Firefox Problems - Untrusted Websites

[JDBush61]

Hi Linda,

Not sure if this will help you, or not, yet I checked Family Search as follows:

Browser 1) PaleMoon 25.8.1 (x86 en-US)
Browser 2) Mozilla Firefox 43.0.2 (x86 en-US)

Both browsers brought me to the official page (please see the attached photo).

My set-up: Windows 7 64 bit. Not sure if my browsers are 32 or 64 bit. Corrine will probably know.

Hope you get things worked out, and Happy Holidays.

John

[satrow]

It looks like 'something' is running interference on your PC, Linda. The familysearch.org site is not correctly detecting/sniffing your browser and version, which appears to be fine for me using both Firefox and Pale Moon x64 versions.

What Extensions are installed ((Alt) > Tools > Add-ons > Extensions) in Firefox?

Is Page Style set to Basic ((Alt) > View > Page Style) not No Style?

What security/privacy software do you have installed and are they all set to their defaults?

I don't recall the last time a website suggested that I should switch to an x86 browser, if at all! The main problem with x64 browsers is that many 3rd party plugins are only written in an x86 version (current x64 browser market share is presumably too small for them to spend time/resources creating/testing x64 versions) - this would apply to a relatively small % of sites that rely on those plugins.

You do download your software from the makers site, not from some results from searching for them?

[LindaEllis]

Wow, a lot to respond to here.  As far as software, the person who set up my refurbished computer put in Office 2007 by making a phone call and he put it on that way.  I had Office 2007 before that on my Windows XP and he set that up too and I was able to use Firefox on Windows XP, but not the most recent version since I changed compters to Windows 7 on Dec. 4.  I cannot find any add ons at all listed for Firefox.  I don't know about style.  I just installed Firefox and made no changes to it, so whatever its default is would be there.  I have ESETNOD32, malwarebytes and winpatrol.   I didn't change any settings so I assume they are at their defaults. With Firefox, I can bring up some websites that I use like Ebay, facebook, Wordpress Blog that I have, Find A Grave, but I cannot bring up my Blogger Blog or blogger or Familysearch.org at all in Firefox now. 

In IE11 and Chrome I can bring up familysearch but cannot view the documents that are there to view.  In IE11 and Chrome, I can bring up and use my blogger blog okay. 

So, I have problems with all of these browsers one way or another. 

[JDBush61]

I don't recall the last time a website suggested that I should switch to an x86 browser, if at all!

So, are you suggesting that I'm doing something wrong? On my Sony Vaio laptop (2010 model), both browsers state that they are "x86 en-US". My Sony is Win 7 64 bit. Something amiss, maybe? Should I change something?

Sorry for somewhat derailing this thread.

(typed from my MacBook Plus)

[LindaEllis]

Thanking everyone who responded so far with meaningful suggestions, please know how much I appreciate your suggestions and I am working on trying them all.  Thank you. 

[v_v]

Linda,

Just so that you know that you are not alone, I have had this same problem at work with both Firefox and SeaMonkey (both browsers have the same underlying Gecko engine).  I never have been able to get it resolved.  At work we use Windows 7 and Internet Explorer 11 (IE 11), along with the McAfee Enterprise anti-everything suite.  I tried installing both Firefox and SeaMonkey.  I was able to install them (even though I did not have administrative power).  However I continually got that untrusted web site message for virtually every web site.  Even when I set exceptions that message would still return so I abandoned those browsers at work.  However both IE 11 and Google Chrome work with no problems.

At home I have Windows 7 on my mother's old laptop and both Firefox and SeaMonkey work just fine, as does Pale Moon.  So the issue seems to be situation specific, meaning that it is a matter of how everything is set up in any given situation.  Both your computer and my work situation apparently have some sort of problem, but there is no inherent problem between Firefox and Windows 7.

I am not the most knowledgeable person/helper here but here are some thoughts, and maybe these thoughts will trigger some ideas from more knowledgeable helpers.  I think that satrow has correctly identified the problem,

It looks like 'something' is running interference on your PC, Linda. The familysearch.org site is not correctly detecting/sniffing your browser and version, which appears to be fine for me using both Firefox and Pale Moon x64 versions.

So the question is what is causing this problem.  Make sure that you are working from an administrator account on your computer

1.  Let's start with a clean slate, please download and install both the 32 bit version of Firefox and also of Pale Moon:  " https://www.mozilla.org/en-US/firefox/new/ " and " http://www.palemoon.org/ ".   (I am avoiding the 64 bit versions because of the additional issues that everyone else has raised.)

2.  What firewall are you using?  Depending on your answer examine in the firewall whether the two browsers are completely allowed or filtered or ? ? ?.  (You should probably do the same with IE 11 and Chrome.)  Report what you find.

3.  Using Firefox go to:  " https://get.adobe.com/flashplayer/ ".  Install the latest version of flash.  MAKE SURE THAT YOU UNCHECK THE OPTIONAL OFFER TO INSTALL THE "FREE MCAFEE SECURITY SCAN PLUS."  You do not need that.

This flash installation will work for both Firefox and Palemoon.

(By the way you should also go to this same page using both IE 11 and Chrome, and follow the same procedure.

4.  Using Firefox go to " https://get.adobe.com/shockwave/ " and download and install.

5.  When all of the above installations are complete, reboot your computer (just playing it safe, I do not know whether this is necessary or not).

6.  Perhaps again examine what your firewall says for each of your browsers, whether they are allowed, filtered, or ? ? ?, and report what you find.

7.  Another something to check is the time and date on your computer.  This should not be a problem in Windows 7 but there are some reports on the internet that this could be causing the same problem.  If necessary correct the time and date.

8.  Now using Firefox, Palemoon, IE 11, and Chrome try all the web sites that you want and report what happens.

9.  Patience and perseverance!

v_v

[DR M]

First of all, I'm not a technician, just a computer owner.

Maybe you could try what Mozilla says about the issue, particularly the paragraph under the title The certificate is not trusted because the issuer certificate is unknown :  https://support.mozilla.org/en-US/kb/connection-untrusted-error-message

Good luck, and Merry Christmas!  :)

[LindaEllis]

Thanks DR M and v_v for replying.  I hope I am writing in the correct box here to reply to you.  I will have to print out your instructions as there sure are a lot of them. 

I have no idea if I am running this computer as an administrator, so I would need steps on how to learn that.  Also, I use ESETNOD32 antivirus and Malwarebytes as well as Winpatrol. I guess you mean ESETNOD32.  I have no idea how to find out how it filters or doesn't filter browsers as I've never heard of it or done that.  That will take me some time to figure out.  I never had any of this kind of trouble with Windows XP since 2003!  I wonder also about my Gateway 2-Wire Router 1000SW that I got in 2003 that I am still using.  I wonder also about speeds if they are fast enough which could impact my viewing those images that don't come up. 

