Logs posted as directed.. backdoor.bot issue

Status
Not open for further replies.
ok looking in C:\Windows\System32, I see chkdsk. When I left click it will not open, and right click gives same options as the one on my desk top. I think that means I did not move it and only copied it to my desktop otherwise it would not be there. I had no idea what sort of file it was and could only find it putting "chkdsk" in search. I still do not know how to get to the black screen, as I am not presented with anything in which I can type or do any sort of command. I will try searching "cmd," something that was not previously instructed. You sort of lost me with this one, as I assumed this was just another link to install and when it wasn't, I assumed it was a program to prompt. Sorry but I need more specific instructions when making this sort of leap. I will try again searching "cmd" and see what I get.
 
ok I successfully ran check disk and it has rebooted. However going to retrieve the log, in the Windows logs when I right click on Application, "find" is there but it is faded and I can't click on it?
 
Hi lindavb,

However going to retrieve the log, in the Windows logs when I right click on Application, "find" is there but it is faded and I can't click on it?
Click to expand...
OK it appears my instructions were off. :oops:

Instead of right clicking the "Application" menu, double click "Application" then right click "Application" and "Find" should be available.

=========================

To view results log:
  • Open the Start Menu, and type eventvwr.msc in the search box and press enter.
  • If prompted by UAC, then click on Yes (Windows 7) or Continue (Vista).
  • In the left pane of Event Viewer, double click on Windows Logs to expand it, then double click on Application, then right click Application and click on Find.
  • Copy and paste Chkdsk into the line, and click on Find Next.
  • You will now see the system log for the scan results of Check Disk (chkdsk).
  • In the right had menu select copy, open notepad and paste the chkdsk results into notepad
  • Post in your next reply.
=========================

In your next post please provide the following:
  • chkdsk results
 
chkdsk log

Log Name: Application
Source: Chkdsk
Date: 8/7/2014 1:27:42 AM
Event ID: 26212
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Linda-PC
Description:
Chkdsk was executed in read-only mode on a volume snapshot.

Checking file system on C:
The type of the file system is NTFS.
Volume label is HP.

WARNING! F parameter not specified.
Running CHKDSK in read-only mode.

CHKDSK is verifying files (stage 1 of 3)...
573696 file records processed.

File verification completed.
1553 large file records processed.

0 bad file records processed.

0 EA records processed.

77 reparse records processed.

CHKDSK is verifying indexes (stage 2 of 3)...
692008 index entries processed.

Index verification completed.
0 unindexed files scanned.

0 unindexed files recovered.

CHKDSK is verifying security descriptors (stage 3 of 3)...
573696 file SDs/SIDs processed.

Cleaning up 789 unused index entries from index $SII of file 0x9.
Cleaning up 789 unused index entries from index $SDH of file 0x9.
Cleaning up 789 unused security descriptors.
Security descriptor verification completed.
59157 data files processed.

CHKDSK is verifying Usn Journal...
36198592 USN bytes processed.

Usn Journal verification completed.
Windows has checked the file system and found no problems.

611212287 KB total disk space.
361728472 KB in 390586 files.
197632 KB in 59158 indexes.
0 KB in bad sectors.
699699 KB in use by the system.
65536 KB occupied by the log file.
248586484 KB available on disk.

4096 bytes in each allocation unit.
152803071 total allocation units on disk.
62146621 allocation units available on disk.

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Chkdsk" />
<EventID Qualifiers="0">26212</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2014-08-06T23:27:42.000000000Z" />
<EventRecordID>107249</EventRecordID>
<Channel>Application</Channel>
<Computer>Linda-PC</Computer>
<Security />
</System>
<EventData>
<Data>

Checking file system on C:
The type of the file system is NTFS.
Volume label is HP.

WARNING! F parameter not specified.
Running CHKDSK in read-only mode.

CHKDSK is verifying files (stage 1 of 3)...
573696 file records processed.

File verification completed.
1553 large file records processed.

0 bad file records processed.

0 EA records processed.

77 reparse records processed.

CHKDSK is verifying indexes (stage 2 of 3)...
692008 index entries processed.

Index verification completed.
0 unindexed files scanned.

0 unindexed files recovered.

CHKDSK is verifying security descriptors (stage 3 of 3)...
573696 file SDs/SIDs processed.

Cleaning up 789 unused index entries from index $SII of file 0x9.
Cleaning up 789 unused index entries from index $SDH of file 0x9.
Cleaning up 789 unused security descriptors.
Security descriptor verification completed.
59157 data files processed.

CHKDSK is verifying Usn Journal...
36198592 USN bytes processed.

Usn Journal verification completed.
Windows has checked the file system and found no problems.

611212287 KB total disk space.
361728472 KB in 390586 files.
197632 KB in 59158 indexes.
0 KB in bad sectors.
699699 KB in use by the system.
65536 KB occupied by the log file.
248586484 KB available on disk.

4096 bytes in each allocation unit.
152803071 total allocation units on disk.
62146621 allocation units available on disk.
</Data>
<Binary>00C10800DADC0600CD320C0000000000FD4F00004D0000000000000000000000</Binary>
</EventData>
</Event>
 
Hi lindavb,

lindavb said:
ok I successfully ran check disk and it has rebooted.
Click to expand...

I still don't think you have run the scan as requested. If you did you wouldn't be getting this notice:

Log Name: Application
Source: Chkdsk
Date: 8/7/2014 1:27:42 AM
Event ID: 26212
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Linda-PC
Description:
Chkdsk was executed in read-only mode on a volume snapshot.

WARNING! F parameter not specified.
Running CHKDSK in read-only mode.

Please review the following steps and verify that these are the steps you completed, if not then do the scan again and post the results.
In order to run the scan properly you must do the following:

  • Click the Start menu , in the search box type "cmd" (without the quotes)
  • Next you will see a menu that has a small black DOS icon with the text cmd next to it.
  • Right click on the DOS icon and select "Run as Administrator".
  • Select Yes if presented with the UAC prompt.
  • Next the larger DOS window will open with c:windows\system32>
  • Type or copy and paste (if it will allow) chkdsk /r, then hit Enter (make sure there is space between chkdsk and the /r)
  • You will see a warning:
  • Chkdsk cannot run because the volume is in use by another process. Would you like to schedule this volume to be checked the next time the system restarts? (Y/N)
  • Press the Y key, then hit Enter
  • You will see the following:
  • This volume will be checked the next time the system restarts.



  • Close the window, or type Exit, then press Enter.
  • Now restart your computer to allow the chkdsk scan to be performed.
 
chkdsc log, hope this is correct...

Checking file system on C:
The type of the file system is NTFS.
Volume label is HP.

