Messages

9126

General Computer Support / Re: hijackthis log

« on: January 26, 2015, 02:15:27 pm »

UEFI is a safety feature which you may need to disable before you can boot up with an USB but as you've already installed Win 8.1 then I would leave it enabled.

This article while also being a tutorial, gives a bit more info on UEFI in its headers. http://www.eightforums.com/tutorials/17058-secure-boot-enable-disable-uefi.html

9127

General Computer Support / Re: Got a problem I cannot get rid of

« on: January 26, 2015, 02:01:50 pm »

I've just run JRT and it didn't take long for it to check for updates before it updated - perhaps servers were busy ?

You could always give it another try.

Are you saying that AdwCleaner snagged your e-mail and HitmanPro ?

I use HitmanPro.Alert browser guard, ISP email and gmail but it doesn't snag any of those.

As for sape. - are you visiting any sites in particular when it pops up ?

9128

General Computer Support / Re: Audio error: the endpoint is a duplicate

« on: January 26, 2015, 08:36:44 am »

You could do the Refresh again but open a Command Prompt (Admin) and enter dism /online /cleanup-image /restorehealth followed by sfc /scannow and see what they report.

9129

General Computer Support / Re: Got a problem I cannot get rid of

« on: January 26, 2015, 08:33:17 am »

A Google hasn't found any info on those, but if Norton blocks them whenever they pop up then they aren't on your computer, so a scan will not find them.

Just to check that you don't have any adware on your computer, run AdwCleaner and then Junkware Removal Tool.

http://www.bleepingcomputer.com/download/adwcleaner/

The latter's link is lower down the AdwCleaner page.

For ADW click on Scan and if any items appear in the lower pane, you can uncheck any you want to keep.

When the scan has completed click on Report and that will show if it has found anything and what it will remove.

Close the report then click on Clean where it will produce another report after the reboot.

If it doesn't find anything then click on Uninstall.

JRT takes a bit longer to run and while it produces a report on completion, you don't get a choice in what that will remove.

9130

General Computer Support / Re: Super malicious root kit virus Trojan.msil

« on: January 26, 2015, 01:17:58 am »

Ah well....

Don't suppose you created a full external system image before proceeding with that in case of problems....

9131

General Computer Support / Re: Computer shuts down at random time no BSOD or error.

« on: January 26, 2015, 01:15:19 am »

This may help with SCM Event ID 7000 http://support.microsoft.com/kb/314357

This one for SCM Event ID 7023 but clicking on this Event then on Copy/Copy details as text in the lower right pane so as to paste the full details. https://technet.microsoft.com/en-us/library/cc756318(v=ws.10).aspx

Doing the same for those Info Event IDs 7035 and 7036 can also be useful.

This one looks particularly useful for resolving DCOM 1005 errors. http://windowsitpro.com/systems-management/use-dcomcnfgexe-stop-dcom-10000-and-10005-errors

As for monitoring the temps and fan speeds, HWMonitor will do that for you without having to boot up into the BIOS.

You can also keep an eye on the voltages as well, but whether you'll be able to catch any drop off prior to a shutdown.....

http://www.cpuid.com/softwares/hwmonitor.html

9132

General Computer Support / Re: Super malicious root kit virus Trojan.msil

« on: January 25, 2015, 04:34:59 pm »

Let's see if a couple of commands will nail things down a bit more.

Boot up into Safe Mode with Networking and open Command Prompt (Admin) and enter dism /online /cleanup-image /checkhealth

That command will tell you if Windows is repairable.

Repeating the command and swapping /checkhealth for /scanhealth may show what is wrong.

Finally using the switch /restorehealth may fix what's wrong or you could run this first, but you may glean more info from the other two.

Depending upon what those commands give, enter sfc /scannow to see what that reports.

There are other options to a reinstall and they are Refresh or Reset.

As you now have an install USB, give the Refresh option a whirl if none of the above resolve, but if/when you're back up and running, create the Custom refresh image as this article advises. http://www.davescomputertips.com/how-to-perform-a-windows-8-1-refresh/

9133

General Computer Support / Re: (Solved)Windows Credential manager doesn't work, error code 0x800706BA

« on: January 25, 2015, 10:29:53 am »

That's certainly one advantage Win 8/8.1 has over Win 7 where it would either be a factory reset or repair install, but another example why you should create regular external system images to fall back on - but glad you got it fixed and thanks for the update.

9134

General Computer Support / Re: Windows Credential manager doesn't work, error code 0x800706BA

« on: January 25, 2015, 08:57:48 am »

It could equally apply to Avast's firewall.

See if you get the same error in Safe Mode with Networking - 3rd party security programs are isolated in that mode, which is safer than trying it with Avast disabled.

I'm not sure how you use the restore points in Win 8.1 but going back to prior the error could pre-date an Avast Definitions update, as it won't be the first time a security program's updates have caused problems.

