AVG anti-virus reporting off

[bluecountry]

I have AVG basic free anti-virus software.
For some reason, the icon has a triangle with an exclamiation point.
When I click to open......it has computer with an alert saying I am not fully protected, click to fix.  The web browsing is protected but the computer is not, resident shield not active.  I click to fix, nothing happens.

Additionally I have a red shield with an icon, when I click this it says Windows Security Center, Malware Protection
-Virus protection, AVG reports that it is off.  I click to turn on and nothing happens.

I just updated AVG, restarted my computer, and it still says the same.

What is going on and how to fix?
Thanks.

[SuperDave]

Hello and welcome to Computer Hope Forum. My name is Dave. I will be helping you out with your particular problem on your computer.

1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine.
2. The fixes are specific to your problem and should only be used for this issue on this machine.
3. If you don't know or understand something, please don't hesitate to ask.
4. Please DO NOT run any other tools or scans while I am helping you.
5. It is important that you reply to this thread. Do not start a new topic.
6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
7. Absence of symptoms does not mean that everything is clear.

If you can't access the internet with your infected computer you will have to download and transfer any programs to the computer you're using now and transfer them to the infected computer with a CD-RW or a USB storage device. I prefer a CD because a storage device can get infected. If you use a storage device hold the shift key down while inserting the USB storage device for about 10 secs. You will also have to transfer the logs you receive back to the good computer using the same method until we can get the computer back on-line.
*************************************************************************
My advice is to dump AVG and go with Avira.(below) If you have trouble uninstalling AVG, use the Removal tool below.

Avira AntiVir Personal

AVG Antivirus - AVG Antivirus Remover utility

[bluecountry]

Dave, problem, for some reason I cannot get internet access on the affected PC.
The wireless connection is not working.
This is not a network issue, as other devices are able to connect.

I just keep being told my connection is "local only" and cannot open the web.
Is it possible my PC has a really bad virus blocking the wireless connection?

[SuperDave]

Is it possible my PC has a really bad virus blocking the wireless connection?

That's usually the first thing that an infection will do; disable your ability to download some tools. Try booting in Safe mode, download, install and run MBAM then try it in Normal mode.

Please download Malwarebytes Anti-Malware from here.
Double Click mbam-setup.exe to install the application.

• It should update automatically if the computer is connected to the internet.
• Click on Threat Scan and click on Scan Now.
  
• The scan may take some time to finish,so please be patient.
• When the scan is complete make sure all the infections have "quarantine" selected in the Action box.
  
• Click on "Quarantine All" You may be asked to Restart your computer to completely remove the infections.
  
• When disinfection is completed you can click on "Copy to Clipboard".
  
• Paste the log in you next reply (CTRL+ V)

[bluecountry]

I just started in regular safe mode.
I cannot connect to the internet.
The icon in the bottom right corner, when I hover over, says:

Connection status: unknown
The dependency service or group failed to start.

[SuperDave]

Did you try re-setting your modem? Unplug it for about 30 secs.

Please download Farbar Service Scanner and run it on the computer with the issue.

• Press "Scan".
  
• It will create a log (FSS.txt) in the same directory the tool is run.
• Please copy and paste the log to your reply.

[bluecountry]

Alright, I got it up in safe mode.

I got rid of AVG and got the anti-virus recommended.
I ran CCleaner, Spywareblaster, then MBAM.

Here is the MBAM log

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 5/7/2014
Scan Time: 6:50:44 PM
Logfile:
Administrator: Yes

Version: 2.00.1.1004
Malware Database: v2014.05.07.09
Rootkit Database: v2014.03.27.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Chameleon: Disabled

OS: Windows Vista Service Pack 2
CPU: x86
File System: NTFS
User: Johnny Ola

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 287895
Time Elapsed: 23 min, 6 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Shuriken: Enabled
PUP: Warn
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)


(end)

Ran FSS

Farbar Service Scanner Version: 03-05-2014
Ran by Johnny Ola (administrator) on 07-05-2014 at 22:47:58
Running from "C:\Users\Johnny Ola\Desktop"
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86)
Boot Mode:
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Other Services:
==============


File Check:
========
C:\Windows\system32\nsisvc.dll => MD5 is legit
C:\Windows\system32\Drivers\nsiproxy.sys => MD5 is legit
C:\Windows\system32\dhcpcsvc.dll => MD5 is legit
C:\Windows\system32\Drivers\afd.sys => MD5 is legit
C:\Windows\system32\Drivers\tdx.sys => MD5 is legit
C:\Windows\system32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\system32\dnsrslvr.dll => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit


**** End of log ****

[SuperDave]

Are you still experiencing trouble accessing the internet?

