(problem solved.) SFC /scannow help

[Gamezertruth]

Your Ethernet driver took some finding, even using PCIDatabase.

Scroll down https://www.broadcom.com/support/?gid=12 until you come to NetLink 57xx (32 bit) in the Drivers section and click on the download arrow to the left.

That covers your Chip No. BCM57780.

I suggest you save it in Downloads and then you can reinstall it if it goes walk-about again.

finally i get the Ethernet driver from the manufacturer.CD  However, when I installed the all network driver I get the warning that the Windows tries to install malicious software driver ? so how i get rid of it  this driver kept install itself !but when i go to update it then  i got that warning about install malicious software driver and so far i don’t know why my networking drivers keep it disable ?

Your link for what Shane said just takes me back to the Computer Help main index and not your thread.

If you don't use Hibernate then you can turn that off which will free up a few GB and is done with the elevated command powercfg -h off

ok.  sound good then and now windows updates is fire up the hard drive and want use all space lol !

[Gamezertruth]

a new log to check

MiniToolBox by Farbar  Version: 14-04-2015
Ran by b (administrator) on 06-07-2015 at 08:19:26
Running from "D:\برامج"
Microsoft Windows 7 Ultimate  Service Pack 1 (X86)
Model: Aspire 4738 Manufacturer: Acer
Boot Mode: Normal
***************************************************************************

========================= Event log errors: ===============================

Application errors:
==================
Error: (07/06/2015 07:34:02 AM) (Source: LogSys.Server) (User: )
Description: Failed to unregister server. Error is 1716 (The manager type is unknown.). PID=3728C:\Program Files\Blueberry Software\BB FlashBack Pro 5\LogSysServer.exe

Error: (07/06/2015 07:34:02 AM) (Source: LogSys.Server) (User: )
Description: Failed to stop listening. Error is 1715 (The RPC server is not listening.). PID=3728C:\Program Files\Blueberry Software\BB FlashBack Pro 5\LogSysServer.exe

Error: (07/06/2015 06:56:47 AM) (Source: LogSys.Client) (User: )
Description: AllowExitWhenNoClients: Exception occurred. Error 1722 (The RPC server is unavailable.
)C:\Program Files\Blueberry Software\BB FlashBack Pro 5\FBO\FTSUploadAgent.exe

Error: (07/06/2015 06:56:46 AM) (Source: LogSys.Client) (User: )
Description: iCreateRegistrationMMF: Exception occurred. Error 1722 (The RPC server is unavailable.
)C:\Program Files\Blueberry Software\BB FlashBack Pro 5\FBO\FTSUploadAgent.exe

Error: (07/06/2015 06:56:45 AM) (Source: LogSys.Client) (User: )
Description: WaitForInputIdle failed. Error 6 (The handle is invalid.
)C:\Program Files\Blueberry Software\BB FlashBack Pro 5\FBO\FTSUploadAgent.exe

Error: (07/06/2015 06:56:45 AM) (Source: LogSys.Client) (User: )
Description: Failed creating LogSysMicro.exe processC:\Program Files\Blueberry Software\BB FlashBack Pro 5\FBO\FTSUploadAgent.exe

Error: (07/06/2015 06:56:45 AM) (Source: LogSys.Client) (User: )
Description: Failed creating LogSysServer processC:\Program Files\Blueberry Software\BB FlashBack Pro 5\FBO\FTSUploadAgent.exe

Error: (07/06/2015 06:56:38 AM) (Source: LogSys.Server) (User: )
Description: Failed using protocol sequence: ncalrpc. Error 1740 (The endpoint is a duplicate.). PID=3728C:\Program Files\Blueberry Software\BB FlashBack Pro 5\LogSysServer.exe

Error: (07/06/2015 06:56:38 AM) (Source: LogSys.Server) (User: )
Description: Failed using protocol sequence: ncalrpc. Error 1740 (The endpoint is a duplicate.). PID=1236C:\Program Files\Blueberry Software\BB FlashBack Pro 5\LogSysServer.exe

Error: (07/06/2015 06:55:45 AM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Service reached limit of transient errors. Will shut down. Last error returned from Service Manager: 0x80029c4a.


