Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Hidden trojan somewhere


  • Please log in to reply
55 replies to this topic

#1 Trave160

Trave160

  • Members
  • 78 posts
  • OFFLINE
  •  
  • Local time:06:03 PM

Posted 11 February 2016 - 06:46 AM

I had previous experiences with adwares and trojans before, did everything I could only issue is now there's one virus somewhere that's adding DNS registries I used Roguekiller and only 2 of those would show up now, used to be 4.
 

¤¤¤ Registry : 2 ¤¤¤
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{9DD5EEF3-28BB-415C-A683-E22910617264} | NameServer : 113.21.228.1 8.8.8.8 ([BD][-])  -> Found
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{9DD5EEF3-28BB-415C-A683-E22910617264} | NameServer : 113.21.228.1 8.8.8.8 ([BD][-])  -> Found
 
Now am using Adwcleaner and the only thing that keeps bugging me is this
 
# AdwCleaner v5.033 - Logfile created 11/02/2016 at 17:34:32
# Updated 07/02/2016 by Xplode
# Database : 2016-02-07.2 [Server]
# Operating system : Windows 10 Pro  (x64)
# Username : TravisLester - DESKTOP-UIC1RTE
# Running from : C:\Users\TravisLester\Downloads\Programs\adwcleaner_5.033.exe
# Option : Scan
 
***** [ Services ] *****
 
 
***** [ Folders ] *****
 
Folder Found : C:\Users\TravisLester\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdabfienifkbhoihedcgeogidfmibmhp
 
I reset, I uninstalled and reinstalled the browser. Still doesn't go away, it slows my OS and affects my mouse as well. Please help
 

 



BC AdBot (Login to Remove)

 


#2 nasdaq

nasdaq

  • Malware Response Team
  • 39,903 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:02:03 PM

Posted 11 February 2016 - 08:55 AM

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===


Download Malwarebytes' Anti-Malware from Here

Double-click mbam-setup-2.X.X.XXXX.exe to install the application (X's are the current version number).
  • Make sure a checkmark is placed next to Launch Malwarebytes' Anti-Malware, then click Finish.
  • Once MBAM opens, when it says Your databases are out of date, click the Fix Now button.
  • Click the Settings tab at the top, and then in the left column, select Detections and Protections, and if not already checked place a checkmark in the selection box for Scan for rootkits.
  • Click the Scan tab at the top of the program window, select Threat Scan and click the Scan Now button.
  • If you receive a message that updates are available, click the Update Now button (the update will be downloaded, installed, and the scan will start).
  • The scan may take some time to finish,so please be patient.
  • If potential threats are detected, ensure that Quarantine is selected as the Action for all the listed items, and click the Apply Actions button.
  • While still on the Scan tab, click the link for View detailed log, and in the window that opens click the Export button, select Text file (*.txt), and save the log to your Desktop.
  • The log is automatically saved by MBAM and can also be viewed by clicking the History tab and then selecting Application Logs.
POST THE LOG FOR MY REVIEW.

Note:
If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts.
Click OK to either and let MBAM proceed with the disinfection process.
If asked to restart the computer, please do so immediately.

===

=======

Please download AdwCleaner by Xplode onto your Desktop.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click the Scan button and wait for the process to complete.
  • Click the LogFile button and the report will open in Notepad.
IMPORTANT
  • If you click the Clean button all items listed in the report will be removed.
If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click the Scan button and wait for the process to complete.
  • Check off the element(s) you wish to keep.
  • Click on the Clean button follow the prompts.
  • A log file will automatically open after the scan has finished.
  • Please post the content of that log file with your next answer.
  • You can find the log file at C:\AdwCleanerCx.txt (x is a number).
===

Download the version of this tool for your operating system.
Farbar Recovery Scan Tool (64 bit)
Farbar Recovery Scan Tool (32 bit)
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

How to attach a file to your reply:
In the Reply section in the bottom of the topic Click the "more reply Options" button.
attachlogs.png

Attach the file.
Select the "Choose a File" navigate to the location of the File.
Click the file you wish to Attach.

Click the Add reply button.
===


Please post the logs.

Let me know what problems persists.

#3 Trave160

Trave160
  • Topic Starter

  • Members
  • 78 posts
  • OFFLINE
  •  
  • Local time:06:03 PM

Posted 12 February 2016 - 03:48 AM

I'll do this within a day but will MB be able to find the trojan, I scanned with it multiple times before but nothing different shows up.


Edited by Trave160, 12 February 2016 - 03:48 AM.


#4 nasdaq

nasdaq

  • Malware Response Team
  • 39,903 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:02:03 PM

Posted 12 February 2016 - 09:50 AM

There is no need to run MBAM if already done.

Continue with the rest of the instructions.

#5 Trave160

Trave160
  • Topic Starter

  • Members
  • 78 posts
  • OFFLINE
  •  
  • Local time:06:03 PM

Posted 13 February 2016 - 05:34 AM

Here it is, both of them.

Attached Files



#6 nasdaq

nasdaq

  • Malware Response Team
  • 39,903 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:02:03 PM

Posted 13 February 2016 - 10:50 AM

Is the entry in bold from the installation of this project?
https://sourceforge.net/projects/gkernel/
R3 gkernel; C:\Users\TravisLester\AppData\Local\Temp\gkernel.sys [31512 2016-02-13] ()

If you did not install it and do not know what it is then please add these two lines to the fix below before saving the Fixlog.txt file.
R3 gkernel; C:\Users\TravisLester\AppData\Local\Temp\gkernel.sys [31512 2016-02-13] ()
C:\Users\TravisLester\AppData\Local\Temp\gkernel.sys


===

Please run the RogueKiller tool and fix all that is found.

Do not restart the computer just yet.

===

Press the windows key Windows_Logo_key.gif+ r on your keyboard at the same time. This will open the RUN BOX.
Type Notepad and and click the OK key.
Please copy the entire contents of the code box below to the a new file.
 
start

CreateRestorePoint:
EmptyTemp:
CloseProcesses:
RemoveProxy:
cmd: ipconfig /flushdns
cmd: IPCONFIG /release
cmd: IPCONFIG /renew

(BitTorrent Inc.) C:\Users\TravisLester\AppData\Roaming\uTorrent\updates\3.4.5_41712\utorrentie.exe
(BitTorrent Inc.) C:\Users\TravisLester\AppData\Roaming\uTorrent\updates\3.4.5_41712\utorrentie.exe
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-3663931216-1296604545-1602407234-1001\...\Run: [AdobeBridge] => [X]
ShellExecuteHooks:  - {AEB6717E-7E19-11d0-97EE-00C04FD91972} -  No File [ ]
ShellExecuteHooks-x32:  - {AEB6717E-7E19-11d0-97EE-00C04FD91972} -  No File [ ]
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-3663931216-1296604545-1602407234-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
S3 avchv; \SystemRoot\system32\DRIVERS\avchv.sys [X]
S3 cpuz137; \??\C:\Users\TRAVIS~1\AppData\Local\Temp\cpuz137\cpuz137_x64.sys [X]
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
C:\Users\TravisLester\AppData\Roaming\uTorrent\updates\3.4.5_41712\utorrentie.exe


End
Save the file as fixlist.txt in the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the Farbar log you have submitted.