[bluecountry]

Yes.  I cannot connect wirelessly unless I am in Directory Services Restore Mode.

When I sign in regularly I get told I am connected but with local access only, not Internet.  When I use the browser I get told page cannot load, no server found.

[SuperDave]

When I sign in regularly I get told I am connected but with local access only, not Internet.

I don't understand this statement. What do you mean" when I sign in regularly"?

[bluecountry]

I don't understand this statement. What do you mean" when I sign in regularly"?

When I sign in not in safe mode.

[SuperDave]

Do you mean when you boot in Normal Mode?

[bluecountry]

Yep.

[SuperDave]

The internet connection looks good. Let's have another look at it.

Please download MiniToolBox to Desktop and run it.



Checkmark the following boxes:

• Flush DNS
• Report IE Proxy Settings
• Reset IE Proxy Settings
• List content of Hosts
• List IP Configuration
• Lst Last 10 Event Viewer Errors
• List Users, Partitions and Memory Size
[/b]

Click Go and copy/paste the log (Result.txt) into your next post.

[bluecountry]

MiniToolBox by Farbar  Version: 23-01-2014
Ran by Johnny Ola (administrator) on 13-05-2014 at 22:48:21
Running from "C:\Users\Johnny Ola\Desktop"
Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86)
Boot Mode:
***************************************************************************

========================= Flush DNS: ===================================

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.
========================= Hosts content: =================================

127.0.0.1       localhost

========================= IP Configuration: ================================

Intel(R) Wireless WiFi Link 4965AGN = Wireless Network Connection (Connected)
Realtek RTL8101 Family PCI-E Fast Ethernet NIC (NDIS 6.0) = Local Area Connection (Media disconnected)
Bluetooth Personal Area Network = Local Area Connection 2 (Media disconnected)
TAP-Win32 Adapter V9 = Local Area Connection 3 (Media disconnected)


# ----------------------------------
# IPv4 Configuration
# ----------------------------------
pushd interface ipv4

reset
set global icmpredirects=enabled


popd
# End of IPv4 configuration



Windows IP Configuration

   Host Name . . . . . . . . . . . . : JohnnyOla-PC
   Primary Dns Suffix  . . . . . . . :
   Node Type . . . . . . . . . . . . : Peer-Peer
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : dc.dc.cox.net

Ethernet adapter Local Area Connection 3:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : TAP-Win32 Adapter V9
   Physical Address. . . . . . . . . : 00-FF-2D-33-78-86
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

Ethernet adapter Local Area Connection 2:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Bluetooth Personal Area Network
   Physical Address. . . . . . . . . : 00-19-C1-A2-86-7A
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter Wireless Network Connection:

   Connection-specific DNS Suffix  . : dc.dc.cox.net
   Description . . . . . . . . . . . : Intel(R) Wireless WiFi Link 4965AGN
   Physical Address. . . . . . . . . : 00-13-E8-35-44-65
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   IPv4 Address. . . . . . . . . . . : 192.168.1.106(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Lease Obtained. . . . . . . . . . : Tuesday, May 13, 2014 9:55:29 PM
   Lease Expires . . . . . . . . . . : Wednesday, May 14, 2014 9:55:33 PM
   Default Gateway . . . . . . . . . : 192.168.1.1
   DHCP Server . . . . . . . . . . . : 192.168.1.1
   DNS Servers . . . . . . . . . . . : 8.26.56.26
                                       156.154.70.22
   NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Local Area Connection:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Realtek RTL8101 Family PCI-E Fast Ethernet NIC (NDIS 6.0)
   Physical Address. . . . . . . . . : 00-13-A9-F0-BC-19
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 6:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : isatap.{20DA44BE-98A1-475D-B8AC-88DF3AD26CDD}
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 7:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
   Physical Address. . . . . . . . . : 02-00-54-55-4E-01
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv6 Address. . . . . . . . . . . : 2001:0:5ef5:79fb:24ab:1277:3f57:fe95(Preferred)
   Link-local IPv6 Address . . . . . : fe80::24ab:1277:3f57:fe95%12(Preferred)
   Default Gateway . . . . . . . . . : ::
   NetBIOS over Tcpip. . . . . . . . : Disabled

Tunnel adapter Local Area Connection* 9:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : isatap.dc.dc.cox.net
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 13:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : 6TO4 Adapter
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 14:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : isatap.{20114897-748B-4A11-BCC9-F0E93AEFEC33}
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 15:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : isatap.{2D337886-3709-4D31-AB17-1C63C566119D}
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 17:

   Connection-specific DNS Suffix  . : dc.dc.cox.net
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter #7
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::5efe:192.168.1.106%22(Preferred)
   Default Gateway . . . . . . . . . :
   DNS Servers . . . . . . . . . . . : 8.26.56.26
                                       156.154.70.22
   NetBIOS over Tcpip. . . . . . . . : Disabled
Server:  ns1.recursive.dns.com
Address:  8.26.56.26

Name:    google.com.dc.dc.cox.net
Addresses:  fe80:1::225:90ff:fe19:4b12
     92.242.144.50



Pinging google.com [173.194.116.100] with 32 bytes of data:

Reply from 173.194.116.100: bytes=32 time=98ms TTL=51

Reply from 173.194.116.100: bytes=32 time=99ms TTL=51



Ping statistics for 173.194.116.100:

    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 98ms, Maximum = 99ms, Average = 98ms

Server:  ns1.recursive.dns.com
Address:  8.26.56.26

DNS request timed out.
    timeout was 2 seconds.
Name:    yahoo.com.dc.dc.cox.net
Address:  fe80:1::225:90ff:fe19:4b12



Pinging yahoo.com [206.190.36.45] with 32 bytes of data:

Reply from 206.190.36.45: bytes=32 time=106ms TTL=51

Reply from 206.190.36.45: bytes=32 time=103ms TTL=51



Ping statistics for 206.190.36.45:

    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 103ms, Maximum = 106ms, Average = 104ms



Pinging 127.0.0.1 with 32 bytes of data:

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128



Ping statistics for 127.0.0.1:

    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 0ms, Maximum = 0ms, Average = 0ms

===========================================================================
Interface List
 17 ...00 ff 2d 33 78 86 ...... TAP-Win32 Adapter V9
 11 ...00 19 c1 a2 86 7a ...... Bluetooth Personal Area Network
  9 ...00 13 e8 35 44 65 ...... Intel(R) Wireless WiFi Link 4965AGN
  8 ...00 13 a9 f0 bc 19 ...... Realtek RTL8101 Family PCI-E Fast Ethernet NIC (NDIS 6.0)
  1 ........................... Software Loopback Interface 1
 10 ...00 00 00 00 00 00 00 e0  isatap.{20DA44BE-98A1-475D-B8AC-88DF3AD26CDD}
 12 ...02 00 54 55 4e 01 ...... Teredo Tunneling Pseudo-Interface
 15 ...00 00 00 00 00 00 00 e0  isatap.dc.dc.cox.net
 16 ...00 00 00 00 00 00 00 e0  6TO4 Adapter
 19 ...00 00 00 00 00 00 00 e0  isatap.{20114897-748B-4A11-BCC9-F0E93AEFEC33}
 18 ...00 00 00 00 00 00 00 e0  isatap.{2D337886-3709-4D31-AB17-1C63C566119D}
 22 ...00 00 00 00 00 00 00 e0  Microsoft ISATAP Adapter #7
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      192.168.1.1    192.168.1.106     25
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
      192.168.1.0    255.255.255.0         On-link     192.168.1.106    281
    192.168.1.106  255.255.255.255         On-link     192.168.1.106    281
    192.168.1.255  255.255.255.255         On-link     192.168.1.106    281
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link     192.168.1.106    281
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link     192.168.1.106    281
===========================================================================
Persistent Routes:
  None

IPv6 Route Table
===========================================================================
Active Routes:
 If Metric Network Destination      Gateway
 12     18 ::/0                     On-link
  1    306 ::1/128                  On-link
 12     18 2001::/32                On-link
 12    266 2001:0:5ef5:79fb:24ab:1277:3f57:fe95/128
                                    On-link
 12    266 fe80::/64                On-link
 22    286 fe80::5efe:192.168.1.106/128
                                    On-link
 12    266 fe80::24ab:1277:3f57:fe95/128
                                    On-link
  1    306 ff00::/8                 On-link
 12    266 ff00::/8                 On-link
===========================================================================
Persistent Routes:
  None

========================= Event log errors: ===============================

Application errors:
==================
Error: (05/13/2014 03:00:11 AM) (Source: System Restore) (User: )
Description: Failed to create restore point on volume (Process = C:\Windows\system32\svchost.exe -k netsvcs; Descripton = Windows Update; Hr = 0x8007043c).

Error: (05/13/2014 00:00:06 AM) (Source: System Restore) (User: )
Description: The scheduled restore point could not be created.  Additional information: (0x8007043c).

Error: (05/13/2014 00:00:06 AM) (Source: System Restore) (User: )
Description: Failed to create restore point on volume (Process = C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Descripton = Scheduled Checkpoint; Hr = 0x8007043c).

Error: (05/12/2014 05:54:30 PM) (Source: System Restore) (User: )
Description: The scheduled restore point could not be created.  Additional information: (0x8007043c).