System errors:
=============
Error: (07/06/2015 06:55:23 AM) (Source: Service Control Manager) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
DtlDrvProtect
ndisrd
raeehd

Error: (07/06/2015 06:55:16 AM) (Source: Service Control Manager) (User: )
Description: The 驱动检测 service failed to start due to the following error:
%%1053

Error: (07/06/2015 06:55:16 AM) (Source: Service Control Manager) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the 驱动检测 service to connect.

Error: (07/06/2015 06:54:44 AM) (Source: NETLOGON) (User: )
Description: This computer is configured as a member of a workgroup, not as
a member of a domain. The Netlogon service does not need to run in this
configuration.

Error: (07/06/2015 06:53:40 AM) (Source: Service Control Manager) (User: )
Description: The Diagnostics Tracking Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 30000 milliseconds: Restart the service.

Error: (07/06/2015 03:03:39 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Microsoft Visual C++ 2008 Service Pack 1 Redistributable Package (KB2538243).

Error: (07/06/2015 03:01:36 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070643: Internet Explorer 11 for Windows 7.

Error: (07/06/2015 01:33:59 AM) (Source: Service Control Manager) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
DtlDrvProtect
ndisrd
raeehd

Error: (07/06/2015 01:33:54 AM) (Source: Service Control Manager) (User: )
Description: The 驱动检测 service failed to start due to the following error:
%%1053

Error: (07/06/2015 01:33:54 AM) (Source: Service Control Manager) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the 驱动检测 service to connect.


Microsoft Office Sessions:
=========================
Error: (07/06/2015 07:34:02 AM) (Source: LogSys.Server)(User: )
Description: Failed to unregister server. Error is 1716 (The manager type is unknown.). PID=3728C:\Program Files\Blueberry Software\BB FlashBack Pro 5\LogSysServer.exe

Error: (07/06/2015 07:34:02 AM) (Source: LogSys.Server)(User: )
Description: Failed to stop listening. Error is 1715 (The RPC server is not listening.). PID=3728C:\Program Files\Blueberry Software\BB FlashBack Pro 5\LogSysServer.exe

Error: (07/06/2015 06:56:47 AM) (Source: LogSys.Client)(User: )
Description: AllowExitWhenNoClients: Exception occurred. Error 1722 (The RPC server is unavailable.
)C:\Program Files\Blueberry Software\BB FlashBack Pro 5\FBO\FTSUploadAgent.exe

Error: (07/06/2015 06:56:46 AM) (Source: LogSys.Client)(User: )
Description: iCreateRegistrationMMF: Exception occurred. Error 1722 (The RPC server is unavailable.
)C:\Program Files\Blueberry Software\BB FlashBack Pro 5\FBO\FTSUploadAgent.exe

Error: (07/06/2015 06:56:45 AM) (Source: LogSys.Client)(User: )
Description: WaitForInputIdle failed. Error 6 (The handle is invalid.
)C:\Program Files\Blueberry Software\BB FlashBack Pro 5\FBO\FTSUploadAgent.exe

Error: (07/06/2015 06:56:45 AM) (Source: LogSys.Client)(User: )
Description: Failed creating LogSysMicro.exe processC:\Program Files\Blueberry Software\BB FlashBack Pro 5\FBO\FTSUploadAgent.exe

Error: (07/06/2015 06:56:45 AM) (Source: LogSys.Client)(User: )
Description: Failed creating LogSysServer processC:\Program Files\Blueberry Software\BB FlashBack Pro 5\FBO\FTSUploadAgent.exe

Error: (07/06/2015 06:56:38 AM) (Source: LogSys.Server)(User: )
Description: Failed using protocol sequence: ncalrpc. Error 1740 (The endpoint is a duplicate.). PID=3728C:\Program Files\Blueberry Software\BB FlashBack Pro 5\LogSysServer.exe

