XP PC with problems

  1. 03-02-2012  #11
    broni
    broni is offline Senior Member

    I still need Extras.txt log.
  2. 03-02-2012  #12
    davidp
    davidp is offline Full Member
    Sorry. Here it is

    ------------
    OTL Extras logfile created on: 03/02/2012 00:47:01 - Run 1
    OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\David_p\Desktop
    Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
    Internet Explorer (Version = 7.0.5730.11)
    Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy

    1023.36 Mb Total Physical Memory | 339.62 Mb Available Physical Memory | 33.19% Memory free
    2.40 Gb Paging File | 1.73 Gb Available in Paging File | 71.90% Paging File free
    Paging file location(s): C:\pagefile.sys 0 0 [binary data]

    %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
    Drive C: | 229.18 Gb Total Space | 101.51 Gb Free Space | 44.29% Space Free | Partition Type: NTFS
    Drive E: | 593.60 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: UDF

    Computer Name: DAVID | User Name: David_p | Logged in as Administrator.
    Boot Mode: Normal | Scan Mode: All users | Quick Scan
    Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

    ========== Extra Registry (SafeList) ==========


    ========== File Associations ==========

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
    .cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
    .url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l

    ========== Shell Spawning ==========

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
    batfile [open] -- "%1" %*
    cmdfile [open] -- "%1" %*
    comfile [open] -- "%1" %*
    cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
    exefile [open] -- "%1" %*
    InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l
    piffile [open] -- "%1" %*
    regfile [merge] -- Reg Error: Key error.
    scrfile [config] -- "%1"
    scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
    scrfile [open] -- "%1" /S
    txtfile [edit] -- Reg Error: Key error.
    Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
    Directory [ACDBrowse] -- "C:\Program Files\ACD Systems\ACDSee\ACDSee.exe" "%1" (ACD Systems, Ltd.)
    Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
    Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
    Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
    Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
    Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
    Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

    ========== Security Center Settings ==========

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
    "FirstRunDisabled" = 1
    "AntiVirusDisableNotify" = 0
    "FirewallDisableNotify" = 0
    "UpdatesDisableNotify" = 0
    "AntiVirusOverride" = 0
    "FirewallOverride" = 0

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
    "DisableMonitoring" = 1

    ========== System Restore Settings ==========

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
    "DisableSR" = 0

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Sr]
    "Start" = 0

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SrService]
    "Start" = 2

    ========== Firewall Settings ==========

    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dowsFirewall]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dowsFirewall\DomainProfile]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dowsFirewall\StandardProfile]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\DomainPr ofile]
    "EnableFirewall" = 0

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\DomainPr ofile\GloballyOpenPorts\List]
    "139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
    "445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
    "137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
    "138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
    "1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
    "2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
    "10243:TCP" = 10243:TCP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
    "10280:UDP" = 10280:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
    "10281:UDP" = 10281:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
    "10282:UDP" = 10282:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
    "10283:UDP" = 10283:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
    "10284:UDP" = 10284:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\Standard Profile]
    "EnableFirewall" = 0
    "DoNotAllowExceptions" = 0
    "DisableNotifications" = 0

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\Standard Profile\GloballyOpenPorts\List]
    "139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
    "445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
    "137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
    "138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
    "1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
    "2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
    "10243:TCP" = 10243:TCP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
    "10280:UDP" = 10280:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
    "10281:UDP" = 10281:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
    "10282:UDP" = 10282:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
    "10283:UDP" = 10283:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
    "10284:UDP" = 10284:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service

    ========== Authorized Applications List ==========

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\DomainPr ofile\AuthorizedApplications\List]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\Standard Profile\AuthorizedApplications\List]