Error: (05/12/2014 05:54:30 PM) (Source: System Restore) (User: )
Description: Failed to create restore point on volume (Process = C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Descripton = Scheduled Checkpoint; Hr = 0x8007043c).

Error: (05/12/2014 02:24:19 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 6130

Error: (05/12/2014 02:24:19 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 6130

Error: (05/12/2014 02:24:19 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (05/12/2014 02:24:18 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 5132

Error: (05/12/2014 02:24:18 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 5132


System errors:
=============
Error: (05/13/2014 03:02:30 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT AUTHORITY)
Description: 0x80070103TOSHIBA - Other hardware - Bluetooth USB Controller (ALPS/UGPZ6){23811CBC-9FDC-4A6A-92E1-B1F95748F8D2}100

Error: (05/12/2014 01:06:27 PM) (Source: BROWSER) (User: )
Description: The browser service has failed to retrieve the backup list too many times on transport \Device\NetBT_Tcpip_{D83D5627-FB49-437C-B3E7-C61C85550B27}.
The backup browser is stopping.

Error: (05/12/2014 01:01:37 PM) (Source: Service Control Manager) (User: )
Description: spldr

Error: (05/12/2014 01:00:36 PM) (Source: DCOM) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)

Error: (05/12/2014 01:00:15 PM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058

Error: (05/12/2014 01:00:15 PM) (Source: Service Control Manager) (User: )
Description: Software Licensing%%2147942402

Error: (05/12/2014 01:00:15 PM) (Source: Service Control Manager) (User: )
Description: Link-Layer Topology Discovery Responder%%646

Error: (05/12/2014 01:00:15 PM) (Source: Service Control Manager) (User: )
Description: Link-Layer Topology Discovery Mapper I/O Driver%%646

Error: (05/12/2014 01:00:15 PM) (Source: Service Control Manager) (User: )
Description: COMODO Internet Security Helper Service%%1053

Error: (05/12/2014 01:00:15 PM) (Source: Service Control Manager) (User: )
Description: 30000COMODO Internet Security Helper Service


Microsoft Office Sessions:
=========================
Error: (12/17/2013 00:30:59 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 366 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (12/03/2013 02:43:04 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 50609 seconds with 300 seconds of active time.  This session ended with a crash.

Error: (12/02/2013 02:28:54 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 153 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (11/26/2013 04:13:53 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 1740 seconds with 900 seconds of active time.  This session ended with a crash.

Error: (11/26/2013 03:44:44 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 210 seconds with 180 seconds of active time.  This session ended with a crash.

Error: (11/25/2013 11:34:12 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 610 seconds with 180 seconds of active time.  This session ended with a crash.

Error: (11/23/2013 04:19:10 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 2625 seconds with 1980 seconds of active time.  This session ended with a crash.

Error: (11/23/2013 03:35:11 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 87194 seconds with 10680 seconds of active time.  This session ended with a crash.

Error: (11/22/2013 03:21:43 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 3734 seconds with 2760 seconds of active time.  This session ended with a crash.

Error: (11/20/2013 09:55:18 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 1181 seconds with 600 seconds of active time.  This session ended with a crash.


CodeIntegrity Errors:
===================================
  Date: 2014-05-07 18:39:58.479
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-05-07 18:39:58.193
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-05-07 18:39:57.951
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-05-07 18:39:57.676
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-05-07 18:39:50.458
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-05-07 18:39:50.184
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-05-07 18:39:49.848
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-05-07 18:39:49.569
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-05-04 18:05:16.364
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\AVG\AVG2014\Drivers\avgidshx.sys because the set of per-page image hashes could not be found on the system.

  Date: 2014-05-04 18:05:16.037
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\AVG\AVG2014\Drivers\avgidshx.sys because the set of per-page image hashes could not be found on the system.


========================= Memory info: ===================================

Percentage of memory in use: 66%
Total physical RAM: 2037.69 MB
Available physical RAM: 689.89 MB
Total Pagefile: 4310.64 MB
Available Pagefile: 2800.44 MB
Total Virtual: 2047.88 MB
Available Virtual: 1970.78 MB

========================= Partitions: =====================================

1 Drive c: () (Fixed) (Total:290.97 GB) (Free:126.28 GB) NTFS
4 Drive f: (The GIS 20 Digital Supplement) (CDROM) (Total:0.28 GB) (Free:0 GB) UDF
5 Drive g: (USB20FD) (Removable) (Total:14.96 GB) (Free:5.52 GB) FAT32

========================= Users: ========================================

User accounts for \\JOHNNYOLA-PC

Administrator            ASPNET                   Guest                   
Johnny Ola               


**** End of log ****