Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Sent from Malware Forum; Defragmenter Not Working


  • Please log in to reply
31 replies to this topic

#1 Purrington666

Purrington666

  • Members
  • 43 posts
  • OFFLINE
  •  
  • Local time:06:32 AM

Posted 30 October 2016 - 03:19 AM

Moderator Gary from the Malware Forum has sent me here to seek assistance in repairing the Defragmenter on my laptop which currently is not working

 

He has determined there is currently no malware on my laptop and has made some preliminary efforts to resolve the issue with my Defragmenter.

 

At his request I am providing a link below to show what efforts have been made on this issue so far:

/http://www.bleepingcomputer.com/forums/t/629582/rkill-missing-digital-signatures/

 

Thank you in advance for your assistance.



BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 55,552 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:06:32 AM

Posted 30 October 2016 - 06:13 AM

Good morning...let's take a look at some system data :).

 

Please download MiniToolBox  , save it to your desktop and run it.
 
Checkmark the following checkboxes:
  List last 10 Event Viewer log
  List Installed Programs
  List Users, Partitions and Memory size.
 
Click Go and paste the content into your next post.
 
Also...please Publish a Snapshot using Speccy taking care to post the link of the snapshot in your next post.

   Go to Piriform's website, and download the free version on the left.  Click Download from Piriform.com (the FileHippo link requires an extra click). Or if you want to use a portable version of Speccy (which doesn't require installation), click the builds page link and download the portable version. You will now be asked where you want to save the file. The best place to put it is the Desktop, as it will be easy to find later.

    After the file finishes downloading, you are ready to run Speccy. If you downloaded the installer, simply double-click on it and follow the prompts until installation is complete. If you downloaded the portable version, you will need to unzip it before use. Right-click the ZIP file and click Extract all. Click Next. Open up the extracted folder and double-click on Speccy.
 
     Once inside Speccy, it will look similar to this (with your computer's specifications, of course): p22004369.gif

     Now, at the top, click File > Publish Snapshot. You will see the following prompt:

p22004371.gif

     Click Yes > then Copy to Clipboard

p22004372.gif

Now, once you are back in the forum topic you are posting in, click the p22004370.gif button. Right-click in the empty space of the Reply box and click Paste. Then, click Add Reply below the Reply box.

 

Louis



#3 Purrington666

Purrington666
  • Topic Starter

  • Members
  • 43 posts
  • OFFLINE
  •  
  • Local time:06:32 AM

Posted 30 October 2016 - 09:45 AM

MiniToolBox by Farbar  Version: 17-06-2016
Ran by Lewis (administrator) on 30-10-2016 at 10:34:45
Running from "C:\Users\Lewis\Downloads"
Microsoft Windows 7 Home Premium  Service Pack 1 (X64)
Model: Inspiron N5110 Manufacturer: Dell Inc.

Boot Mode: Normal
***************************************************************************
 
========================= Event log errors: ===============================
 
Application errors:
==================
Error: (10/30/2016 07:20:12 AM) (Source: ESENT) (User: )
Description: CCleaner64 (6468) testing: Error -1032 (0xfffffbf8) occurred while opening logfile C:\Users\Lewis\AppData\Local\Microsoft\Windows\WebCache\V01.log.
 
Error: (10/30/2016 07:20:12 AM) (Source: ESENT) (User: )
Description: CCleaner64 (6468) testing: An attempt to open the file "C:\Users\Lewis\AppData\Local\Microsoft\Windows\WebCache\V01.log" for read only access failed with system error 32 (0x00000020): "The process cannot access the file because it is being used by another process. ".  The open file operation will fail with error -1032 (0xfffffbf8).
 
Error: (10/30/2016 07:17:28 AM) (Source: Application Error) (User: )
Description: Faulting application name: defraggler64.exe, version: 2.21.0.993, time stamp: 0x56d56a32
Faulting module name: dbghelp.dll_unloaded, version: 0.0.0.0, time stamp: 0x4ce7c5ac
Exception code: 0xc0000005
Fault offset: 0x000007fef6561ef0
Faulting process id: 0x4a0
Faulting application start time: 0xdefraggler64.exe0
Faulting application path: defraggler64.exe1
Faulting module path: defraggler64.exe2
Report Id: defraggler64.exe3
 
Error: (10/29/2016 12:27:26 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1".Error in manifest or policy file "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" on line C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Component 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
 
Error: (10/29/2016 04:10:02 AM) (Source: SecurityCenter) (User: )
Description: The Windows Security Center Service was unable to establish event queries with WMI to monitor third party AntiVirus, AntiSpyware and Firewall.
 