So, I have a lot to try to do yet. 

DR M, I did add in Familsearch in the box where you add it and that is when I got after that the goofy looking pop up I have posted here earlier; not the untrusted message but the one that looks like it is an outline or something, but still not the website itself.  Why some sites are working in Firefox apparently fine and others are not does baffle me.  So, I'll print everything out and see what I can do.  I am alone here trying to do this.  I don't have anyone else to help.  I appreciate it everyone's time so much.

v-v, I am sorry about your problems too, yes there is a comfort in knowing you are not alone.  A person shouldn't have to be so unhappy trying to use their computer! 

Merry Christmas to everyone here! 

[LindaEllis]

I am adding a couple of new screen prints that may or may not shed light on my problem.  These are from Firefox.  Thank you.   

[v_v]

Linda,

1.  To determine the nature of your account take the following steps:

a.  Click the Start button in the bottom left hand corner of your desktop.  There will be a pop-up screen.
b.  On that screen click "Control Panel" (it is on the right side).
c.  On the next screen find and click "User Accts."
d.  This will give a screen that tells you what kind of account type you are using.  Report what you find.

In Windows 7 there seem to be "Administrator" and "Standard" accounts.  Standard accounts are more limited for security purposes.  It is usually recommended to use standard accounts for mostly everyday tasks and work.  But when changes, software installations, etc, are necessary then these changes, installations, etc, should be done using an administrator account.


2.  While still in the "Control Panel" find and click "Windows Firewall."  Report what the Windows Firewall screen says, including any "colors".


3.  I do not have ESET NOD32.  Are you using just the antivirus aspect only or do you have the suite which includes a personal firewall and other possible programs?  If you do not know you may need to click the Start button, find ESET amongst your programs, and open something that may serve as an ESET control center.  Something in that control center may be able to tell you whether you are using an ESET firewall or not.  I see little icons with an "E" on your taskbar at the bottom.  I suspect that by right-clicking on one of the icons you will be given a choice to open some kind of control center for ESET.


4.  The "familysearch certificate" that you posted has some interesting and probably useful information but I am not sure what to make of it.  It indicates that the certificate is issued by "ESET SSL Filter CA", but then Firefox is saying that this issuer is unknown.

On my Windows 7 computer when I pull up the certificate in Firefox, the certificate is issued by "DigiCert SHA2 High Assurance Server CA".  On that same screen the Organizational Unit (OU) is listed as "www.digicert.com".  In your posted image the Organizational Unit (OU) says "<Not Part of Certificate>.  I do not know what this all means.  But if I had to guess I would say that there is an issue here between ESET and Firefox for this particular web site.


5.  At some point what may become necessary is to de-activate ESET and to use some other anti.... software to experiment.  But I would not do so yet.  If and when that time comes you will need to use some other antivirus as a temporary replacement.


6.  Your Flash player plugin looks up to date.  But I see no entry for Shockwave.  Even though the Flash Player is labeled "Shockwave Flash" the Shockwave player is different.  The current version is 12.2.2.172.  So I would get the current version at:  " https://get.adobe.com/shockwave/ ".

v_v

[Corrine]

6.  Your Flash player plugin looks up to date.  But I see no entry for Shockwave.  Even though the Flash Player is labeled "Shockwave Flash" the Shockwave player is different.  The current version is 12.2.2.172.  So I would get the current version at:  " https://get.adobe.com/shockwave/ ".

Personally, I wouldn't bother with Shockwave. It has never been installed on this computer.  It is very seldom used now and certainly wouldn't be needed for sites like FamilySearch.

Linda, if you would like to post logs, perhaps that will provide some insight.  If you do so, because they are so long, expect that you'll need to post two separate replies for the logs to post completely.  The instructions are as follows:

Please download Farbar Recovery Scan Tool (FRST) and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• Right click to run as administrator. When the tool opens click Yes to disclaimer.
  
• Press Scan button.
  
• The first time FRST is run, it will produce two logs in the same directory the tool is run from -- FRST.txt and (Addition.txt.
  
• Please copy/paste both logs in your reply.
  

[LindaEllis]

Okay, wow, v_v and Corrine. 

I don't know how to normally post 'logs' as I don't know where to find them.  For me it is easier to post screen prints of what I see to reply to the requests here for the steps for me to be taking. 

I installed that Shockwave before I saw your comments, Corrine.  I am writing here using Chrome, so I will uninstall that.  I tried to do the Shockwave in Firefox and was taken to some 'creative marketing' site anyway, so I don't think that it was installed there.  So, now I guess I have to find the first one an uninstall it. 

I have a couple more screen prints here that I think will answer some of the questions regarding the administrator account and the firewall. 

[LindaEllis]

Hi Corrine,

Okay, I did that Farbar Recovery Scan tool and here are the results copied from it:

