Infected?

holidays

sorry, lots of family Christmas celebrations recently, so haven't been able to look further, will do more this afternoon. Thanks for your patience
 
Windows Update/DCOM timeouts

came back... not sure when (as pc doesnt get reboot all the time) but noticed it last night. re-ran registry script from my previous replies and it cleared up the problem again (shuts down ok, still starts up slow)

Will need to figure out how it came back
 
Let's run a scan with Malwarebytes' Anti-Malware.

Please download Malwarebytes' Anti-Malware to your desktop.

  • Double-click mbam-setup.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select Perform quick scan, then click Scan.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is checked, and click Remove Selected.
  • When completed, a log will open in Notepad. Please save it to a convenient location.
  • Please post contents of that file in your next reply.
 
malware bytes log

Malwarebytes' Anti-Malware 1.42
Database version: 3450
Windows 5.1.2600 Service Pack 2
Internet Explorer 6.0.2900.2180

12/29/2009 12:36:08 PM
mbam-log-2009-12-29 (12-36-08).txt

Scan type: Quick Scan
Objects scanned: 138542
Time elapsed: 13 minute(s), 44 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 8
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59c7fc09-1c83-4648-b3e6-003d2bbc7481} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68af847f-6e91-45dd-9b68-d6a12c30e5d7} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170b96c-28d4-4626-8358-27e6caeef907} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d1a71fa0-ff48-48dd-9b6d-7a13a3e42127} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ddb1968e-ead6-40fd-8dae-ff14757f60c7} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f138d901-86f0-4383-99b6-9cdd406036da} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)
 
As a next step, uninstall all old programs that you don't need anymore.

Open notepad and then copy and paste the bolded lines below into it. Go to File > save as and name the file fixes.bat, change the Save as type to all files and save it to your desktop.
@ECHO OFF
DIR /a/s C:\WINDOWS\system32\drivers >"%userprofile%\desktop\Log.txt"
DEL %0

Double-click on fixes.bat file to execute it. Log.txt file should appear to your desktop. Attach it to your post.
 
Drivers...