Error: (07/06/2015 06:56:38 AM) (Source: LogSys.Server)(User: )
Description: Failed using protocol sequence: ncalrpc. Error 1740 (The endpoint is a duplicate.). PID=1236C:\Program Files\Blueberry Software\BB FlashBack Pro 5\LogSysServer.exe

Error: (07/06/2015 06:55:45 AM) (Source: .NET Runtime Optimization Service)(User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Service reached limit of transient errors. Will shut down. Last error returned from Service Manager: 0x80029c4a.


**** End of log ****

[Boggin]

When a program like Blueberry Flashback is causing problems, it's either time to reinstall it or dump it.

Do you have any particular need for it ?

The Diagnostic Tracking Service error should go when you have installed KB3068708 which supersedes KB3022345.

When you get those updates installed, run Disk Cleanup as an admin and that could get rid of a 100 or so MB and then you have this month's updates to contend with which should hopefully deal with the Telemetry errors you get in a sfc /scannow because of KB3068708.

[Gamezertruth]

I will reinstall Blueberry Flashback software ! and I need it for online games 

Blueberry Flashback software needs a reboot so I will go to do a reboot 

and should I work on to fix some errors

[Gamezertruth]

i have this KB3068708 which already installed and KB3022345 isn’t installed yet

as Microsoft Visual C++ 2008 which already have a problem with all Microsoft Visual C++ component !

and i think that’s why i have more then a memory problem as in the links http://sanjaygurav.blogspot.com/2014/10/net-runtime-optimization-service.html

http://forums.redflagdeals.com/help-needed-windows-7-ultimate-ibm-t60-has-high-cpu-usage-even-when-idle-1726867/

[Boggin]

Different programs install the MS Visual C++ version they require, so reinstalling whatever should resolve that and as Blueberry figures quite a lot in the errors, then that is favourite.

Can you translate which service it keeps reporting as failing to start in System Errors ?

That memory link refers to Server 2012 but have you checked your Task Manager to see what is hogging the memory ?

Under Processes double click on the top item and then it will list them by size usage.

svchost.exe is the usual hog but you can have a number of those running and if one is showing as the culprit, right click on it then select Go to Services where when you scroll down, the services it is running will be highlighted in blue.

How many programs are running under the Startup tab in msconfig ?

[Gamezertruth]

Different programs install the MS Visual C++ version they require, so reinstalling whatever should resolve that and as Blueberry figures quite a lot in the errors, then that is favourite.

yes that true but i have tried many time and it kept unresolved so i have removed the program which Cause the issue! and if there any software then Blueberry! 

Can you translate which service it keeps reporting as failing to start in System Errors ?

yes, I probably know and I can translate what that error cause by which DriveTheLife program . It's a Chinese company http://www.tweaking.com/forums/index.php/topic,2888.msg19821.html#msg19821

http://www.tweaking.com/forums/index.php/topic,3126.msg22290.html#msg22290

[Boggin]

Different programs install the MS Visual C++ version they require, so reinstalling whatever should resolve that and as Blueberry figures quite a lot in the errors, then that is favourite.

yes that true but i have tried many time and it kept unresolved so i have removed the program which Cause the issue! and if there any software then Blueberry! 

Can you translate which service it keeps reporting as failing to start in System Errors ?

yes, I probably know and I can translate what that error cause by which DriveTheLife program . It's a Chinese company http://www.tweaking.com/forums/index.php/topic,2888.msg19821.html#msg19821

http://www.tweaking.com/forums/index.php/topic,3126.msg22290.html#msg22290

Can you give me a resume for what you mean from those two threads.

[Gamezertruth]

Different programs install the MS Visual C++ version they require, so reinstalling whatever should resolve that and as Blueberry figures quite a lot in the errors, then that is favourite.

yes that true but i have tried many time and it kept unresolved so i have removed the program which Cause the issue! and if there any software then Blueberry! 

