - 00000000 ____D () C:\Users\MICHAEL\AppData\Local\Origin
2014-05-19 13:03 - 2014-06-12 12:12 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-05-19 13:03 - 2014-06-03 15:01 - 00000000 ____D () C:\ProgramData\Origin
2014-05-19 13:03 - 2014-05-23 19:16 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-05-19 13:03 - 2014-05-19 13:03 - 00000993 _____ () C:\Users\Public\Desktop\Origin.lnk
2014-05-19 13:02 - 2014-05-19 13:02 - 17009768 _____ (Electronic Arts, Inc.) C:\Users\MICHAEL\Downloads\OriginThinSetup.exe
2014-05-17 17:49 - 2014-06-03 09:39 - 00000000 ____D () C:\users\postgres
2014-05-17 17:49 - 2014-05-17 17:49 - 00000020 ___SH () C:\Users\postgres\ntuser.ini
2014-05-17 17:49 - 2013-08-22 07:36 - 00000000 ____D () C:\Users\postgres\AppData\Local\Temp
2014-05-17 17:48 - 2014-05-17 17:48 - 00000000 ____D () C:\Program Files\PostgreSQL
2014-05-17 17:42 - 2014-05-27 13:21 - 00000000 ____D () C:\Users\MICHAEL\AppData\Local\PokerTracker 4
2014-05-17 17:42 - 2014-05-17 17:42 - 00005037 _____ () C:\ProgramData\flwjycbm.bab
2014-05-17 06:38 - 2014-05-17 06:38 - 00065243 _____ () C:\Users\MICHAEL\Downloads\game1.t3v
2014-05-17 06:16 - 2014-05-17 06:16 - 00842224 _____ () C:\Users\MICHAEL\Downloads\community.t3
2014-05-17 06:15 - 2014-05-27 13:22 - 00000000 ____D () C:\Program Files (x86)\PokerTracker 4
2014-05-17 06:15 - 2014-05-17 06:15 - 00001088 _____ () C:\Users\MICHAEL\Desktop\PokerTracker 4.lnk
2014-05-17 06:14 - 2014-05-17 06:14 - 61682384 _____ () C:\Users\MICHAEL\Downloads\PT-Install-v4.10.9.exe
2014-05-14 20:57 - 2014-05-20 04:54 - 00000000 ____D () C:\Users\MICHAEL\AppData\Local\eclipse
2014-05-14 20:56 - 2014-05-27 13:15 - 00000000 ____D () C:\Program Files (x86)\CarbonPoker
2014-05-14 20:56 - 2014-05-14 21:08 - 00000000 ____D () C:\Users\MICHAEL\AppData\Local\CarbonPoker
2014-05-14 20:56 - 2014-05-14 20:56 - 00001920 _____ () C:\Users\MICHAEL\Desktop\CarbonPoker.lnk
2014-05-14 20:55 - 2014-05-14 20:55 - 51952576 _____ () C:\Users\MICHAEL\Downloads\PokerInstaller.exe
2014-05-13 20:00 - 2014-03-23 18:30 - 00257880 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\WdFilter.sys
2014-05-13 20:00 - 2014-03-23 18:30 - 00123224 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\WdNisDrv.sys
2014-05-13 20:00 - 2014-03-23 18:27 - 00035856 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\WdBoot.sys
2014-05-13 20:00 - 2014-03-12 23:42 - 00308224 _____ (Microsoft Corporation) C:\Windows\System32\wusa.exe
2014-05-13 20:00 - 2014-03-12 22:51 - 00305152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wusa.exe
2014-05-13 19:59 - 2014-04-11 02:03 - 00555736 _____ (Microsoft Corporation) C:\Windows\System32\twinapi.appcore.dll
2014-05-13 19:59 - 2014-04-11 02:03 - 00054776 _____ (Microsoft Corporation) C:\Windows\System32\wuauclt.exe
2014-05-13 19:59 - 2014-04-11 00:25 - 00419928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
2014-05-13 19:59 - 2014-04-10 22:04 - 00056320 _____ (Microsoft Corporation) C:\Windows\System32\wups.dll
2014-05-13 19:59 - 2014-04-10 21:53 - 00079872 _____ (Microsoft Corporation) C:\Windows\System32\WSReset.exe
2014-05-13 19:59 - 2014-04-10 21:22 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-05-13 19:59 - 2014-04-10 19:54 - 00201728 _____ (Microsoft Corporation) C:\Windows\System32\ubpm.dll