A disk check has been scheduled.
Windows will now check the disk.

CHKDSK is verifying files (stage 1 of 5)...
573696 file records processed. File verification completed.
1556 large file records processed. 0 bad file records processed. 0 EA records processed.

77 reparse records processed. CHKDSK is verifying indexes (stage 2 of 5)...
692176 index entries processed. Index verification completed.
0 unindexed files scanned. 0 unindexed files recovered. CHKDSK is verifying security descriptors (stage 3 of 5)...
573696 file SDs/SIDs processed. Cleaning up 25 unused index entries from index $SII of file 0x9.
Cleaning up 25 unused index entries from index $SDH of file 0x9.
Cleaning up 25 unused security descriptors.
Security descriptor verification completed.
59241 data files processed. CHKDSK is verifying Usn Journal...
37321040 USN bytes processed. Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
573680 files processed. File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
63580281 free clusters processed. Free space verification is complete.
Windows has checked the file system and found no problems.

611212287 KB total disk space.
355988068 KB in 397639 files.
202248 KB in 59242 indexes.
0 KB in bad sectors.
700847 KB in use by the system.
65536 KB occupied by the log file.
254321124 KB available on disk.

4096 bytes in each allocation unit.
152803071 total allocation units on disk.
63580281 allocation units available on disk.

Internal Info:
00 c1 08 00 bb f8 06 00 1b 67 0c 00 00 00 00 00 .........g......
cc 4f 00 00 4d 00 00 00 00 00 00 00 00 00 00 00 .O..M...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

Windows has finished checking your disk.
Please wait while your computer restarts.
 
Hi lindavb,

Perfect! And the log looks good also. :bigthumb:

The reason I wanted to get this to run successfully was because you stated you had a Blue Screen episode a few days back and I wanted to verify that you weren't having any disk issues.

How is the computer running?
Are you having any issues, or symptoms?
 
Yay finally got it right!! Actually, I had a blue screen episode again this morning. This happens periodically. Other than that it is running pretty much as usual, pre-virus. A bit slow at times but might have to do with internet speed in this house. I am moving shortly and have asked for higher speed in my next place. But I do want to be sure it's clean before I move! Thanks for all your help and your patience. DO you think I'm in the clean now?
 
A year ago the blue screen thing happened almost daily, I did a windows fix of the start up (followed prompts in safe mode) and also got a new virus protector, ESET NOD 32. After that it stopped happening, now just every now and again (although twice recently!).
 
Hi lindavb,

I had a blue screen episode again this morning. This happens periodically.
Click to expand...

When this happens there may be an error code displayed when this happens. If possible, make note of the error code the next time it occurs. The code may provide information as to what is causing the issue.

Other than that, you logs appear to be clean. :bigthumb: But we still need to do some housekeeping of the tools we used.

=========================

If you like we can run one last scan of the Windows System Files to be sure nothing in there is causing the random BSOD.

=========================

System File Checker (SFC)
  • Click on the Start button and in the Search programs and files box type the following:
    • command - (similar to the chkdsk scan)
  • Don't press Enter, just let the search results populate above.
  • In the search results, locate the Programs section.
  • Locate the Command Prompt shortcut and right-click on it.
  • Select Run as administrator.
  • Click Yes on the User Account Control window that appears.
  • Important: If you see a User Account Control window but also a message that says To continue, type an administrator password, and then click Yes, then your user account must be a standard account, not an administrator account. Before you can click Yes and open an elevated command prompt, you'll need to type the password of another user on your Windows 7 computer that has administrator level privileges.
  • Note: You will not see this window at all if your User Account Control settings are turned all the way down. See How To Disable User Account Control in Windows 7 for more information.
  • An elevated Command Prompt window will appear.
    • Type: sfc /scannow (There's a space between sfc and /scannow.) , then hit Enter
  • Let the check run to completion. DO NOT reboot the PC or close the cmd window.
  • Copy & Paste the following command at the Command Prompt and press Enter:

    findstr /c:"[SR]" %windir%\logs\cbs\cbs.log >%userprofile%\Desktop\sfcdetails.txt
  • This will place a file on your desktop called sfcdetails.txt which contains the results of the scan.
  • Copy and Paste the contents of the file into your next post.
  • After the scan runs type exit to close the command prompt window
=========================