    ========== HKEY_LOCAL_MACHINE Uninstall List ==========

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall]
    "{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
    "{02E89EFC-7B07-4D5A-AA03-9EC0902914EE}" = VC 9.0 Runtime
    "{047882CA-975E-41FC-BE02-6D6396106C4E}" = ACDSee 3.1 (SR-1)
    "{178832DE-9DE0-4C87-9F82-9315A9B03985}" = Windows Live Writer
    "{1BD07DF4-FB06-41BA-B896-B2DA59000C96}" = Windows Live Toolbar
    "{1DD81E7D-0D28-4CEB-87B2-C041A4FCB215}" = Rapport
    "{1EBB57D4-63FF-87CC-A0F0-D73982CF6008}" = Adobe Media Player
    "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
    "{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
    "{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
    "{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
    "{26A24AE4-039D-4CA4-87B4-2F83216027FF}" = Java(TM) 6 Update 29
    "{2B120B1D-1908-4FB3-8C9D-72128A74E80A}" = ZoneAlarm Security
    "{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
    "{3248F0A8-6813-11D6-A77B-00B0D0150070}" = J2SE Runtime Environment 5.0 Update 7
    "{3248F0A8-6813-11D6-A77B-00B0D0160010}" = Java(TM) SE Runtime Environment 6 Update 1
    "{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
    "{474F25F5-BDC9-40E5-B1B6-F6BF23FC106F}" = Windows Live Essentials
    "{474F2D04-0332-4821-A666-F79134BC1882}" =
    "{497A1721-088F-41EF-8876-B43C9DA5528B}" = ArcSoft Software Suite
    "{49CC1A6A-3A1A-4EE7-913F-8106B51B59D1}" = Paragon Partition Manager 8.0 Personal
    "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
    "{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}" = Microsoft Search Enhancement Pack
    "{4F94119D-1B71-400e-9F04-B4E5CEAE71F8}_is1" = Sothink Movie DVD Maker
    "{53480070-8E5F-4678-B8E0-2525A719DD39}" = O&O DiskRecovery
    "{53735ECE-E461-4FD0-B742-23A352436D3A}" = Logitech Updater
    "{53EF6570-21A4-47ED-A40A-E6470A5677A3}" = Studio 8
    "{553255F3-78FD-40F1-A6F8-6882140265FE}" = Apple Application Support
    "{594CC15E-B32D-11D5-9293-0050BA073EEC}" = Presto! VideoWorks 5.0
    "{5D536ABE-4396-11D5-8578-00105ADDC431}" = Kubex Software 3D Home Designer
    "{5FE917F6-88DB-82FC-AC44-EDF00C57EF21}" = BBC iPlayer Desktop
    "{605238B9-D55B-4E4D-A49A-317BEA4FFCF6}" = Clipart.com Sampler 40,000
    "{6412CECE-8172-4BE5-935B-6CECACD2CA87}" = Windows Live Mail
    "{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
    "{6877BB34-2631-46DA-AD62-3DE601E8D7BE}" = ATI Catalyst Control Center
    "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
    "{7131646D-CD3C-40F4-97B9-CD9E4E6262EF}" = Microsoft .NET Framework 2.0
    "{747D1B34-A1FC-4EF3-A6AE-E86F39CEFDE5}" = Roxio Easy Media Creator 7 Basic DVD Edition
    "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
    "{7765FF4A-262D-4CFF-BD5E-DE2073CF70F0}" = FloorPlan 3D v9
    "{783033B0-D8E6-11D5-9293-0050BA073EEC}" = Presto! ImageFolio 4.2
    "{7A89FBFB-EB8D-4612-B558-B6BD1793E243}" = WOT for Internet Explorer
    "{82B2DB92-98CA-4a0e-B1BD-18B6E2D320CB}" = Memeo Backup
    "{875F2DAB-3B03-11D5-AB3E-000102B0F79A}" = Readiris 7.0
    "{892209FF-68DD-4DD2-BCDB-A013CA20BCE9}" = Password Depot 3
    "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
    "{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)
    "{8E5233E1-7495-44FB-8DEB-4BE906D59619}" = Junk Mail filter update
    "{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}" = TomTom HOME Visual Studio Merge Modules
    "{90110409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
    "{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
    "{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
    "{937B232D-9776-471E-92BD-D424E514EF14}" = Logitech QuickCam
    "{9422C8EA-B0C6-4197-B8FC-DC797658CA00}" = Windows Live Sign-in Assistant
    "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
    "{95120000-0122-0409-0000-0000000FF1CE}" = Microsoft Office Outlook Connector
    "{996A2FAA-7514-4628-9D12-A8FC34A0016E}" = iTunes
    "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
    "{9A9DBEBC-C800-4776-A970-D76D6AA405B1}" = PHOTOfunSTUDIO HD Edition
    "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
    "{A040AC77-C1AA-4CC9-8931-9F648AF178F6}" = VC 9.0 Runtime
    "{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
    "{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
    "{A386CC19-1E79-4D4C-A54B-C8747871E4AD}" = ZoneAlarm Firewall
    "{A4D7B764-4140-11D4-88EB-0050DA3579C0}" = Nero
    "{A654A805-41D9-40C7-AA46-4AF04F044D61}" = Adobe® Photoshop® Album Starter Edition 3.2
    "{A8D647C8-65AC-409F-B7B2-3C0FEE1A32F2}" = PixiePack Codec Pack
    "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
    "{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
    "{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.2)
    "{B10914FD-8812-47A4-85A1-50FCDE7F1F33}" = Windows Live Sync
    "{B194272D-1F92-46DF-99EB-8D5CE91CB4EC}" = Adobe AIR
    "{B57EAFF2-D6EE-4C6C-9175-ED9F17BFC1BC}" = Windows Live Messenger
    "{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Click to Call with Skype
    "{BACEBB91-A3B3-4FD5-89C1-C673CE1C2DBD}" = Serif WebPlus 6.0
    "{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation
    "{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)
    "{BD6840EF-4113-4DA9-BA8B-BC7C34832BA0}" = QuarkXPress 5.01
    "{C2F8CA82-2BD9-4513-B2D1-08A47914C1DA}_is1" = Uniblue DriverScanner
    "{C34FAEF3-4241-4C4E-9CFF-7BBD8BCEABE7}" = WebEx Support Manager for Internet Explorer
    "{C4DB5E2D-0F30-4EF2-B796-8A6D4CC3C078}" = Oxygen AVCHD Player Lite
    "{C9E14402-3631-4182-B377-6B0DFB1C0339}" = QuickTime
    "{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
    "{CBACCC0D-7B8B-4C3E-AA96-B6C64DCF19BB}" = LS_HSI