Volume in drive C has no label.
Volume Serial Number is 24FD-74B7

Directory of C:\WINDOWS\system32\drivers

12/29/2009 11:55 AM <DIR> .
12/29/2009 11:55 AM <DIR> ..
09/14/2009 08:12 AM 16 .sys
12/08/2005 10:54 AM 6,136 1028_Dell_DIM_DM051.mrk
08/17/2001 02:52 PM 23,552 ABP480N5.SYS
08/10/2004 06:00 AM 187,776 acpi.sys
08/10/2004 06:00 AM 11,648 acpiec.sys
08/17/2001 03:07 PM 101,888 adpu160m.sys
02/14/2006 07:22 PM 142,464 aec.sys
08/14/2008 04:51 AM 138,368 afd.sys
08/04/2004 12:07 AM 42,368 AGP440.SYS
08/04/2004 12:07 AM 44,928 AGPCPQ.SYS
08/17/2001 02:52 PM 12,800 aha154x.sys
08/17/2001 03:07 PM 55,168 aic78u2.sys
08/17/2001 03:07 PM 56,960 aic78xx.sys
08/17/2001 02:51 PM 5,248 aliide.sys
08/04/2004 12:07 AM 42,752 ALIM1541.SYS
08/04/2004 12:07 AM 43,008 AMDAGP.SYS
08/10/2004 06:00 AM 36,992 amdk6.sys
08/10/2004 06:00 AM 37,376 amdk7.sys
08/17/2001 02:52 PM 12,032 amsint.sys
08/10/2004 06:00 AM 60,800 arp1394.sys
08/17/2001 02:52 PM 26,496 asc.sys
08/17/2001 02:52 PM 22,400 asc3350p.sys
08/17/2001 02:51 PM 14,848 asc3550.sys
12/08/2005 11:19 AM 8,552 asctrm.sys
08/10/2004 06:00 AM 14,336 asyncmac.sys
08/03/2004 11:59 PM 95,360 atapi.sys
08/04/2005 04:08 AM 40,960 ati2erec.dll
08/04/2005 05:10 AM 1,273,344 ati2mtag.sys
07/11/2005 10:12 PM 524,850 ativcaxx.cpa
07/11/2005 10:12 PM 929 ativcaxx.vp
06/08/2005 09:45 PM 58,560 ativckxx.vp
08/04/2005 08:20 AM 21,712 ativvpxx.vp
08/10/2004 06:00 AM 59,904 atmarpc.sys
08/10/2004 06:00 AM 31,360 atmepvc.sys
08/10/2004 06:00 AM 55,936 atmlane.sys
08/10/2004 06:00 AM 352,256 atmuni.sys
08/17/2001 02:59 PM 3,072 audstub.sys
05/16/2005 10:40 AM 359,552 BCMWL5.SYS
08/10/2004 06:00 AM 4,224 beep.sys
08/10/2004 06:00 AM 71,552 bridge.sys
06/13/2008 08:10 AM 272,128 bthport.sys
08/17/2001 02:52 PM 13,952 cbidf2k.sys
08/17/2001 02:52 PM 7,680 cd20xrnt.sys
08/10/2004 06:00 AM 18,688 cdaudio.sys
08/10/2004 06:00 AM 63,744 cdfs.sys
08/10/2004 06:00 AM 49,536 cdrom.sys
08/10/2004 06:00 AM 262,528 cinemst2.sys
08/10/2004 06:00 AM 49,664 classpnp.sys
08/17/2001 02:51 PM 6,656 cmdide.sys
08/17/2001 02:52 PM 14,976 cpqarray.sys
08/10/2004 06:00 AM 11,776 cpqdap01.sys
08/10/2004 06:00 AM 36,480 crusoe.sys
08/17/2001 02:52 PM 179,584 dac2w2k.sys
08/17/2001 02:52 PM 14,720 dac960nt.sys
11/19/2003 09:15 AM 128,398 del200f.cty
08/16/2005 05:22 AM <DIR> disdn
08/10/2004 06:00 AM 36,352 disk.sys
08/10/2004 06:00 AM 14,208 diskdump.sys
08/10/2004 06:00 AM 799,744 dmboot.sys
08/10/2004 06:00 AM 153,344 dmio.sys
08/10/2004 06:00 AM 5,888 dmload.sys
08/04/2004 12:07 AM 52,864 DMusic.sys
08/17/2001 03:07 PM 20,192 dpti2o.sys
08/03/2004 10:08 PM 60,288 drmk.sys