In your next post please provide the following:
  • sfcdetails.txt
 
sfc

2014-08-11 00:19:30, Info CSI 00000009 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:19:30, Info CSI 0000000a [SR] Beginning Verify and Repair transaction
2014-08-11 00:19:34, Info CSI 0000000c [SR] Verify complete
2014-08-11 00:19:34, Info CSI 0000000d [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:19:34, Info CSI 0000000e [SR] Beginning Verify and Repair transaction
2014-08-11 00:19:38, Info CSI 00000010 [SR] Verify complete
2014-08-11 00:19:38, Info CSI 00000011 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:19:38, Info CSI 00000012 [SR] Beginning Verify and Repair transaction
2014-08-11 00:19:42, Info CSI 00000014 [SR] Verify complete
2014-08-11 00:19:43, Info CSI 00000015 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:19:43, Info CSI 00000016 [SR] Beginning Verify and Repair transaction
2014-08-11 00:19:46, Info CSI 00000018 [SR] Verify complete
2014-08-11 00:19:47, Info CSI 00000019 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:19:47, Info CSI 0000001a [SR] Beginning Verify and Repair transaction
2014-08-11 00:19:51, Info CSI 0000001c [SR] Verify complete
2014-08-11 00:19:51, Info CSI 0000001d [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:19:51, Info CSI 0000001e [SR] Beginning Verify and Repair transaction
2014-08-11 00:19:55, Info CSI 00000020 [SR] Verify complete
2014-08-11 00:19:55, Info CSI 00000021 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:19:55, Info CSI 00000022 [SR] Beginning Verify and Repair transaction
2014-08-11 00:19:59, Info CSI 00000024 [SR] Verify complete
2014-08-11 00:19:59, Info CSI 00000025 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:19:59, Info CSI 00000026 [SR] Beginning Verify and Repair transaction
2014-08-11 00:20:03, Info CSI 00000028 [SR] Verify complete
2014-08-11 00:20:03, Info CSI 00000029 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:20:03, Info CSI 0000002a [SR] Beginning Verify and Repair transaction
2014-08-11 00:20:08, Info CSI 0000002c [SR] Verify complete
2014-08-11 00:20:08, Info CSI 0000002d [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:20:08, Info CSI 0000002e [SR] Beginning Verify and Repair transaction
2014-08-11 00:20:12, Info CSI 00000030 [SR] Verify complete
2014-08-11 00:20:13, Info CSI 00000031 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:20:13, Info CSI 00000032 [SR] Beginning Verify and Repair transaction
2014-08-11 00:20:17, Info CSI 00000034 [SR] Verify complete
2014-08-11 00:20:17, Info CSI 00000035 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:20:17, Info CSI 00000036 [SR] Beginning Verify and Repair transaction
2014-08-11 00:20:21, Info CSI 00000038 [SR] Verify complete
2014-08-11 00:20:21, Info CSI 00000039 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:20:21, Info CSI 0000003a [SR] Beginning Verify and Repair transaction
2014-08-11 00:20:25, Info CSI 0000003c [SR] Verify complete
2014-08-11 00:20:25, Info CSI 0000003d [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:20:25, Info CSI 0000003e [SR] Beginning Verify and Repair transaction
2014-08-11 00:20:29, Info CSI 00000040 [SR] Verify complete
2014-08-11 00:20:29, Info CSI 00000041 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:20:29, Info CSI 00000042 [SR] Beginning Verify and Repair transaction
2014-08-11 00:20:34, Info CSI 00000044 [SR] Verify complete
2014-08-11 00:20:35, Info CSI 00000045 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:20:35, Info CSI 00000046 [SR] Beginning Verify and Repair transaction
2014-08-11 00:20:37, Info CSI 00000048 [SR] Verify complete
2014-08-11 00:20:37, Info CSI 00000049 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:20:37, Info CSI 0000004a [SR] Beginning Verify and Repair transaction
2014-08-11 00:20:39, Info CSI 0000004c [SR] Verify complete
2014-08-11 00:20:40, Info CSI 0000004d [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:20:40, Info CSI 0000004e [SR] Beginning Verify and Repair transaction
2014-08-11 00:20:49, Info CSI 00000051 [SR] Verify complete
2014-08-11 00:20:49, Info CSI 00000052 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:20:49, Info CSI 00000053 [SR] Beginning Verify and Repair transaction
2014-08-11 00:20:56, Info CSI 00000058 [SR] Verify complete
2014-08-11 00:20:57, Info CSI 00000059 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:20:57, Info CSI 0000005a [SR] Beginning Verify and Repair transaction
2014-08-11 00:21:03, Info CSI 0000005d [SR] Verify complete
2014-08-11 00:21:03, Info CSI 0000005e [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:21:03, Info CSI 0000005f [SR] Beginning Verify and Repair transaction
2014-08-11 00:21:08, Info CSI 00000061 [SR] Verify complete
2014-08-11 00:21:09, Info CSI 00000062 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:21:09, Info CSI 00000063 [SR] Beginning Verify and Repair transaction
2014-08-11 00:21:16, Info CSI 00000070 [SR] Verify complete
2014-08-11 00:21:17, Info CSI 00000071 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:21:17, Info CSI 00000072 [SR] Beginning Verify and Repair transaction
2014-08-11 00:21:27, Info CSI 0000008c [SR] Verify complete
2014-08-11 00:21:27, Info CSI 0000008d [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:21:27, Info CSI 0000008e [SR] Beginning Verify and Repair transaction
2014-08-11 00:21:34, Info CSI 00000090 [SR] Verify complete
2014-08-11 00:21:34, Info CSI 00000091 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:21:34, Info CSI 00000092 [SR] Beginning Verify and Repair transaction
2014-08-11 00:21:42, Info CSI 00000094 [SR] Verify complete
2014-08-11 00:21:42, Info CSI 00000095 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:21:42, Info CSI 00000096 [SR] Beginning Verify and Repair transaction
2014-08-11 00:21:50, Info CSI 00000098 [SR] Verify complete
2014-08-11 00:21:50, Info CSI 00000099 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:21:50, Info CSI 0000009a [SR] Beginning Verify and Repair transaction
2014-08-11 00:21:57, Info CSI 0000009c [SR] Verify complete
2014-08-11 00:21:57, Info CSI 0000009d [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:21:57, Info CSI 0000009e [SR] Beginning Verify and Repair transaction
2014-08-11 00:22:04, Info CSI 000000a0 [SR] Verify complete
2014-08-11 00:22:05, Info CSI 000000a1 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:22:05, Info CSI 000000a2 [SR] Beginning Verify and Repair transaction
2014-08-11 00:22:15, Info CSI 000000a6 [SR] Verify complete
2014-08-11 00:22:15, Info CSI 000000a7 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:22:15, Info CSI 000000a8 [SR] Beginning Verify and Repair transaction
2014-08-11 00:22:25, Info CSI 000000c9 [SR] Verify complete
2014-08-11 00:22:25, Info CSI 000000ca [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:22:25, Info CSI 000000cb [SR] Beginning Verify and Repair transaction
2014-08-11 00:22:38, Info CSI 000000cd [SR] Verify complete
2014-08-11 00:22:38, Info CSI 000000ce [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:22:38, Info CSI 000000cf [SR] Beginning Verify and Repair transaction
2014-08-11 00:22:48, Info CSI 000000d3 [SR] Verify complete
2014-08-11 00:22:48, Info CSI 000000d4 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:22:48, Info CSI 000000d5 [SR] Beginning Verify and Repair transaction
2014-08-11 00:22:51, Info CSI 000000d7 [SR] Verify complete