    "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
    "{CFCD2A80-EC16-11E0-A273-B8AC6F97B88E}" = Google Earth
    "{D8E363A7-88B7-446D-B2C0-E26CE4DC8E54}" = U3Launcher
    "{D92FF8EB-BD77-40AE-B68B-A6BFC6F8661D}" = Windows Live Family Safety
    "{E2883E8F-472F-4fb0-9522-AC9BF37916A7}" = Adobe Download Manager
    "{E59113EB-0285-4BFD-A37A-B79EAC6B8F4B}" = Microsoft SQL Server Compact 3.5 SP1 English
    "{E6158D07-2637-4ECF-B576-37C489669174}" = Windows Live Call
    "{EBAE381B-60A6-4863-AA9F-FCAB755BC9E5}" = ScanToWeb
    "{EE39FFBD-544E-49E4-A999-6819828EAE91}" = Windows Live Photo Gallery
    "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
    "{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
    "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
    "{F2F4C144-7D1A-47C4-9D53-395A57B0CD64}" = Family Tree Maker 2006
    "{FDC53DC6-137A-4541-BFA2-A9BAE4A7FE99}" = ULi Chipset Driver
    "ActiveTouchMeetingClient" = WebEx
    "Adobe AIR" = Adobe AIR
    "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
    "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
    "Adobe Photoshop Elements 2.0" = Adobe Photoshop Elements 2.0
    "Adobe Shockwave Player" = Adobe Shockwave Player 11.5
    "Adobe® Photoshop® Album Starter Edition 3.2" = Adobe® Photoshop® Album Starter Edition 3.2
    "Age of Empires" = Microsoft Age of Empires
    "All ATI Software" = ATI - Software Uninstall Utility
    "Applet_App" = Applet_App
    "Applet_Copy" = Applet_Copy
    "Applet_Creativity" = Applet_Creativity
    "Applet_Email" = Applet_Email
    "Applet_Epp" = Applet_Epp
    "Applet_File" = Applet_File
    "Applet_OCR" = Applet_OCR
    "Applet_Web" = Applet_Web
    "ATI Display Driver" = ATI Display Driver
    "Audacity 1.3 Beta_is1" = Audacity 1.3.4
    "AVS Update Manager_is1" = AVS Update Manager 1.0
    "AVS4YOU Software Navigator_is1" = AVS4YOU Software Navigator 1.3
    "AVS4YOU Video Converter 6_is1" = AVS Video Converter 6
    "CCleaner" = CCleaner
    "Charting Companion for Family Tree Maker 1.0" = Charting Companion for Family Tree Maker
    "CNXT_MODEM_PCI_VEN_14F1&DEV_2F01&SUBSYS_93051 41C" = CNXT V92 Data Fax Voice
    "com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485 DF8CE.1" = Adobe Media Player
    "Copy Utility" = Copy Utility
    "Dan Elwell's Broadband Speed Test_is1" = Dan Elwell's Broadband Speed Test
    "Duplicate Cleaner" = Duplicate Cleaner 1.4.5
    "DVD Flick_is1" = DVD Flick
    "DVD To Audio Converter_is1" = DVD To Audio Converter 1.00
    "Enable S3 for USB Device" = Enable S3 for USB Device
    "EPSON Smart Panel" = EPSON Smart Panel
    "ESET Online Scanner" = ESET Online Scanner v3
    "ExpressBurn" = Express Burn
    "FlashLynx" = FlashLynx Video Download Software
    "FreshDevices - FreshDiagnose_is1" = FreshDiagnose
    "Genie Backup Manager V4.0_is1" = Genie Backup Manager V4.0
    "getPlus(R)_ocx" = getPlus(R)_ocx
    "Google Updater" = Google Updater
    "HijackThis" = HijackThis 2.0.2
    "Hollywood FX 4.6" = Pinnacle Hollywood FX 4.6
    "IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
    "ie7" = Windows Internet Explorer 7
    "ie8" = Windows Internet Explorer 8
    "InstallShield_{605238B9-D55B-4E4D-A49A-317BEA4FFCF6}" = Clipart.com Sampler 40,000
    "IrfanView" = IrfanView (remove only)
    "JPEG Lossless Rotator_is1" = JPEG Lossless Rotator 5.0
    "lvdrivers_11.90" = Logitech QuickCam Driver Package
    "MAGIX audio cleaning lab 2004 deLuxe" = MAGIX audio cleaning lab 2004 deLuxe
    "MAGIX Media Manager silver" = MAGIX Media Manager silver
    "Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.60.1.1000
    "Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
    "Microsoft .NET Framework 2.0" = Microsoft .NET Framework 2.0
    "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
    "Mozilla Firefox (3.0.6)" = Mozilla Firefox (3.0.6)
    "Mozilla Thunderbird (2.0.0.19)" = Mozilla Thunderbird (2.0.0.19)
    "MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
    "MSMONEYV80" = Microsoft Money 2000 Standard
    "MSNINST" = MSN
    "MT2OFX_is1" = MT2OFX V3.5.37
    "NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
    "OpenAL" = OpenAL
    "PhotoStage" = PhotoStage Slideshow Producer
    "Picasa 3" = Picasa 3
    "Pixillion" = Pixillion Image Converter
    "PPTView97" = Microsoft PowerPoint Viewer 97
    "Prism" = Prism Video Converter
    "Rapport_msi" = Rapport
    "RealPlayer 6.0" = RealPlayer
    "Recuva" = Recuva
    "RegUtility_is1" = RegUtility version 4.1
    "Roxio MRFilter" = Roxio EasyWrite Reader
    "R-Studio 5.2NSIS" = R-Studio 5.2
    "System Mechanic 6_is1" = iolo technologies' System Mechanic 6
    "TomTom HOME" = TomTom HOME 2.7.5.2014
    "TreeSize Professional_is1" = TreeSize Professional 4.0
    "UN020914" = BUFFALO INC. DISK FORMATTER
    "UN050225" = BUFFALO Secure Lock Ware
    "UN070618" = BUFFALO TurboUSB for FLASH/HDD
    "UN080616" = BUFFALO eco Manager for HD
    "Visioneer 4400 Scanner" = Visioneer 4400 Scanner
    "VLC media player" = VLC media player 1.1.11
    "vShare" = vShare Plugin
    "WIC" = Windows Imaging Component
    "Windows Media Format Runtime" = Windows Media Format 11 runtime
    "Windows Media Player" = Windows Media Player 11
    "Windows XP Service Pack" = Windows XP Service Pack 3
    "WinLiveSuite_Wave3" = Windows Live Essentials
    "WMFDist11" = Windows Media Format 11 runtime
    "wmp11" = Windows Media Player 11
    "Works2kSetup" = Microsoft Works 2000 Setup Launcher
    "Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
    "ZoneAlarm Free" = ZoneAlarm Free
    "ZoneAlarm Toolbar" = ZoneAlarm Toolbar
    "ZoneAlarmSB Uninstall" = ZoneAlarm Spy Blocker