2014-05-13 19:59 - 2014-04-10 19:36 - 11792384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2014-05-13 19:59 - 2014-04-10 19:24 - 13288960 _____ (Microsoft Corporation) C:\Windows\System32\twinui.dll
2014-05-13 19:59 - 2014-04-10 19:06 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-05-13 19:59 - 2014-04-10 19:05 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-05-13 19:59 - 2014-04-10 19:05 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-05-13 19:59 - 2014-04-10 19:02 - 00249344 _____ (Microsoft Corporation) C:\Windows\System32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-05-13 19:59 - 2014-04-10 19:02 - 00035328 _____ (Microsoft Corporation) C:\Windows\System32\wuapp.exe
2014-05-13 19:59 - 2014-04-10 19:01 - 00137728 _____ (Microsoft Corporation) C:\Windows\System32\wuwebv.dll
2014-05-13 19:59 - 2014-04-10 19:00 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-05-13 19:59 - 2014-04-10 18:59 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-05-13 19:59 - 2014-04-10 18:57 - 00190976 _____ (Microsoft Corporation) C:\Windows\System32\storewuauth.dll
2014-05-13 19:59 - 2014-04-10 18:56 - 00381440 _____ (Microsoft Corporation) C:\Windows\System32\WUSettingsProvider.dll
2014-05-13 19:59 - 2014-04-10 18:55 - 00093696 _____ (Microsoft Corporation) C:\Windows\System32\wudriver.dll
2014-05-13 19:59 - 2014-04-10 18:53 - 00827392 _____ (Microsoft Corporation) C:\Windows\System32\wuapi.dll
2014-05-13 19:59 - 2014-04-10 18:52 - 03464192 _____ (Microsoft Corporation) C:\Windows\System32\wuaueng.dll
2014-05-13 19:59 - 2014-04-10 18:46 - 01705472 _____ (Microsoft Corporation) C:\Windows\System32\wucltux.dll
2014-05-13 19:59 - 2014-04-10 18:36 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2014-05-13 19:59 - 2014-04-10 18:34 - 00754688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2014-05-13 19:59 - 2014-04-10 18:29 - 01054208 _____ (Microsoft Corporation) C:\Windows\System32\twinui.appcore.dll
2014-05-13 19:59 - 2014-04-10 18:25 - 00921088 _____ (Microsoft Corporation) C:\Windows\System32\WSShared.dll
2014-05-13 19:58 - 2014-05-05 20:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2014-05-13 19:58 - 2014-05-05 19:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-13 19:58 - 2014-05-05 19:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2014-05-13 19:58 - 2014-05-05 18:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-13 19:58 - 2014-04-08 14:46 - 00086688 _____ (Microsoft Corporation) C:\Windows\System32\mrt_map.dll
2014-05-13 19:58 - 2014-04-08 14:46 - 00028320 _____ (Microsoft Corporation) C:\Windows\System32\mrt100.dll
2014-05-13 19:58 - 2014-04-08 10:54 - 00080032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mrt_map.dll
2014-05-13 19:58 - 2014-04-08 10:54 - 00026784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mrt100.dll
2014-05-13 19:58 - 2014-03-27 01:12 - 21225584 _____ (Microsoft Corporation) C:\Windows\System32\shell32.dll
2014-05-13 19:58 - 2014-03-26 23:48 - 18679728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-13 10:11 - 2014-05-13 10:11 - 17938608 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe

==================== One Month Modified Files and Folders =======

2014-06-12 13:30 - 2014-03-27 22:11 - 00000000 ____D () C:\Users\MICHAEL\AppData\Local\Temp
2014-06-12 13:28 - 2014-06-12 13:28 - 02081792 _____ (Farbar) C:\Users\MICHAEL\Downloads\FRST64.exe
2014-06-12 13:22 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\rescache
2014-06-12 13:09 - 2014-03-29 14:51 - 00000000 __RDO () C:\Users\MICHAEL\SkyDrive
2014-06-12 13:07 - 2013-04-20 10:26 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1561021782-2498786845-985757134-1001
2014-06-12 13:07 - 2013-04-20 10:20 - 00000000 ____D () C:\Users\MICHAEL\Documents\Bluetooth Folder
2014-06-12 13:00 - 2013-01-24 14:47 - 00000000 ____D () C:\Program Files (x86)\Dell Backup and Recovery
2014-06-12 12:57 - 2013-11-13 23:28 - 00865408 _____ () C:\Windows\System32\PerfStringBackup.INI
2014-06-12 12:53 - 2014-06-12 12:15 - 00003176 _____ () C:\Windows\setupact.log
2014-06-12 12:53 - 2014-03-27 22:07 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-06-12 12:53 - 2013-04-20 11:02 - 00000441 _____ () C:\Windows\System32\Drivers\etc\hosts.ics
2014-06-12 12:15 - 2014-06-12 12:15 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-12 12:12 - 2014-05-19 13:03 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-06-12 11:53 - 2014-06-12 11:44 - 00420036 _____ () C:\Windows\WindowsUpdate.log
2014-06-12 11:47 - 2014-04-23 19:18 - 00003950 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{69FFE6F0-0859-47CD-8E78-1863BEE6D018}
2014-06-12 11:43 - 2014-06-12 11:43 - 00000320 _____ () C:\Windows\PFRO.log
2014-06-12 11:43 - 2013-08-22 05:25 - 00524288 ___SH () C:\Windows\System32\config\BBI
2014-06-12 11:43 - 2013-04-25 16:06 - 00000000 ____D () C:\Program Files (x86)\Anvisoft
2014-06-12 11:41 - 2014-04-18 18:08 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-06-12 11:41 - 2014-03-29 16:03 - 00000000 ____D () C:\Windows\Minidump
2014-06-12 11:41 - 2013-04-22 06:45 - 00000000 ____D () C:\Users\MICHAEL\AppData\Roaming\DAEMON Tools Lite
2014-06-12 11:39 - 2014-06-12 11:38 - 00000000 ____D () C:\Users\MICHAEL\AppData\Local\Google
2014-06-12 11:38 - 2014-06-12 11:38 - 00002277 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-06-12 11:38 - 2014-06-12 11:38 - 00000922 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-12 11:38 - 2014-06-12 11:38 - 00000836 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-06-12 11:38 - 2014-06-12 11:38 - 00000000 ____D () C:\Program Files\CCleaner
2014-06-12 11:38 - 2014-06-12 11:38 - 00000000 ____D () C:\Program Files (x86)\Google
2014-06-12 11:35 - 2014-06-12 11:34 - 04748896 _____ (Piriform Ltd) C:\Users\MICHAEL\Downloads\ccsetup414.exe
2014-06-12 06:05 - 2014-03-27 22:11 - 00000000 ____D () C:\users\MICHAEL
2014-06-12 06:04 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-06-03 15:02 - 2013-04-20 10:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-03 15:01 - 2014-05-19 13:03 - 00000000 ____D () C:\ProgramData\Origin
2014-06-03 13:34 - 2014-06-03 13:34 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-03 12:30 - 2014-06-03 12:30 - 00001513 _____ () C:\Users\MICHAEL\Desktop\ark.txt
2014-06-03 12:11 - 2014-06-03 12:10 - 106838808 _____ (Microsoft Corporation) C:\Users\MICHAEL\Downloads\msert.exe
2014-06-03 12:02 - 2014-06-03 12:02 - 05697760 _____ () C:\Users\MICHAEL\Downloads\bitdefender_isecurity_[quickscan].exe
2014-06-03 12:00 - 2014-06-03 11:18 - 00000000 ____D () C:\Users\MICHAEL\AppData\Roaming\QuickScan
2014-06-03 11:26 - 2014-06-03 11:26 - 07747104 _____ (Malwarebytes Corporation ) C:\Users\MICHAEL\Desktop\mbam-rules.exe
2014-06-03 11:23 - 2014-06-03 11:23 - 00370943 _____ () C:\Users\MICHAEL\Desktop\gmer.zip