08/04/2004 12:07 AM 2,944 drmkaud.sys
02/25/2007 11:10 AM 5,376 dsunidrv.sys
08/10/2004 06:00 AM 10,496 dxapi.sys
08/10/2004 06:00 AM 71,040 dxg.sys
08/10/2004 06:00 AM 3,328 dxgthk.sys
10/14/2004 10:30 PM 155,648 e100b325.sys
12/20/2009 01:09 PM <DIR> etc
08/10/2004 06:00 AM 143,360 fastfat.sys
08/10/2004 06:00 AM 27,392 fdc.sys
08/10/2004 06:00 AM 34,944 fips.sys
08/10/2004 06:00 AM 20,480 flpydisk.sys
08/21/2006 04:14 AM 128,896 fltmgr.sys
08/10/2004 06:00 AM 12,160 fsvga.sys
08/10/2004 06:00 AM 7,936 fs_rec.sys
08/17/2001 02:52 PM 125,056 ftdisk.sys
09/19/2006 01:44 PM 15,664 GEARAspiWDM.sys
08/10/2004 06:00 AM 3,440,660 gm.dls
08/10/2004 06:00 AM 646 gmreadme.txt
08/12/2004 06:45 PM 137,728 Hdaudbus.sys
08/12/2004 06:45 PM 113,664 Hdaudio.sys
08/10/2004 06:00 AM 36,224 hidclass.sys
06/28/2005 12:43 PM 19,200 hidir.sys
08/10/2004 06:00 AM 24,960 hidparse.sys
08/17/2001 03:02 PM 9,600 hidusb.sys
08/17/2001 03:07 PM 25,952 hpn.sys
11/17/2003 10:59 PM 212,224 HSFHWBS2.sys
11/17/2003 10:58 PM 680,704 HSF_CNXT.sys
11/17/2003 10:56 PM 1,042,432 HSF_DP.sys
03/16/2006 07:33 PM 262,784 http.sys
08/04/2004 12:00 AM 8,192 i2omgmt.sys
08/04/2004 12:00 AM 18,560 i2omp.sys
08/10/2004 06:00 AM 52,736 i8042prt.sys
08/10/2004 06:00 AM 41,856 imapi.sys
08/17/2001 02:52 PM 16,000 ini910u.sys
08/03/2004 11:59 PM 5,504 intelide.sys
08/10/2004 06:00 AM 36,096 intelppm.sys
08/10/2004 06:00 AM 29,056 ip6fw.sys
08/10/2004 06:00 AM 32,896 ipfltdrv.sys
08/10/2004 06:00 AM 20,992 ipinip.sys
09/29/2004 05:28 PM 134,912 ipnat.sys
08/10/2004 06:00 AM 74,752 ipsec.sys
11/02/2004 04:12 PM 19,456 iqvw32.sys
06/28/2005 12:43 PM 46,592 irbus.sys
08/10/2004 06:00 AM 11,264 irenum.sys
08/17/2001 02:58 PM 35,840 isapnp.sys
08/03/2004 11:58 PM 24,576 kbdclass.sys
08/03/2004 11:58 PM 14,848 kbdhid.sys
06/14/2006 03:47 AM 172,416 kmixer.sys
08/03/2004 10:15 PM 140,928 ks.sys
06/22/2009 06:34 AM 92,544 ksecdd.sys
12/03/2009 04:13 PM 19,160 mbam.sys
12/03/2009 04:14 PM 38,224 mbamswissarmy.sys
08/10/2004 06:00 AM 7,680 mcd.sys
04/09/2003 07:48 PM 11,043 mdmxsdk.sys
08/10/2004 06:00 AM 63,744 mf.sys
11/04/2009 04:54 PM 79,816 mfeavfk.sys
11/04/2009 04:54 PM 35,272 mfebopk.sys
11/04/2009 04:54 PM 214,664 mfehidk.sys
11/04/2009 04:53 PM 34,248 mferkdk.sys
11/04/2009 04:54 PM 40,552 mfesmfk.sys
08/10/2004 04:45 AM 11,008 mhndrv.sys
08/10/2004 06:00 AM 4,224 mnmdd.sys
08/10/2004 06:00 AM 30,080 modem.sys
08/17/2001 02:57 PM 16,128 MODEMCSA.sys
08/03/2004 11:58 PM 23,040 mouclass.sys
08/17/2001 02:48 PM 12,160 mouhid.sys
08/10/2004 06:00 AM 42,240 mountmgr.sys
04/17/2008 10:57 AM 3,768 MovRVDrv32.sys
07/16/2009 12:32 PM 120,136 Mpfp.sys