2014-08-11 00:22:52, Info CSI 000000d8 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:22:52, Info CSI 000000d9 [SR] Beginning Verify and Repair transaction
2014-08-11 00:22:53, Info CSI 000000db [SR] Verify complete
2014-08-11 00:22:53, Info CSI 000000dc [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:22:53, Info CSI 000000dd [SR] Beginning Verify and Repair transaction
2014-08-11 00:22:56, Info CSI 000000df [SR] Verify complete
2014-08-11 00:22:57, Info CSI 000000e0 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:22:57, Info CSI 000000e1 [SR] Beginning Verify and Repair transaction
2014-08-11 00:23:08, Info CSI 000000f4 [SR] Verify complete
2014-08-11 00:23:08, Info CSI 000000f5 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:23:08, Info CSI 000000f6 [SR] Beginning Verify and Repair transaction
2014-08-11 00:23:11, Info CSI 000000f8 [SR] Verify complete
2014-08-11 00:23:11, Info CSI 000000f9 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:23:11, Info CSI 000000fa [SR] Beginning Verify and Repair transaction
2014-08-11 00:23:15, Info CSI 000000fc [SR] Verify complete
2014-08-11 00:23:15, Info CSI 000000fd [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:23:15, Info CSI 000000fe [SR] Beginning Verify and Repair transaction
2014-08-11 00:23:18, Info CSI 00000100 [SR] Verify complete
2014-08-11 00:23:19, Info CSI 00000101 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:23:19, Info CSI 00000102 [SR] Beginning Verify and Repair transaction
2014-08-11 00:23:26, Info CSI 00000105 [SR] Verify complete
2014-08-11 00:23:27, Info CSI 00000106 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:23:27, Info CSI 00000107 [SR] Beginning Verify and Repair transaction
2014-08-11 00:23:40, Info CSI 0000010a [SR] Verify complete
2014-08-11 00:23:40, Info CSI 0000010b [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:23:40, Info CSI 0000010c [SR] Beginning Verify and Repair transaction
2014-08-11 00:23:45, Info CSI 0000010e [SR] Verify complete
2014-08-11 00:23:45, Info CSI 0000010f [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:23:45, Info CSI 00000110 [SR] Beginning Verify and Repair transaction
2014-08-11 00:23:49, Info CSI 00000112 [SR] Verify complete
2014-08-11 00:23:49, Info CSI 00000113 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:23:49, Info CSI 00000114 [SR] Beginning Verify and Repair transaction
2014-08-11 00:23:57, Info CSI 00000116 [SR] Verify complete
2014-08-11 00:23:57, Info CSI 00000117 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:23:57, Info CSI 00000118 [SR] Beginning Verify and Repair transaction
2014-08-11 00:24:04, Info CSI 0000011a [SR] Verify complete
2014-08-11 00:24:04, Info CSI 0000011b [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:24:04, Info CSI 0000011c [SR] Beginning Verify and Repair transaction
2014-08-11 00:24:13, Info CSI 0000011e [SR] Verify complete
2014-08-11 00:24:13, Info CSI 0000011f [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:24:13, Info CSI 00000120 [SR] Beginning Verify and Repair transaction
2014-08-11 00:24:24, Info CSI 00000138 [SR] Verify complete
2014-08-11 00:24:24, Info CSI 00000139 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:24:24, Info CSI 0000013a [SR] Beginning Verify and Repair transaction
2014-08-11 00:24:44, Info CSI 0000013c [SR] Verify complete
2014-08-11 00:24:44, Info CSI 0000013d [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:24:44, Info CSI 0000013e [SR] Beginning Verify and Repair transaction
2014-08-11 00:25:56, Info CSI 00000140 [SR] Verify complete
2014-08-11 00:25:57, Info CSI 00000141 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:25:57, Info CSI 00000142 [SR] Beginning Verify and Repair transaction
2014-08-11 00:26:53, Info CSI 00000145 [SR] Verify complete
2014-08-11 00:26:54, Info CSI 00000146 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:26:54, Info CSI 00000147 [SR] Beginning Verify and Repair transaction
2014-08-11 00:27:04, Info CSI 00000149 [SR] Verify complete
2014-08-11 00:27:04, Info CSI 0000014a [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:27:04, Info CSI 0000014b [SR] Beginning Verify and Repair transaction
2014-08-11 00:27:12, Info CSI 0000014d [SR] Verify complete
2014-08-11 00:27:12, Info CSI 0000014e [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:27:12, Info CSI 0000014f [SR] Beginning Verify and Repair transaction
2014-08-11 00:27:28, Info CSI 00000151 [SR] Verify complete
2014-08-11 00:27:28, Info CSI 00000152 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:27:28, Info CSI 00000153 [SR] Beginning Verify and Repair transaction
2014-08-11 00:27:34, Info CSI 00000155 [SR] Verify complete
2014-08-11 00:27:34, Info CSI 00000156 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:27:34, Info CSI 00000157 [SR] Beginning Verify and Repair transaction
2014-08-11 00:27:40, Info CSI 0000015b [SR] Verify complete
2014-08-11 00:27:41, Info CSI 0000015c [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:27:41, Info CSI 0000015d [SR] Beginning Verify and Repair transaction
2014-08-11 00:28:04, Info CSI 0000015f [SR] Verify complete
2014-08-11 00:28:05, Info CSI 00000160 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:28:05, Info CSI 00000161 [SR] Beginning Verify and Repair transaction
2014-08-11 00:28:29, Info CSI 00000164 [SR] Verify complete
2014-08-11 00:28:30, Info CSI 00000165 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:28:30, Info CSI 00000166 [SR] Beginning Verify and Repair transaction
2014-08-11 00:28:39, Info CSI 00000168 [SR] Verify complete
2014-08-11 00:28:39, Info CSI 00000169 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:28:39, Info CSI 0000016a [SR] Beginning Verify and Repair transaction
2014-08-11 00:28:52, Info CSI 0000016d [SR] Verify complete
2014-08-11 00:28:53, Info CSI 0000016e [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:28:53, Info CSI 0000016f [SR] Beginning Verify and Repair transaction
2014-08-11 00:29:15, Info CSI 00000172 [SR] Verify complete
2014-08-11 00:29:15, Info CSI 00000173 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:29:15, Info CSI 00000174 [SR] Beginning Verify and Repair transaction
2014-08-11 00:29:26, Info CSI 00000176 [SR] Verify complete
2014-08-11 00:29:27, Info CSI 00000177 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:29:27, Info CSI 00000178 [SR] Beginning Verify and Repair transaction
2014-08-11 00:29:36, Info CSI 0000017a [SR] Verify complete
2014-08-11 00:29:36, Info CSI 0000017b [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:29:36, Info CSI 0000017c [SR] Beginning Verify and Repair transaction
2014-08-11 00:29:54, Info CSI 0000017e [SR] Verify complete
2014-08-11 00:29:55, Info CSI 0000017f [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:29:55, Info CSI 00000180 [SR] Beginning Verify and Repair transaction
2014-08-11 00:30:13, Info CSI 00000183 [SR] Verify complete
2014-08-11 00:30:14, Info CSI 00000184 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:30:14, Info CSI 00000185 [SR] Beginning Verify and Repair transaction
2014-08-11 00:30:24, Info CSI 00000187 [SR] Verify complete
2014-08-11 00:30:24, Info CSI 00000188 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:30:24, Info CSI 00000189 [SR] Beginning Verify and Repair transaction
2014-08-11 00:30:30, Info CSI 0000018b [SR] Verify complete
2014-08-11 00:30:31, Info CSI 0000018c [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:30:31, Info CSI 0000018d [SR] Beginning Verify and Repair transaction
