Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Internet,Firefall and antimalware programs don't work. Trojan?


  • Please log in to reply
17 replies to this topic

#1 Strats

Strats

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:12:39 PM

Posted 26 October 2016 - 06:21 PM

Hi! My computer is Lenovo b575e and Windows 10. It updated new version of that last week. I have Avast and Malwarebytes anti-malware on my computer. Now internet,firewall and virus program don't work.

First my computer start to be more slow. And sometimes I had to start computer to get internet work again. To restart my computer actually didn't work properly. My computer made huge update last week to windows 10 newest version. This week I had problems with internet and my browse get slower. Then I lost my internet connection and then my firewall stop working and in the end my antivirus program. And sometimes my usbs don't work. Malwarebytes works but it don't find anything. Same problems on the safe mode. Computer complaits 0x80070426 and diacnostic policy service not running and someting that diasnostic using service not and windows information security center service can not start. What trojan program to my CD/USB? And how to check my USB too because I have used that so it is infected perhaps too...Is it some windows 10 bug too? I need you help. I don't know what to do. Thank you


Edited by Chris Cosgrove, 26 October 2016 - 06:34 PM.
Moved from Virus, trojan etc. logs to 'Am I infected?'


BC AdBot (Login to Remove)

 


#2 Strats

Strats
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:12:39 PM

Posted 26 October 2016 - 06:29 PM

And even my calculate don't open. It complaits that I had use another account. It can't use my system monitor account. I have different language on my computer than english so sometimes funny translations.

#3 Strats

Strats
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:12:39 PM

Posted 26 October 2016 - 06:59 PM

I forgot to sat that before my computer internet,firewall and avast stop working my computer didn't turn on properly and I need to restart it because internet stop working.After that it get worse. My tollbar under computer was missing and windows button. I used my Lenovo button to swich my computer. And next time that was disappeared and windows button back.

#4 Strats

Strats
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:12:39 PM

Posted 26 October 2016 - 07:27 PM

And my fligt mode is on and I can't change it off. It is locked someway...Now need to go sleep

#5 Strats

Strats
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:12:39 PM

Posted 27 October 2016 - 03:52 AM

My computer did something weird. When I tried to scan malwarebytes on the safe mode then it was really slow and end I notice grey screen and only what I could do was swich my computer...when trying windows defender scan on the safe mode, it turn off computer before it even scan 10 minutes...when turn on computer it was same safe mode and still scanning. On my computer is possible to put my computer hibernate state and turn on computer and continue working. But it was weird that it did it without my permission. I have Lenovo quicklauch and there is that option. And I have now too Windows button too. I will post frst when I reach some other computer (library,friend) and if ut possible to put on cd and then drive on my computer...

#6 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,573 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:04:39 AM

Posted 10 November 2016 - 02:59 PM

Appears a re install would be the fastest fix.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#7 Strats

Strats
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:12:39 PM

Posted 11 February 2017 - 03:18 PM

Hi! I am really sorry for not answering earlier. Do you mean re install windows 10? I don't have any cd where I could install windows any versions again...

I restore my comoputer to the last restore point. It was before some window modem installation...After that my computer is not anymore flight mode and it finds wireless internet options.And I noteced that my Avast don't work anymore and my own computer virus protection works even it taked little while to work. And my firewall works. I just close my computer and have not open since because I need to know what to do. Maybe I should delete Avast. Now I remind that my problems with flight mode and firewall off started when I take my avast off when scanning malwarebytes.

#8 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,573 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:04:39 AM

Posted 11 February 2017 - 07:56 PM

Yes try to uninstall Avast, Then restart PC. Either try installing vast again or try another.

perhaps Bitdefender from here
https://www.bleepingcomputer.com/forums/t/366982/freeware-replacements-for-common-commercial-apps/
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#9 Strats

Strats
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:12:39 PM

Posted 20 February 2017 - 02:34 PM

I had some problems... I tried to uninstall Avast. When restarting my computer it freezes on starting point and I had to push on button to switch off. When my computer was on first my windows defender was saying that this is another virus program checking and coul not work. When putting checking quick viruses it went on. I tried to upload bitdefender but some reason it could bot managed to upload it...so I tried to work with it. Well it didn't go like Strömsö like we say. It ypload normally quick. My computer was updating quite lot all programs to my computer whenn internet connection and that make my computer slow. Like office,lenovo,firefox... I made quick scan and that went ok. When trying full scan it could not fully complete it 99% and that rest 1% takes 2,5 hour...so I find some Avast forum and some other people had same problem and it was some bug. Anyway I think that it find something because it turn green to red but there was never any log that I had ever that scan. I uninstall that Avast not sure if ut was smartest to done. So now only windows defender and I can try if it works and makes full scan. So if I am not able to upload bitdefender, what is the next best virus program? And what should I do?