    ========== HKEY_USERS Uninstall List ==========

    [HKEY_USERS\S-1-5-21-4252005528-1478401231-3267452383-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\Uni nstall]

    ========== Last 10 Event Log Errors ==========

    [ Application Events ]
    Error - 02/02/2012 14:46:28 | Computer Name = DAVID | Source = Userenv | ID = 1041
    Description = Windows cannot query DllName registry entry for {7B849a69-220F-451E-B3FE-2CB811AF94AE}
    and it will not be loaded. This is most likely caused by a faulty registration.

    Error - 02/02/2012 14:46:28 | Computer Name = DAVID | Source = Userenv | ID = 1041
    Description = Windows cannot query DllName registry entry for {CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D}
    and it will not be loaded. This is most likely caused by a faulty registration.

    Error - 02/02/2012 14:48:29 | Computer Name = DAVID | Source = Userenv | ID = 1041
    Description = Windows cannot query DllName registry entry for {7B849a69-220F-451E-B3FE-2CB811AF94AE}
    and it will not be loaded. This is most likely caused by a faulty registration.

    Error - 02/02/2012 14:48:29 | Computer Name = DAVID | Source = Userenv | ID = 1041
    Description = Windows cannot query DllName registry entry for {CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D}
    and it will not be loaded. This is most likely caused by a faulty registration.

    Error - 02/02/2012 20:34:57 | Computer Name = DAVID | Source = Userenv | ID = 1041
    Description = Windows cannot query DllName registry entry for {7B849a69-220F-451E-B3FE-2CB811AF94AE}
    and it will not be loaded. This is most likely caused by a faulty registration.

    Error - 02/02/2012 20:34:57 | Computer Name = DAVID | Source = Userenv | ID = 1041
    Description = Windows cannot query DllName registry entry for {CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D}
    and it will not be loaded. This is most likely caused by a faulty registration.

    Error - 02/02/2012 20:35:06 | Computer Name = DAVID | Source = Userenv | ID = 1041
    Description = Windows cannot query DllName registry entry for {7B849a69-220F-451E-B3FE-2CB811AF94AE}
    and it will not be loaded. This is most likely caused by a faulty registration.

    Error - 02/02/2012 20:35:06 | Computer Name = DAVID | Source = Userenv | ID = 1041
    Description = Windows cannot query DllName registry entry for {CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D}
    and it will not be loaded. This is most likely caused by a faulty registration.

    Error - 02/02/2012 20:43:33 | Computer Name = DAVID | Source = Application Hang | ID = 1002
    Description = Hanging application iexplore.exe, version 7.0.6000.17106, hang module
    hungapp, version 0.0.0.0, hang address 0x00000000.

    Error - 02/02/2012 20:43:55 | Computer Name = DAVID | Source = Application Hang | ID = 1002
    Description = Hanging application iexplore.exe, version 7.0.6000.17106, hang module
    hungapp, version 0.0.0.0, hang address 0x00000000.