2014-08-11 00:30:38, Info CSI 00000190 [SR] Verify complete
2014-08-11 00:30:38, Info CSI 00000191 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:30:38, Info CSI 00000192 [SR] Beginning Verify and Repair transaction
2014-08-11 00:30:46, Info CSI 00000196 [SR] Verify complete
2014-08-11 00:30:46, Info CSI 00000197 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:30:46, Info CSI 00000198 [SR] Beginning Verify and Repair transaction
2014-08-11 00:30:54, Info CSI 0000019a [SR] Verify complete
2014-08-11 00:30:54, Info CSI 0000019b [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:30:54, Info CSI 0000019c [SR] Beginning Verify and Repair transaction
2014-08-11 00:31:03, Info CSI 0000019f [SR] Verify complete
2014-08-11 00:31:03, Info CSI 000001a0 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:31:03, Info CSI 000001a1 [SR] Beginning Verify and Repair transaction
2014-08-11 00:31:10, Info CSI 000001a3 [SR] Verify complete
2014-08-11 00:31:11, Info CSI 000001a4 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:31:11, Info CSI 000001a5 [SR] Beginning Verify and Repair transaction
2014-08-11 00:31:13, Info CSI 000001a7 [SR] Verify complete
2014-08-11 00:31:13, Info CSI 000001a8 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:31:13, Info CSI 000001a9 [SR] Beginning Verify and Repair transaction
2014-08-11 00:31:19, Info CSI 000001ab [SR] Verify complete
2014-08-11 00:31:19, Info CSI 000001ac [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:31:19, Info CSI 000001ad [SR] Beginning Verify and Repair transaction
2014-08-11 00:31:23, Info CSI 000001af [SR] Verify complete
2014-08-11 00:31:24, Info CSI 000001b0 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:31:24, Info CSI 000001b1 [SR] Beginning Verify and Repair transaction
2014-08-11 00:31:30, Info CSI 000001b3 [SR] Verify complete
2014-08-11 00:31:31, Info CSI 000001b4 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:31:31, Info CSI 000001b5 [SR] Beginning Verify and Repair transaction
2014-08-11 00:31:37, Info CSI 000001b7 [SR] Verify complete
2014-08-11 00:31:37, Info CSI 000001b8 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:31:37, Info CSI 000001b9 [SR] Beginning Verify and Repair transaction
2014-08-11 00:31:40, Info CSI 000001bb [SR] Verify complete
2014-08-11 00:31:41, Info CSI 000001bc [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:31:41, Info CSI 000001bd [SR] Beginning Verify and Repair transaction
2014-08-11 00:31:51, Info CSI 000001bf [SR] Verify complete
2014-08-11 00:31:51, Info CSI 000001c0 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:31:51, Info CSI 000001c1 [SR] Beginning Verify and Repair transaction
2014-08-11 00:32:05, Info CSI 000001c3 [SR] Verify complete
2014-08-11 00:32:06, Info CSI 000001c4 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:32:06, Info CSI 000001c5 [SR] Beginning Verify and Repair transaction
2014-08-11 00:32:10, Info CSI 000001c7 [SR] Verify complete
2014-08-11 00:32:11, Info CSI 000001c8 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:32:11, Info CSI 000001c9 [SR] Beginning Verify and Repair transaction
2014-08-11 00:32:15, Info CSI 000001cb [SR] Verify complete
2014-08-11 00:32:16, Info CSI 000001cc [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:32:16, Info CSI 000001cd [SR] Beginning Verify and Repair transaction
2014-08-11 00:32:18, Info CSI 000001cf [SR] Verify complete
2014-08-11 00:32:18, Info CSI 000001d0 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:32:18, Info CSI 000001d1 [SR] Beginning Verify and Repair transaction
2014-08-11 00:32:23, Info CSI 000001d3 [SR] Verify complete
2014-08-11 00:32:23, Info CSI 000001d4 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:32:23, Info CSI 000001d5 [SR] Beginning Verify and Repair transaction
2014-08-11 00:32:27, Info CSI 000001d7 [SR] Verify complete
2014-08-11 00:32:28, Info CSI 000001d8 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:32:28, Info CSI 000001d9 [SR] Beginning Verify and Repair transaction
2014-08-11 00:32:31, Info CSI 000001db [SR] Verify complete
2014-08-11 00:32:31, Info CSI 000001dc [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:32:31, Info CSI 000001dd [SR] Beginning Verify and Repair transaction
2014-08-11 00:32:32, Info CSI 000001df [SR] Verify complete
2014-08-11 00:32:33, Info CSI 000001e0 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:32:33, Info CSI 000001e1 [SR] Beginning Verify and Repair transaction
2014-08-11 00:32:38, Info CSI 000001e9 [SR] Verify complete
2014-08-11 00:32:38, Info CSI 000001ea [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:32:38, Info CSI 000001eb [SR] Beginning Verify and Repair transaction
2014-08-11 00:32:44, Info CSI 000001ed [SR] Verify complete
2014-08-11 00:32:44, Info CSI 000001ee [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:32:44, Info CSI 000001ef [SR] Beginning Verify and Repair transaction
2014-08-11 00:32:48, Info CSI 000001f1 [SR] Verify complete
2014-08-11 00:32:49, Info CSI 000001f2 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:32:49, Info CSI 000001f3 [SR] Beginning Verify and Repair transaction
2014-08-11 00:32:54, Info CSI 000001f5 [SR] Verify complete
2014-08-11 00:32:54, Info CSI 000001f6 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:32:54, Info CSI 000001f7 [SR] Beginning Verify and Repair transaction
2014-08-11 00:33:01, Info CSI 000001f9 [SR] Verify complete
2014-08-11 00:33:01, Info CSI 000001fa [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:33:01, Info CSI 000001fb [SR] Beginning Verify and Repair transaction
2014-08-11 00:33:10, Info CSI 000001fe [SR] Verify complete
2014-08-11 00:33:10, Info CSI 000001ff [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:33:10, Info CSI 00000200 [SR] Beginning Verify and Repair transaction
2014-08-11 00:33:16, Info CSI 00000202 [SR] Verify complete
2014-08-11 00:33:16, Info CSI 00000203 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:33:16, Info CSI 00000204 [SR] Beginning Verify and Repair transaction
2014-08-11 00:33:19, Info CSI 00000206 [SR] Verify complete
2014-08-11 00:33:19, Info CSI 00000207 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:33:19, Info CSI 00000208 [SR] Beginning Verify and Repair transaction
2014-08-11 00:33:30, Info CSI 0000020b [SR] Verify complete
2014-08-11 00:33:30, Info CSI 0000020c [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:33:30, Info CSI 0000020d [SR] Beginning Verify and Repair transaction
2014-08-11 00:33:45, Info CSI 00000211 [SR] Verify complete
2014-08-11 00:33:45, Info CSI 00000212 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:33:45, Info CSI 00000213 [SR] Beginning Verify and Repair transaction
2014-08-11 00:33:54, Info CSI 00000218 [SR] Verify complete
2014-08-11 00:33:54, Info CSI 00000219 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:33:54, Info CSI 0000021a [SR] Beginning Verify and Repair transaction
2014-08-11 00:34:04, Info CSI 00000222 [SR] Verify complete
2014-08-11 00:34:04, Info CSI 00000223 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:34:04, Info CSI 00000224 [SR] Beginning Verify and Repair transaction
2014-08-11 00:34:14, Info CSI 0000022b [SR] Verify complete
2014-08-11 00:34:15, Info CSI 0000022c [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:34:15, Info CSI 0000022d [SR] Beginning Verify and Repair transaction
2014-08-11 00:34:22, Info CSI 00000232 [SR] Verify complete
2014-08-11 00:34:22, Info CSI 00000233 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:34:22, Info CSI 00000234 [SR] Beginning Verify and Repair transaction