#10 Strats

Strats
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:12:39 PM

Posted 20 February 2017 - 02:57 PM

Sorry. After "I tried to upload bitdefender but some reason it could bot managed to upload it...so I tried to work with it. Well it didn't go like Strömsö like we say." I installed Avast free version

#11 Strats

Strats
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:12:39 PM

Posted 21 February 2017 - 05:25 PM

I managed finally to download Bitdefender. I made full scan.

It found one virus called Gen:Trojan.Heur.PT.bi6@b8SOq... C:\Program Files\AVAST Software\Avast\pdf...

It is now unresolved. Should I just delete it or put quarantine?

#12 Strats

Strats
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:12:39 PM

Posted 21 February 2017 - 05:39 PM

I just deleted it

#13 Strats

Strats
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:12:39 PM

Posted 21 February 2017 - 06:24 PM



Threat full name :
Gen:Trojan.Heur.PT.bi6@b8SOqZm

File full path:
C:\Program Files\AVAST Software\Avast\pdf.dll

And status:deleted

#14 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,573 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:04:39 AM

Posted 24 February 2017 - 01:40 PM

Ok do these,

3Al62Pm.pngMiniToolBox
  • Please download MiniToolBox, save it to your desktop and run it.
  • Checkmark the following checkboxes:
  • Flush DNS
  • Report IE Proxy Settings
  • Reset IE Proxy Settings
  • Report FF Proxy Settings
  • Reset FF Proxy Settings
  • List content of Hosts
  • List IP configuration
  • List Winsock Entries
  • List last 10 Event Viewer log
  • List Installed Programs
  • List Users, Partitions and Memory size.

  • Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run. Note: When using "Reset FF Proxy Settings" option Firefox should be closed.
zcMPezJ.pngAdwCleaner
  • Please download AdwCleaner by Xplode and save to your Desktop.
  • Double click on AdwCleaner.exe to run the tool. Vista/Windows 7/8 users right-click and select Run As Administrator
  • Click on the Scan button.
  • AdwCleaner will begin...be patient as the scan may take some time to complete.
  • After the scan has finished, click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review.
  • The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
  • Copy and paste the contents of that logfile in your next reply.
  • A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.
  • lv0mVRW.pngJunkware Removal Tool
  • Please download Junkware Removal Tool to your desktop.
  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.
  • cvMlKv6.pngESET Online Scanner
  • Click here to download the installer for ESET Online Scanner and save it to your Desktop.
  • Disable all your antivirus and antimalware software - see how to do that here.
  • Right click on esetsmartinstaller_enu.exe and select Run as Administrator.
  • Place a checkmark in YES, I accept the Terms of Use, then click Start. Wait for ESET Online Scanner to load its components.
  • Select Enable detection of potentially unwanted applications.
  • Click Advanced Settings, then place a checkmark in the following:
  • Remove found threats
  • Scan archives
  • Scan for potentially unsafe applications
  • Enable Anti-Stealth technology

  • Click Start to begin scanning.
  • ESET Online Scanner will start downloading signatures and scan. Please be patient, as this scan can take quite some time.
  • When the scan is done, click List threats (only available if ESET Online Scanner found something).
  • Click Export, then save the file to your desktop.
  • Click Back, then Finish to exit ESET Online Scanner.
  • [/list]

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#15 Strats

Strats
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:12:39 PM

Posted 17 April 2017 - 11:58 AM

Hi!

Sorry, I have been away and occupied...

 

MiniToolBox by Farbar  Version: 17-06-2016
Ran by Saara (administrator) on 17-04-2017 at 19:45:41
Running from "C:\Users\Saara\Downloads"
Microsoft Windows 10 Home  (X64)
Model: 368526G Manufacturer: LENOVO
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= FF Proxy Settings: ==============================


"Reset FF Proxy Settings": Firefox Proxy settings were reset.