Additional scan result of Farbar Recovery Scan Tool (x64) Version:23-12-2015
Ran by Customer (2015-12-24 19:10:49)
Running from C:\Users\Customer\Downloads
Windows 7 Home Premium Service Pack 1 (X64) (2009-10-27 22:42:09)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3311552913-1744306017-1404303799-500 - Administrator - Disabled)
Customer (S-1-5-21-3311552913-1744306017-1404303799-1001 - Administrator - Enabled) => C:\Users\Customer
Guest (S-1-5-21-3311552913-1744306017-1404303799-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3311552913-1744306017-1404303799-1002 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: ESET NOD32 Antivirus 9.0.318.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET NOD32 Antivirus 9.0.318.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.009.20079 - Adobe Systems Incorporated)
Adobe Flash Player 20 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 20.0.0.228 - Adobe Systems Incorporated)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.235 - Adobe Systems Incorporated)
Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version:  - )
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version:  - )
Canon MP Navigator EX 4.0 (HKLM-x32\...\MP Navigator EX 4.0) (Version:  - )
Canon MP280 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP280_series) (Version:  - )
Canon MP280 series User Registration (HKLM-x32\...\Canon MP280 series User Registration) (Version:  - )
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version:  - )
Canon Solution Menu EX (HKLM-x32\...\CanonSolutionMenuEX) (Version:  - )
Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6514.5001 - Microsoft Corporation)
DisplayLink Core Software (HKLM\...\{C66D573C-A70D-4F11-AA1C-5423340B951F}) (Version: 7.0.43526.0 - DisplayLink Corp.)
DisplayLink Graphics (HKLM\...\{8F86C262-8746-415C-9E4D-CD0E2B42C61B}) (Version: 7.0.43577.0 - DisplayLink Corp.)
Dropbox (HKLM-x32\...\Dropbox) (Version: 3.12.6 - Dropbox, Inc.)
Dropbox Update Helper (x32 Version: 1.3.27.77 - Dropbox, Inc.) Hidden
ESET NOD32 Antivirus (HKLM\...\{60853F5E-E6F5-4A34-BBCD-C09D49BB5E64}) (Version: 9.0.318.0 - ESET, spol. s r.o.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 47.0.2526.106 - Google Inc.)
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.15.10.1930 - Intel Corporation)
Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Mozilla Firefox 43.0.2 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 43.0.2 (x86 en-US)) (Version: 43.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.2 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 7 Essentials (HKLM-x32\...\{66EBD70F-A42C-475F-AEDF-277378151033}) (Version: 7.02.9491 - Nero AG)
Personal Ancestral File 5 (HKLM-x32\...\{D94A8E22-DF2B-4107-9E51-608A60A7671D}) (Version:  - )
Personal Ancestral File Companion 5.5 (HKLM-x32\...\{91AFACB3-CA46-4C1E-AF2D-F72EE0B112E4}) (Version: 5.5 - Intellectual Reserve Inc.)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9.141.259 - Google, Inc.)
RootsMagic 6.3.3.2 (HKLM-x32\...\{94433E0D-764C-4964-AD0B-EC46BCA7E68E}_is1) (Version: RootsMagic 6.3.3.2 - RootsMagic, Inc.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
WinPatrol (HKLM-x32\...\{6A206A04-6BC1-411B-AA04-4E52EDEEADF2}) (Version: 33.6.2015.18 - Ruiware)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Restore Points =========================

15-12-2015 12:20:02 Windows Update
16-12-2015 15:45:12 RESTORE TO DECEBER 16 2015
18-12-2015 21:38:01 Windows Update
22-12-2015 18:06:31 Windows Update
22-12-2015 18:52:27 Removed Java 8 Update 66