06/22/2009 06:48 AM 91,776 mqac.sys
08/17/2001 02:52 PM 17,280 mraid35x.sys
12/18/2007 04:51 AM 179,584 mrxdav.sys
10/24/2008 06:10 AM 453,632 mrxsmb.sys
08/10/2004 06:00 AM 19,072 msfs.sys
08/10/2004 06:00 AM 35,072 msgpc.sys
08/03/2004 11:58 PM 7,552 MSKSSRV.sys
08/03/2004 11:58 PM 5,376 MSPCLOCK.sys
08/03/2004 11:58 PM 4,992 MSPQM.sys
08/04/2004 12:07 AM 15,488 mssmbios.sys
08/10/2004 06:00 AM 107,904 mup.sys
08/10/2004 06:00 AM 182,912 ndis.sys
08/10/2004 06:00 AM 9,600 ndistapi.sys
06/20/2005 02:52 PM 14,592 ndisuio.sys
08/10/2004 06:00 AM 91,776 ndiswan.sys
08/10/2004 06:00 AM 38,016 ndproxy.sys
08/10/2004 06:00 AM 34,560 netbios.sys
08/10/2004 06:00 AM 162,816 netbt.sys
08/10/2004 06:00 AM 61,824 nic1394.sys
08/10/2004 06:00 AM 12,032 nikedrv.sys
08/10/2004 06:00 AM 40,320 nmnt.sys
08/10/2004 06:00 AM 30,848 npfs.sys
02/09/2007 06:10 AM 574,464 ntfs.sys
08/10/2004 06:00 AM 2,944 null.sys
08/03/2004 11:29 PM 1,897,408 nv4_mini.sys
08/10/2004 06:00 AM 12,416 nwlnkflt.sys
08/10/2004 06:00 AM 32,512 nwlnkfwd.sys
08/10/2004 06:00 AM 88,448 nwlnkipx.sys
08/10/2004 06:00 AM 63,232 nwlnknb.sys
08/10/2004 06:00 AM 55,936 nwlnkspx.sys
10/13/2006 05:23 AM 163,584 nwrdr.sys
08/10/2004 06:00 AM 3,456 oprghdlr.sys
08/10/2004 06:00 AM 42,496 p3.sys
08/10/2004 06:00 AM 80,128 parport.sys
08/10/2004 06:00 AM 18,688 partmgr.sys
08/10/2004 06:00 AM 6,784 parvdm.sys
08/04/2004 12:07 AM 68,224 pci.sys
08/17/2001 02:51 PM 3,328 pciide.sys
08/03/2004 11:59 PM 25,088 pciidex.sys
08/10/2004 06:00 AM 119,936 pcmcia.sys
08/17/2001 03:07 PM 27,296 perc2.sys
08/17/2001 03:07 PM 5,504 perc2hib.sys
03/16/2004 12:58 PM 136,960 portcls.sys
08/10/2004 06:00 AM 35,328 processr.sys
08/10/2004 06:00 AM 69,120 psched.sys
08/10/2004 06:00 AM 17,792 ptilink.sys
04/25/2005 03:03 AM 20,640 pxhelp20.sys
09/13/2009 05:27 PM 16 pZ.sys
08/17/2001 02:52 PM 40,320 ql1080.sys
08/17/2001 02:52 PM 33,152 ql10wnt.sys
08/17/2001 02:52 PM 45,312 ql12160.sys
08/17/2001 02:52 PM 40,448 ql1240.sys
08/17/2001 02:52 PM 49,024 ql1280.sys
08/10/2004 06:00 AM 8,832 rasacd.sys
08/10/2004 06:00 AM 51,328 rasl2tp.sys
08/10/2004 06:00 AM 41,472 raspppoe.sys
08/10/2004 06:00 AM 48,384 raspptp.sys
08/10/2004 06:00 AM 16,512 raspti.sys
08/10/2004 06:00 AM 34,432 rawwan.sys
05/05/2006 04:47 AM 174,592 rdbss.sys
08/10/2004 06:00 AM 4,224 rdpcdd.sys
08/04/2004 12:01 AM 196,864 rdpdr.sys
06/09/2005 11:09 PM 139,528 rdpwd.sys
08/03/2004 11:59 PM 57,472 redbook.sys
08/10/2004 06:00 AM 12,032 rio8drv.sys
08/10/2004 06:00 AM 12,032 riodrv.sys
05/08/2008 07:28 AM 202,752 rmcast.sys
11/30/2004 07:28 PM 30,464 rndismp.sys
08/10/2004 06:00 AM 5,888 rootmdm.sys