2014-06-03 11:12 - 2014-06-03 11:12 - 00688992 _____ (Swearware) C:\Users\MICHAEL\Desktop\dds.scr
2014-06-03 09:48 - 2014-06-03 09:48 - 00000000 ____D () C:\Users\MICHAEL\Desktop\Old Firefox Data
2014-06-03 09:47 - 2014-03-28 02:04 - 00000000 ___DC () C:\Windows\Panther
2014-06-03 09:47 - 2013-04-20 10:51 - 00000000 ____D () C:\Users\MICHAEL\AppData\Local\CrashDumps
2014-06-03 09:45 - 2014-05-19 13:05 - 00000000 ____D () C:\Users\MICHAEL\AppData\Roaming\Origin
2014-06-03 09:39 - 2014-05-17 17:49 - 00000000 ____D () C:\users\postgres
2014-06-03 09:26 - 2013-08-22 06:44 - 00353656 _____ () C:\Windows\System32\FNTCACHE.DAT
2014-06-03 09:22 - 2013-08-22 07:36 - 00000000 ___RD () C:\Windows\ToastData
2014-06-03 09:22 - 2013-08-22 07:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2014-06-03 09:22 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\WinStore
2014-06-03 09:22 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\System32\setup
2014-06-03 09:22 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\System32\SecureBootUpdates
2014-06-03 09:22 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\MediaViewer
2014-06-03 09:22 - 2013-08-22 07:36 - 00000000 ____D () C:\Program Files\Windows Portable Devices
2014-06-03 09:22 - 2013-08-22 07:36 - 00000000 ____D () C:\Program Files\Windows Multimedia Platform
2014-06-03 09:22 - 2013-08-22 07:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-06-03 09:22 - 2013-08-22 07:36 - 00000000 ____D () C:\Program Files (x86)\Windows Portable Devices
2014-06-03 09:22 - 2013-08-22 07:36 - 00000000 ____D () C:\Program Files (x86)\Windows Multimedia Platform
2014-06-03 09:22 - 2013-08-22 07:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-06-03 09:22 - 2013-08-22 05:36 - 00000000 ____D () C:\Windows\SysWOW64\oobe
2014-06-03 09:22 - 2013-08-22 05:36 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-06-03 09:22 - 2013-08-22 05:36 - 00000000 ____D () C:\Windows\servicing
2014-06-03 09:21 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\System32\zh-HK
2014-06-03 09:21 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\System32\uk-UA
2014-06-03 09:21 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\System32\tr-TR
2014-06-03 09:21 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\System32\th-TH
2014-06-03 09:21 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\System32\SystemResetPlatform
2014-06-03 09:21 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\System32\sr-Latn-RS
2014-06-03 09:21 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\System32\sr-Latn-CS
2014-06-03 09:21 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\System32\sl-SI
2014-06-03 09:21 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\System32\sk-SK
2014-06-03 09:21 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\System32\ro-RO
2014-06-03 09:21 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\System32\migwiz
2014-06-03 09:21 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\System32\lv-LV
2014-06-03 09:21 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\System32\lt-LT
2014-06-03 09:21 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\System32\hr-HR
2014-06-03 09:21 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\System32\he-IL
2014-06-03 09:21 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\System32\et-EE
2014-06-03 09:21 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\System32\en-GB
2014-06-03 09:21 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\System32\bg-BG
2014-06-03 09:21 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\System32\ar-SA
2014-06-03 09:21 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-06-03 09:21 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\FileManager