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 21:34 - 2009-06-10 16:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {00924C49-F973-4840-BE95-6E95509A3AB8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-15] (Google Inc.)
Task: {11CA0F67-6FCF-4AF0-99B9-38E9B4B096D3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-15] (Google Inc.)
Task: {1D751636-3208-457D-BEC2-F0CEAA3056B0} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-12-04] (Dropbox, Inc.)
Task: {35702DDA-50BF-41EB-80C4-F845EE254486} - System32\Tasks\{4D80020E-0891-4A5A-974F-A3F26942D980} => Firefox.exe
Task: {45B74B32-2DBA-499A-952C-3CDBA01843FA} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-12-04] (Dropbox, Inc.)
Task: {6325AD98-CA90-4010-A108-96ADEF3EA811} - System32\Tasks\Microsoft\Windows\MobilePC\DisplayLink TMM Control
Task: {896E5C73-799D-47E0-8478-B9E6A1F1E11E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-10] (Adobe Systems Incorporated)
Task: {DD7A6A7C-E102-4B05-A141-78C9886E0819} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2015-12-04 11:18 - 2010-04-05 14:55 - 00116104 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
2015-12-04 16:12 - 2015-12-21 14:42 - 00034768 _____ () C:\Program Files (x86)\Dropbox\Client\_multiprocessing.pyd
2015-12-23 17:23 - 2015-12-21 14:42 - 00019408 _____ () C:\Program Files (x86)\Dropbox\Client\faulthandler.pyd
2015-12-23 17:23 - 2015-12-21 19:22 - 00022848 _____ () C:\Program Files (x86)\Dropbox\Client\Crypto.Random.OSRNG.winrandom.pyd
2015-12-23 17:23 - 2015-12-21 19:22 - 00023352 _____ () C:\Program Files (x86)\Dropbox\Client\Crypto.Util._counter.pyd
2015-12-23 17:23 - 2015-12-21 19:22 - 00042296 _____ () C:\Program Files (x86)\Dropbox\Client\Crypto.Cipher._AES.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00116688 _____ () C:\Program Files (x86)\Dropbox\Client\pywintypes27.dll
2015-12-04 16:12 - 2015-12-21 14:42 - 00093640 _____ () C:\Program Files (x86)\Dropbox\Client\_ctypes.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00018376 _____ () C:\Program Files (x86)\Dropbox\Client\select.pyd
2015-12-04 16:12 - 2015-12-21 19:22 - 00019760 _____ () C:\Program Files (x86)\Dropbox\Client\tornado.speedups.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00105928 _____ () C:\Program Files (x86)\Dropbox\Client\win32api.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00392144 _____ () C:\Program Files (x86)\Dropbox\Client\pythoncom27.dll
2015-12-04 16:12 - 2015-12-21 19:22 - 00381752 _____ () C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00692688 _____ () C:\Program Files (x86)\Dropbox\Client\unicodedata.pyd
2015-12-23 17:23 - 2015-12-21 19:22 - 00020816 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00109520 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_backend.pyd
2015-12-23 17:23 - 2015-12-21 19:22 - 01734984 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd
2015-12-23 17:23 - 2015-12-21 19:22 - 00020808 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd
2015-12-04 16:12 - 2015-12-21 19:22 - 00020800 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_python_x66cf7a7cx17a72769.pyd
2015-12-04 16:12 - 2015-12-21 19:22 - 00021840 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_unicode_environ_win32_x8bf8e68bx9968e850.pyd
2015-12-23 17:23 - 2015-12-21 19:22 - 00038696 _____ () C:\Program Files (x86)\Dropbox\Client\fastpath.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00024528 _____ () C:\Program Files (x86)\Dropbox\Client\win32event.pyd
2015-12-08 19:58 - 2015-12-21 14:42 - 00020936 _____ () C:\Program Files (x86)\Dropbox\Client\mmapfile.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00114640 _____ () C:\Program Files (x86)\Dropbox\Client\win32security.pyd
2015-12-04 16:12 - 2015-12-21 19:22 - 00021320 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_pywin_kernel32_xde9e4433x360333f0.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00124880 _____ () C:\Program Files (x86)\Dropbox\Client\win32file.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00030160 _____ () C:\Program Files (x86)\Dropbox\Client\win32pipe.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00043472 _____ () C:\Program Files (x86)\Dropbox\Client\win32process.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00175560 _____ () C:\Program Files (x86)\Dropbox\Client\win32gui.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00028616 _____ () C:\Program Files (x86)\Dropbox\Client\win32ts.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32clipboard.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00048592 _____ () C:\Program Files (x86)\Dropbox\Client\win32service.pyd
2015-12-08 19:58 - 2015-12-21 19:22 - 00024392 _____ () C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd
2015-12-23 17:23 - 2015-12-21 14:42 - 00036296 _____ () C:\Program Files (x86)\Dropbox\Client\librsync.dll
2015-12-04 16:12 - 2015-12-21 14:42 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32profile.pyd
2015-12-23 17:23 - 2015-12-21 19:22 - 00117056 _____ () C:\Program Files (x86)\Dropbox\Client\breakpad.client.windows.handler.pyd
2015-12-04 16:12 - 2015-12-21 19:22 - 00023376 _____ () C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00134608 _____ () C:\Program Files (x86)\Dropbox\Client\_elementtree.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00134088 _____ () C:\Program Files (x86)\Dropbox\Client\pyexpat.pyd
2015-12-23 17:23 - 2015-12-21 14:42 - 00240584 _____ () C:\Program Files (x86)\Dropbox\Client\jpegtran.pyd
2015-12-23 17:23 - 2015-12-21 19:22 - 00020280 _____ () C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.pyd
2015-12-04 16:12 - 2015-12-21 19:22 - 00052024 _____ () C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.pyd
2015-12-23 17:23 - 2015-12-21 19:22 - 00021304 _____ () C:\Program Files (x86)\Dropbox\Client\Crypto.Util.strxor.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00350152 _____ () C:\Program Files (x86)\Dropbox\Client\winxpgui.pyd
2015-12-23 17:23 - 2015-12-21 19:22 - 00084792 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL
2015-12-04 16:12 - 2015-12-21 19:22 - 01826608 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00083912 _____ () C:\Program Files (x86)\Dropbox\Client\sip.pyd
2015-12-04 16:12 - 2015-12-21 19:22 - 03891504 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.pyd
2015-12-04 16:12 - 2015-12-21 19:22 - 01950000 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.pyd
2015-12-04 16:12 - 2015-12-21 19:22 - 00519984 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.pyd
2015-12-04 16:12 - 2015-12-21 19:22 - 00133936 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.pyd
2015-12-04 16:12 - 2015-12-21 19:22 - 00225080 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd
2015-12-04 16:12 - 2015-12-21 19:22 - 00207672 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.pyd
2015-12-04 16:12 - 2015-12-21 19:22 - 00024904 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_wpad_proxy_win_x752e3d61xdcfdcc84.pyd
2015-12-04 16:12 - 2015-12-21 19:22 - 00486704 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.pyd
2015-12-04 16:12 - 2015-12-21 19:22 - 00357680 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00019920 _____ () C:\Program Files (x86)\Dropbox\Client\QtQuick.2\qtquick2plugin.dll
2015-12-04 16:12 - 2015-12-21 14:42 - 00786904 _____ () C:\Program Files (x86)\Dropbox\Client\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-12-04 16:12 - 2015-12-21 14:42 - 00063448 _____ () C:\Program Files (x86)\Dropbox\Client\QtQuick\Layouts\qquicklayoutsplugin.dll
2015-12-04 16:12 - 2015-12-21 14:42 - 00019408 _____ () C:\Program Files (x86)\Dropbox\Client\QtQuick\Window.2\windowplugin.dll
2015-12-04 16:12 - 2015-12-21 14:42 - 00060880 _____ () C:\Program Files (x86)\Dropbox\Client\win32print.pyd
2015-12-24 14:12 - 2015-12-24 07:46 - 16792256 _____ () C:\Users\Customer\AppData\Local\Google\Chrome\User Data\PepperFlash\20.0.0.267\pepflashplayer.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRkrn => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRSVC => ""="Service"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3311552913-1744306017-1404303799-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Customer\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 172.16.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: NBService => 3
MSCONFIG\Services: NMIndexingService => 3
MSCONFIG\Services: WerSvc => 3
MSCONFIG\Services: WMPNetworkSvc => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Install Webroot FF RunOnce.lnk => C:\Windows\pss\Install Webroot FF RunOnce.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Install Webroot IE RunOnce.lnk => C:\Windows\pss\Install Webroot IE RunOnce.lnk.CommonStartup
MSCONFIG\startupreg: BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} => "C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe"
MSCONFIG\startupreg: Logitech Download Assistant => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{D1C88B61-56D3-4976-BA66-A25546C123EC}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{94C72EB5-F739-41B5-8BD8-42D4E2A14DDC}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
FirewallRules: [{32183950-32E0-4F20-9998-9D3631BF4561}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{8E07D87D-C70E-42DF-BEF6-2CC635BD7CFF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Faulty Device Manager Devices =============

Name: PCI Serial Port
Description: PCI Serial Port
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI Simple Communications Controller
Description: PCI Simple Communications Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (12/23/2015 06:16:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: GWXUX.exe, version: 6.3.9600.18064, time stamp: 0x56042d8f
Faulting module name: ntdll.dll, version: 6.1.7601.19045, time stamp: 0x56259295
Exception code: 0xc0000005
Fault offset: 0x000000000004ac04
Faulting process id: 0x1e0
Faulting application start time: 0xGWXUX.exe0
Faulting application path: GWXUX.exe1
Faulting module path: GWXUX.exe2
Report Id: GWXUX.exe3

Error: (12/07/2015 12:57:25 PM) (Source: MsiInstaller) (EventID: 1024) (User: LINDAJEANLIMESE)
Description: Product: Adobe Acrobat Reader DC - Update '{AC76BA86-7AD7-0000-2550-AC0F094E6F00}' could not be installed. Error code 1625. Windows Installer can create logs to help troubleshoot issues with installing software packages. Use the following link for instructions on turning on logging support: http://go.microsoft.com/fwlink/?LinkId=23127

Error: (12/04/2015 12:00:44 PM) (Source: MsiInstaller) (EventID: 1024) (User: LINDAJEANLIMESE)
Description: Product: Compatibility Pack for the 2007 Office system - Update '{1D53FB73-9826-4541-B2E0-A239C6EBA718}' could not be installed. Error code 1642. Windows Installer can create logs to help troubleshoot issues with installing software packages. Use the following link for instructions on turning on logging support: http://go.microsoft.com/fwlink/?LinkId=23127