Can you translate which service it keeps reporting as failing to start in System Errors ?

yes, I probably know and I can translate what that error cause by which DriveTheLife program . It's a Chinese company http://www.tweaking.com/forums/index.php/topic,2888.msg19821.html#msg19821

http://www.tweaking.com/forums/index.php/topic,3126.msg22290.html#msg22290

Can you give me a resume for what you mean from those two threads.

yes i can , i want you to check if this program are legal or just a Chinese malware program! i see Rick Recommend this program  so how you think ?

[Boggin]

There's a couple of download sites for it that I would trust, but whether the program itself is trustworthy.....

I used to use Slimdrivers updater program but noticed that SAS was picking up built in adware in it and it wasn't as good as it used to be so I dumped it.

For the main part, once a computer gets to be about 3 years old and all of the drivers have been updated, then that is usually it so there's no point in checking for updates after that.

Windows Updates occasionally gives hardware updates, but they are few and far between.

See what AdwCleaner makes of it and if it lists it as possible adware. http://www.bleepingcomputer.com/download/adwcleaner/

When you click on Scan it may list that and/or other programs it considers as adware/Toolbars in the lower pane.

If it does list any then you can uncheck their boxes for any you want to keep.

When the scan is done, click on Report and it will tell you what else it has found, if any and those items will be deleted when you close the report and click on Cleaning.

Junkware Removal Tool which has a download link lower down the AdwCleaner page, is also a useful tool and often finds bits that other scanners fail to pick up on.

You just let that run until it produces its report.

The free version of MBAM has a default facility to warn about PuPs and PuMs, so run a scan with that as well.

https://www.malwarebytes.org/

[Gamezertruth]

thank you again for advice my I will start once again from here and i will check my system with malware/adware tool and back to this topic 

[Gamezertruth]

i have just download adwcleaner and run it and it got stuck somewhere and it cause to hang my system! which i had to power off my pc !

and scanning with mbam/SUPERAntiSpyware Free Edition and all come clean no malware found!

 

[Boggin]

For a more in depth anti malware scan, I occasionally run ESET Free Online Scanner in Safe Mode with Networking.

http://www.eset.com/us/online-scanner/

It's been a while since I ran this scanner but click on Advanced, check all of the boxes except the last one before hitting Scan.

If you run this program in normal mode then you need to disable your AV program immediately before hitting the Scan button.

[Gamezertruth]

i have done scan my system with all of the flowing malware scanner and all come up clean Except eset online scanner and adwcleaner have found only 1 Entries but got not response, which was forced to pull the wire 

Panda Cloud Cleaner
Removal Tool
Dr.Web CureIt!
emsi emergency kit

and so when I copy this (驱动检测) as in minitoolbox log.file and I do a Google search and this what come up to my a lot of Chinese sites! https://www.google.com/search?q=%E9%A9%B1%E5%8A%A8%E6%A3%80%E6%B5%8B&ie=utf-8&oe=utf-8

so this NET Runtime Optimization Service error still cause a High-Memory used!

 new log

MiniToolBox by Farbar  Version: 14-04-2015
Ran by b (administrator) on 07-07-2015 at 20:57:51
Running from "D:\برامج"
Microsoft Windows 7 Ultimate  Service Pack 1 (X86)
Model: Aspire 4738 Manufacturer: Acer
Boot Mode: Normal
***************************************************************************

========================= Event log errors: ===============================

Application errors:
==================
Error: (07/07/2015 06:08:26 PM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Service reached limit of transient errors. Will shut down. Last error returned from Service Manager: 0x80029c4a.

Error: (07/07/2015 06:08:05 PM) (Source: Windows Search Service) (User: )
Description: Could not get performance counter registry info for WSearchIdxPi for instance   due to the following error: The operation completed successfully.   0x0.

Error: (07/07/2015 06:08:03 PM) (Source: Windows Search Service) (User: )
Description: Performance monitoring cannot be initialized for the gatherer object, because the counters are not loaded or the shared memory object cannot be opened. This only affects availability of the perfmon counters. Restart the computer.