========================= Hosts content: =================================
========================= IP Configuration: ================================

Langaton 1x1 11b/g/n LAN PCI Express Half -minikorttisovitin = WLAN (Connected)
Realtek PCIe GBE Family Controller = Ethernet (Media disconnected)


# ----------------------------------
# IPv4 Configuration
# ----------------------------------
pushd interface ipv4

reset
set global icmpredirects=enabled
set interface interface="WLAN" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="Local Area Connection* 1" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="L„hiverkkoyhteys* 12" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="Local Area Connection* 2" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="L„hiverkkoyhteys* 11" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="Ethernet" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="L„hiverkkoyhteys* 1" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="wireless_19" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="ethernet_3" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set subinterface interface=?o subinterface=ethernet_13 mtu=1477


popd
# End of IPv4 configuration



Windows IP Configuration

   Host Name . . . . . . . . . . . . : Lenovo-PC
   Primary Dns Suffix  . . . . . . . :
   Node Type . . . . . . . . . . . . : Mixed
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Ethernet:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller
   Physical Address. . . . . . . . . : 3C-97-0E-6C-A9-A6
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter L„hiverkkoyhteys* 11:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoftin suora WLAN-virtuaalisovitin
   Physical Address. . . . . . . . . : 6A-94-23-F5-47-51
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter L„hiverkkoyhteys* 12:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoftin is„nn”idyn verkon virtuaalisovitin
   Physical Address. . . . . . . . . : 68-94-23-F5-47-51
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter WLAN:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Broadcom 802.11 -verkkosovitin mahdollistaa langattoman l„hiverkon toiminnan.
   Physical Address. . . . . . . . . : 68-94-23-F5-47-51
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::69d3:c0be:10a1:753d%2(Preferred)
   IPv4 Address. . . . . . . . . . . : 192.168.43.39(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Lease Obtained. . . . . . . . . . : 17. huhtikuuta 2017 19:12:54
   Lease Expires . . . . . . . . . . : 17. huhtikuuta 2017 20:42:54
   Default Gateway . . . . . . . . . : 192.168.43.1
   DHCP Server . . . . . . . . . . . : 192.168.43.1
   DHCPv6 IAID . . . . . . . . . . . : 325620771
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-18-A2-D6-A1-3C-97-0E-6C-A9-A6
   DNS Servers . . . . . . . . . . . : 192.168.43.1
   NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter Teredo Tunneling Pseudo-Interface:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv6 Address. . . . . . . . . . . : 2001:0:9d38:6abd:1065:164a:3f57:d4d8(Preferred)
   Link-local IPv6 Address . . . . . : fe80::1065:164a:3f57:d4d8%6(Preferred)
   Default Gateway . . . . . . . . . : ::
   DHCPv6 IAID . . . . . . . . . . . : 67108864
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-18-A2-D6-A1-3C-97-0E-6C-A9-A6
   NetBIOS over Tcpip. . . . . . . . : Disabled

Tunnel adapter isatap.{01BB4038-77F8-4455-94F3-C3294E765BB2}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter #3
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
Server:  UnKnown
Address:  192.168.43.1

Name:    google.com
Addresses:  2a00:1450:400f:807::200e
      216.58.209.142


Pinging google.com [216.58.209.142] with 32 bytes of data:
Reply from 216.58.209.142: bytes=32 time=96ms TTL=51
Reply from 216.58.209.142: bytes=32 time=58ms TTL=51

Ping statistics for 216.58.209.142:
    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 58ms, Maximum = 96ms, Average = 77ms
Server:  UnKnown
Address:  192.168.43.1

Name:    yahoo.com
Addresses:  2001:4998:44:204::a7
      2001:4998:58:c02::a9
      2001:4998:c:a06::2:4008
      206.190.36.45
      98.139.183.24
      98.138.253.109


Pinging yahoo.com [98.138.253.109] with 32 bytes of data:
Reply from 98.138.253.109: bytes=32 time=173ms TTL=46
Reply from 98.138.253.109: bytes=32 time=167ms TTL=46