Error: (10/29/2016 04:09:39 AM) (Source: WinMgmt) (User: )
Description: 0x80070020
 
Error: (10/26/2016 09:15:28 PM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance.  hr = 0x80040154, Class not registered
Operation:     Instantiating VSS server
 
Error: (10/26/2016 09:15:28 PM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service error: A critical component required by the Volume Shadow Copy service is not registered.
This might happened if an error occurred during Windows setup or during installation of a Shadow Copy provider.
The error returned from CoCreateInstance on class with CLSID {e579ab5f-1cc4-44b4-bed9-de0991ff0623} and Name IVssCoordinatorEx2 is [0x80040154, Class not registered
Operation:     Instantiating VSS server
 
Error: (10/25/2016 05:00:37 PM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1".Error in manifest or policy file "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" on line C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Component 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
 
Error: (10/24/2016 09:42:08 AM) (Source: SideBySide) (User: )
Description: Activation context generation failed for "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1".Error in manifest or policy file "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" on line C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Component 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
 
System errors:
=============
Error: (10/30/2016 08:54:05 AM) (Source: volsnap) (User: )
Description: The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.
 
Error: (10/30/2016 03:50:54 AM) (Source: Service Control Manager) (User: )
Description: The Peer Networking Grouping service depends on the Peer Name Resolution Protocol service which failed to start because of the following error: %%-2140993535
 
Error: (10/30/2016 03:50:54 AM) (Source: Service Control Manager) (User: )
Description: The Peer Name Resolution Protocol service terminated with the following error: %%-2140993535
 
Error: (10/30/2016 03:50:54 AM) (Source: PNRPSvc) (User: )
Description: 0x80630801
 
Error: (10/30/2016 03:50:54 AM) (Source: Service Control Manager) (User: )
Description: The Peer Networking Grouping service depends on the Peer Name Resolution Protocol service which failed to start because of the following error: %%-2140993535
 
Error: (10/30/2016 03:50:54 AM) (Source: Service Control Manager) (User: )
Description: The Peer Name Resolution Protocol service terminated with the following error: %%-2140993535
 
Error: (10/30/2016 03:50:54 AM) (Source: PNRPSvc) (User: )
Description: 0x80630801
 
Error: (10/30/2016 03:50:44 AM) (Source: Service Control Manager) (User: )
Description: The Peer Networking Grouping service depends on the Peer Name Resolution Protocol service which failed to start because of the following error: %%-2140993535
 
Error: (10/30/2016 03:50:44 AM) (Source: Service Control Manager) (User: )
Description: The Peer Name Resolution Protocol service terminated with the following error: %%-2140993535
 
Error: (10/30/2016 03:50:44 AM) (Source: PNRPSvc) (User: )
Description: 0x80630801
 
Microsoft Office Sessions:
=========================
Error: (10/30/2016 07:20:12 AM) (Source: ESENT)(User: )
Description: CCleaner646468testing: C:\Users\Lewis\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8)
 
Error: (10/30/2016 07:20:12 AM) (Source: ESENT)(User: )
Description: CCleaner646468testing: C:\Users\Lewis\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8)32 (0x00000020)The process cannot access the file because it is being used by another process.
 
Error: (10/30/2016 07:17:28 AM) (Source: Application Error)(User: )
Description: defraggler64.exe2.21.0.99356d56a32dbghelp.dll_unloaded0.0.0.04ce7c5acc0000005000007fef6561ef04a001d2329f31b87ce1C:\Program Files\Defraggler\defraggler64.exedbghelp.dll706d407f-9e92-11e6-a286-4c80937bcb3a
 
Error: (10/29/2016 12:27:26 PM) (Source: SideBySide)(User: )
Description: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifestC:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifestC:\Users\Lewis\Downloads\esetsmartinstaller_enu.exe
 
Error: (10/29/2016 04:10:02 AM) (Source: SecurityCenter)(User: )
Description:
 
Error: (10/29/2016 04:09:39 AM) (Source: WinMgmt)(User: )
Description: 0x80070020
 
Error: (10/26/2016 09:15:28 PM) (Source: VSS)(User: )
Description: CoCreateInstance0x80040154, Class not registered
Operation:   Instantiating VSS server
 
Error: (10/26/2016 09:15:28 PM) (Source: VSS)(User: )
Description: {e579ab5f-1cc4-44b4-bed9-de0991ff0623}IVssCoordinatorEx20x80040154, Class not registered
Operation:   Instantiating VSS server
 