2014-06-03 09:21 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\Camera
2014-06-03 09:21 - 2013-08-22 05:36 - 00000000 ____D () C:\Windows\System32\Sysprep
2014-06-03 09:21 - 2013-08-22 05:36 - 00000000 ____D () C:\Windows\System32\oobe
2014-06-03 09:21 - 2013-08-22 05:36 - 00000000 ____D () C:\Windows\System32\Dism
2014-05-29 13:11 - 2013-04-20 11:14 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-29 13:00 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\System32\sru
2014-05-28 20:46 - 2014-04-22 20:26 - 00000000 ____D () C:\Users\MICHAEL\AppData\Roaming\Tropico 4
2014-05-27 13:22 - 2014-05-17 06:15 - 00000000 ____D () C:\Program Files (x86)\PokerTracker 4
2014-05-27 13:21 - 2014-05-17 17:42 - 00000000 ____D () C:\Users\MICHAEL\AppData\Local\PokerTracker 4
2014-05-27 13:15 - 2014-05-14 20:56 - 00000000 ____D () C:\Program Files (x86)\CarbonPoker
2014-05-26 08:39 - 2014-05-26 08:39 - 00003783 _____ () C:\Users\MICHAEL\Downloads\game1.sav
2014-05-26 08:17 - 2014-05-26 08:17 - 07359228 _____ () C:\Users\MICHAEL\Downloads\HorizonsDC21.zip
2014-05-26 08:16 - 2014-05-26 08:16 - 00004441 _____ () C:\Users\MICHAEL\Downloads\Peril_in_Pleasantville_Part_1.torrent
2014-05-26 08:15 - 2014-03-20 16:17 - 00000000 ____D () C:\Users\MICHAEL\AppData\Roaming\Family Project
2014-05-23 19:16 - 2014-05-23 19:16 - 00000000 ____D () C:\ProgramData\PopCap Games
2014-05-23 19:16 - 2014-05-19 13:03 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-05-23 19:15 - 2014-05-23 19:15 - 00000000 ____D () C:\ProgramData\EA Core
2014-05-23 19:15 - 2014-05-19 13:04 - 00000000 ____D () C:\Users\MICHAEL\AppData\Local\Origin
2014-05-20 04:54 - 2014-05-14 20:57 - 00000000 ____D () C:\Users\MICHAEL\AppData\Local\eclipse
2014-05-19 13:10 - 2014-05-19 13:10 - 00001293 _____ () C:\Users\Public\Desktop\Plants vs. Zombies.lnk
2014-05-19 13:07 - 2014-05-19 13:06 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2014-05-19 13:03 - 2014-05-19 13:03 - 00000993 _____ () C:\Users\Public\Desktop\Origin.lnk
2014-05-19 13:02 - 2014-05-19 13:02 - 17009768 _____ (Electronic Arts, Inc.) C:\Users\MICHAEL\Downloads\OriginThinSetup.exe
2014-05-17 17:49 - 2014-05-17 17:49 - 00000020 ___SH () C:\Users\postgres\ntuser.ini
2014-05-17 17:48 - 2014-05-17 17:48 - 00000000 ____D () C:\Program Files\PostgreSQL
2014-05-17 17:42 - 2014-05-17 17:42 - 00005037 _____ () C:\ProgramData\flwjycbm.bab
2014-05-17 06:38 - 2014-05-17 06:38 - 00065243 _____ () C:\Users\MICHAEL\Downloads\game1.t3v
2014-05-17 06:16 - 2014-05-17 06:16 - 00842224 _____ () C:\Users\MICHAEL\Downloads\community.t3
2014-05-17 06:15 - 2014-05-17 06:15 - 00001088 _____ () C:\Users\MICHAEL\Desktop\PokerTracker 4.lnk
2014-05-17 06:14 - 2014-05-17 06:14 - 61682384 _____ () C:\Users\MICHAEL\Downloads\PT-Install-v4.10.9.exe
2014-05-14 21:08 - 2014-05-14 20:56 - 00000000 ____D () C:\Users\MICHAEL\AppData\Local\CarbonPoker
2014-05-14 20:56 - 2014-05-14 20:56 - 00001920 _____ () C:\Users\MICHAEL\Desktop\CarbonPoker.lnk
2014-05-14 20:56 - 2013-04-20 10:24 - 00000000 ____D () C:\Users\MICHAEL\AppData\Roaming\Mozilla
2014-05-14 20:55 - 2014-05-14 20:55 - 51952576 _____ () C:\Users\MICHAEL\Downloads\PokerInstaller.exe
2014-05-14 01:38 - 2012-07-25 23:59 - 00000000 ____D () C:\Windows\CbsTemp
2014-05-14 01:34 - 2013-08-12 23:00 - 00000000 ____D () C:\Windows\System32\MRT
2014-05-14 01:33 - 2013-04-21 11:27 - 93223848 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2014-05-13 10:11 - 2014-05-13 10:11 - 17938608 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-05-13 10:11 - 2013-04-20 11:14 - 00003718 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== Restore Points  =========================