Run FRST and click Fix only once and wait.

Restart the computer normally to reset the registry.

The tool will create a log (Fixlog.txt) please post it to your reply.
===

How is the computer running now?

#7 Trave160

Trave160
  • Topic Starter

  • Members
  • 78 posts
  • OFFLINE
  •  
  • Local time:06:03 PM

Posted 13 February 2016 - 09:29 PM

Fix result of Farbar Recovery Scan Tool (x64) Version:07-02-2016
Ran by TravisLester (2016-02-14 08:18:39) Run:2
Running from C:\Users\TravisLester\Desktop\New folder
Loaded Profiles: TravisLester (Available Profiles: TravisLester)
Boot Mode: Normal
==============================================
 
fixlist content:
*****************
start
 
CreateRestorePoint:
EmptyTemp:
CloseProcesses:
RemoveProxy:
cmd: ipconfig /flushdns
cmd: IPCONFIG /release
cmd: IPCONFIG /renew
 
(BitTorrent Inc.) C:\Users\TravisLester\AppData\Roaming\uTorrent\updates\3.4.5_41712\utorrentie.exe
(BitTorrent Inc.) C:\Users\TravisLester\AppData\Roaming\uTorrent\updates\3.4.5_41712\utorrentie.exe
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-3663931216-1296604545-1602407234-1001\...\Run: [AdobeBridge] => [X]
ShellExecuteHooks:  - {AEB6717E-7E19-11d0-97EE-00C04FD91972} -  No File [ ]
ShellExecuteHooks-x32:  - {AEB6717E-7E19-11d0-97EE-00C04FD91972} -  No File [ ]
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-3663931216-1296604545-1602407234-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
S3 avchv; \SystemRoot\system32\DRIVERS\avchv.sys [X]
S3 cpuz137; \??\C:\Users\TRAVIS~1\AppData\Local\Temp\cpuz137\cpuz137_x64.sys [X]
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
C:\Users\TravisLester\AppData\Roaming\uTorrent\updates\3.4.5_41712\utorrentie.exe
R3 gkernel; C:\Users\TravisLester\AppData\Local\Temp\gkernel.sys [31512 2016-02-13] ()
C:\Users\TravisLester\AppData\Local\Temp\gkernel.sys
 
 
End
*****************
 
Restore point was successfully created.
Processes closed successfully.
 
========= RemoveProxy: =========
 
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully
HKU\S-1-5-21-3663931216-1296604545-1602407234-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully
HKU\S-1-5-21-3663931216-1296604545-1602407234-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully
 
 
========= End of RemoveProxy: =========
 
 
=========  ipconfig /flushdns =========
 
 
Windows IP Configuration
 
Successfully flushed the DNS Resolver Cache.
 
========= End of CMD: =========
 
 
=========  IPCONFIG /release =========
 
 
Windows IP Configuration
 
 
Ethernet adapter Ethernet:
 
   Connection-specific DNS Suffix  . : 
   Link-local IPv6 Address . . . . . : fe80::750e:4d09:f9a:6569%6
   Autoconfiguration IPv4 Address. . : 169.254.101.105
   Subnet Mask . . . . . . . . . . . : 255.255.0.0
   Default Gateway . . . . . . . . . : 
 
Tunnel adapter isatap.{4FDBF931-D360-4BC4-9911-3E2F393FCCA4}:
 
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
 
========= End of CMD: =========
 
 
=========  IPCONFIG /renew =========
 
 
Windows IP Configuration
 
An error occurred while renewing interface Ethernet : unable to contact your DHCP server. Request has timed out.
 
========= End of CMD: =========
 
C:\Users\TravisLester\AppData\Roaming\uTorrent\updates\3.4.5_41712\utorrentie.exe => No running process found
C:\Users\TravisLester\AppData\Roaming\uTorrent\updates\3.4.5_41712\utorrentie.exe => No running process found
HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SDWinLogon => key not found. 
HKU\S-1-5-21-3663931216-1296604545-1602407234-1001\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge => value not found.
HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\ShellExecuteHooks\\{AEB6717E-7E19-11d0-97EE-00C04FD91972} => value not found.
HKCR\CLSID\{AEB6717E-7E19-11d0-97EE-00C04FD91972} => key not found. 
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\ShellExecuteHooks\\{AEB6717E-7E19-11d0-97EE-00C04FD91972} => value not found.
HKCR\Wow6432Node\CLSID\{AEB6717E-7E19-11d0-97EE-00C04FD91972} => key not found. 
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer => key not found. 
HKU\S-1-5-21-3663931216-1296604545-1602407234-1001\SOFTWARE\Policies\Microsoft\Internet Explorer => key not found. 
avchv => service not found.
cpuz137 => service not found.
wfpcapture => service not found.
C:\Users\TravisLester\AppData\Roaming\uTorrent\updates\3.4.5_41712\utorrentie.exe => moved successfully
gkernel => service not found.
C:\Users\TravisLester\AppData\Local\Temp\gkernel.sys => moved successfully
EmptyTemp: => 20.8 MB temporary data Removed.
 
 
The system needed a reboot.
 
==== End of Fixlog 08:20:52 ====


#8 nasdaq

nasdaq

  • Malware Response Team
  • 39,903 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:02:03 PM

Posted 14 February 2016 - 08:00 AM

How is the system running now?

#9 Trave160

Trave160
  • Topic Starter

  • Members
  • 78 posts
  • OFFLINE
  •  
  • Local time:06:03 PM

Posted 14 February 2016 - 01:24 PM

Nothing much has changed sadly, still getting 2 DNS registries from RK. I just synced my google account to Chrome to get my backup profile. Yet am getting weird add-ons being removed by Adwcleaner



#10 nasdaq

nasdaq

  • Malware Response Team
  • 39,903 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:02:03 PM

Posted 14 February 2016 - 02:49 PM


The RogueKiller tool reports this IP address.
NameServer : 113.21.228.1

Can you relate to it?
https://who.is/whois-ip/ip-address/113.21.228.1
===

Yet am getting weird add-ons being removed by Adwcleaner

Can you paste the contents of the scan log that your last clean. I would like to have a look at it.


Windows IP Configuration

An error occurred while renewing interface Ethernet : unable to contact your DHCP server. Request has timed out.

This may need to be looked at. It's not my forte.
What I suggest is to download and run this Minitoolbox.

Create a new topic in the Networking forrum and paste the contents of the Result.txt file. Link Below.

Please download MiniToolBox to Desktop and run it.