Error: (12/04/2015 11:18:12 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Dependent Assembly Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (12/04/2015 11:18:12 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Dependent Assembly Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (10/28/2015 04:46:16 AM) (Source: MsiInstaller) (EventID: 11935) (User: NT AUTHORITY)
Description: Product: MSXML 4.0 SP2 (KB973688) -- Error 1935. An error occured during the installation of assembly component {7B2B4EA5-1028-B7E6-A06B-D6B9ABF34537}. HRESULT: 0x80070BC9. assembly interface: IAssemblyCacheItem, function: Commit, assembly name: Microsoft.MSXML2,type="win32",version="4.20.9876.0",publicKeyToken="6bd6b9abf345378f",processorArchitecture="x86"

Error: (10/28/2015 02:36:12 AM) (Source: MsiInstaller) (EventID: 11935) (User: NT AUTHORITY)
Description: Product: MSXML 4.0 SP2 (KB954430) -- Error 1935. An error occured during the installation of assembly component {7B30B69B-0E6C-B7E0-A06B-D6B9ABF34537}. HRESULT: 0x80070BC9. assembly interface: IAssemblyCacheItem, function: Commit, assembly name: Microsoft.MSXML2,type="win32",version="4.20.9870.0",publicKeyToken="6bd6b9abf345378f",processorArchitecture="x86"

Error: (10/27/2015 08:53:46 PM) (Source: MsiInstaller) (EventID: 11935) (User: NT AUTHORITY)
Description: Product: MSXML 4.0 SP2 (KB973688) -- Error 1935. An error occured during the installation of assembly component {7B2B4EA5-1028-B7E6-A06B-D6B9ABF34537}. HRESULT: 0x80070BC9. assembly interface: IAssemblyCacheItem, function: Commit, assembly name: Microsoft.MSXML2,type="win32",version="4.20.9876.0",publicKeyToken="6bd6b9abf345378f",processorArchitecture="x86"

Error: (10/27/2015 08:07:33 PM) (Source: MsiInstaller) (EventID: 11935) (User: NT AUTHORITY)
Description: Product: MSXML 4.0 SP2 (KB954430) -- Error 1935. An error occured during the installation of assembly component {7B30B69B-0E6C-B7E0-A06B-D6B9ABF34537}. HRESULT: 0x80070BC9. assembly interface: IAssemblyCacheItem, function: Commit, assembly name: Microsoft.MSXML2,type="win32",version="4.20.9870.0",publicKeyToken="6bd6b9abf345378f",processorArchitecture="x86"

Error: (10/27/2009 06:33:24 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 4107) (User: )
Description: Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.


System errors:
=============
Error: (12/24/2015 06:47:23 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 43. The internal error state is 252.

Error: (12/24/2015 06:44:25 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 43. The internal error state is 252.

Error: (12/24/2015 06:44:24 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 43. The internal error state is 252.

Error: (12/24/2015 06:41:31 PM) (Source: Schannel) (EventID: 4102) (User: NT AUTHORITY)
Description: A fatal error occurred when attempting to access the SSL server credential private key. The error code returned from the cryptographic module is 0x8009030d. The internal error state is 10001.

Error: (12/24/2015 06:41:31 PM) (Source: Schannel) (EventID: 4102) (User: NT AUTHORITY)
Description: A fatal error occurred when attempting to access the SSL server credential private key. The error code returned from the cryptographic module is 0x8009030d. The internal error state is 10001.

Error: (12/24/2015 05:35:35 PM) (Source: Schannel) (EventID: 4102) (User: NT AUTHORITY)
Description: A fatal error occurred when attempting to access the SSL server credential private key. The error code returned from the cryptographic module is 0x8009030d. The internal error state is 10001.

Error: (12/24/2015 05:35:35 PM) (Source: Schannel) (EventID: 4102) (User: NT AUTHORITY)
Description: A fatal error occurred when attempting to access the SSL server credential private key. The error code returned from the cryptographic module is 0x8009030d. The internal error state is 10001.

Error: (12/24/2015 05:35:35 PM) (Source: Schannel) (EventID: 4102) (User: NT AUTHORITY)
Description: A fatal error occurred when attempting to access the SSL server credential private key. The error code returned from the cryptographic module is 0x8009030d. The internal error state is 10001.

Error: (12/24/2015 05:35:34 PM) (Source: Schannel) (EventID: 4102) (User: NT AUTHORITY)
Description: A fatal error occurred when attempting to access the SSL server credential private key. The error code returned from the cryptographic module is 0x8009030d. The internal error state is 10001.

Error: (12/24/2015 05:07:32 PM) (Source: Schannel) (EventID: 4102) (User: NT AUTHORITY)
Description: A fatal error occurred when attempting to access the SSL server credential private key. The error code returned from the cryptographic module is 0x8009030d. The internal error state is 10001.


==================== Memory info ===========================

Processor: Intel(R) Core(TM)2 Duo CPU E4400 @ 2.00GHz
Percentage of memory in use: 75%
Total physical RAM: 3956.61 MB
Available physical RAM: 953.05 MB
Total Virtual: 7911.43 MB
Available Virtual: 4358.73 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.41 GB) (Free:845.79 GB) NTFS
Drive e: () (Fixed) (Total:14.9 GB) (Free:7.9 GB) FAT32
Drive f: () (Removable) (Total:14.9 GB) (Free:8.69 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 41AB2316)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 14.9 GB) (Disk ID: 00000000)

Partition: GPT.

========================================================
Disk: 2 (Size: 14.9 GB) (Disk ID: CBE4BC1A)
Partition 1: (Not Active) - (Size=14.9 GB) - (Type=0C)

==================== End of Addition.txt ============================

[v_v]

Linda,

So you are running an administrator account, and you are running the Windows Firewall.

For the moment we will leave Windows Firewall alone.  My guess is that it is doing its job satisfactorily.