2014-08-11 00:34:27, Info CSI 00000238 [SR] Verify complete
2014-08-11 00:34:27, Info CSI 00000239 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:34:27, Info CSI 0000023a [SR] Beginning Verify and Repair transaction
2014-08-11 00:34:33, Info CSI 0000023c [SR] Verify complete
2014-08-11 00:34:33, Info CSI 0000023d [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:34:33, Info CSI 0000023e [SR] Beginning Verify and Repair transaction
2014-08-11 00:34:40, Info CSI 00000261 [SR] Verify complete
2014-08-11 00:34:40, Info CSI 00000262 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:34:40, Info CSI 00000263 [SR] Beginning Verify and Repair transaction
2014-08-11 00:34:46, Info CSI 00000267 [SR] Verify complete
2014-08-11 00:34:46, Info CSI 00000268 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:34:46, Info CSI 00000269 [SR] Beginning Verify and Repair transaction
2014-08-11 00:34:53, Info CSI 0000026b [SR] Verify complete
2014-08-11 00:34:53, Info CSI 0000026c [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:34:53, Info CSI 0000026d [SR] Beginning Verify and Repair transaction
2014-08-11 00:34:59, Info CSI 0000026f [SR] Verify complete
2014-08-11 00:34:59, Info CSI 00000270 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:34:59, Info CSI 00000271 [SR] Beginning Verify and Repair transaction
2014-08-11 00:35:05, Info CSI 0000027e [SR] Verify complete
2014-08-11 00:35:05, Info CSI 0000027f [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:35:05, Info CSI 00000280 [SR] Beginning Verify and Repair transaction
2014-08-11 00:35:11, Info CSI 00000283 [SR] Verify complete
2014-08-11 00:35:11, Info CSI 00000284 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:35:11, Info CSI 00000285 [SR] Beginning Verify and Repair transaction
2014-08-11 00:35:20, Info CSI 0000028d [SR] Verify complete
2014-08-11 00:35:20, Info CSI 0000028e [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:35:20, Info CSI 0000028f [SR] Beginning Verify and Repair transaction
2014-08-11 00:35:26, Info CSI 00000297 [SR] Verify complete
2014-08-11 00:35:27, Info CSI 00000298 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:35:27, Info CSI 00000299 [SR] Beginning Verify and Repair transaction
2014-08-11 00:35:29, Info CSI 0000029b [SR] Verify complete
2014-08-11 00:35:30, Info CSI 0000029c [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:35:30, Info CSI 0000029d [SR] Beginning Verify and Repair transaction
2014-08-11 00:35:38, Info CSI 000002a0 [SR] Verify complete
2014-08-11 00:35:39, Info CSI 000002a1 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:35:39, Info CSI 000002a2 [SR] Beginning Verify and Repair transaction
2014-08-11 00:35:42, Info CSI 000002a4 [SR] Verify complete
2014-08-11 00:35:42, Info CSI 000002a5 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:35:42, Info CSI 000002a6 [SR] Beginning Verify and Repair transaction
2014-08-11 00:35:48, Info CSI 000002a8 [SR] Verify complete
2014-08-11 00:35:48, Info CSI 000002a9 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:35:48, Info CSI 000002aa [SR] Beginning Verify and Repair transaction
2014-08-11 00:35:53, Info CSI 000002ac [SR] Verify complete
2014-08-11 00:35:54, Info CSI 000002ad [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:35:54, Info CSI 000002ae [SR] Beginning Verify and Repair transaction
2014-08-11 00:35:59, Info CSI 000002b0 [SR] Verify complete
2014-08-11 00:35:59, Info CSI 000002b1 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:35:59, Info CSI 000002b2 [SR] Beginning Verify and Repair transaction
2014-08-11 00:36:09, Info CSI 000002cc [SR] Verify complete
2014-08-11 00:36:09, Info CSI 000002cd [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:36:09, Info CSI 000002ce [SR] Beginning Verify and Repair transaction
2014-08-11 00:36:22, Info CSI 000002d0 [SR] Verify complete
2014-08-11 00:36:23, Info CSI 000002d1 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:36:23, Info CSI 000002d2 [SR] Beginning Verify and Repair transaction
2014-08-11 00:36:29, Info CSI 000002d4 [SR] Verify complete
2014-08-11 00:36:29, Info CSI 000002d5 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:36:29, Info CSI 000002d6 [SR] Beginning Verify and Repair transaction
2014-08-11 00:36:34, Info CSI 000002d8 [SR] Verify complete
2014-08-11 00:36:34, Info CSI 000002d9 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:36:34, Info CSI 000002da [SR] Beginning Verify and Repair transaction
2014-08-11 00:36:38, Info CSI 000002de [SR] Verify complete
2014-08-11 00:36:38, Info CSI 000002df [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:36:38, Info CSI 000002e0 [SR] Beginning Verify and Repair transaction
2014-08-11 00:36:42, Info CSI 000002e2 [SR] Verify complete
2014-08-11 00:36:43, Info CSI 000002e3 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:36:43, Info CSI 000002e4 [SR] Beginning Verify and Repair transaction
2014-08-11 00:36:49, Info CSI 000002e6 [SR] Verify complete
2014-08-11 00:36:49, Info CSI 000002e7 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:36:49, Info CSI 000002e8 [SR] Beginning Verify and Repair transaction
2014-08-11 00:36:54, Info CSI 000002ea [SR] Verify complete
2014-08-11 00:36:54, Info CSI 000002eb [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:36:54, Info CSI 000002ec [SR] Beginning Verify and Repair transaction
2014-08-11 00:36:59, Info CSI 000002ef [SR] Verify complete
2014-08-11 00:36:59, Info CSI 000002f0 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:36:59, Info CSI 000002f1 [SR] Beginning Verify and Repair transaction
2014-08-11 00:37:06, Info CSI 000002f3 [SR] Verify complete
2014-08-11 00:37:07, Info CSI 000002f4 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:37:07, Info CSI 000002f5 [SR] Beginning Verify and Repair transaction
2014-08-11 00:37:11, Info CSI 000002f7 [SR] Verify complete
2014-08-11 00:37:11, Info CSI 000002f8 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:37:11, Info CSI 000002f9 [SR] Beginning Verify and Repair transaction
2014-08-11 00:37:16, Info CSI 000002fb [SR] Verify complete
2014-08-11 00:37:16, Info CSI 000002fc [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:37:16, Info CSI 000002fd [SR] Beginning Verify and Repair transaction
2014-08-11 00:37:23, Info CSI 00000300 [SR] Verify complete
2014-08-11 00:37:23, Info CSI 00000301 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:37:23, Info CSI 00000302 [SR] Beginning Verify and Repair transaction
2014-08-11 00:37:27, Info CSI 00000304 [SR] Verify complete
2014-08-11 00:37:28, Info CSI 00000305 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:37:28, Info CSI 00000306 [SR] Beginning Verify and Repair transaction
2014-08-11 00:37:32, Info CSI 00000308 [SR] Verify complete
2014-08-11 00:37:33, Info CSI 00000309 [SR] Verifying 100 (0x0000000000000064) components
2014-08-11 00:37:33, Info CSI 0000030a [SR] Beginning Verify and Repair transaction
2014-08-11 00:37:38, Info CSI 0000030c [SR] Verify complete
2014-08-11 00:37:38, Info CSI 0000030d [SR] Verifying 93 (0x000000000000005d) components
2014-08-11 00:37:38, Info CSI 0000030e [SR] Beginning Verify and Repair transaction
2014-08-11 00:37:43, Info CSI 00000310 [SR] Verify complete
2014-08-11 00:37:43, Info CSI 00000311 [SR] Repairing 0 components
2014-08-11 00:37:43, Info CSI 00000312 [SR] Beginning Verify and Repair transaction
2014-08-11 00:37:43, Info CSI 00000314 [SR] Repair complete
 