Check mark the following boxes:
  • Flush DNS
  • Report IE Proxy Settings
  • Reset IE Proxy Settings
  • Report FF Proxy Settings
  • Reset FF Proxy Settings
  • List last 10 Event Viewer log
  • List content of Hosts
  • List IP Configuration
  • List Winsock Entries
  • Click Go and copy/paste the log (Result.txt) into your next post.
  • Note: When using "Reset FF Proxy Settings" option Firefox should be closed.
Networking forum.
http://www.bleepingcomputer.com/forums/f/21/networking/

#11 Trave160

Trave160
  • Topic Starter

  • Members
  • 78 posts
  • OFFLINE
  •  
  • Local time:06:03 PM

Posted 14 February 2016 - 10:54 PM

Loggings from Roguekiller:

~

~

RogueKiller V11.0.11.0 (x64) [Feb  8 2016] (Free) by Adlice Software
 
Operating System : Windows 10 (10.0.10240) 64 bits version
Started in : Normal mode
User : TravisLester [Administrator]
Started from : C:\Users\TravisLester\Downloads\Programs\RogueKillerX64_2.exe
Mode : Scan -- Date : 02/15/2016 09:01:34
 
¤¤¤ Processes : 0 ¤¤¤
 
¤¤¤ Registry : 2 ¤¤¤
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C5743A67-7EBD-4B79-8EE0-24B8AE17AD74} | NameServer : 113.21.228.1 8.8.8.8 ([BD][-])  -> Found
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{C5743A67-7EBD-4B79-8EE0-24B8AE17AD74} | NameServer : 113.21.228.1 8.8.8.8 ([BD][-])  -> Found
 
¤¤¤ Tasks : 0 ¤¤¤
 
¤¤¤ Files : 0 ¤¤¤
 
¤¤¤ Hosts File : 0 ¤¤¤
 
¤¤¤ Antirootkit : 0 (Driver: Loaded) ¤¤¤
 
¤¤¤ Web browsers : 0 ¤¤¤
 
¤¤¤ MBR Check : ¤¤¤
+++++ PhysicalDrive0: TOSHIBA DT01ACA200 ATA Device +++++
--- User ---
[MBR] 279639dce8e2bb5370ccb668198b1b16
[BSP] 9527d2764dc589c10877779d94ae4e11 : Windows Vista/7/8 MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 99999 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 204800000 | Size: 800000 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
2 - [XXXXXX] EXTEN-LBA (0xf) [VISIBLE] Offset (sectors): 1843202029 | Size: 900000 MB
3 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 3686403420 | Size: 107717 MB [Error reading VBR! ([83] An attempt was made to move the file pointer before the beginning of the file. )]
User != LL1 ... KO!
--- LL1 ---
[MBR] 279639dce8e2bb5370ccb668198b1b16
[BSP] 9527d2764dc589c10877779d94ae4e11 : Windows Vista/7/8 MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 99999 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 204800000 | Size: 800000 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
2 - [XXXXXX] EXTEN-LBA (0xf) [VISIBLE] Offset (sectors): 1843202029 | Size: 900000 MB
3 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 3686403420 | Size: 107717 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User != LL2 ... KO!
--- LL2 ---
[MBR] 279639dce8e2bb5370ccb668198b1b16
[BSP] 9527d2764dc589c10877779d94ae4e11 : Windows Vista/7/8 MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 99999 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 204800000 | Size: 800000 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
2 - [XXXXXX] EXTEN-LBA (0xf) [VISIBLE] Offset (sectors): 1843202029 | Size: 900000 MB
3 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 3686403420 | Size: 107717 MB[Invalid]
 
+++++ PhysicalDrive1: WD Elements 10A8 USB Device +++++
--- User ---
[MBR] b9b77c72523e09c8ccaa79ede76a518f
[BSP] c13e2d4368eb099bd8d1ea65c2f1bf42 : Windows Vista/7/8 MBR Code
Partition table:
0 - Microsoft reserved partition | Offset (sectors): 34 | Size: 128 MB
1 - Basic data partition | Offset (sectors): 264192 | Size: 476778 MB
User = LL1 ... OK
Error reading LL2 MBR! ([32] The request is not supported. )
 
Now here's the previous log after I did FRST fix from RK:
~
~
RogueKiller V11.0.10.0 [Feb  1 2016] (Free) by Adlice Software
 
Operating System : Windows 10 (10.0.10240) 64 bits version
Started in : Normal mode
User : TravisLester [Administrator]
Started from : C:\Users\TravisLester\Downloads\Programs\RogueKiller_2.exe
Mode : Delete Aborted -- Date : 02/14/2016 08:17:55
 
¤¤¤ Processes : 3 ¤¤¤
[Suspicious.Path] utorrentie.exe(6320) -- C:\Users\TravisLester\AppData\Roaming\uTorrent\updates\3.4.5_41712\utorrentie.exe[-] -> Killed [TermThr]
[Suspicious.Path] utorrentie.exe(6380) -- C:\Users\TravisLester\AppData\Roaming\uTorrent\updates\3.4.5_41712\utorrentie.exe[-] -> Killed [TermThr]
[Suspicious.Path] (SVC) gkernel -- \??\C:\Users\TRAVIS~1\AppData\Local\Temp\gkernel.sys[7] -> ERROR [41c]
 
¤¤¤ Registry : 2 ¤¤¤
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\gkernel (\??\C:\Users\TRAVIS~1\AppData\Local\Temp\gkernel.sys) -> Deleted
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\gkernel (\??\C:\Users\TRAVIS~1\AppData\Local\Temp\gkernel.sys) -> Deleted
 
¤¤¤ Tasks : 0 ¤¤¤
 
¤¤¤ Files : 0 ¤¤¤
 
¤¤¤ Hosts File : 0 ¤¤¤
 
¤¤¤ Antirootkit : 0 (Driver: Not loaded [0xc000036b]) ¤¤¤
 
¤¤¤ Web browsers : 0 ¤¤¤
 
¤¤¤ MBR Check : ¤¤¤
+++++ PhysicalDrive0: TOSHIBA DT01ACA200 ATA Device +++++
--- User ---
[MBR] 279639dce8e2bb5370ccb668198b1b16
[BSP] 9527d2764dc589c10877779d94ae4e11 : Windows Vista/7/8 MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 99999 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 204800000 | Size: 800000 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
2 - [XXXXXX] EXTEN-LBA (0xf) [VISIBLE] Offset (sectors): 1843202029 | Size: 900000 MB
3 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 3686403420 | Size: 107717 MB [Error reading VBR! ([83] An attempt was made to move the file pointer before the beginning of the file. )]
User != LL1 ... KO!
--- LL1 ---
[MBR] 279639dce8e2bb5370ccb668198b1b16
[BSP] 9527d2764dc589c10877779d94ae4e11 : Windows Vista/7/8 MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 99999 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 204800000 | Size: 800000 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
2 - [XXXXXX] EXTEN-LBA (0xf) [VISIBLE] Offset (sectors): 1843202029 | Size: 900000 MB
3 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 3686403420 | Size: 107717 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User != LL2 ... KO!
--- LL2 ---
[MBR] 279639dce8e2bb5370ccb668198b1b16
[BSP] 9527d2764dc589c10877779d94ae4e11 : Windows Vista/7/8 MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 99999 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 204800000 | Size: 800000 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
2 - [XXXXXX] EXTEN-LBA (0xf) [VISIBLE] Offset (sectors): 1843202029 | Size: 900000 MB
3 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 3686403420 | Size: 107717 MB[Invalid]
 