Context:  Application, SystemIndex Catalog

Error: (07/07/2015 06:08:02 PM) (Source: Windows Search Service) (User: )
Description: Performance monitoring cannot be initialized for the gatherer service, because the counters are not loaded or the shared memory object cannot be opened. This only affects availability of the perfmon counters. Restart the computer.

Error: (07/07/2015 05:25:16 AM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Service reached limit of transient errors. Will shut down. Last error returned from Service Manager: 0x80029c4a.

Error: (07/07/2015 05:24:57 AM) (Source: Windows Search Service) (User: )
Description: Could not get performance counter registry info for WSearchIdxPi for instance   due to the following error: The operation completed successfully.   0x0.

Error: (07/07/2015 05:24:49 AM) (Source: Windows Search Service) (User: )
Description: Performance monitoring cannot be initialized for the gatherer object, because the counters are not loaded or the shared memory object cannot be opened. This only affects availability of the perfmon counters. Restart the computer.

Context:  Application, SystemIndex Catalog

Error: (07/07/2015 05:24:49 AM) (Source: Windows Search Service) (User: )
Description: Performance monitoring cannot be initialized for the gatherer service, because the counters are not loaded or the shared memory object cannot be opened. This only affects availability of the perfmon counters. Restart the computer.

Error: (07/06/2015 10:52:15 PM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Service reached limit of transient errors. Will shut down. Last error returned from Service Manager: 0x80029c4a.

Error: (07/06/2015 10:51:59 PM) (Source: Windows Search Service) (User: )
Description: Could not get performance counter registry info for WSearchIdxPi for instance   due to the following error: The operation completed successfully.   0x0.


System errors:
=============
Error: (07/07/2015 06:08:09 PM) (Source: Service Control Manager) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
DtlDrvProtect
ndisrd
raeehd

Error: (07/07/2015 06:08:09 PM) (Source: WMPNetworkSvc) (User: )
Description: Service 'WMPNetworkSvc' did not start correctly because CoCreateInstance(CLSID_UPnPDeviceFinder) encountered error '0x80070420'. Verify that the UPnPHost service is running and that the UPnPHost component of Windows is installed properly.

Error: (07/07/2015 06:08:01 PM) (Source: Service Control Manager) (User: )
Description: The 驱动检测 service failed to start due to the following error:
%%1053

Error: (07/07/2015 06:08:01 PM) (Source: Service Control Manager) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the 驱动检测 service to connect.

Error: (07/07/2015 06:07:28 PM) (Source: NETLOGON) (User: )
Description: This computer is configured as a member of a workgroup, not as
a member of a domain. The Netlogon service does not need to run in this
configuration.

Error: (07/07/2015 08:21:10 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070643: Internet Explorer 11 for Windows 7.

Error: (07/07/2015 06:42:48 AM) (Source: BROWSER) (User: )
Description: The browser service has failed to retrieve the backup list too many times on transport \Device\NetBT_Tcpip_{37917A9A-5795-46BE-AB68-B438D25FB774}.
The backup browser is stopping.

Error: (07/07/2015 05:25:01 AM) (Source: WMPNetworkSvc) (User: )
Description: Service 'WMPNetworkSvc' did not start correctly because CoCreateInstance(CLSID_UPnPDeviceFinder) encountered error '0x80004005'. Verify that the UPnPHost service is running and that the UPnPHost component of Windows is installed properly.

Error: (07/07/2015 05:25:01 AM) (Source: Service Control Manager) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
DtlDrvProtect
ndisrd
raeehd

Error: (07/07/2015 05:24:48 AM) (Source: Service Control Manager) (User: )
Description: The 驱动检测 service failed to start due to the following error:
%%1053


Microsoft Office Sessions:
=========================
Error: (07/07/2015 06:08:26 PM) (Source: .NET Runtime Optimization Service)(User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Service reached limit of transient errors. Will shut down. Last error returned from Service Manager: 0x80029c4a.