Error: (10/25/2016 05:00:37 PM) (Source: SideBySide)(User: )
Description: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifestC:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifestC:\Users\Lewis\Downloads\esetsmartinstaller_enu.exe
 
Error: (10/24/2016 09:42:08 AM) (Source: SideBySide)(User: )
Description: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifestC:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifestC:\Users\Lewis\Downloads\esetsmartinstaller_enu.exe
 
 CodeIntegrity Errors:
===================================
  Date: 2016-08-01 05:09:53.598
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2016-08-01 05:08:36.436
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2016-08-01 05:08:36.421
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2016-08-01 05:08:23.426
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2016-07-31 12:02:30.693
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2016-07-31 12:02:30.693
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2016-07-31 12:02:00.788
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2016-07-31 04:18:14.733
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2016-07-31 04:17:25.825
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2016-07-31 04:17:25.825
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.
 
=========================== Installed Programs ============================
Accidental Damage Services Agreement (HKLM-x32\...\{EF85FEF4-EB92-4075-A6D2-5F519BB30A2C}) (Version: 2.0.0 - Dell Inc.)
Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.020.20039 - Adobe Systems Incorporated)
Adobe Flash Player 23 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 23.0.0.185 - Adobe Systems Incorporated)
Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.185 - Adobe Systems Incorporated)
Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd)
Amazon Kindle (HKCU\...\Amazon Kindle) (Version: 1.16.0.44025 - Amazon)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 12.3.2280 - AVAST Software)
Banctec Service Agreement (HKLM-x32\...\{42D68A86-DB1C-4256-B8C9-5D0D92919AF5}) (Version: 2.0.0 - Dell Inc.)
calibre 64bit (HKLM\...\{2C03B986-18B6-456E-BA48-03463D8EB355}) (Version: 2.67.0 - Kovid Goyal)
Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Complete Care Business Service Agreement (HKLM-x32\...\{0ECFCB07-9BFE-4970-ACA1-D568D982760B}) (Version: 2.0.0 - Dell Inc.)
Consumer In-Home Service Agreement (HKLM-x32\...\{F47C37A4-7189-430A-B81D-739FF8A7A554}) (Version: 2.0.0 - Dell Inc.)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Defraggler (HKLM\...\Defraggler) (Version: 2.21 - Piriform)
Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc)
Dell Getting Started Guide (HKLM-x32\...\{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}) (Version: 1.00.0000 - Dell Inc.)
Dell Home Systems Service Agreement (HKLM-x32\...\{AB2FDE4F-6BED-4E9E-B676-3DCCEBB1FBFE}) (Version: 2.0.0 - Dell Inc.)
Dell PhotoStage (HKLM-x32\...\{0D98F04D-11A1-4B64-A406-43292B9EEE90}) (Version: 1.5.0.130 - ArcSoft)
Dell Support Center (HKLM\...\{0090A87C-3E0E-43D4-AA71-A71B06563A4A}) (Version: 3.1.5803.11 - PC-Doctor, Inc.) Hidden
Dell Support Center (HKLM\...\Dell Support Center) (Version: 3.1.5803.11 - Dell Inc.)
Dell System Detect (HKCU\...\58d94f3ce2c27db0) (Version: 7.6.0.17 - Dell)
Dell Touchpad (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 7.1209.101.204 - ALPS ELECTRIC CO., LTD.)
Dell V310-V510 Series (HKLM\...\Dell V310-V510 Series) (Version:  - Dell, Inc.)
Dell Webcam Central (HKLM-x32\...\Dell Webcam Central) (Version: 2.00.44 - Creative Technology Ltd)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
Fitbit Connect (HKLM-x32\...\{9EC69368-C1C7-48BA-AD93-01EFC142DDF9}) (Version: 2.0.0.6630 - Fitbit Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 54.0.2840.71 - Google Inc.)
Google Drive (HKLM-x32\...\{459CE109-4E46-4340-92BC-054642BC3BC2}) (Version: 1.31.2873.2758 - Google, Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.31.5 - Google Inc.) Hidden
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6324.0 - IDT)
Image Resizer for Windows (64 bit) (HKLM\...\{617CA6E9-D5FB-4017-8130-82E68C56C34D}) (Version: 3.0.4802.35565 - Brice Lambson) Hidden
Image Resizer for Windows (HKLM-x32\...\{69d72156-6582-4556-8637-06f40aa7f85b}) (Version: 3.0.4802.35565 - Brice Lambson)
Intel® Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1118 - Intel Corporation)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2843 - Intel Corporation)
Intel® PROSet/Wireless Software for Bluetooth® Technology (HKLM\...\{7CE8BE79-ABC3-4B2C-9543-28ED2B0A9EA8}) (Version: 1.2.0.0587 - Intel Corporation)
Intel® Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.0.1008 - Intel Corporation)
Intel® WiDi (HKLM-x32\...\{781A93CD-1608-427D-B7F0-D05C07795B25}) (Version: 2.1.41.0 - Intel Corporation)
Intel® Wireless Display (HKLM\...\{28EF7372-9087-4AC3-9B9F-D9751FCDF830}) (Version:  - )
Intel® PROSet/Wireless Software (HKLM-x32\...\{eddf4201-b72e-4e94-9e7b-ac1ba97c029f}) (Version: 16.11.0 - Intel Corporation)
Junk Mail filter update (HKLM-x32\...\{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Mesh Runtime (HKLM-x32\...\{8C6D6116-B724-4810-8F2D-D047E6B7D68E}) (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft OneDrive (HKCU\...\OneDriveSetup.exe) (Version: 17.3.6517.0809 - Microsoft Corporation)
Microsoft Outlook 2010 (HKLM-x32\...\Office14.OUTLOOKR) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
NETGEAR Genie (HKLM-x32\...\NETGEAR Genie) (Version: 2.4.18.00 - NETGEAR Inc.)
PlayReady PC Runtime x86 (HKLM-x32\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
Premium Service Agreement (HKLM-x32\...\{C33AA6D6-F5EC-48F3-AFDC-8141345D473A}) (Version: 2.0.0 - Dell Inc.)
QualxServ Service Agreement (HKLM-x32\...\{903679E8-44C8-4C07-9600-05C92654FC50}) (Version: 2.0.0 - Dell Inc.)
Quickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 10.09.25 - Dell Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.48.823.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7541 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30126 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.32.0 - Renesas Electronics Corporation) Hidden
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.32.0 - Renesas Electronics Corporation)
Revo Uninstaller 2.0.1 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.1 - VS Revo Group, Ltd.)
SafeZone Stable 1.48.2066.44 (HKLM-x32\...\SafeZone 1.48.2066.44) (Version: 1.48.2066.44 - Avast Software) Hidden
SafeZone Stable 1.51.2220.62 (HKLM-x32\...\SafeZone 1.51.2220.62) (Version: 1.51.2220.62 - Avast Software) Hidden
Seagate Dashboard (HKLM-x32\...\{EA266F00-A8E7-43A0-8DED-FBFE3F076934}) (Version: 4.4.19.0 - Seagate)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{91140000-001A-0000-0000-0000000FF1CE}_Office14.OUTLOOKR_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
 