+++++ PhysicalDrive1: WD Elements 10A8 USB Device +++++
--- User ---
[MBR] b9b77c72523e09c8ccaa79ede76a518f
[BSP] c13e2d4368eb099bd8d1ea65c2f1bf42 : Windows Vista/7/8 MBR Code
Partition table:
0 - Microsoft reserved partition | Offset (sectors): 34 | Size: 128 MB
1 - Basic data partition | Offset (sectors): 264192 | Size: 476778 MB
User = LL1 ... OK
Error reading LL2 MBR! ([32] The request is not supported. )
 

Now the log from Adwcleaner:
~

~

# AdwCleaner v5.033 - Logfile created 15/02/2016 at 08:57:38
# Updated 07/02/2016 by Xplode
# Database : 2016-02-07.2 [Server]
# Operating system : Windows 10 Pro  (x64)
# Username : TravisLester - DESKTOP-UIC1RTE
# Running from : C:\Users\TravisLester\Downloads\Programs\adwcleaner_5.033_2.exe
# Option : Scan
 
***** [ Services ] *****
 
 
***** [ Folders ] *****
 
Folder Found : C:\Users\TravisLester\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdabfienifkbhoihedcgeogidfmibmhp
 
***** [ Files ] *****
 
 
***** [ DLL ] *****
 
 
***** [ Shortcuts ] *****
 
 
***** [ Scheduled tasks ] *****
 
 
***** [ Registry ] *****
 
 
***** [ Web browsers ] *****
 
[C:\Users\TravisLester\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Found : pdabfienifkbhoihedcgeogidfmibmhp
 
########## EOF - C:\AdwCleaner\AdwCleaner[S3].txt - [871 bytes] ##########
 
And MNTB:
~
~
MiniToolBox by Farbar  Version: 07-02-2016 01
Ran by TravisLester (administrator) on 15-02-2016 at 08:11:50
Running from "C:\Users\TravisLester\Downloads\Programs"
Microsoft Windows 10 Pro  (X64)
Model: To be filled by O.E.M. Manufacturer: Gigabyte Technology Co., Ltd.
Boot Mode: Normal
***************************************************************************
 
========================= Flush DNS: ===================================
 
Windows IP Configuration
 
Successfully flushed the DNS Resolver Cache.
 
========================= IE Proxy Settings: ============================== 
 
Proxy is not enabled.
No Proxy Server is set.
 
"Reset IE Proxy Settings": IE Proxy Settings were reset.
 
========================= FF Proxy Settings: ============================== 
 
 
"Reset FF Proxy Settings": Firefox Proxy settings were reset.
 
========================= Hosts content: =================================
127.0.0.1 localhost
========================= IP Configuration: ================================
 
Realtek PCIe GBE Family Controller = Ethernet (Connected)
 
 
# ----------------------------------
# IPv4 Configuration
# ----------------------------------
pushd interface ipv4
 
reset
set global icmpredirects=enabled
add address name="Ethernet" address=192.168.137.1 mask=255.255.255.0
 
 
popd
# End of IPv4 configuration
 
 
 
Windows IP Configuration
 
   Host Name . . . . . . . . . . . . : DESKTOP-UIC1RTE
   Primary Dns Suffix  . . . . . . . : 
   Node Type . . . . . . . . . . . . : Mixed
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
 
PPP adapter Broadband Connection:
 
   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : Broadband Connection
   Physical Address. . . . . . . . . : 
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv4 Address. . . . . . . . . . . : 45.127.49.122(Preferred) 
   Subnet Mask . . . . . . . . . . . : 255.255.255.255
   Default Gateway . . . . . . . . . : 0.0.0.0
   DNS Servers . . . . . . . . . . . : 113.21.228.1
                                       8.8.8.8
   NetBIOS over Tcpip. . . . . . . . : Disabled
 
Tunnel adapter 6TO4 Adapter:
 
   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : Microsoft 6to4 Adapter
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv6 Address. . . . . . . . . . . : 2002:2d7f:317a::2d7f:317a(Preferred) 
   Default Gateway . . . . . . . . . : 
   DHCPv6 IAID . . . . . . . . . . . : 419430400
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1E-24-B6-60-FC-AA-14-BC-9C-EE
   DNS Servers . . . . . . . . . . . : 113.21.228.1
                                       8.8.8.8
   NetBIOS over Tcpip. . . . . . . . : Disabled
 
Ethernet adapter Ethernet:
 
   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller
   Physical Address. . . . . . . . . : FC-AA-14-BC-9C-EE
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::750e:4d09:f9a:6569%6(Preferred) 
   IPv4 Address. . . . . . . . . . . : 192.168.137.1(Preferred) 
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 
   DHCPv6 IAID . . . . . . . . . . . : 66890260
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1E-24-B6-60-FC-AA-14-BC-9C-EE
   DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
                                       fec0:0:0:ffff::2%1
                                       fec0:0:0:ffff::3%1
   NetBIOS over Tcpip. . . . . . . . : Enabled
 
Tunnel adapter isatap.{4FDBF931-D360-4BC4-9911-3E2F393FCCA4}:
 
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
 
Tunnel adapter isatap.{C5743A67-7EBD-4B79-8EE0-24B8AE17AD74}:
 
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
Server:  UnKnown
Address:  113.21.228.1
 
Name:    google.com
Addresses:  2404:6800:4002:803::200e
 103.21.42.230
 103.21.42.219
 103.21.42.207
 103.21.42.234
 103.21.42.249
 103.21.42.241
 103.21.42.215
 103.21.42.222
 103.21.42.251
 103.21.42.211
 103.21.42.237
 103.21.42.226
 103.21.42.236
 103.21.42.221
 103.21.42.245
 
 
Pinging google.com [103.21.42.219] with 32 bytes of data:
Reply from 103.21.42.219: bytes=32 time=7ms TTL=60
Reply from 103.21.42.219: bytes=32 time=7ms TTL=60
 
Ping statistics for 103.21.42.219:
    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 7ms, Maximum = 7ms, Average = 7ms
Server:  UnKnown
Address:  113.21.228.1
 
Name:    yahoo.com
Addresses:  2001:4998:44:204::a7
 2001:4998:c:a06::2:4008
 2001:4998:58:c02::a9
 98.139.183.24
 206.190.36.45
 98.138.253.109
 