Ping statistics for 98.138.253.109:
    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 167ms, Maximum = 173ms, Average = 170ms

Pinging 127.0.0.1 with 32 bytes of data:
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Ping statistics for 127.0.0.1:
    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 0ms, Average = 0ms
===========================================================================
Interface List
 12...3c 97 0e 6c a9 a6 ......Realtek PCIe GBE Family Controller
 14...6a 94 23 f5 47 51 ......Microsoftin suora WLAN-virtuaalisovitin
 18...68 94 23 f5 47 51 ......Microsoftin is„nn”idyn verkon virtuaalisovitin
  2...68 94 23 f5 47 51 ......Broadcom 802.11 -verkkosovitin mahdollistaa langattoman l„hiverkon toiminnan.
  1...........................Software Loopback Interface 1
  6...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
 42...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0     192.168.43.1    192.168.43.39     55
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    331
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    331
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    331
     192.168.43.0    255.255.255.0         On-link     192.168.43.39    311
    192.168.43.39  255.255.255.255         On-link     192.168.43.39    311
   192.168.43.255  255.255.255.255         On-link     192.168.43.39    311
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    331
        224.0.0.0        240.0.0.0         On-link     192.168.43.39    311
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    331
  255.255.255.255  255.255.255.255         On-link     192.168.43.39    311
===========================================================================
Persistent Routes:
  None

IPv6 Route Table
===========================================================================
Active Routes:
 If Metric Network Destination      Gateway
  6    331 ::/0                     On-link
  1    331 ::1/128                  On-link
  6    331 2001::/32                On-link
  6    331 2001:0:9d38:6abd:1065:164a:3f57:d4d8/128
                                    On-link
  2    311 fe80::/64                On-link
  6    331 fe80::/64                On-link
  6    331 fe80::1065:164a:3f57:d4d8/128
                                    On-link
  2    311 fe80::69d3:c0be:10a1:753d/128
                                    On-link
  1    331 ff00::/8                 On-link
  2    311 ff00::/8                 On-link
  6    331 ff00::/8                 On-link
===========================================================================
Persistent Routes:
  None
========================= Winsock entries =====================================

Catalog5 01 C:\WINDOWS\SysWoW64\napinsp.dll [55808] (Microsoft Corporation)
Catalog5 02 C:\WINDOWS\SysWoW64\pnrpnsp.dll [70656] (Microsoft Corporation)
Catalog5 03 C:\WINDOWS\SysWoW64\pnrpnsp.dll [70656] (Microsoft Corporation)
Catalog5 04 C:\WINDOWS\SysWoW64\NLAapi.dll [65024] (Microsoft Corporation)
Catalog5 05 C:\WINDOWS\SysWoW64\mswsock.dll [306016] (Microsoft Corporation)
Catalog5 06 C:\WINDOWS\SysWoW64\winrnr.dll [24064] (Microsoft Corporation)
Catalog9 01 C:\WINDOWS\SysWoW64\mswsock.dll [306016] (Microsoft Corporation)
Catalog9 02 C:\WINDOWS\SysWoW64\mswsock.dll [306016] (Microsoft Corporation)
Catalog9 03 C:\WINDOWS\SysWoW64\mswsock.dll [306016] (Microsoft Corporation)
Catalog9 04 C:\WINDOWS\SysWoW64\mswsock.dll [306016] (Microsoft Corporation)
Catalog9 05 C:\WINDOWS\SysWoW64\mswsock.dll [306016] (Microsoft Corporation)
Catalog9 06 C:\WINDOWS\SysWoW64\mswsock.dll [306016] (Microsoft Corporation)
Catalog9 07 C:\WINDOWS\SysWoW64\mswsock.dll [306016] (Microsoft Corporation)
Catalog9 08 C:\WINDOWS\SysWoW64\mswsock.dll [306016] (Microsoft Corporation)
Catalog9 09 C:\WINDOWS\SysWoW64\mswsock.dll [306016] (Microsoft Corporation)
Catalog9 10 C:\WINDOWS\SysWoW64\mswsock.dll [306016] (Microsoft Corporation)
Catalog9 11 C:\WINDOWS\SysWoW64\mswsock.dll [306016] (Microsoft Corporation)
Catalog9 12 C:\WINDOWS\SysWoW64\mswsock.dll [306016] (Microsoft Corporation)
x64-Catalog5 01 C:\Windows\System32\napinsp.dll [67584] (Microsoft Corporation)
x64-Catalog5 02 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)
x64-Catalog5 04 C:\Windows\System32\NLAapi.dll [80896] (Microsoft Corporation)
x64-Catalog5 05 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
x64-Catalog5 06 C:\Windows\System32\winrnr.dll [31744] (Microsoft Corporation)
x64-Catalog9 01 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
x64-Catalog9 02 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
x64-Catalog9 03 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
x64-Catalog9 04 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
x64-Catalog9 05 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
x64-Catalog9 06 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
x64-Catalog9 07 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
x64-Catalog9 08 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
x64-Catalog9 09 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
x64-Catalog9 10 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
x64-Catalog9 11 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)
x64-Catalog9 12 C:\Windows\System32\mswsock.dll [357216] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (04/17/2017 07:21:08 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: LENOVO-PC)
Description: Paketti Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe+MicrosoftEdge lopetettiin, koska sen pysäytys kesti liian kauan.