Since IE 11 and Chrome do work for "familyresearch.org" on your computer, use each of those browsers and go to the web site.  Then just like you did with Firefox post screen shots of the certificates from IE 11 and Chrome.  Since these two browsers do work at the web site (without the .jpg images of course), a comparison of their certificates with those of Firefox might provide some useful data.

v_v

[LindaEllis]

I apologize to Corrine, I didn't get the first scan from the desktop, I had a hang up saving it there, but got it on the desktop and just ran a new scan, so please disregard the first scan.  Here are the results from the desktop:

Additional scan result of Farbar Recovery Scan Tool (x64) Version:23-12-2015
Ran by Customer (2015-12-24 19:22:53)
Running from C:\Users\Customer\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2009-10-27 22:42:09)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3311552913-1744306017-1404303799-500 - Administrator - Disabled)
Customer (S-1-5-21-3311552913-1744306017-1404303799-1001 - Administrator - Enabled) => C:\Users\Customer
Guest (S-1-5-21-3311552913-1744306017-1404303799-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3311552913-1744306017-1404303799-1002 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: ESET NOD32 Antivirus 9.0.318.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET NOD32 Antivirus 9.0.318.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.009.20079 - Adobe Systems Incorporated)
Adobe Flash Player 20 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 20.0.0.228 - Adobe Systems Incorporated)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.235 - Adobe Systems Incorporated)
Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version:  - )
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version:  - )
Canon MP Navigator EX 4.0 (HKLM-x32\...\MP Navigator EX 4.0) (Version:  - )
Canon MP280 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP280_series) (Version:  - )
Canon MP280 series User Registration (HKLM-x32\...\Canon MP280 series User Registration) (Version:  - )
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version:  - )
Canon Solution Menu EX (HKLM-x32\...\CanonSolutionMenuEX) (Version:  - )
Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6514.5001 - Microsoft Corporation)
DisplayLink Core Software (HKLM\...\{C66D573C-A70D-4F11-AA1C-5423340B951F}) (Version: 7.0.43526.0 - DisplayLink Corp.)
DisplayLink Graphics (HKLM\...\{8F86C262-8746-415C-9E4D-CD0E2B42C61B}) (Version: 7.0.43577.0 - DisplayLink Corp.)
Dropbox (HKLM-x32\...\Dropbox) (Version: 3.12.6 - Dropbox, Inc.)
Dropbox Update Helper (x32 Version: 1.3.27.77 - Dropbox, Inc.) Hidden
ESET NOD32 Antivirus (HKLM\...\{60853F5E-E6F5-4A34-BBCD-C09D49BB5E64}) (Version: 9.0.318.0 - ESET, spol. s r.o.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 47.0.2526.106 - Google Inc.)
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.15.10.1930 - Intel Corporation)
Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Mozilla Firefox 43.0.2 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 43.0.2 (x86 en-US)) (Version: 43.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.2 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 7 Essentials (HKLM-x32\...\{66EBD70F-A42C-475F-AEDF-277378151033}) (Version: 7.02.9491 - Nero AG)
Personal Ancestral File 5 (HKLM-x32\...\{D94A8E22-DF2B-4107-9E51-608A60A7671D}) (Version:  - )
Personal Ancestral File Companion 5.5 (HKLM-x32\...\{91AFACB3-CA46-4C1E-AF2D-F72EE0B112E4}) (Version: 5.5 - Intellectual Reserve Inc.)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9.141.259 - Google, Inc.)
RootsMagic 6.3.3.2 (HKLM-x32\...\{94433E0D-764C-4964-AD0B-EC46BCA7E68E}_is1) (Version: RootsMagic 6.3.3.2 - RootsMagic, Inc.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
WinPatrol (HKLM-x32\...\{6A206A04-6BC1-411B-AA04-4E52EDEEADF2}) (Version: 33.6.2015.18 - Ruiware)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Restore Points =========================

15-12-2015 12:20:02 Windows Update
16-12-2015 15:45:12 RESTORE TO DECEBER 16 2015
18-12-2015 21:38:01 Windows Update
22-12-2015 18:06:31 Windows Update
22-12-2015 18:52:27 Removed Java 8 Update 66