 
Pinging yahoo.com [206.190.36.45] with 32 bytes of data:
Reply from 206.190.36.45: bytes=32 time=307ms TTL=45
Reply from 206.190.36.45: bytes=32 time=314ms TTL=45
 
Ping statistics for 206.190.36.45:
    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 307ms, Maximum = 314ms, Average = 310ms
 
Pinging 127.0.0.1 with 32 bytes of data:
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
 
Ping statistics for 127.0.0.1:
    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 0ms, Average = 0ms
===========================================================================
Interface List
 27...........................Broadband Connection
 12...00 00 00 00 00 00 00 e0 Microsoft 6to4 Adapter
  6...fc aa 14 bc 9c ee ......Realtek PCIe GBE Family Controller
  1...........................Software Loopback Interface 1
  5...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
 14...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
===========================================================================
 
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0         On-link     45.127.49.122     11
    45.127.49.122  255.255.255.255         On-link     45.127.49.122    266
        127.0.0.0        255.0.0.0         On-link         127.0.0.1   4531
        127.0.0.1  255.255.255.255         On-link         127.0.0.1   4531
  127.255.255.255  255.255.255.255         On-link         127.0.0.1   4531
      169.254.0.0      255.255.0.0         On-link     192.168.137.1   4521
  169.254.255.255  255.255.255.255         On-link     192.168.137.1   4501
    192.168.137.0    255.255.255.0         On-link     192.168.137.1   4501
    192.168.137.1  255.255.255.255         On-link     192.168.137.1   4501
  192.168.137.255  255.255.255.255         On-link     192.168.137.1   4501
        224.0.0.0        240.0.0.0         On-link         127.0.0.1   4531
        224.0.0.0        240.0.0.0         On-link     192.168.137.1   4501
        224.0.0.0        240.0.0.0         On-link     45.127.49.122     11
  255.255.255.255  255.255.255.255         On-link         127.0.0.1   4531
  255.255.255.255  255.255.255.255         On-link     192.168.137.1   4501
  255.255.255.255  255.255.255.255         On-link     45.127.49.122    266
===========================================================================
Persistent Routes:
  None
 
IPv6 Route Table
===========================================================================
Active Routes:
 If Metric Network Destination      Gateway
  1    306 ::1/128                  On-link
 12   1010 2002::/16                On-link
 12    266 2002:2d7f:317a::2d7f:317a/128
                                    On-link
  6    276 fe80::/64                On-link
  6    276 fe80::750e:4d09:f9a:6569/128
                                    On-link
  1    306 ff00::/8                 On-link
  6    276 ff00::/8                 On-link
===========================================================================
Persistent Routes:
  None
========================= Winsock entries =====================================
 
Catalog5 01 C:\Windows\SysWOW64\napinsp.dll [54784] (Microsoft Corporation)
Catalog5 02 C:\Windows\SysWOW64\pnrpnsp.dll [70144] (Microsoft Corporation)
Catalog5 03 C:\Windows\SysWOW64\pnrpnsp.dll [70144] (Microsoft Corporation)
Catalog5 04 C:\Windows\SysWOW64\NLAapi.dll [64000] (Microsoft Corporation)
Catalog5 05 C:\Windows\SysWOW64\mswsock.dll [306528] (Microsoft Corporation)
Catalog5 06 C:\Windows\SysWOW64\winrnr.dll [23552] (Microsoft Corporation)
Catalog5 07 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [147456] (Apple Inc.)
Catalog9 01 C:\Windows\SysWOW64\mswsock.dll [306528] (Microsoft Corporation)
Catalog9 02 C:\Windows\SysWOW64\mswsock.dll [306528] (Microsoft Corporation)
Catalog9 03 C:\Windows\SysWOW64\mswsock.dll [306528] (Microsoft Corporation)
Catalog9 04 C:\Windows\SysWOW64\mswsock.dll [306528] (Microsoft Corporation)
Catalog9 05 C:\Windows\SysWOW64\mswsock.dll [306528] (Microsoft Corporation)
Catalog9 06 C:\Windows\SysWOW64\mswsock.dll [306528] (Microsoft Corporation)
Catalog9 07 C:\Windows\SysWOW64\mswsock.dll [306528] (Microsoft Corporation)
Catalog9 08 C:\Windows\SysWOW64\mswsock.dll [306528] (Microsoft Corporation)
Catalog9 09 C:\Windows\SysWOW64\mswsock.dll [306528] (Microsoft Corporation)
Catalog9 10 C:\Windows\SysWOW64\mswsock.dll [306528] (Microsoft Corporation)
Catalog9 11 C:\Windows\SysWOW64\mswsock.dll [306528] (Microsoft Corporation)
x64-Catalog5 01 C:\Windows\System32\napinsp.dll [67072] (Microsoft Corporation)
x64-Catalog5 02 C:\Windows\System32\pnrpnsp.dll [87040] (Microsoft Corporation)
x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [87040] (Microsoft Corporation)
x64-Catalog5 04 C:\Windows\System32\NLAapi.dll [79872] (Microsoft Corporation)
x64-Catalog5 05 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation)
x64-Catalog5 06 C:\Windows\System32\winrnr.dll [31744] (Microsoft Corporation)
x64-Catalog9 01 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation)
x64-Catalog9 02 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation)
x64-Catalog9 03 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation)
x64-Catalog9 04 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation)
x64-Catalog9 05 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation)
x64-Catalog9 06 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation)
x64-Catalog9 07 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation)
x64-Catalog9 08 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation)
x64-Catalog9 09 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation)
x64-Catalog9 10 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation)
x64-Catalog9 11 C:\Windows\System32\mswsock.dll [364384] (Microsoft Corporation)
 
========================= Event log errors: ===============================
 
Application errors:
==================
Error: (02/15/2016 07:51:02 AM) (Source: Software Protection Platform Service) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004C003
Command-line arguments:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=NetworkAvailable
 
Error: (02/15/2016 07:51:02 AM) (Source: Software Protection Platform Service) (User: )
Description: Acquisition of End User License failed. hr=0xC004C003
Sku Id=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c
 
Error: (02/15/2016 07:51:02 AM) (Source: Software Protection Platform Service) (User: )
Description: License acquisition failure details. 
hr=0xC004C003
 
Error: (02/15/2016 07:51:00 AM) (Source: Software Protection Platform Service) (User: )
Description: Acquisition of End User License failed. hr=0xC004C003
Sku Id=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c
 
Error: (02/15/2016 07:51:00 AM) (Source: Software Protection Platform Service) (User: )
Description: License acquisition failure details. 
hr=0xC004C003
 
Error: (02/15/2016 07:37:17 AM) (Source: Software Protection Platform Service) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0x80072EE7
Command-line arguments:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=NetworkAvailable
 
Error: (02/15/2016 07:37:17 AM) (Source: Software Protection Platform Service) (User: )
Description: Acquisition of End User License failed. hr=0x80072EE7
Sku Id=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c
 