Error: (04/17/2017 07:18:34 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: LENOVO-PC)
Description: Sovelluksen Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!App aktivointi epäonnistui, virhe: -2144927142. Lisätietoja on Microsoft-Windows-TWinUI/Toiminnassa-lokissa.

Error: (04/17/2017 06:45:27 PM) (Source: Microsoft-Windows-EFS) (User: LENOVO-PC)
Description: 7.488: EFS-palvelu ei voinut tehdä käyttäjälle valmisteluja yritystietojen suojausta varten. Virhekoodi: 0x80070005.

Error: (04/17/2017 06:43:30 PM) (Source: Office 2013 Licensing Service) (User: )
Description: Subscription licensing service failed: -1073422302

Error: (04/17/2017 06:38:51 PM) (Source: Microsoft-Windows-EFS) (User: LENOVO-PC)
Description: 7.488: EFS-palvelu ei voinut tehdä käyttäjälle valmisteluja yritystietojen suojausta varten. Virhekoodi: 0x80070005.

Error: (04/17/2017 06:38:38 PM) (Source: Application Error) (User: )
Description: Viallisen sovelluksen nimi: svchost.exe_CDPSvc, versio: 10.0.14393.0, aikaleima: 0x57899b1c
Viallisen moduulin nimi: ucrtbase.dll, versio: 10.0.14393.0, aikaleima: 0x578997b5
Poikkeuskoodi: 0xc0000409
Virhepoikkeama: 0x000000000006ea1e
Viallisen prosessin tunnus: 0x490
Viallisen sovelluksen käynnistysaika: 0xsvchost.exe_CDPSvc0
Viallisen sovelluksen polku: svchost.exe_CDPSvc1
Viallisen moduulin polku: svchost.exe_CDPSvc2
Raportin tunnus: svchost.exe_CDPSvc3
Viallisen paketin koko nimi: svchost.exe_CDPSvc4
Viallisen paketin suhteellinen sovellustunnus: svchost.exe_CDPSvc5

Error: (03/13/2017 03:15:23 PM) (Source: Microsoft-Windows-EFS) (User: LENOVO-PC)
Description: 7.488: EFS-palvelu ei voinut tehdä käyttäjälle valmisteluja yritystietojen suojausta varten. Virhekoodi: 0x80070005.

Error: (02/24/2017 05:31:01 PM) (Source: Microsoft-Windows-EFS) (User: LENOVO-PC)
Description: 7.488: EFS-palvelu ei voinut tehdä käyttäjälle valmisteluja yritystietojen suojausta varten. Virhekoodi: 0x80070005.

Error: (02/22/2017 03:39:40 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: LENOVO-PC)
Description: Sovelluksen microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 aktivointi epäonnistui, virhe: -2144927141. Lisätietoja on Microsoft-Windows-TWinUI/Toiminnassa-lokissa.