    [ System Events ]
    Error - 02/02/2012 14:34:06 | Computer Name = DAVID | Source = WMPNetworkSvc | ID = 866312
    Description = A new media server was not initialized because WMCreateDeviceRegistration()
    encountered error '0xc00d2711'. The Windows Media DRM components on your computer
    might be corrupted. Verify that protected files play correctly in Windows Media
    Player, and then restart the WMPNetworkSvc service.

    Error - 02/02/2012 14:34:06 | Computer Name = DAVID | Source = WMPNetworkSvc | ID = 866312
    Description = A new media server was not initialized because WMCreateDeviceRegistration()
    encountered error '0xc00d2711'. The Windows Media DRM components on your computer
    might be corrupted. Verify that protected files play correctly in Windows Media
    Player, and then restart the WMPNetworkSvc service.

    Error - 02/02/2012 14:46:35 | Computer Name = DAVID | Source = WMPNetworkSvc | ID = 866312
    Description = A new media server was not initialized because WMCreateDeviceRegistration()
    encountered error '0xc00d2711'. The Windows Media DRM components on your computer
    might be corrupted. Verify that protected files play correctly in Windows Media
    Player, and then restart the WMPNetworkSvc service.

    Error - 02/02/2012 14:46:36 | Computer Name = DAVID | Source = WMPNetworkSvc | ID = 866312
    Description = A new media server was not initialized because WMCreateDeviceRegistration()
    encountered error '0xc00d2711'. The Windows Media DRM components on your computer
    might be corrupted. Verify that protected files play correctly in Windows Media
    Player, and then restart the WMPNetworkSvc service.

    Error - 02/02/2012 14:50:23 | Computer Name = DAVID | Source = Service Control Manager | ID = 7023
    Description = The WMI Performance Adapter service terminated with the following
    error: %%2147500037

    Error - 02/02/2012 14:50:46 | Computer Name = DAVID | Source = Service Control Manager | ID = 7023
    Description = The WMI Performance Adapter service terminated with the following
    error: %%2147500037

    Error - 02/02/2012 20:35:06 | Computer Name = DAVID | Source = WMPNetworkSvc | ID = 866312
    Description = A new media server was not initialized because WMCreateDeviceRegistration()
    encountered error '0xc00d2711'. The Windows Media DRM components on your computer
    might be corrupted. Verify that protected files play correctly in Windows Media
    Player, and then restart the WMPNetworkSvc service.

    Error - 02/02/2012 20:35:07 | Computer Name = DAVID | Source = WMPNetworkSvc | ID = 866312
    Description = A new media server was not initialized because WMCreateDeviceRegistration()
    encountered error '0xc00d2711'. The Windows Media DRM components on your computer
    might be corrupted. Verify that protected files play correctly in Windows Media
    Player, and then restart the WMPNetworkSvc service.

    Error - 02/02/2012 20:37:32 | Computer Name = DAVID | Source = Service Control Manager | ID = 7023
    Description = The WMI Performance Adapter service terminated with the following
    error: %%2147500037

    Error - 02/02/2012 20:38:04 | Computer Name = DAVID | Source = Service Control Manager | ID = 7023
    Description = The WMI Performance Adapter service terminated with the following
    error: %%2147500037


    < End of report >
  3. 03-02-2012  #13
    broni
    broni is offline Senior Member
    Are those sounds present only when IE is open?

    Don't forget to reinstall AVG.

    Uninstall iolo technologies' System Mechanic 6.
    Registry cleaners/optimizers are not recommended for several reasons:

    • Registry cleaners are extremely powerful applications that can damage the registry by using aggressive cleaning routines and cause your computer to become unbootable.

      The Windows registry is a central repository (database) for storing configuration data, user settings and machine-dependent settings, and options for the operating system. It contains information and settings for all hardware, software, users, and preferences. Whenever a user makes changes to settings, file associations, system policies, or installed software, the changes are reflected and stored in this repository. The registry is a crucial component because it is where Windows "remembers" all this information, how it works together, how Windows boots the system and what files it uses when it does. The registry is also a vulnerable subsystem, in that relatively small changes done incorrectly can render the system inoperable. For a more detailed explanation, read Understanding The Registry.
    • Not all registry cleaners are created equal. There are a number of them available but they do not all work entirely the same way. Each vendor uses different criteria as to what constitutes a "bad entry". One cleaner may find entries on your system that will not cause problems when removed, another may not find the same entries, and still another may want to remove entries required for a program to work.
    • Not all registry cleaners create a backup of the registry before making changes. If the changes prevent the system from booting up, then there is no backup available to restore it in order to regain functionality. A backup of the registry is essential BEFORE making any changes to the registry.
    • Improperly removing registry entries can hamper malware disinfection and make the removal process more difficult if your computer becomes infected. For example, removing malware related registry entries before the infection is properly identified can contribute to system instability and even make the malware undetectable to removal tools.
    • The usefulness of cleaning the registry is highly overrated and can be dangerous. In most cases, using a cleaner to remove obsolete, invalid, and erroneous entries does not affect system performance but it can result in "unpredictable results".