08/10/2004 06:00 AM 96,256 scsiport.sys
08/10/2004 06:00 AM 67,584 sdbus.sys
11/13/2007 05:25 AM 20,480 secdrv.sys
08/10/2004 06:00 AM 15,488 serenum.sys
08/10/2004 06:00 AM 64,896 serial.sys
08/10/2004 06:00 AM 11,136 sffdisk.sys
08/10/2004 06:00 AM 10,240 sffp_sd.sys
08/10/2004 06:00 AM 11,392 sfloppy.sys
08/04/2004 12:07 AM 41,088 SISAGP.SYS
08/10/2004 06:00 AM 14,592 smclib.sys
04/17/2008 10:57 AM 508,544 SndTDriverV32.sys
08/10/2004 06:00 AM 25,472 sonydcam.sys
08/17/2001 01:56 PM 7,552 SONYPVU1.SYS
08/17/2001 03:07 PM 19,072 sparrow.sys
06/14/2006 03:47 AM 6,400 splitter.sys
08/10/2004 06:00 AM 73,472 sr.sys
12/11/2008 06:57 AM 333,184 srv.sys
06/14/2005 11:40 PM 180,864 sthda.sys
08/03/2004 10:08 PM 48,640 stream.sys
08/03/2004 11:58 PM 4,352 swenum.sys
08/17/2001 03:00 PM 54,272 swmidi.sys
08/17/2001 03:07 PM 16,256 symc810.sys
08/17/2001 03:07 PM 32,640 symc8xx.sys
08/17/2001 03:07 PM 28,384 sym_hi.sys
08/17/2001 03:07 PM 30,688 sym_u3.sys
08/04/2004 12:15 AM 60,800 sysaudio.sys
08/10/2004 06:00 AM 14,976 tape.sys
06/20/2008 05:45 AM 360,320 tcpip.sys
06/20/2008 04:52 AM 225,920 tcpip6.sys
08/10/2004 06:00 AM 18,560 tdi.sys
08/10/2004 06:00 AM 12,040 tdpipe.sys
08/10/2004 06:00 AM 21,896 tdtcp.sys
08/04/2004 02:01 AM 40,840 termdd.sys
08/10/2004 06:00 AM 51,712 tosdvd.sys
08/17/2001 02:51 PM 4,992 toside.sys
08/10/2004 06:00 AM 21,376 tsbvcap.sys
08/10/2004 06:00 AM 12,416 tunmp.sys
08/10/2004 06:00 AM 66,176 udfs.sys
08/17/2001 02:52 PM 36,736 ultra.sys
06/30/2007 11:02 PM <DIR> UMDF
04/23/2007 05:32 AM 364,160 update.sys
12/08/2004 10:34 AM 12,800 usb8023.sys
08/10/2004 06:00 AM 23,808 usbcamd.sys
08/10/2004 06:00 AM 23,936 usbcamd2.sys
08/04/2004 12:08 AM 31,616 usbccgp.sys
08/10/2004 06:00 AM 4,736 usbd.sys
08/10/2004 06:00 AM 26,624 usbehci.sys
08/04/2004 12:08 AM 57,600 usbhub.sys
08/10/2004 06:00 AM 16,000 usbintel.sys
08/04/2004 12:08 AM 142,976 usbport.sys
08/03/2004 11:01 PM 25,856 usbprint.sys
08/03/2004 09:58 PM 15,104 usbscan.sys
08/03/2004 11:08 PM 26,496 USBSTOR.SYS
08/04/2004 12:08 AM 20,480 usbuhci.sys
08/10/2004 06:00 AM 58,112 vdmindvd.sys
08/10/2004 06:00 AM 20,992 vga.sys
08/04/2004 12:07 AM 42,240 VIAAGP.SYS
08/03/2004 11:59 PM 5,376 viaide.sys
08/10/2004 06:00 AM 79,744 videoprt.sys
08/10/2004 06:00 AM 52,352 volsnap.sys
08/10/2004 06:00 AM 34,560 wanarp.sys
06/14/2006 04:00 AM 82,944 wdmaud.sys
08/10/2004 06:00 AM 4,352 wmilib.sys
10/18/2006 07:00 PM 38,528 wpdusb.sys
08/10/2004 06:00 AM 12,032 ws2ifsl.sys
09/28/2006 05:55 PM 77,568 WudfPf.sys
09/28/2006 06:00 PM 82,944 WudfRd.sys
09/13/2009 02:42 PM 16 ?????????????????.sys
267 File(s) 25,474,046 bytes