Error: (02/22/2017 03:35:58 PM) (Source: Office 2013 Licensing Service) (User: )
Description: Subscription licensing service failed: -1073422302


System errors:
=============
Error: (04/17/2017 07:14:03 PM) (Source: DCOM) (User: NT-hallinta)
Description: {784E29F4-5EBE-4279-9948-1E8FE941646D}

Error: (04/17/2017 07:10:40 PM) (Source: DCOM) (User: NT-hallinta)
Description: sovelluskohtainenPaikallinenAktivointi{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}{F72671A9-012C-4725-9D2F-2A4D32D65169}NT-hallintaSYSTEMS-1-5-18LocalHost (LRPC käytössä)Ei käytettävissäEi käytettävissä

Error: (04/17/2017 07:10:18 PM) (Source: Service Control Manager) (User: )
Description: Palvelua APXACC ei voi käynnistää. Virhekoodi on
%%31 = Järjestelmään liitetty laite ei toimi.


Error: (04/17/2017 07:10:18 PM) (Source: APXACC) (User: )
Description: The NDIS6 LWF initialization has failed. (0xC0000001)

Error: (04/17/2017 07:02:58 PM) (Source: DCOM) (User: NT-hallinta)
Description: {F3B4E234-7A68-4E43-B813-E4BA55A065F6}

Error: (04/17/2017 06:48:32 PM) (Source: DCOM) (User: NT-hallinta)
Description: {784E29F4-5EBE-4279-9948-1E8FE941646D}

Error: (04/17/2017 06:45:29 PM) (Source: DCOM) (User: NT-hallinta)
Description: sovelluskohtainenPaikallinenAktivointi{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}{F72671A9-012C-4725-9D2F-2A4D32D65169}NT-hallintaSYSTEMS-1-5-18LocalHost (LRPC käytössä)Ei käytettävissäEi käytettävissä

Error: (04/17/2017 06:41:55 PM) (Source: DCOM) (User: NT-hallinta)
Description: {784E29F4-5EBE-4279-9948-1E8FE941646D}

Error: (04/17/2017 06:40:43 PM) (Source: Service Control Manager) (User: )
Description: Palvelujen ohjauksen hallinta yritti suorittaa korjaustoimia (Käynnistä palvelu uudelleen) palvelun Network Store Interface -palvelu odottamattoman lopettamisen jälkeen. Yritys epäonnistui ja tapahtui virhe:
%%1056 = Palvelutapahtuma on vielä käynnissä.


Error: (04/17/2017 06:39:43 PM) (Source: Service Control Manager) (User: )
Description: Palvelujen ohjauksen hallinta yritti suorittaa korjaustoimia (Käynnistä palvelu uudelleen) palvelun Windowsin fonttien välimuistipalvelu odottamattoman lopettamisen jälkeen. Yritys epäonnistui ja tapahtui virhe:
%%1056 = Palvelutapahtuma on vielä käynnissä.



Microsoft Office Sessions:
=========================
Error: (04/17/2017 07:21:08 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: LENOVO-PC)
Description: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe+MicrosoftEdge

Error: (04/17/2017 07:18:34 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: LENOVO-PC)
Description: Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!App-2144927142

Error: (04/17/2017 06:45:27 PM) (Source: Microsoft-Windows-EFS)(User: LENOVO-PC)
Description: 74880x80070005

Error: (04/17/2017 06:43:30 PM) (Source: Office 2013 Licensing Service)(User: )
Description: Subscription licensing service failed: -1073422302

Error: (04/17/2017 06:38:51 PM) (Source: Microsoft-Windows-EFS)(User: LENOVO-PC)
Description: 74880x80070005

Error: (04/17/2017 06:38:38 PM) (Source: Application Error)(User: )
Description: svchost.exe_CDPSvc10.0.14393.057899b1cucrtbase.dll10.0.14393.0578997b5c0000409000000000006ea1e49001d289240f86e7e5C:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\ucrtbase.dll6d80dda3-c988-44f1-aab2-d1d7d24fbaee

Error: (03/13/2017 03:15:23 PM) (Source: Microsoft-Windows-EFS)(User: LENOVO-PC)
Description: 74880x80070005

Error: (02/24/2017 05:31:01 PM) (Source: Microsoft-Windows-EFS)(User: LENOVO-PC)
Description: 74880x80070005

Error: (02/22/2017 03:39:40 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: LENOVO-PC)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1-2144927141

Error: (02/22/2017 03:35:58 PM) (Source: Office 2013 Licensing Service)(User: )
Description: Subscription licensing service failed: -1073422302