9135

General Computer Support / Re: api-ms-win-downlevel-ole32-l1-1-0.dll

« on: January 25, 2015, 05:05:15 am »

I don't know if those missing DLLs would have affected System Protection and your restore points if you have them enabled, but Windows Updates would have created a restore point prior to their install, so it is of concern that you don't have any.

Shane will know more about the role of those DLLs but he won't be back until Monday - his day job permitting.

9136

General Computer Support / Re: api-ms-win-downlevel-ole32-l1-1-0.dll

« on: January 25, 2015, 04:04:48 am »

Reading a HJT log is a specialized op as there could be entries that only a security expert could recognize as being malicious, but going from the other malware scans, it would seem that your system is clean and that it's my belief that it's Avira that has caused the corruption.

If you can reinstate those files then I'd dump Avira for something else.

It's possible that an offboot sfc /scannow will replace those files if they remain corrupt and for that you would need an appropriate bootable Win 7 SP1 install USB/DVD.

You can download the appropriate ISO from http://www.w7forums.com/threads/official-windows-7-sp1-iso-image-downloads.12325/page-2#post-124821 and you can use http://www.microsoft.com/en-us/download/windows-usb-dvd-download-tool to create a bootable USB/DVD.

To save me some typing, I've already given instructions in how to boot up with the bootable media and perform the offboot sfc /scannow in Reply #3 in this thread which you can follow http://www.tweaking.com/forums/index.php/topic,2709.0.html

9137

General Computer Support / Re: api-ms-win-downlevel-ole32-l1-1-0.dll

« on: January 25, 2015, 03:09:47 am »

Using Translate with Bing - from that, I would understand that Avira has quarantined those files - are you able to reinstate those from it's vault or able to undo its actions ?

Do you have restore points that go back prior to the 6th Jan ?

Using the restore points in Safe Mode will prevent Avira from interfering with the restore.

9138

General Computer Support / Re: Windows Credential manager doesn't work, error code 0x800706BA

« on: January 25, 2015, 02:57:37 am »

From a Google, this appears to be a Windows Firewall problem and there's a suggested fix for Win 8/81 in this article https://support.software.dell.com/enterprise-reporter-for-active-directory/kb/116792

9139

General Computer Support / Re: api-ms-win-downlevel-ole32-l1-1-0.dll

« on: January 25, 2015, 02:45:09 am »

You haven't said which version of Windows you are using, but under no circumstances go to any DLL download sites in an attempt to replace any that are reported as missing.

Had you downloaded anything prior to this error ?

Have you tried using your restore points in Safe Mode prior to this error ?

9140

General Computer Support / Re: google chrome browser kill my system !

« on: January 23, 2015, 02:54:41 pm »

When your OS is applicable you would have gotten IE 11 through Windows Updates.

I'm like Shane - I can only read English so haven't a clue what that clock error message gave you.

That How to Geek article that you had linked contains a link to checking Chrome for dodgy add-ons and resets as part of the process - did you run that http://www.howtogeek.com/198084/google-launches-software-removal-and-browser-reset-tool-for-chrome/

I'm not sure why you are right clicking the Chrome Taskbar icon unless you want to unpin it, but for it to crash or freeze your computer when you try to open it, sounds like you have something extra with it.

Did AdwCleaner or JRT find anything untoward in the way of PuPs/Toolbars etc.

Can't remember if you've used the Anvi Browser Repair Tool, but it can be effective in sorting out some problems. http://www.anvisoft.com/browser-repair-tool.html

Click on the icons in the left pane and it will show you what it does with the option to edit the repairs, but your problems could stem from the clock not being correct as it can cause chaos with the security certificates - how much is the clock out by and do you have any problems with IE ?

9141

General Computer Support / Re: window 8.1 control panel

« on: January 23, 2015, 08:40:30 am »

When Microsoft put 8.1 in I lost my control panel and can not get access to it. Microsoft techs tried for an hour and a half to get it back to no avail. I am just an amacher at this.

Ronald

Did they suggest anything that you could try yourself to remedy this ?

One option when Windows own repair tools can't do it would be to perform a Repair Install for which you would need an install USB/DVD.

You can create your own courtesy of http://www.redmondpie.com/download-windows-8.1-pro-iso-file-legally-without-product-key/ if you don't have one and these steps will walk you through the repair http://www.intowindows.com/how-to-repair-windows-8-1-installation/

9142

General Computer Support / Re: google chrome browser kill my system !

« on: January 23, 2015, 02:37:59 am »

The cross referencing makes it read like opening a couple of different books in the middle and as they go back almost two years, a resume of the problems would have been better and are you still using IE 8 which is the max for XP or are you able to use a later version of IE ?

Without going back through your various threads, I don't know which version of Windows you are using.

Did the How to Geek article allow you to find any programs that are conflicting with Chrome ?

As you appear to get the problems when you try to do anything with Chrome then I would advise you to perform a clean boot to see if you can determine what you have in your Startup Menu that is causing the conflict. http://support.microsoft.com/kb/929135

What exactly are the clock problems you are having ?