    Unless you have a particular problem that requires a registry edit to correct it, I would suggest you leave the registry alone. Using registry cleaning tools unnecessarily or incorrectly could lead to disastrous effects on your operating system such as preventing it from ever starting again. For routine use, the benefits to your computer are negligible while the potential risks are great.



    ================================================== =================

    Run OTL
    • Under the Custom Scans/Fixes box at the bottom, paste in the following

      Code:
      :OTL
O3 - HKU\S-1-5-21-4252005528-1478401231-3267452383-1005\..\Toolbar\WebBrowser: (no name) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No CLSID value found.
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} http://www.crucial.com/controls/cpcScanner.cab (Reg Error: Key error.)

:Commands
[purity]
[emptytemp]
[emptyjava]
[emptyflash]
[Reboot]
    • Then click the Run Fix button at the top
    • Let the program run unhindered, reboot the PC when it is done
    • You will get a log that shows the results of the fix. Please post it.


    ================================================== =================

    1. Update your Java version here: Verify Java Version

    Note 1: UNCHECK any pre-checked toolbar and/or software offered with the Java update. The pre-checked toolbars/software are not part of the Java update.

    Note 2: The Java Quick Starter (JQS.exe) adds a service to improve the initial startup time of Java applets and applications. If you don't want to run another extra service, go to Start > Control Panel > Java > Advanced > Miscellaneous and uncheck the box for Java Quick Starter. Click OK and restart your computer.

    2. Now, we need to remove old Java version and its remnants...

    Download JavaRa to your desktop and unzip it to its own folder
    • Run JavaRa.exe (Vista users! Right click on JavaRa.exe, click Run As Administrator), pick the language of your choice and click Select. Then click Remove Older Versions.
    • Accept any prompts.
    • Do NOT post JavaRa log.


    ================================================== ==============

    Last scans....

    1. Download Security Check from HERE, and save it to your Desktop.
    • Double-click SecurityCheck.exe
    • Follow the onscreen instructions inside of the black box.
    • A Notepad document should open automatically called checkup.txt; please post the contents of that document.

      NOTE SecurityCheck may produce some false warning(s), so leave the results reading to me.


    2. Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.
    • Make sure the following options are checked:
      • Internet Services
      • Windows Firewall
      • System Restore
      • Security Center
      • Windows Update
    • Press "Scan".
    • It will create a log (FSS.txt) in the same directory the tool is run.
    • Please copy and paste the log to your reply.



    3. Download Temp File Cleaner (TFC)
    • Double click on TFC.exe to run the program.
    • Click on Start button to begin cleaning process.
    • TFC will close all running programs, and it may ask you to restart computer.



    4. Please run a free online scan with the ESET Online Scanner

    • Disable your antivirus program
    • Tick the box next to YES, I accept the Terms of Use
    • Click Start
    • Accept any security warnings from your browser.
    • Check Scan archives
    • Click Start
    • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
    • When the scan completes, click on List of found threats
    • Click on Export to text file , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
    • NOTE. If Eset won't find any threats, it won't produce any log.
  4. 03-02-2012  #14
    davidp
    davidp is offline Full Member
    The sounds go off at all times and do not depend on IE being run.

    I have uninstalled System Mechanic and another registry cleaner I had. I use other bits of System Mechanic and only very rarely the reg cleaner so I'll miss it but happy to take your advice.

    I note that while scanning there seems to be bits of System Mechanic still on the PC.

    I spent most of the night running the scans and here are the results.

    ESET detected nothing and didn't therefore produce a log.

    Can I/should I run my newly installed AVG yet?

    --------------------------------

    All processes killed
    ========== OTL ==========
    Registry value HKEY_USERS\S-1-5-21-4252005528-1478401231-3267452383-1005\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{47833539-D0C5-4125-9FA8-0819E2EAAC93} deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4783353 9-D0C5-4125-9FA8-0819E2EAAC93}\ not found.
    Starting removal of ActiveX control {A90A5822-F108-45AD-8482-9BC8B12DD539}
    Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{A90A5822-F108-45AD-8482-9BC8B12DD539}\DownloadInformation\\INF .
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{A90A5822-F108-45AD-8482-9BC8B12DD539}\ deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A90A582 2-F108-45AD-8482-9BC8B12DD539}\ not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{A90A5822-F108-45AD-8482-9BC8B12DD539}\ not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A90A582 2-F108-45AD-8482-9BC8B12DD539}\ not found.
    ========== COMMANDS ==========

    [EMPTYTEMP]

    User: Administrator
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes

    User: All Users

    User: David_p
    ->Temp folder emptied: 1980375 bytes
    ->Temporary Internet Files folder emptied: 2610987 bytes
    ->Java cache emptied: 0 bytes
    ->FireFox cache emptied: 62413469 bytes
    ->Google Chrome cache emptied: 856432 bytes
    ->Flash cache emptied: 17988 bytes

    User: Default User
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 67 bytes
    ->Flash cache emptied: 0 bytes

    User: Guest
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes
    ->Flash cache emptied: 0 bytes

    User: LocalService
    ->Temp folder emptied: 1987864 bytes
    ->Temporary Internet Files folder emptied: 32902 bytes