=========================== Installed Programs ============================

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 23.0.0.257 - Adobe Systems Incorporated)
Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.185 - Adobe Systems Incorporated)
Airplane LED (HKLM-x32\...\{F987D533-0D6A-4191-8EF7-8E91505ACF9A}) (Version: 1.00.000 - )
AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
AMD Catalyst Install Manager (HKLM\...\{C0ACFCBB-01D7-AAD1-1FB2-0C8A3D1312D2}) (Version: 8.0.881.0 - Advanced Micro Devices, Inc.)
AMD Quick Stream (HKLM\...\{E9EED4AE-682B-4501-9574-D09A21717599}_is1) (Version: 3.3.26.0 - AppEx Networks)
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 1.0.1 - Bitdefender)
Bitdefender Antivirus Free (HKLM\...\{1FCCF41D-5F00-4FE2-9653-162D0486C8B4}) (Version: 1.0.5.14 - Bitdefender)
Broadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 6.30.59.151 - Broadcom Corporation)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.) Hidden
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.) Hidden
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 56.0.2924.87 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.32.7 - Google Inc.) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
Intel AppUp(SM) center (HKLM-x32\...\Intel AppUp(SM) center 33057) (Version: 3.6.1.33057.10 - Intel)
Intel® Update Manager (HKLM-x32\...\{608E1B9B-A2E8-4A1F-8BAB-874EB0DD25E3}) (Version: 1.0.0.34813 - Intel Corporation) Hidden
Lenovo Auto Scroll Utility (HKLM\...\LenovoAutoScrollUtility) (Version: 2.11 - )
Lenovo Bluetooth with Enhanced Data Rate Software (HKLM\...\{C6D9ED03-6FCF-4410-9CB7-45CA285F9E11}) (Version: 12.0.0.7000 - Broadcom Corporation)
Lenovo EasyCamera (HKLM-x32\...\{ADE16A9D-FBDC-4ecc-B6BD-9C31E51D0332}) (Version: 3.15.0414.1 - Vimicro)
Lenovo HID HW Radio Driver 1.0.0.58 (HKLM\...\{E5325F32-D15A-4131-B029-4A5B7609E532}_is1) (Version: 1.0.0.58 - Lenovo)
Lenovo Kuvaruututeksti (HKLM\...\OnScreenDisplay) (Version: 8.85.03 - Lenovo)
Lenovo Multimedia and Communications Core Runtime (HKLM\...\{033DC0E0-DA89-4C33-B66C-89B64D312CD1}_is1) (Version: 5.0.13.94 - Lenovo Corporation)
Lenovo Patch Utility (HKLM-x32\...\{C6FB6B4A-1378-4CD3-9CD3-42BA69FCBD43}) (Version: 1.4.0.4 - Lenovo Group Limited) Hidden
Lenovo Patch Utility 64 bit (HKLM\...\{053ACA98-6B07-4DD0-9DB3-F51E3EB1780C}) (Version: 1.4.0.4 - Lenovo Group Limited) Hidden
Lenovo Power Management Driver (HKLM\...\Power Management Driver) (Version: 1.67.10.17 - Lenovo)
Lenovo QuickLaunch (HKLM-x32\...\{FF80FE61-64E6-4DDC-93E5-5E47969AAB24}) (Version: 1.2.0010 - Lenovo Group Limited)
Lenovo Settings - Camera Audio (HKLM\...\{88C6A6D9-324C-46E8-BA87-563D14021442}_is1) (Version: 4.3.19.209 - Lenovo Corporation)
Lenovo Settings - Location Awareness (HKLM-x32\...\{C79D4402-E622-4922-9C02-89F9080BF081}_is1) (Version: 1.4.0.5 - Lenovo Group Limited)
Lenovo Settings - Power (HKLM-x32\...\{DAC01CEE-5BAE-42D5-81FC-B687E84E8405}) (Version: 7.49.4 - Lenovo Group Limited)
Lenovo Settings Dependency Package (HKLM\...\{3694BA2E-BE31-4B7E-886B-A0B559E69D4D}_is1) (Version: 2.3.1.35 - Lenovo Group Limited)
Lenovo Settings Mobile Hotspot (HKLM\...\{42603F7D-B08D-436B-B0D8-3E2DEF1AFD41}_is1) (Version: 2.3.0.85 - Lenovo)
Lenovo Settings Service (HKLM\...\{8C6F1EBA-17F1-4481-B688-9777E63E985F}_is1) (Version: 2.3.3.7 - Lenovo Group Limited)