Error: (02/15/2016 07:37:17 AM) (Source: Software Protection Platform Service) (User: )
Description: License acquisition failure details. 
hr=0x80072EE7
 
Error: (02/15/2016 07:37:16 AM) (Source: Software Protection Platform Service) (User: )
Description: Acquisition of End User License failed. hr=0x80072EE7
Sku Id=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c
 
Error: (02/15/2016 07:37:16 AM) (Source: Software Protection Platform Service) (User: )
Description: License acquisition failure details. 
hr=0x80072EE7
 
 
System errors:
=============
Error: (02/15/2016 07:50:57 AM) (Source: DCOM) (User: NT AUTHORITY)
Description: application-specificLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYNETWORK SERVICES-1-5-20LocalHost (Using LRPC)UnavailableUnavailable
 
Error: (02/15/2016 07:37:16 AM) (Source: DCOM) (User: NT AUTHORITY)
Description: application-specificLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYNETWORK SERVICES-1-5-20LocalHost (Using LRPC)UnavailableUnavailable
 
Error: (02/15/2016 12:31:03 AM) (Source: Service Control Manager) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Sync Host_Session1 service to connect.
 
Error: (02/15/2016 12:30:57 AM) (Source: DCOM) (User: DESKTOP-UIC1RTE)
Description: CortanaUI.AppXd4tad4d57t4wtdbnnmb8v2xtzym8c1n8.mca
 
Error: (02/15/2016 12:30:53 AM) (Source: Service Control Manager) (User: )
Description: The Sync Host_Session1 service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 10000 milliseconds: Restart the service.
 
Error: (02/14/2016 11:45:27 PM) (Source: DCOM) (User: NT AUTHORITY)
Description: application-specificLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYNETWORK SERVICES-1-5-20LocalHost (Using LRPC)UnavailableUnavailable
 
Error: (02/14/2016 11:42:58 PM) (Source: Service Control Manager) (User: )
Description: The Sync Host_Session1 service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 10000 milliseconds: Restart the service.
 
Error: (02/14/2016 06:22:12 PM) (Source: Service Control Manager) (User: )
Description: The Windows Search service terminated unexpectedly.  It has done this 2 time(s).  The following corrective action will be taken in 30000 milliseconds: Restart the service.
 
Error: (02/14/2016 06:22:12 PM) (Source: Service Control Manager) (User: )
Description: The Windows Search service terminated with the following service-specific error: 
%%2147749126
 
Error: (02/14/2016 06:21:43 PM) (Source: Service Control Manager) (User: )
Description: The Bonjour Service service terminated unexpectedly.  It has done this 1 time(s).
 
 
Microsoft Office Sessions:
=========================
Error: (02/15/2016 07:51:02 AM) (Source: Software Protection Platform Service)(User: )
Description: hr=0xC004C003RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=NetworkAvailable
 
Error: (02/15/2016 07:51:02 AM) (Source: Software Protection Platform Service)(User: )
Description: hr=0xC004C0034de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c
 
Error: (02/15/2016 07:51:02 AM) (Source: Software Protection Platform Service)(User: )
00020001(0x00000000, 07:51:01:306)
00030001(0x00000000, 07:51:01:322 - https://activation-v2.sls.microsoft.com)
00030002(0x00000000, 07:51:01:322 - 0)
00040001(0x00000000, 07:51:01:322 - https://activation-v2.sls.microsoft.com)
00040002(0x00000000, 07:51:01:322 - 0, <NULL>, <NULL>, <NULL>)
00040006(0x00000001, 07:51:01:322 - 0, https://activation-v2.sls.microsoft.com, <N/A>, <N/A>)
00020005(0x00000000, 07:51:01:322 - 0)
0002000C(0x00000000, 07:51:02:720 - 500)
00010002(0x8004FC01, 07:51:02:720 - <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><soap:Body><soap:Fault><faultcode>soap:Server</faultcode><faultstring>SoapException</faultstring><detail><HRESULT>0xC004C003</HRESULT><Messages><Message>103 (Activation) - [PA Product key blocked.  ---&gt; Product key blocked]</Message></Messages></detail></soap:Fault></soap:Body></soap:Envelope>)
00010003(0x8004FC01, 07:51:02:736)
 
Error: (02/15/2016 07:51:00 AM) (Source: Software Protection Platform Service)(User: )
Description: hr=0xC004C0034de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c
 
Error: (02/15/2016 07:51:00 AM) (Source: Software Protection Platform Service)(User: )
00020001(0x00000000, 07:50:58:916)
00030001(0x00000000, 07:50:58:916 - https://activation-v2.sls.microsoft.com)
00030002(0x00000000, 07:50:58:916 - 0)
00040001(0x00000000, 07:50:58:916 - https://activation-v2.sls.microsoft.com)
00040002(0x00000000, 07:50:58:916 - 0, <NULL>, <NULL>, <NULL>)
00040006(0x00000001, 07:50:58:916 - 0, https://activation-v2.sls.microsoft.com, <N/A>, <N/A>)
00020005(0x00000000, 07:50:58:916 - 0)
0002000C(0x00000000, 07:51:00:384 - 500)
00010002(0x8004FC01, 07:51:00:384 - <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><soap:Body><soap:Fault><faultcode>soap:Server</faultcode><faultstring>SoapException</faultstring><detail><HRESULT>0xC004C003</HRESULT><Messages><Message>103 (Activation) - [PA Product key blocked.  ---&gt; Product key blocked]</Message></Messages></detail></soap:Fault></soap:Body></soap:Envelope>)
00010003(0x8004FC01, 07:51:00:384)
 
Error: (02/15/2016 07:37:17 AM) (Source: Software Protection Platform Service)(User: )
Description: hr=0x80072EE7RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=NetworkAvailable
 
Error: (02/15/2016 07:37:17 AM) (Source: Software Protection Platform Service)(User: )
Description: hr=0x80072EE74de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c
 