    User: NetworkService
    ->Temp folder emptied: 997528 bytes
    ->Temporary Internet Files folder emptied: 32902 bytes
    ->Flash cache emptied: 0 bytes

    User: Sam
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes
    ->Flash cache emptied: 0 bytes

    User: Sudge
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes
    ->Java cache emptied: 0 bytes
    ->Flash cache emptied: 0 bytes

    User: TEMP

    User: TEMP.DAVID

    User: TEMP.DAVID.000

    User: TEMP.DAVID.001

    User: TEMP.DAVID.002

    User: TEMP.DAVID.003

    %systemdrive% .tmp files removed: 0 bytes
    %systemroot% .tmp files removed: 0 bytes
    %systemroot%\System32 .tmp files removed: 0 bytes
    %systemroot%\System32\dllcache .tmp files removed: 0 bytes
    %systemroot%\System32\drivers .tmp files removed: 0 bytes
    Windows Temp folder emptied: 1173132 bytes
    %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
    %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
    RecycleBin emptied: 15872 bytes

    Total Files Cleaned = 69.00 mb


    [EMPTYJAVA]

    User: Administrator

    User: All Users

    User: David_p
    ->Java cache emptied: 0 bytes

    User: Default User

    User: Guest

    User: LocalService

    User: NetworkService

    User: Sam

    User: Sudge
    ->Java cache emptied: 0 bytes

    User: TEMP

    User: TEMP.DAVID

    User: TEMP.DAVID.000

    User: TEMP.DAVID.001

    User: TEMP.DAVID.002

    User: TEMP.DAVID.003

    Total Java Files Cleaned = 0.00 mb


    [EMPTYFLASH]

    User: Administrator

    User: All Users

    User: David_p
    ->Flash cache emptied: 0 bytes

    User: Default User
    ->Flash cache emptied: 0 bytes

    User: Guest
    ->Flash cache emptied: 0 bytes

    User: LocalService

    User: NetworkService
    ->Flash cache emptied: 0 bytes

    User: Sam
    ->Flash cache emptied: 0 bytes

    User: Sudge
    ->Flash cache emptied: 0 bytes

    User: TEMP

    User: TEMP.DAVID

    User: TEMP.DAVID.000

    User: TEMP.DAVID.001

    User: TEMP.DAVID.002

    User: TEMP.DAVID.003

    Total Flash Files Cleaned = 0.00 mb


    OTL by OldTimer - Version 3.2.31.0 log created on 02032012_024404

    Files\Folders moved on Reboot...
    File\Folder C:\Documents and Settings\David_p\Local Settings\Temp\etilqs_wlHoUw3zqc5qRWT187H5 not found!
    C:\Documents and Settings\David_p\Local Settings\Temp\~DFA6A2.tmp moved successfully.
    C:\Documents and Settings\David_p\Local Settings\Application Data\Mozilla\Firefox\Profiles\mbudi456.default\Cac he\_CACHE_001_ moved successfully.
    C:\Documents and Settings\David_p\Local Settings\Application Data\Mozilla\Firefox\Profiles\mbudi456.default\Cac he\_CACHE_002_ moved successfully.
    C:\Documents and Settings\David_p\Local Settings\Application Data\Mozilla\Firefox\Profiles\mbudi456.default\Cac he\_CACHE_003_ moved successfully.
    C:\Documents and Settings\David_p\Local Settings\Application Data\Mozilla\Firefox\Profiles\mbudi456.default\Cac he\_CACHE_MAP_ moved successfully.
    C:\Documents and Settings\David_p\Local Settings\Application Data\Mozilla\Firefox\Profiles\mbudi456.default\url classifier3.sqlite moved successfully.
    File\Folder C:\WINDOWS\temp\ZLT00d38.TMP not found!

    Registry entries deleted on Reboot...
    ------------------------------------------

    Results of screen317's Security Check version 0.99.24
    Windows XP Service Pack 3 x86
    Internet Explorer 7 Out of date!
    ``````````````````````````````
    Antivirus/Firewall Check:
    Windows Firewall Disabled!
    AVG 2012
    ESET Online Scanner v3
    ZoneAlarm Firewall
    ZoneAlarm Free
    ZoneAlarm Toolbar
    ZoneAlarm Spy Blocker
    ZoneAlarm Security
    Antivirus up to date!
    ```````````````````````````````
    Anti-malware/Other Utilities Check:
    ZoneAlarm Spy Blocker
    HijackThis 2.0.2
    CCleaner
    Duplicate Cleaner 1.4.5
    Java(TM) 6 Update 30
    Java(TM) SE Runtime Environment 6 Update 1
    Adobe Flash Player ( 10.3.183.10) Flash Player Out of Date!
    Adobe Reader X (10.1.2)
    Mozilla Firefox (3.0.6) Firefox Out of Date!
    Mozilla Thunderbird (2.0.0) Thunderbird Out of Date!
    ````````````````````````````````
    Process Check:
    objlist.exe by Laurent
    AVG avgwdsvc.exe
    AVG avgtray.exe
    AVG avgrsx.exe
    AVG avgnsx.exe
    AVG avgemc.exe
    CheckPoint ZoneAlarm vsmon.exe
    CheckPoint ZoneAlarm zatray.exe
    ``````````End of Log````````````

    --------------------------------------------------------

    Farbar Service Scanner Version: 02-02-2012
    Ran by David_p (administrator) on 03-02-2012 at 03:23:01
    Microsoft Windows XP Professional Service Pack 3 (X86)
    Boot Mode: Normal
    ************************************************** **************

    Internet Services:
    ============

    Connection Status:
    ==============
    Localhost is blocked.
    LAN connected.
    Google IP is accessible.
    Yahoo IP is accessible.