========================= Memory info: ===================================
Percentage of memory in use: 45%
Total physical RAM: 6051.18 MB
Available physical RAM: 3324.09 MB
Total Virtual: 12100.54 MB
Available Virtual: 9308.91 MB
 
========================= Partitions: =====================================
1 Drive c: (OS) (Fixed) (Total:451.01 GB) (Free:389.46 GB) NTFS
 
========================= Users: ========================================
User accounts for \\LEWIS-PC
 
Administrator            Guest                    Lewis                    
 
 
 
**** End of log ****
 
http://speccy.piriform.com/results/sjpB3MR2K1yJMonAfCnnEaN


Edited by hamluis, 30 October 2016 - 01:01 PM.


#4 JohnC_21

JohnC_21

  • Members
  • 23,239 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:32 AM

Posted 30 October 2016 - 10:24 AM

Did you click the Remove Settings button from your first image in your thread, post 41? If you pressed remove customized settings then open Task Scheduler. Look in the Scheduler to see if Tweaking has a listing for Defrag. 

 

If nothing is there then download AutoRuns and search for anything from Tweaking.com if you have uninstalled all Tweaking.com programs. Uncheck the box next to the listing. Do not remove it. If unchecking solves the problem and the computer runs normally you can remove it.



#5 Purrington666

Purrington666
  • Topic Starter

  • Members
  • 43 posts
  • OFFLINE
  •  
  • Local time:06:32 AM

Posted 30 October 2016 - 11:52 AM

I have no recollection of having clicked the Remove Settings button from my first image in your thread, post 41.

 

When I look at Task Scheduler today [See Image Attached] I can see where it says at the bottom: “Tweaking.co…” but no mention of “defrag.”

 

To the right of where it says: “Tweaking.co…” it says: The directory name is invalid. (0x80070108) [See Image Attached]

 

Should I run “Autoruns”?