Error: (02/15/2016 07:37:17 AM) (Source: Software Protection Platform Service)(User: )
00020001(0x00000000, 07:37:17:017)
00030001(0x00000000, 07:37:17:017 - https://activation-v2.sls.microsoft.com)
00030002(0x00000000, 07:37:17:017 - 0)
00040001(0x00000000, 07:37:17:017 - https://activation-v2.sls.microsoft.com)
00040002(0x00000000, 07:37:17:032 - 1, <NULL>, <NULL>, <NULL>)
00050002(0x80072F94, 07:37:17:032 - 0, 1)
00040006(0x00000001, 07:37:17:032 - 0, https://activation-v2.sls.microsoft.com, <N/A>, <N/A>)
00020005(0x00000000, 07:37:17:032 - 0)
00020008(0x80072EE7, 07:37:17:032 - SOAPAction: "http://microsoft.com/SL/ProductActivationService/IssueToken"
Content-Type: text/xml; charset=utf-8
, <soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/"><soap:Body><RequestSecurityToken xmlns="http://schemas.xmlsoap.org/ws/2004/04/security/trust"><TokenType>ProductActivation</TokenType><RequestType>http://schemas.xmlsoap.org/ws/2004/04/security/trust/Issue</RequestType><UseKey><Values xmlns:q1="http://schemas.xmlsoap.org/ws/2004/04/security/trust" soapenc:arrayType="q1:TokenEntry[1]"><TokenEntry><Name>PublishLicense</Name><Value>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</Value></TokenEntry></Values></UseKey><Claims><Values xmlns:q1="http://schemas.xmlsoap.org/ws/2004/04/security/trust" soapenc:arrayType="q1:TokenEntry[17]"><TokenEntry><Name>SessionKey</Name><Value>ZPIHmKEIMwyTM+rfnb9CA+1r7uVYxSdDDryVIP6JgGS6VuuvvDMcHQhA8xov6Aw7+ejjOgktuPxGL9RyLH6VndqREvZ9WTpL9zpcZnIMpwKplfiZ2OwgnR3hX9BYHBNUjkJN18SujcSF/x15Fk+c1yVnTQi2DAXTDHiiDZ0n4FyFMm2K3i86bkXLhotQhnvJhBdh3K9VhVBQT6lEOYdauwysydIidGRSjlbxmOqkeSfvuES7ehGi5qx8nLiYf2pnAJM8Op9zOi5GIU0YH3+n1WJe+ElEaMZNxpr+Yo5C+PgjIONQtF8MRPpQHYBziZ/mwp5OBxQylP1EL/YzCHa/Tg==</Value></TokenEntry><TokenEntry><Name>BindingType</Name><Value>IuNyooKtiyTT+unIGU0KESfV+uYN3hW1lxehI+CgGto=</Value></TokenEntry><TokenEntry><Name>Binding</Name><Value>LHszZHTUjpIVqvaUVa/IhY9PwA7qOIe+PN+WpOy4JL97gATKeD6FwEDHITk4n4oIQJySxolhQ1/d9osNGCRn7M+zIscsqeLE0pNDL+yQMyg=</Value></TokenEntry><TokenEntry><Name>ProductKey</Name><Value>LZj7VlWR8ri34sX0x5bYbeowX7kkxh/xvgqjhD4SV0c=</Value></TokenEntry><TokenEntry><Name>ProductKeyType</Name><Value>IuNyooKtiyTT+unIGU0KEXsI9GPXiGXMEX6Unmo6JQM=</Value></TokenEntry><TokenEntry><Name>ProductKeyActConfigId</Name><Value>++fExwZmycEYIQrBULWNmr2toXqU2GOiCDDv2CsnJihSX8YuoYmtXkgMuu3J/jIS/XvycyHqibedS5jttCKV/dQFmQCUCuaYiwdmBfb0CgE=</Value></TokenEntry><TokenEntry><Name>SppSvcVersion</Name><Value>aYr6UzusE9ZqmADgN02mnA==</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.licenseCategory</Name><Value>24G+NlPx97NMdmoQY5EDIyZJX1q4x4I/SLR2V+nJGJU=</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.licenseCategory</Name><Value>24G+NlPx97NMdmoQY5EDI47SntIT6HaBdNzk+omSTUw=</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.sysprepAction</Name><Value>4sdAiYQhGwK/1dn9vnxvzA==</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.sysprepAction</Name><Value>4sdAiYQhGwK/1dn9vnxvzA==</Value></TokenEntry><TokenEntry><Name>ClientInformation</Name><Value>e2RLJm6CuoL6Kcgv+kYyKJGfJU44xquxlt7AGzEB3dhoT/zPi/NGmWe7j0uRjcSPdWK2iLUa37MaidImQqctEA==</Value></TokenEntry><TokenEntry><Name>ReferralInformation</Name><Value>kw0vXuvizPOd7vZgMdXcxBmZURtU2zKmAIgtaRP5+2lMcIuwI+vZbWHP78dK1HZZQvGQxvxjOTBZ1ba+dhpbVA==</Value></TokenEntry><TokenEntry><Name>ClientSystemTime</Name><Value>PJisghku8TzQWkc/JLCEdFH0K/3Rw5KETlNuSRn6DGc=</Value></TokenEntry><TokenEntry><Name>ClientSystemTimeUtc</Name><Value>PJisghku8TzQWkc/JLCEdFH0K/3Rw5KETlNuSRn6DGc=</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.secureStoreId</Name><Value>oGTmeKipa+KQcp6wv0YhkOY6uxCVrGTQ/6zOK21ZoRtfWpV/P4WlIaRV9bi9ZLDj</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.secureStoreId</Name><Value>oGTmeKipa+KQcp6wv0YhkOY6uxCVrGTQ/6zOK21ZoRtfWpV/P4WlIaRV9bi9ZLDj</Value></TokenEntry></Values></Claims></RequestSecurityToken></soap:Body></soap:Envelope>)
00010002(0x80072EE7, 07:37:17:032 - <NULL>)
00010003(0x80072EE7, 07:37:17:032)
 
Error: (02/15/2016 07:37:16 AM) (Source: Software Protection Platform Service)(User: )
Description: hr=0x80072EE74de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c
 