Directory of C:\WINDOWS\system32\drivers\disdn

08/16/2005 05:22 AM <DIR> .
08/16/2005 05:22 AM <DIR> ..
0 File(s) 0 bytes

Directory of C:\WINDOWS\system32\drivers\etc

12/20/2009 01:09 PM <DIR> .
12/20/2009 01:09 PM <DIR> ..
12/20/2009 01:09 PM 27 hosts
08/10/2004 06:00 AM 3,683 lmhosts.sam
08/10/2004 06:00 AM 407 networks
08/10/2004 06:00 AM 799 protocol
08/10/2004 06:00 AM 7,116 services
5 File(s) 12,032 bytes

Directory of C:\WINDOWS\system32\drivers\UMDF

06/30/2007 11:02 PM <DIR> .
06/30/2007 11:02 PM <DIR> ..
06/30/2007 11:01 PM 0 MsftWdf_user_01_00_00.Wdf
10/18/2006 08:47 PM 671,232 wpdmtpdr.dll
2 File(s) 671,232 bytes

Total Files Listed:
274 File(s) 26,157,310 bytes
11 Dir(s) 38,895,964,160 bytes free
 
Download suspicious file packer from here

Unzip it to desktop, open it & paste in the list of files below, press next & it will create an archive (zip/cab file) on desktop

C:\WINDOWS\system32\drivers\.sys
C:\WINDOWS\system32\drivers\pZ.sys

Go here and upload the archive there. Kindly include a link to this topic.

Have you tried to reboot into safe mode now? See if you're able to boot there and run GMER (unselect devices & sections before hitting scan).
 
updates

submitted packed file...

able to boot to safe mode, but GMER still behaves the same. Starts automatically and runs VERY slow scanning thorugh HKLM\System\CurrentControlSet\... and does not respond when trying to click cancel or anything.

I can try letting it run overnight tonight, but expect the same kind of blue screen/failures...


Any reason I shouldn't try and remove the bogus driver entries from the registry?
 
Hi,

Yes, those will be removed but better do it carefully or system may turn up non bootable.

Archive c:\windows\system32\erdnt\hiv-backup\system into a zip file and upload here with a link to this topic. Let me know when that's been done.
 
The directory c:\windows\system32\erdnt\ does not exist... do I need to create a registry backup first??

The only "system" file I found under c:\windows\system32\ was c:\windows\system32\erdnt\config\system and is about 75M.

Please let me know.

Odd note, when in windows explorer and clicking the "search" button. The search companion side bar comes up but it is completely blank except for the little dog animation... no drop downs/fill ins for specifying search options...
 
Sorry, try this location:
c:\windows\erdnt\hiv-backup\system
 
c:\windows\erdnt\hiv-backup\system

found it, but get error when trying to upload it to bleeping computer site. Could it be size? original file is 79M, zipped file is still 11M.
 
Could be the size limit.

Go to spykiller

Press new topic, make threads title
Files for Blade81

Include to your message a link to this topic.
 
Hi,

Download tool here to your desktop. Close all other programs first and then run the tool.

Kindly note that tool needs time to run since there's a lot of stuff it needs to process with.

After run has finished, reboot the system. When system is back to desktop after reboot, open registry editor and check if bad driver keys of controlsets under hkey_local_machine\system key are gone.

Note: If system fails to start normally after reboot use Last Known Good Configuration -option.
 
You must log in or register to reply here.
Back
Top