Error: (07/07/2015 06:08:05 PM) (Source: Windows Search Service)(User: )
Description: WSearchIdxPiThe operation completed successfully.   0x0

Error: (07/07/2015 06:08:03 PM) (Source: Windows Search Service)(User: )
Description: Context:  Application, SystemIndex Catalog

Error: (07/07/2015 06:08:02 PM) (Source: Windows Search Service)(User: )
Description:

Error: (07/07/2015 05:25:16 AM) (Source: .NET Runtime Optimization Service)(User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Service reached limit of transient errors. Will shut down. Last error returned from Service Manager: 0x80029c4a.

Error: (07/07/2015 05:24:57 AM) (Source: Windows Search Service)(User: )
Description: WSearchIdxPiThe operation completed successfully.   0x0

Error: (07/07/2015 05:24:49 AM) (Source: Windows Search Service)(User: )
Description: Context:  Application, SystemIndex Catalog

Error: (07/07/2015 05:24:49 AM) (Source: Windows Search Service)(User: )
Description:

Error: (07/06/2015 10:52:15 PM) (Source: .NET Runtime Optimization Service)(User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Service reached limit of transient errors. Will shut down. Last error returned from Service Manager: 0x80029c4a.

Error: (07/06/2015 10:51:59 PM) (Source: Windows Search Service)(User: )
Description: WSearchIdxPiThe operation completed successfully.   0x0


**** End of log ****

[Boggin]

What did ESET and AdwCleaner find or did ADW freeze the computer again ?

Did you execute the scans in Safe Mode with Networking ?

I cannot help you with those Application or System errors so you will have to wait for Shane to pick up your thread for those.

[Gamezertruth]

eset scanner find 2 setup files only and adwcleaner still freeze the computer as you said

and no i have to run it in normal mode before some day and thank you a lot Boggin for helping my! 

[Boggin]

Did you make a note of the set up files ESET found problems with ?

[Gamezertruth]

Did you make a note of the set up files ESET found problems with ?

yeah it automatically saved to eset program folder do you want my to post the logfile ?

[Boggin]

Yes, it could help Shane.

(I'm getting dizzy bouncing between your threads )

[Gamezertruth]

no problem and here is the logfile

[Boggin]

Blueberry again ! - and what's this SysTweak supereasy reg cleaner ?

[Gamezertruth]

Blueberry again ! - and what's this SysTweak supereasy reg cleaner ?

I need for capture screen software that why i use blueberry software a long time and for SysTweak supereasy reg cleaner i don’t know but it look like a scam soft

http://answers.microsoft.com/en-us/windows/forum/windows_xp-windows_programs/is-regclean-pro-by-systweak-as-they-state-a/7bda1636-9673-e011-8dfc-68b599b31bf5?auth=1 

http://www.shouldiremoveit.com/RegClean-Pro-5236-program.aspx

http://www.symantec.com/security_response/writeup.jsp?docid=2014-070111-2856-99&tabid=2

[Boggin]

No one of note that I know recommends using registry cleaners.

The only one that I would trust is CCleaner and that would be to clean out residue from programs uninstalled using Windows Uninstall which can be avoided by using a 3rd party uninstaller program.

CCleaner doesn't clean out indiscriminately like some and probably most reg cleaners.

Did you reinstall Blueberry or have you left it uninstalled for the time being ?

[Gamezertruth]

good info and I have completely removing the Blueberry using Your Unin-staller! software and have to reinstall it and i thing I will stay with ccleaner from now

[Rick]

Hi,
           Gamez, If the problem persists, you have to run the windows readiness tool. It will fix most of the problems . you just run it and while run, it fixes the problem. You could run one more time the windows readiness tool. it will fix the problems and if not would be shown in the log file

this was not much help;
http://windows.microsoft.com/en-GB/windows7/What-is-the-System-Update-Readiness-Tool