Error: (02/15/2016 07:37:16 AM) (Source: Software Protection Platform Service)(User: )
00020001(0x00000000, 07:37:16:814)
00030001(0x00000000, 07:37:16:829 - https://activation-v2.sls.microsoft.com)
00030002(0x00000000, 07:37:16:829 - 0)
00040001(0x00000000, 07:37:16:829 - https://activation-v2.sls.microsoft.com)
00040002(0x00000000, 07:37:16:829 - 1, <NULL>, <NULL>, <NULL>)
00050002(0x80072F94, 07:37:16:829 - 0, 1)
00040006(0x00000001, 07:37:16:829 - 0, https://activation-v2.sls.microsoft.com, <N/A>, <N/A>)
00020005(0x00000000, 07:37:16:829 - 0)
00020008(0x80072EE7, 07:37:16:829 - SOAPAction: "http://microsoft.com/SL/ProductActivationService/IssueToken"
Content-Type: text/xml; charset=utf-8
, <soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/"><soap:Body><RequestSecurityToken xmlns="http://schemas.xmlsoap.org/ws/2004/04/security/trust"><TokenType>ProductActivation</TokenType><RequestType>http://schemas.xmlsoap.org/ws/2004/04/security/trust/Issue</RequestType><UseKey><Values xmlns:q1="http://schemas.xmlsoap.org/ws/2004/04/security/trust" soapenc:arrayType="q1:TokenEntry[1]"><TokenEntry><Name>PublishLicense</Name><Value>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</Value></TokenEntry></Values></UseKey><Claims><Values xmlns:q1="http://schemas.xmlsoap.org/ws/2004/04/security/trust" soapenc:arrayType="q1:TokenEntry[17]"><TokenEntry><Name>SessionKey</Name><Value>ZaepIo6TQ4qwQoxIDPnrF3QBJ/EmFTHwboHoi9200SMmI5ZQ/co45GVT8aoKFtYSmxkyM/qqoHALEZyMue7cFhKO20DpTzQ6EEmVTcw/13FO8FrWUOQmlGwYSCAMkDjklCWPx2TOTdj75phaE3LtyiGHLzWW4Yr6C3mJRO15PAgAdbk564KCbsp9FF/Z73m2octLIoZv1GcuVnO+tzg57pZNS5xDDWXL88DewtQr3Z1WXvushquytgJVU5U8I0bfef2Bm5HkD1Ss7bBIQYh7rwgPhDB+xVlK0ehguM50jDnO3W9Mi/CKOfnPGC54CLy1QGNgZzhXhF/Ytfl6a14NgQ==</Value></TokenEntry><TokenEntry><Name>BindingType</Name><Value>fuzFc+Lz96MaqB/ORu5ZUVZr7TYtyYd3AhpcXGbRTiE=</Value></TokenEntry><TokenEntry><Name>Binding</Name><Value>Jh8oC9D1RtaJvwaTYYx9VHxIDxTlYpgdplM5+vfBVSY3BKenP4/tmMvS77id1WLpY4pmz0CFlN0RtueaP6EuEiwGHsKEzDCu68nNpflVziU=</Value></TokenEntry><TokenEntry><Name>ProductKey</Name><Value>cwiY49c4DQE+rw5+BNIPrDYhxrHA/6CfbgJjq0H3Wow=</Value></TokenEntry><TokenEntry><Name>ProductKeyType</Name><Value>fuzFc+Lz96MaqB/ORu5ZUXcrqmle6wsn0+9qkCCCZl0=</Value></TokenEntry><TokenEntry><Name>ProductKeyActConfigId</Name><Value>LS2l9VdKPUnHFTiHmFRUAMZ+RXwEmGZStEZ7EwOmqF0undpadSmGzcsZ9ayBx6nCWpI2AWlRLiOqLlk9XytUhGsEmUOw/hArB99Pz9Zi7n8=</Value></TokenEntry><TokenEntry><Name>SppSvcVersion</Name><Value>jA9yDAx67b1FyPU23/Jx6A==</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.licenseCategory</Name><Value>LNOBnIVrKvteGtdK/f63qrBMvVDwdZE5dN9CIh+Nn5E=</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.licenseCategory</Name><Value>LNOBnIVrKvteGtdK/f63qlRwhuPzv3g6iyV8yCfVwiE=</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.sysprepAction</Name><Value>6JW99cq4RBJuTyf4RxpntA==</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.sysprepAction</Name><Value>6JW99cq4RBJuTyf4RxpntA==</Value></TokenEntry><TokenEntry><Name>ClientInformation</Name><Value>TN5N5ocx2fHlGSsErgVArDz6OwkqXfxjIi0k5OpTQYa9KYDyy6xc6uN274WHfuq+IIJPKkB8+fVct+BIU6KkWw==</Value></TokenEntry><TokenEntry><Name>ReferralInformation</Name><Value>uDoXK3/8dHs6PDn+4kAWxZvDRPBTicy9EHpYfsdqWesDY7WcMC5vHC0heR7Ur7t0NC80ak9YbU5HBVTJ8biz6w==</Value></TokenEntry><TokenEntry><Name>ClientSystemTime</Name><Value>CUreM1EzFN4L7gK1QUoxSiX44D7C6kiCo+4gdhZjpGQ=</Value></TokenEntry><TokenEntry><Name>ClientSystemTimeUtc</Name><Value>CUreM1EzFN4L7gK1QUoxSiX44D7C6kiCo+4gdhZjpGQ=</Value></TokenEntry><TokenEntry><Name>otherInfoPublic.secureStoreId</Name><Value>aeI6vLTevmqRbV3SHWDhpMC7EtQbyVlr5URO4IStQHCtcTE8cri7DrPlkWnsFu1i</Value></TokenEntry><TokenEntry><Name>otherInfoPrivate.secureStoreId</Name><Value>aeI6vLTevmqRbV3SHWDhpMC7EtQbyVlr5URO4IStQHCtcTE8cri7DrPlkWnsFu1i</Value></TokenEntry></Values></Claims></RequestSecurityToken></soap:Body></soap:Envelope>)
00010002(0x80072EE7, 07:37:16:829 - <NULL>)
00010003(0x80072EE7, 07:37:16:829)
 
 
**** End of log ****
 


#12 Trave160

Trave160
  • Topic Starter

  • Members
  • 78 posts
  • OFFLINE
  •  
  • Local time:06:03 PM

Posted 15 February 2016 - 05:54 AM

Here's another one:
~
~

# AdwCleaner v5.033 - Logfile created 15/02/2016 at 16:52:03
# Updated 07/02/2016 by Xplode
# Database : 2016-02-07.2 [Server]
# Operating system : Windows 10 Pro  (x64)
# Username : TravisLester - DESKTOP-UIC1RTE
# Running from : C:\Users\TravisLester\Downloads\Programs\adwcleaner_5.033_2.exe
# Option : Scan
 
***** [ Services ] *****
 
 
***** [ Folders ] *****
 
Folder Found : C:\Users\TravisLester\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdabfienifkbhoihedcgeogidfmibmhp
 
***** [ Files ] *****
 
 
***** [ DLL ] *****
 
 
***** [ Shortcuts ] *****
 
 
***** [ Scheduled tasks ] *****
 
 
***** [ Registry ] *****
 
 
***** [ Web browsers ] *****
 
[C:\Users\TravisLester\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Found : free-pc-optimizer.en.softonic.com
[C:\Users\TravisLester\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Found : netspeedmonitor.en.softonic.com
[C:\Users\TravisLester\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Found : thesage-english-dictionary-and-thesaurus.en.softonic.com
[C:\Users\TravisLester\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Found : pdabfienifkbhoihedcgeogidfmibmhp
 
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1312 bytes] ##########


#13 nasdaq

nasdaq

  • Malware Response Team
  • 39,903 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:02:03 PM

Posted 15 February 2016 - 07:44 AM

As suggested in my previous post the Minitoolbox log should be posted in the Networking Forum.

Create a new topic in that forum and post the contents of the log.

Explain your problem and an experts should be able to guide you.

#14 Trave160

Trave160
  • Topic Starter

  • Members
  • 78 posts
  • OFFLINE
  •  
  • Local time:06:03 PM

Posted 15 February 2016 - 07:52 PM

As suggested in my previous post the Minitoolbox log should be posted in the Networking Forum.

Create a new topic in that forum and post the contents of the log.

Explain your problem and an experts should be able to guide you.

 

Yes ok then, but what about these other problems in regard?



#15 nasdaq

nasdaq

  • Malware Response Team
  • 39,903 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:02:03 PM

Posted 16 February 2016 - 07:43 AM

I'm not closing this topic.

When the network has been cleared if you still have problem please return.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users