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 21:34 - 2009-06-10 16:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {00924C49-F973-4840-BE95-6E95509A3AB8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-15] (Google Inc.)
Task: {11CA0F67-6FCF-4AF0-99B9-38E9B4B096D3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-15] (Google Inc.)
Task: {1D751636-3208-457D-BEC2-F0CEAA3056B0} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-12-04] (Dropbox, Inc.)
Task: {35702DDA-50BF-41EB-80C4-F845EE254486} - System32\Tasks\{4D80020E-0891-4A5A-974F-A3F26942D980} => Firefox.exe
Task: {45B74B32-2DBA-499A-952C-3CDBA01843FA} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-12-04] (Dropbox, Inc.)
Task: {6325AD98-CA90-4010-A108-96ADEF3EA811} - System32\Tasks\Microsoft\Windows\MobilePC\DisplayLink TMM Control
Task: {896E5C73-799D-47E0-8478-B9E6A1F1E11E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-10] (Adobe Systems Incorporated)
Task: {DD7A6A7C-E102-4B05-A141-78C9886E0819} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2015-12-04 11:18 - 2010-04-05 14:55 - 00116104 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
2015-12-04 16:12 - 2015-12-21 14:42 - 00034768 _____ () C:\Program Files (x86)\Dropbox\Client\_multiprocessing.pyd
2015-12-23 17:23 - 2015-12-21 14:42 - 00019408 _____ () C:\Program Files (x86)\Dropbox\Client\faulthandler.pyd
2015-12-23 17:23 - 2015-12-21 19:22 - 00022848 _____ () C:\Program Files (x86)\Dropbox\Client\Crypto.Random.OSRNG.winrandom.pyd
2015-12-23 17:23 - 2015-12-21 19:22 - 00023352 _____ () C:\Program Files (x86)\Dropbox\Client\Crypto.Util._counter.pyd
2015-12-23 17:23 - 2015-12-21 19:22 - 00042296 _____ () C:\Program Files (x86)\Dropbox\Client\Crypto.Cipher._AES.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00116688 _____ () C:\Program Files (x86)\Dropbox\Client\pywintypes27.dll
2015-12-04 16:12 - 2015-12-21 14:42 - 00093640 _____ () C:\Program Files (x86)\Dropbox\Client\_ctypes.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00018376 _____ () C:\Program Files (x86)\Dropbox\Client\select.pyd
2015-12-04 16:12 - 2015-12-21 19:22 - 00019760 _____ () C:\Program Files (x86)\Dropbox\Client\tornado.speedups.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00105928 _____ () C:\Program Files (x86)\Dropbox\Client\win32api.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00392144 _____ () C:\Program Files (x86)\Dropbox\Client\pythoncom27.dll
2015-12-04 16:12 - 2015-12-21 19:22 - 00381752 _____ () C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00692688 _____ () C:\Program Files (x86)\Dropbox\Client\unicodedata.pyd
2015-12-23 17:23 - 2015-12-21 19:22 - 00020816 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00109520 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_backend.pyd
2015-12-23 17:23 - 2015-12-21 19:22 - 01734984 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd
2015-12-23 17:23 - 2015-12-21 19:22 - 00020808 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd
2015-12-04 16:12 - 2015-12-21 19:22 - 00020800 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_python_x66cf7a7cx17a72769.pyd
2015-12-04 16:12 - 2015-12-21 19:22 - 00021840 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_unicode_environ_win32_x8bf8e68bx9968e850.pyd
2015-12-23 17:23 - 2015-12-21 19:22 - 00038696 _____ () C:\Program Files (x86)\Dropbox\Client\fastpath.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00024528 _____ () C:\Program Files (x86)\Dropbox\Client\win32event.pyd
2015-12-08 19:58 - 2015-12-21 14:42 - 00020936 _____ () C:\Program Files (x86)\Dropbox\Client\mmapfile.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00114640 _____ () C:\Program Files (x86)\Dropbox\Client\win32security.pyd
2015-12-04 16:12 - 2015-12-21 19:22 - 00021320 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_pywin_kernel32_xde9e4433x360333f0.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00124880 _____ () C:\Program Files (x86)\Dropbox\Client\win32file.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00030160 _____ () C:\Program Files (x86)\Dropbox\Client\win32pipe.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00043472 _____ () C:\Program Files (x86)\Dropbox\Client\win32process.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00175560 _____ () C:\Program Files (x86)\Dropbox\Client\win32gui.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00028616 _____ () C:\Program Files (x86)\Dropbox\Client\win32ts.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32clipboard.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00048592 _____ () C:\Program Files (x86)\Dropbox\Client\win32service.pyd
2015-12-08 19:58 - 2015-12-21 19:22 - 00024392 _____ () C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd
2015-12-23 17:23 - 2015-12-21 14:42 - 00036296 _____ () C:\Program Files (x86)\Dropbox\Client\librsync.dll
2015-12-04 16:12 - 2015-12-21 14:42 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32profile.pyd
2015-12-23 17:23 - 2015-12-21 19:22 - 00117056 _____ () C:\Program Files (x86)\Dropbox\Client\breakpad.client.windows.handler.pyd
2015-12-04 16:12 - 2015-12-21 19:22 - 00023376 _____ () C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00134608 _____ () C:\Program Files (x86)\Dropbox\Client\_elementtree.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00134088 _____ () C:\Program Files (x86)\Dropbox\Client\pyexpat.pyd
2015-12-23 17:23 - 2015-12-21 14:42 - 00240584 _____ () C:\Program Files (x86)\Dropbox\Client\jpegtran.pyd
2015-12-23 17:23 - 2015-12-21 19:22 - 00020280 _____ () C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.pyd
2015-12-04 16:12 - 2015-12-21 19:22 - 00052024 _____ () C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.pyd
2015-12-23 17:23 - 2015-12-21 19:22 - 00021304 _____ () C:\Program Files (x86)\Dropbox\Client\Crypto.Util.strxor.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00350152 _____ () C:\Program Files (x86)\Dropbox\Client\winxpgui.pyd
2015-12-23 17:23 - 2015-12-21 19:22 - 00084792 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL
2015-12-04 16:12 - 2015-12-21 19:22 - 01826608 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00083912 _____ () C:\Program Files (x86)\Dropbox\Client\sip.pyd
2015-12-04 16:12 - 2015-12-21 19:22 - 03891504 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.pyd
2015-12-04 16:12 - 2015-12-21 19:22 - 01950000 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.pyd
2015-12-04 16:12 - 2015-12-21 19:22 - 00519984 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.pyd
2015-12-04 16:12 - 2015-12-21 19:22 - 00133936 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.pyd
2015-12-04 16:12 - 2015-12-21 19:22 - 00225080 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd
2015-12-04 16:12 - 2015-12-21 19:22 - 00207672 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.pyd
2015-12-04 16:12 - 2015-12-21 19:22 - 00024904 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_wpad_proxy_win_x752e3d61xdcfdcc84.pyd
2015-12-04 16:12 - 2015-12-21 19:22 - 00486704 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.pyd
2015-12-04 16:12 - 2015-12-21 19:22 - 00357680 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.pyd
2015-12-04 16:12 - 2015-12-21 14:42 - 00019920 _____ () C:\Program Files (x86)\Dropbox\Client\QtQuick.2\qtquick2plugin.dll
2015-12-04 16:12 - 2015-12-21 14:42 - 00786904 _____ () C:\Program Files (x86)\Dropbox\Client\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-12-04 16:12 - 2015-12-21 14:42 - 00063448 _____ () C:\Program Files (x86)\Dropbox\Client\QtQuick\Layouts\qquicklayoutsplugin.dll
2015-12-04 16:12 - 2015-12-21 14:42 - 00019408 _____ () C:\Program Files (x86)\Dropbox\Client\QtQuick\Window.2\windowplugin.dll
2015-12-04 16:12 - 2015-12-21 14:42 - 00060880 _____ () C:\Program Files (x86)\Dropbox\Client\win32print.pyd
2015-12-24 14:12 - 2015-12-24 07:46 - 16792256 _____ () C:\Users\Customer\AppData\Local\Google\Chrome\User Data\PepperFlash\20.0.0.267\pepflashplayer.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRkrn => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRSVC => ""="Service"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3311552913-1744306017-1404303799-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Customer\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 172.16.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: NBService => 3
MSCONFIG\Services: NMIndexingService => 3
MSCONFIG\Services: WerSvc => 3
MSCONFIG\Services: WMPNetworkSvc => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Install Webroot FF RunOnce.lnk => C:\Windows\pss\Install Webroot FF RunOnce.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Install Webroot IE RunOnce.lnk => C:\Windows\pss\Install Webroot IE RunOnce.lnk.CommonStartup
MSCONFIG\startupreg: BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} => "C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe"
MSCONFIG\startupreg: Logitech Download Assistant => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{D1C88B61-56D3-4976-BA66-A25546C123EC}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{94C72EB5-F739-41B5-8BD8-42D4E2A14DDC}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
FirewallRules: [{32183950-32E0-4F20-9998-9D3631BF4561}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{8E07D87D-C70E-42DF-BEF6-2CC635BD7CFF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Faulty Device Manager Devices =============

Name: PCI Serial Port
Description: PCI Serial Port
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI Simple Communications Controller
Description: PCI Simple Communications Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (12/23/2015 06:16:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: GWXUX.exe, version: 6.3.9600.18064, time stamp: 0x56042d8f
Faulting module name: ntdll.dll, version: 6.1.7601.19045, time stamp: 0x56259295
Exception code: 0xc0000005
Fault offset: 0x000000000004ac04
Faulting process id: 0x1e0
Faulting application start time: 0xGWXUX.exe0
Faulting application path: GWXUX.exe1
Faulting module path: GWXUX.exe2
Report Id: GWXUX.exe3