Modern CMOS batteries usually last for about 5 years and when a clock fails to maintain the correct time, renewing that is usually the first step - but there would be other symptoms if the CMOS battery was failing.

9143

General Computer Support / Re: hijackthis log

« on: January 22, 2015, 09:13:46 am »

It isn't a good idea to delete duplicate files, as you've found out.

While I don't know how Win 8.1 deals with those, Win 7 x64 includes files for the 32 bit platform which appear to be duplicate but are in fact essential files.

With Win 8/8.1 I don't think you have the one-off boot change option by tapping something like F12 as you switch on and it would seem that in the login screen to click on Restart and immediately press F2 or Esc. should get you to where you want to be - hopefully or you may need to disable the UEFI Secure Boot http://itsfoss.com/disable-uefi-secure-boot-in-windows-8/

I've also found it difficult to read your block posts.

As you'll see from other threads on the forum, long posts are frequently paragraphed.

9144

General Computer Support / Re: system has recovered from a serious error

« on: January 21, 2015, 04:58:29 pm »

since I'm running XP, the program says it needs an extra component and then freezes. BTW. When I tried to uninstall AVG, it said that the installer service is not started. Is that any indication of something?

It could point to you still being infected as part of their defence is to stop anything being downloaded to combat it.

To uninstall AVG correctly you will need to use the appropriate Uninstaller, but why do you want to uninstall it ? http://www.avg.com/gb-en/utilities

Boot up into Safe Mode with Networking and see if you can download ESET Free Online Scanner.

If so, click on Advanced and check all of the boxes except the bottom proxy one and disable AVG immediately before clicking on Scan.

Depending upon how much you have on your computer, the scan can take well over an hour.

If you are still unable to download anything in Safe Mode etc. then go Start - Run - type mrt.exe and press enter then use the full scan option.

Depending upon what either of those find, you could follow the scan with this ESET Services Repair Tool http://kb.eset.com/library/ESET/KB%20Team%20Only/Malware/ServicesRepair.exe

Should you still have problems with Windows Installer then download v4.5 http://support.microsoft.com/kb/942288

This article, among other things will show how to check that the computer is set to create Dump files, but wait for Shane to advise you on whatever WhoCrashed finds. http://www.dedoimedo.com/computers/windows-bsod.html

Edit - Forgot to add link for ESET Free Online Scanner   http://www.eset.com/int/home/products/online-scanner/

9145

General Computer Support / Re: Computer shuts down at random time no BSOD or error.

« on: January 21, 2015, 08:22:30 am »

The link in both mine and your post work fine for me.

Sometimes MS sites can be buggy or it can be your AV program blocking.

See if either work in Safe Mode with Networking or after running theses commands from a command prompt.

netsh winsock reset catalog

ipconfig /flushdns

ipconfig /registerdns

exit

Now reboot.

For a while it was hitty missy whether I could get this MS Fixit to load other than with a blank page under the header. http://support.microsoft.com/kb/971058

9146

General Computer Support / Re: Computer shuts down at random time no BSOD or error.

« on: January 20, 2015, 05:38:28 pm »

Just wondering if an infection has set up your Scheduled Tasks to do that.

This article describes how to check that http://support.microsoft.com/kb/308671

9147

General Computer Support / Re: system has recovered from a serious error

« on: January 20, 2015, 04:21:39 pm »

Just as a matter of interest, what program should a dump file open with ?

When I clicked on the dump file it opened in what looked like Notepad and was a meaningless repetition of letters.

9148

General Computer Support / Re: hp simplepass not working after using Tweaking.com - Windows Repair

« on: January 18, 2015, 03:28:40 am »

Have you tried uninstalling then reinstalling it, but create your own restore point before making any changes.

http://h10025.www1.hp.com/ewfrf/wc/softwareDownloadIndex?cc=us&lc=en&softwareitem=ob-132061-1

9149

General Computer Support / Re: UAC (WIN7) does not regognize IE11 Flashplayer

« on: January 18, 2015, 03:23:33 am »

There are some steps in this article that you could try but having ActiveX Filtering enabled is the usual suspect. http://www.thewindowsclub.com/flash-not-working-in-internet-explorer

9150

General Computer Support / Re: Adverts appearing on the forum

« on: January 17, 2015, 11:00:00 am »

I think I would be tempted to run both AdwCleaner and Junkware Removal Tool http://www.bleepingcomputer.com/download/adwcleaner/

The link for JRT is lower down the page.

With ADW click on Scan and when that has completed, it may list some programs in the lower pane which you can uncheck any you wish to keep.

Click on Report and it will show if/what it has found and will remove - close the Report then click on Clean.

It will produce another report after the reboot to show what it has removed.

JRT takes a little longer to run and will produce its report on completion, but you don't get any choice in what that will remove.

Resetting the Hosts File would be my next step and this MS Fixit will do that for you. http://support.microsoft.com/kb/972034