Hi lindavb,

SFC log looks good. :)

Since you logs appear to be clean, let's do some clean-up and get you on your way.

We have a few items to take care of before we get to the All Clean Speech.

= = = = = = = = = = = = = = = = = = = =

Remove Disinfection Tools

  • Download Delfix
  • Tick the following boxes:
    • Remove disinfection tools
    • Create registry backup
    • Purge system restore



  • Click Run
  • Any other tools and files found can simply be deleted or uninstall via the Control Panel.
= = = = = = = = = = = = = = = = = = = =

Uninstall via Programs and Features

Click Start > Control Panel > Programs and Features. Locate and select the following that are present on the list and click the Remove button:
  • Java 6 Update 30
=========================

Update Java
=========================

With the above items taken care of let's move on to the All Clean part of the process.

The following procedures are recommendations for helping to keep your system running smoothly. If you are currently satisfied with how your system is running some or all of these may not pertain to you. Implement what you need.

This infection appears to have been cleaned, but I can not give you any absolute guarantees. As a precaution, I would go ahead and change all of your passwords as this is especially important after an infection.

Any of the logs that you created for use in the forums or remaining tools that have not yet been removed can be deleted so they aren't cluttering up your desktop.

Here are some tips to reduce the potential for spyware infection in the future:

Make your Internet Explorer more secure - This can be done by following these simple instructions:
  • From within Internet Explorer click on the Tools menu and then click on Options.
  • Click once on the Security tab
  • Click once on the Internet icon so it becomes highlighted.
  • Click once on the Custom Level button.
  • Change the Download signed ActiveX controls to Prompt
  • Change the Download unsigned ActiveX controls to Disable
  • Change the Initialize and script ActiveX controls not marked as safe to Disable
  • Change the Installation of desktop items to Prompt
  • Change the Launching programs and files in an IFRAME to Prompt
  • Change the Navigate sub-frames across different domains to Prompt
  • When all these settings have been made, click on the OK button.
  • If it prompts you as to whether or not you want to save the settings, press the Yes button.
  • Next press the Apply button and then the OK to exit the Internet Properties page.
Make your Mozilla Firefox more secure - This can be done by adding these add-ons:
Use and update an anti-virus software - I can not overemphasize the need for you to use and update your anti-virus application on a regular basis. With the ever increasing number of new variants of malware arriving on the scene daily, you become very susceptible to an attack without updated protection.

Free Anti-Virus
Free Firewall
Using a third-party firewall will allow you to give/deny access for applications that want to go online. Without a firewall your computer is susceptible to being hacked and taken over. Simply using a firewall in its default configuration can lower your risk greatly. A tutorial on firewalls can be found here.
= = = = = = = = = = = = = = = = = = = =

Be prepared for CryptoLocker:

Cryptolocker Ransomware: What You Need To Know
CryptoLocker Ransomware Information Guide and FAQ

to help protect your computer in the future I recommend that you get the following free program:

CryptoPrevent install this program to lock down and prevent crypto-ransomeware



= = = = = = = = = = = = = = = = = = = =

COMPUTER SECURITY - a short guide to staying safer online

= = = = = = = = = = = = = = = = = = = =

WOT Web of Trust, warns you about risky websites that try to scam visitors, deliver malware or send spam. Protect your computer against online threats by using WOT as your front-line layer of protection when browsing or searching in unfamiliar territory. WOT's color-coded icons show you ratings for 21 million websites - green to go, yellow for caution and red to stop, helping you avoid the dangerous sites. WOT has an addon available for both Firefox and IE.
  • Green should be good to go
  • Yellow for caution
  • Red to stop
= = = = = = = = = = = = = = = = = = = =

P2P may be a great way to get lots of stuffs, but it is a great way to get infected as well. There's no way to tell if the file being shared is infected. Worse still, some worms spread via P2P networks, infecting you as well.

Please read these short reports on the dangers of peer-2-peer programs and file sharing.

= = = = = = = = = = = = = = = = = = = =

Make sure you keep your Windows OS current.
  • Windows XP:
    Microsoft will no longer offer support for Windows XP beginning on April 8, 2014
    If you are running Windows XP, please take the time to read the information provided at these links.
  • Windows Vista/7 users can open the Start menu > All Programs > Windows Update > Check for Updates (in left hand task pane) to update these systems.
  • Window 8 Open Windows Update by swiping in from the right edge of the screen (or, if you're using a mouse, pointing to the lower-right corner of the screen and moving the mouse pointer up), tapping or clicking Settings, tapping or clicking Change PC settings, and then tapping or clicking Update and recovery.
Without these you are leaving the back door open.