    Windows Firewall:
    =============

    Firewall Disabled Policy:
    ==================
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\DomainPr ofile]
    "EnableFirewall"=DWORD:0
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\Standard Profile]
    "EnableFirewall"=DWORD:0


    System Restore:
    ============

    System Restore Disabled Policy:
    ========================


    Security Center:
    ============

    Windows Update:
    ===========
    BITS Service is not running. Checking service configuration:
    The start type of BITS service is set to Demand. The default start type is Auto.
    The ImagePath of BITS service is OK.
    The ServiceDll of BITS service is OK.


    File Check:
    ========
    C:\WINDOWS\system32\dhcpcsvc.dll => MD5 is legit
    C:\WINDOWS\system32\Drivers\afd.sys => MD5 is legit
    C:\WINDOWS\system32\Drivers\netbt.sys => MD5 is legit
    C:\WINDOWS\system32\Drivers\tcpip.sys => MD5 is legit
    C:\WINDOWS\system32\Drivers\ipsec.sys => MD5 is legit
    C:\WINDOWS\system32\dnsrslvr.dll => MD5 is legit
    C:\WINDOWS\system32\ipnathlp.dll => MD5 is legit
    C:\WINDOWS\system32\netman.dll => MD5 is legit
    C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit
    C:\WINDOWS\system32\srsvc.dll => MD5 is legit
    C:\WINDOWS\system32\Drivers\sr.sys => MD5 is legit
    C:\WINDOWS\system32\wscsvc.dll => MD5 is legit
    C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit
    C:\WINDOWS\system32\wuauserv.dll => MD5 is legit
    C:\WINDOWS\system32\qmgr.dll => MD5 is legit
    C:\WINDOWS\system32\es.dll => MD5 is legit
    C:\WINDOWS\system32\cryptsvc.dll => MD5 is legit
    C:\WINDOWS\system32\svchost.exe => MD5 is legit
    C:\WINDOWS\system32\rpcss.dll => MD5 is legit
    C:\WINDOWS\system32\services.exe => MD5 is legit

    Extra List:
    =======
    Avgtdix(16) fssfltr(12) Gpc(7) IPSec(5) irda(3) NetBT(6) PSched(8) Tcpip(4) Tcpip6(9)
    0x10000000050000000300000004000000090000000D000000 0E0000000F0000001000000006000000070000000800000001 000000020000000A0000000B0000000C000000


    **** End of log ****

    ------------------------------------------------------
  5. 03-02-2012  #15
    broni
    broni is offline Senior Member
    Yes, go ahead and enable AVG.

    Uninstall Java(TM) SE Runtime Environment 6 Update 1

    Update Adobe Flash Player
    Download the Latest Adobe Flash for Firefox and IE Without Any Extras: Download the Latest Adobe Flash for Firefox and IE Without Any Extras : 404 Tech Support

    Can you tell me more about those sounds?
  6. 04-02-2012  #16
    davidp
    davidp is offline Full Member
    OK I have done as you asked.

    I found the Flash Player part a bit confusing but I think I've done it.

    I suspect my pc is still running slow and I wonder if AVG is the problem as when I uninstalled it I noticed my MS office applications were opening much quicker.

    I am also still getting 'freeze ups' and have to press the off button to reboot.

    Tonight the tones seem to have been less frequent! They are 4 tones high-low-low-high and when it happens the mouse feezes (it's a USB mouse) for a second. Sometimes I get the 4 tones twice. Is there a dictionary of pc tones I wonder? I'm currently on hotmail through IE and getting it periodically. I really can't see a pattern to it.

    David
  7. 04-02-2012  #17
    broni
    broni is offline Senior Member
    Are those tones kind of "beep" type?
  8. 04-02-2012  #18
    davidp
    davidp is offline Full Member
    A little more about the tone. It is a twin version of the tone I get when I put a usb stick in the usb port.
  9. 04-02-2012  #19
    broni
    broni is offline Senior Member
    Does it happen only when you put USB stick in/out or you're just describing the sound?
  10. 04-02-2012  #20
    davidp
    davidp is offline Full Member
    Save 20% on AVG Internet Security 2012 Suite!
    No that's just to help describe the sound.

    It actually happens in what appears to be a random way. This is independent of what application is in use. It's happening now with just IE running but also sounds if I browse under Firefox, or even just using other applications.

    Very strange. It doesn't happen on POST which is what some users report on google and interpret as a hardware fault.

    David
+ Reply to Thread
Page 2 of 3 FirstFirst 1 2 3 LastLast
« something is wrong | What is Incredibar? »