 

Thank you

Attached Files



#6 JohnC_21

JohnC_21

  • Members
  • 23,239 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:32 AM

Posted 30 October 2016 - 11:59 AM

This is the post. See your first image.

 

http://www.bleepingcomputer.com/forums/t/629582/rkill-missing-digital-signatures/?p=4111065

 

Right click the Tweaking.com entry and select Disable. Reboot and see if you get the error trying to run defrag. If you can then go open Task Scheduler and instead of Disable select Delete to remove the entry.

 

You get the error because the directory no longer exists. 



#7 Purrington666

Purrington666
  • Topic Starter

  • Members
  • 43 posts
  • OFFLINE
  •  
  • Local time:06:32 AM

Posted 30 October 2016 - 12:21 PM

Pursuant to your instructions I:

 

1.      Disabled Tweaking

2.      Rebooted

 

When I then attempted to open up Defragmenter the attached message appeared

 

When I again opened up “Task Scheduler” I did not see any listing with Tweaking showing.

 

Numbers popups appear telling me that various images have been tampered with or are corrupted.

Attached Files



#8 JohnC_21

JohnC_21

  • Members
  • 23,239 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:32 AM

Posted 30 October 2016 - 12:29 PM

Numbers popups appear telling me that various images have been tampered with or are corrupted.

 

I would not have any idea on why this error popped up.

 

Did you press Remove Settings in the above image?



#9 Purrington666

Purrington666
  • Topic Starter

  • Members
  • 43 posts
  • OFFLINE
  •  
  • Local time:06:32 AM

Posted 30 October 2016 - 12:36 PM

I did not press "Remove Settings" in the above image.

 

These popup notices were also appearing when I was working with your colleague Gary.



#10 JohnC_21

JohnC_21

  • Members
  • 23,239 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:32 AM

Posted 30 October 2016 - 12:41 PM

Can you provide an image of the popup? I would go ahead and press the Remove Settings button to clear out the customized settings.



#11 Purrington666

Purrington666
  • Topic Starter

  • Members
  • 43 posts
  • OFFLINE
  •  
  • Local time:06:32 AM

Posted 30 October 2016 - 12:43 PM

There are numerous popups, over 30 of them.

 

Do you just want a sample of one of them or do you wish me to send an image of each one that pops up?

 

Thank you



#12 JohnC_21

JohnC_21

  • Members
  • 23,239 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:32 AM

Posted 30 October 2016 - 12:44 PM

Just a couple would be okay?



#13 Purrington666

Purrington666
  • Topic Starter

  • Members
  • 43 posts
  • OFFLINE
  •  
  • Local time:06:32 AM

Posted 30 October 2016 - 12:51 PM

I am sorry but I do not see a "Settings Button" so I do not know how to remove it. [See Attached Image]

 

Also attached see two examples of "Tampered with" and/or "corrupt image"

Attached Files



#14 JohnC_21

JohnC_21

  • Members
  • 23,239 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:32 AM

Posted 30 October 2016 - 01:03 PM

I am not familiar with those particular tasks that are corrupted. The Remove Settings Button is shown in the image you posted in your post #7

 

Edit? If you have had 30 of these popups for various task then something is corrupted in Task Scheduler. I am not sure if doing a sfc /scannow at a command prompt would fix it but it's worth a try.

 

In each of your images is a Task ID. You can open regedit in an admin account and browse to the following key.

 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks

 

Click on the ID that shows in your pop ups. Look at the Path subkey. This will show which Task is corrupted. 

 

Did all these popups start after downloading the Tweaking program?


Edited by JohnC_21, 30 October 2016 - 01:16 PM.


#15 Purrington666

Purrington666
  • Topic Starter

  • Members
  • 43 posts
  • OFFLINE
  •  
  • Local time:06:32 AM

Posted 30 October 2016 - 02:37 PM

I apologize I had misunderstood what you meant by the Remove Settings Button until I saw the image you referred to.

 

When I click on the "Remove Settings" button the icon simply disappears without anything apparently happening.

 

I ran sfc /scannow and no integrity violations were found.

 

If I Click on the ID that shows in my pop ups and look at the Path subkey and see which Task is corrupted is there something further I should do?

 

I started using the Tweaking Programs some time ago.  I found it on the Bleeping Computer site and did not think it could cause damage to my laptop.

 

I only became aware of the popup issue when working with your colleague "Gary" the other day.  I have no way to know if the popups would have been in effect prior to that time.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users