Restore point made on: 2014-05-17 17:46:20

==================== Memory info ===========================

Percentage of memory in use: 8%
Total physical RAM: 12249 MB
Available physical RAM: 11164.73 MB
Total Pagefile: 12249 MB
Available Pagefile: 11198.4 MB
Total Virtual: 131072 MB
Available Virtual: 131071.87 MB

==================== Drives ================================

Drive i: () (Fixed) (Total:0.44 GB) (Free:0.15 GB) NTFS
Drive j: () (Fixed) (Total:14.9 GB) (Free:13.56 GB) FAT32
Drive x: (Boot) (Fixed) (Total:0.5 GB) (Free:0.49 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 1863 GB) (Disk ID: 53DBE9E9)

Partition: GPT Partition Type.

========================================================
Disk: 5 (Size: 15 GB) (Disk ID: D67CADC7)
Partition 1: (Not Active) - (Size=15 GB) - (Type=0C)


LastRegBack: 2014-06-12 13:22

==================== End Of Log ============================

 

Hopefully it tells someone somthing, because my expensive computer is about to fly out of a 2nd floor window. I can't even restore the system to an earlier point, I just get an error message.



#10 Netghost56

Netghost56

  • Members
  • 973 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Texas
  • Local time:12:16 AM

Posted 12 June 2014 - 04:45 PM

I've got a system with a similar issue...did a System Refresh which allowed me to boot to desktop in Normal mode, but like you my 'admin' account is suddenly restricted and can't run anything. I'm currently researching this.



#11 phantomshark

phantomshark
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:16 AM

Posted 12 June 2014 - 04:54 PM

I tried to do a system refresh, but it gives me an error.



#12 phantomshark

phantomshark
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:16 AM

Posted 12 June 2014 - 05:06 PM

I found a site that says others have lost their administrator rights when 8.1 changed the account from a local account to a live account. The workaround involves creating a local account, giving it administrator rights, and then deleting the live account. But my computer will not allow me to add an account, even in safe mode. I am so freaking annoyed right now I want to put my foot through my tv.



#13 phantomshark

phantomshark
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:16 AM

Posted 13 June 2014 - 09:36 PM

Even tried resetting my computer back to factory standards, but no luck. There's an error resetting it and nothing happens.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users