Lenovo Settings UMDF driver (HKLM\...\{2BDC7413-65EA-4B99-8C4B-02F11075BE6D}_is1) (Version: 1.2.0.7 - Lenovo Group Limited)
Lenovo System Update (HKLM-x32\...\{25C64847-B900-48AD-A164-1B4F9B774650}) (Version: 5.07.0045 - Lenovo)
Lenovo User Guide (HKLM-x32\...\{13F59938-C595-479C-B479-F171AB9AF64F}) (Version: 1.0.0008.00 - Lenovo)
Malwarebytes Anti-Malware versio 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Metric Collection SDK (HKLM-x32\...\{DDAA788F-52E6-44EA-ADB8-92837B11BF26}) (Version: 1.1.0005.00 - Lenovo Group Limited) Hidden
Microsoft Office 365 - fi-fi (HKLM\...\O365HomePremRetail - fi-fi) (Version: 15.0.4893.1002 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Mozilla Firefox 49.0.2 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 49.0.2 (x86 en-US)) (Version: 49.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 49.0.2.6136 - Mozilla)
Nalpeiron License Management (HKLM-x32\...\{86148F87-2666-42F9-A712-1306176C525C}) (Version: 6.3.9.1 - Nalpeiron) Hidden
Office 15 Click-to-Run Extensibility Component (HKLM-x32\...\{90150000-008C-0000-0000-0000000FF1CE}) (Version: 15.0.4893.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (HKLM\...\{90150000-008F-0000-1000-0000000FF1CE}) (Version: 15.0.4893.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (HKLM-x32\...\{90150000-008C-040B-0000-0000000FF1CE}) (Version: 15.0.4893.1002 - Microsoft Corporation) Hidden
OpenOffice 4.1.2 (HKLM-x32\...\{048825E3-BDAC-4579-B8E8-F8BAF9D9A764}) (Version: 4.12.9782 - Apache Software Foundation)
Paint.NET v3.5.11 (HKLM\...\{72EF03F5-0507-4861-9A44-D99FD4C41418}) (Version: 3.61.0 - dotPDN LLC)
Password Vault (HKLM\...\{1CACE706-D749-44CA-BBFE-AF60946D1B18}) (Version: 6.0.200.75 - AuthenTec, Inc.)
PowerXpressHybrid (HKLM-x32\...\{097E024D-BE30-4D95-B5F3-B6AE9C1568D4}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.1.505.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6909 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.2.8400.39032 - Realtek Semiconductor Corp.)
Spotify (HKCU\...\Spotify) (Version: 1.0.39.157.g674ae377 - Spotify AB)
SugarSync Manager (HKLM-x32\...\SugarSync) (Version: 1.9.61.90905 - SugarSync, Inc.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.19.1 - Synaptics Incorporated)
version 5.13.415.31/1.0.0.27/3.4.5.11(H1C307WW) (HKLM-x32\...\{4AD4461B-8BD4-4354-805C-E97E7A404906}_is1) (Version:  - Lenovo Group Limited)
Windows Driver Package - Lenovo 1.66.00.07 (08/15/2012 1.66.00.07) (HKLM\...\E56A6B34B44A7A597FFEBE0E14D81095E0FD4D73) (Version: 08/15/2012 1.66.00.07 - Lenovo)

========================= Memory info: ===================================

Percentage of memory in use: 61%
Total physical RAM: 3636.86 MB
Available physical RAM: 1390.7 MB
Total Virtual: 4404.86 MB
Available Virtual: 1750 MB

========================= Partitions: =====================================

1 Drive c: (Windows8_OS) (Fixed) (Total:449.43 GB) (Free:329.19 GB) NTFS

========================= Users: ========================================

K„ytt„j„tilit \\LENOVO-PC

DefaultAccount           J„rjestelm„nvalvoja      Saara                    
Vieras                   
Komento on suoritettu.


**** End of log ****
 






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users