Error: (12/07/2015 12:57:25 PM) (Source: MsiInstaller) (EventID: 1024) (User: LINDAJEANLIMESE)
Description: Product: Adobe Acrobat Reader DC - Update '{AC76BA86-7AD7-0000-2550-AC0F094E6F00}' could not be installed. Error code 1625. Windows Installer can create logs to help troubleshoot issues with installing software packages. Use the following link for instructions on turning on logging support: http://go.microsoft.com/fwlink/?LinkId=23127

Error: (12/04/2015 12:00:44 PM) (Source: MsiInstaller) (EventID: 1024) (User: LINDAJEANLIMESE)
Description: Product: Compatibility Pack for the 2007 Office system - Update '{1D53FB73-9826-4541-B2E0-A239C6EBA718}' could not be installed. Error code 1642. Windows Installer can create logs to help troubleshoot issues with installing software packages. Use the following link for instructions on turning on logging support: http://go.microsoft.com/fwlink/?LinkId=23127

Error: (12/04/2015 11:18:12 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Dependent Assembly Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (12/04/2015 11:18:12 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Dependent Assembly Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (10/28/2015 04:46:16 AM) (Source: MsiInstaller) (EventID: 11935) (User: NT AUTHORITY)
Description: Product: MSXML 4.0 SP2 (KB973688) -- Error 1935. An error occured during the installation of assembly component {7B2B4EA5-1028-B7E6-A06B-D6B9ABF34537}. HRESULT: 0x80070BC9. assembly interface: IAssemblyCacheItem, function: Commit, assembly name: Microsoft.MSXML2,type="win32",version="4.20.9876.0",publicKeyToken="6bd6b9abf345378f",processorArchitecture="x86"

Error: (10/28/2015 02:36:12 AM) (Source: MsiInstaller) (EventID: 11935) (User: NT AUTHORITY)
Description: Product: MSXML 4.0 SP2 (KB954430) -- Error 1935. An error occured during the installation of assembly component {7B30B69B-0E6C-B7E0-A06B-D6B9ABF34537}. HRESULT: 0x80070BC9. assembly interface: IAssemblyCacheItem, function: Commit, assembly name: Microsoft.MSXML2,type="win32",version="4.20.9870.0",publicKeyToken="6bd6b9abf345378f",processorArchitecture="x86"

Error: (10/27/2015 08:53:46 PM) (Source: MsiInstaller) (EventID: 11935) (User: NT AUTHORITY)
Description: Product: MSXML 4.0 SP2 (KB973688) -- Error 1935. An error occured during the installation of assembly component {7B2B4EA5-1028-B7E6-A06B-D6B9ABF34537}. HRESULT: 0x80070BC9. assembly interface: IAssemblyCacheItem, function: Commit, assembly name: Microsoft.MSXML2,type="win32",version="4.20.9876.0",publicKeyToken="6bd6b9abf345378f",processorArchitecture="x86"

Error: (10/27/2015 08:07:33 PM) (Source: MsiInstaller) (EventID: 11935) (User: NT AUTHORITY)
Description: Product: MSXML 4.0 SP2 (KB954430) -- Error 1935. An error occured during the installation of assembly component {7B30B69B-0E6C-B7E0-A06B-D6B9ABF34537}. HRESULT: 0x80070BC9. assembly interface: IAssemblyCacheItem, function: Commit, assembly name: Microsoft.MSXML2,type="win32",version="4.20.9870.0",publicKeyToken="6bd6b9abf345378f",processorArchitecture="x86"

Error: (10/27/2009 06:33:24 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 4107) (User: )
Description: Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.


System errors:
=============
Error: (12/24/2015 06:47:23 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 43. The internal error state is 252.

Error: (12/24/2015 06:44:25 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 43. The internal error state is 252.

Error: (12/24/2015 06:44:24 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 43. The internal error state is 252.

Error: (12/24/2015 06:41:31 PM) (Source: Schannel) (EventID: 4102) (User: NT AUTHORITY)
Description: A fatal error occurred when attempting to access the SSL server credential private key. The error code returned from the cryptographic module is 0x8009030d. The internal error state is 10001.

Error: (12/24/2015 06:41:31 PM) (Source: Schannel) (EventID: 4102) (User: NT AUTHORITY)
Description: A fatal error occurred when attempting to access the SSL server credential private key. The error code returned from the cryptographic module is 0x8009030d. The internal error state is 10001.

Error: (12/24/2015 05:35:35 PM) (Source: Schannel) (EventID: 4102) (User: NT AUTHORITY)
Description: A fatal error occurred when attempting to access the SSL server credential private key. The error code returned from the cryptographic module is 0x8009030d. The internal error state is 10001.

Error: (12/24/2015 05:35:35 PM) (Source: Schannel) (EventID: 4102) (User: NT AUTHORITY)
Description: A fatal error occurred when attempting to access the SSL server credential private key. The error code returned from the cryptographic module is 0x8009030d. The internal error state is 10001.

Error: (12/24/2015 05:35:35 PM) (Source: Schannel) (EventID: 4102) (User: NT AUTHORITY)
Description: A fatal error occurred when attempting to access the SSL server credential private key. The error code returned from the cryptographic module is 0x8009030d. The internal error state is 10001.

Error: (12/24/2015 05:35:34 PM) (Source: Schannel) (EventID: 4102) (User: NT AUTHORITY)
Description: A fatal error occurred when attempting to access the SSL server credential private key. The error code returned from the cryptographic module is 0x8009030d. The internal error state is 10001.

Error: (12/24/2015 05:07:32 PM) (Source: Schannel) (EventID: 4102) (User: NT AUTHORITY)
Description: A fatal error occurred when attempting to access the SSL server credential private key. The error code returned from the cryptographic module is 0x8009030d. The internal error state is 10001.


==================== Memory info ===========================

Processor: Intel(R) Core(TM)2 Duo CPU E4400 @ 2.00GHz
Percentage of memory in use: 77%
Total physical RAM: 3956.61 MB
Available physical RAM: 890.63 MB
Total Virtual: 7911.43 MB
Available Virtual: 4286.36 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.41 GB) (Free:845.79 GB) NTFS
Drive e: () (Fixed) (Total:14.9 GB) (Free:7.9 GB) FAT32
Drive f: () (Removable) (Total:14.9 GB) (Free:8.69 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 41AB2316)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 14.9 GB) (Disk ID: 00000000)

Partition: GPT.

========================================================
Disk: 2 (Size: 14.9 GB) (Disk ID: CBE4BC1A)
Partition 1: (Not Active) - (Size=14.9 GB) - (Type=0C)

==================== End of Addition.txt ============================