= = = = = = = = = = = = = = = = = = = =

Consider a custom hosts file such as MVPS HOSTS. This custom hosts file effectively blocks a wide range of unwanted ads, banners, 3rd party Cookies, 3rd party page counters, web bugs, and many hijackers. For information on how to download and install, please read this tutorial by WinHelp2002
Note: Be sure to follow the instructions to disable the DNS Client service before installing a custom hosts file.

= = = = = = = = = = = = = = = = = = = =

Finally, I strongly recommend that you read TonyKlein's good advice So how did I get infected in the first place?

Please reply to this thread once more if you are satisfied so that we can mark the problem as resolved.
 
Hi OCD,

In internet security settings, everything is already as suggested except I could not find "installation of desktop items" and navigate sub-frames across different domains." I do have "navigate windows and frames across different domains." Is that the same thing? Thanks for your patience and all your help!
 
Looking at windows updates, it says no important updates available, but 9 optional updates are available. My system automatically does important updates. But should I also do the optional ones? Some are a couple of years old. Four are windows updates "to resolve issues in Windows." They are dated 2/11/14, 8/29/12, 9/10/13, and another 9/10/13. Should I update all four or only the last one? Here is the complete list and not sure what the first 5 are, the updates are all from 2013 and 2012.

AMD - Other hardware, Storage Controller - AMD SATA Controller

Download size: 81 KB

You may need to restart your computer for this update to take effect.

Update type: Optional

AMD Other hardware, Storage Controller software update released in March, 2013

More information:
http://sysdev.microsoft.com/support/default.aspx

Help and Support:
http://support.microsoft.com/select/?target=hub



AVerMedia TECHNOLOGIES, Inc. - Streaming Media and Broadcast Devices - AVerMedia A323 MiniCard Hybrid ATSC

Download size: 782 KB

You may need to restart your computer for this update to take effect.

Update type: Optional

AVerMedia TECHNOLOGIES, Inc. Streaming Media and Broadcast Devices software update released in November, 2010

More information:
http://sysdev.microsoft.com/support/default.aspx

Help and Support:
http://support.microsoft.com/select/?target=hub



Logitech - Communication Device, Other hardware, Streaming Media and Broadcast - Logitech USB Camera (Orbit/Sphere AF)

Download size: 5.6 MB

You may need to restart your computer for this update to take effect.

Update type: Optional

Logitech Communication Device, Other hardware, Streaming Media and Broadcast software update released in January, 2012

More information:
http://winqual.microsoft.com/support/?driverid=20466950

Help and Support:
http://support.microsoft.com/select/?target=hub



NextWindow - Input - NextWindow 1950 Touch Screen

Download size: 4.5 MB

You may need to restart your computer for this update to take effect.

Update type: Optional

NextWindow Input software update released in August, 2010

More information:
http://sysdev.microsoft.com/support/default.aspx

Help and Support:
http://support.microsoft.com/select/?target=hub



Ralink Technology, Corp. - WLAN - 802.11n Wireless LAN Card

Download size: 934 KB

You may need to restart your computer for this update to take effect.

Update type: Optional

Ralink Technology, Corp. WLAN software update released in November, 2012

More information:
http://sysdev.microsoft.com/support/default.aspx

Help and Support:
http://support.microsoft.com/select/?target=hub



Update for Windows 7 for x64-based Systems (KB2574819)

Download size: 2.1 MB

You may need to restart your computer for this update to take effect.

Update type: Optional

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer.

More information:
http://support.microsoft.com/kb/2574819

Help and Support:
http://support.microsoft.com



Update for Windows 7 for x64-based Systems (KB2592687)

Download size: 2.1 MB - 8.8 MB

You may need to restart your computer for this update to take effect.

Update type: Optional

The Remote Desktop Protocol 8.0 update enables you to use the new Remote Desktop Services features. These features are introduced in Windows 8 and in Windows Server 2012 and are available for computers that are running Windows 7 Service Pack 1 or Windows Server 2008 R2 Service Pack 1. After you install this item, you may have to restart your computer.

More information:
http://support.microsoft.com/kb/2592687

Help and Support:
http://support.microsoft.com



Update for Windows 7 for x64-based Systems (KB2709981)

Download size: 413 KB

You may need to restart your computer for this update to take effect.

Update type: Optional

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer.

More information:
http://support.microsoft.com/kb/2709981

Help and Support:
http://support.microsoft.com



Update for Windows 7 for x64-based Systems (KB2830477)

Download size: 3.0 MB - 9.3 MB

You may need to restart your computer for this update to take effect.

Update type: Optional

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer.

More information:
http://support.microsoft.com/kb/2830477

Help and Support:
http://support.microsoft.com
 
Hi lindavb,

everything is already as suggested except I could not find "installation of desktop items" and navigate sub-frames across different domains." I do have "navigate windows and frames across different domains." Is that the same thing?
Click to expand...

I apologize, the "installation of desktop items" option is no longer available. But the "navigate windows and frames across different domains" is the same, so go ahead and make that setting as outlined.

But should I also do the optional ones?
Click to expand...

That is a personal choice. As these pertain more to hardware, my interpretation/information is limited. Always remember, that Google is your friend, when in doubt "google it".

The first five (5) are driver updates for various hardware items that are part of your computer:
  • Storage Controller - AMD SATA Controller - has to do with the storage devices (hard drives/CD/DVD)
  • Streaming Media and Broadcast Devices - AVerMedia A323 MiniCard Hybrid ATSC - driver used for streaming devices
  • Streaming Media and Broadcast - Logitech USB Camera - driver for USB mounted camera
  • NextWindow 1950 Touch Screen - driver to improve the touch screen performance
  • WLAN - 802.11n Wireless LAN Card - driver for your wireless network card

If you are not having any issues with the devices above I would pass on any of these updates. If you should need to update a particular driver due to a performance issue you are probably better off going directly to the device manufacturer's website and downloading the updated driver there.

With the last 3 listed updates, visit the product information link for each that you provided and read the description of what the update does. If it's something that you feel will benefit the performance of your computer then get the update. If not, then op not to install it.
 
You're very welcome. Glad I was able to help. :bigthumb:

Since this issue appears to be resolved ... this Topic has been closed.

If you still require help, please start a new topic and include fresh FRST and aswMBR logs, along with a link to your previous thread.

Please do not add any logs that might have been requested previously, you would be starting fresh.

Applies only to the original poster, anyone else with similar problems please start your own topic.
 
Status
Not open for further replies.
Back
Top