[hmp3]

Hi,

keep getting the errors above every startup regarding;

11 - "Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications."
7000 - "The Crypkey License service failed to start due to the following error:
The system cannot find the file specified."
7026 - "The following boot-start or system-start driver(s) failed to load:
NetworkX"
1530 - "Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.

DETAIL -
1 user registry handles leaked from \Registry\User\S-1-5-21-1925592742-456944920-4000667399-1009_Classes:
Process 720 (\Device\HarddiskVolume5\Program Files\Microsoft Security Client\MsMpEng.exe) has opened key \REGISTRY\USER\S-1-5-21-1925592742-456944920-4000667399-1009_CLASSES"
3036 - "The content source <csc://{S-1-5-21-1925592742-456944920-4000667399-1005}/> cannot be accessed.

Context: Application, SystemIndex Catalog

Details:
(HRESULT : 0x80004005) (0x80004005)"



I have 3 admin user profiles.

Each time I login, the loading happens and then I notice my side mouse button of Microsoft Comfort Optical 3000 doesnt operate as customised in Intellipoint 7.00. It takes a long time before it does respond.
If I try to launch event viewer or mouse customisation softwares, they freeze temporarily and I have to force close them (shows me a windows shell32 error when I do this).

I've tried System restore, and safe mode, and many solutions via google associated with symptoms and error ids, but no avail.

Please help me fix this

- Thanks

[Advertisements]

This one:

 

11 - "Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications."

 

 

May be normal.  Many programs use the registry key

 

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows

 

AppInit_DLLs:

 

to get software to load every time.  It's no longer a recommended method but many still do it.  In Win 7 (maybe in Vista too) and later they added a second item:

 

LoadAppInit_DLLs:  

 

If its value is 0 the AppInit_DLLs entry is ignored so when software adds something to AppInit_DLLs they had to change this to 1.  Often when the software is uninstalled they forget to put it back to 1  and you will get your error even without anything really being loaded.

 

Copy the next two lines:

reg query "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows"  > \junk.txt
notepad \junk.txt

Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, Continue.  Right click and Paste or Edit then Paste and the copied lines should appear.

Hit Enter if notepad does not open.  Copy and paste the text from notepad into a reply.  That will let me see what is going on.

 

 

These two:

 

7000 - "The Crypkey License service failed to start due to the following error:
The system cannot find the file specified."
7026 - "The following boot-start or system-start driver(s) failed to load:
NetworkX"

 

 

are caused by some copy protection software that comes with some programs.  Perhaps the program was uninstalled and it didn't clean up after itself.

 

Copy the next two lines:

sc delete NetworkX
sc delete "Crypkey License"

 

 

Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, Continue.  Right click and Paste or Edit then Paste and the copied lines should appear.  Hit Enter.  Did you get an error message?

 

 

 

 

This one is Microsoft Security Essentials fault:

 

1530 - "Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.

DETAIL -
1 user registry handles leaked from \Registry\User\S-1-5-21-1925592742-456944920-4000667399-1009_Classes:
Process 720 (\Device\HarddiskVolume5\Program Files\Microsoft Security Client\MsMpEng.exe) has opened key \REGISTRY\USER\S-1-5-21-1925592742-456944920-4000667399-1009_CLASSES"

 

 

Just poorly designed software.  It won't really hurt anything despite the dire warning.

 

 

This one is apparently a Windows oops but the fixit supposedly helps.

3036 - "The content source <csc://{S-1-5-21-1925592742-456944920-4000667399-1005}/> cannot be accessed.

 

Context: Application, SystemIndex Catalog

 

Details:

(HRESULT : 0x80004005) (0x80004005)"

 

 

 

Method 1:

You may run the fixit from the following link and check for the issue:

Fix Windows Desktop Search when it crashes or not showing results

http://support.microsoft.com/mats/windows_search/

Method 2:

You may try rebuilding the index to see if it works:

Change advanced indexing options

http://windows.micro...ndexing-options

 

 

 

[RKinner]

This one:

 

11 - "Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications."

 

 

May be normal.  Many programs use the registry key

 

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows

 

AppInit_DLLs:

 

to get software to load every time.  It's no longer a recommended method but many still do it.  In Win 7 (maybe in Vista too) and later they added a second item:

 

LoadAppInit_DLLs:  

 

If its value is 0 the AppInit_DLLs entry is ignored so when software adds something to AppInit_DLLs they had to change this to 1.  Often when the software is uninstalled they forget to put it back to 1  and you will get your error even without anything really being loaded.

 

Copy the next two lines:

reg query "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows"  > \junk.txt
notepad \junk.txt

Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, Continue.  Right click and Paste or Edit then Paste and the copied lines should appear.

Hit Enter if notepad does not open.  Copy and paste the text from notepad into a reply.  That will let me see what is going on.

 

 

These two:

 

7000 - "The Crypkey License service failed to start due to the following error:
The system cannot find the file specified."
7026 - "The following boot-start or system-start driver(s) failed to load:
NetworkX"

 

 

are caused by some copy protection software that comes with some programs.  Perhaps the program was uninstalled and it didn't clean up after itself.

 

Copy the next two lines:

sc delete NetworkX
sc delete "Crypkey License"

 

 

Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, Continue.  Right click and Paste or Edit then Paste and the copied lines should appear.  Hit Enter.  Did you get an error message?

 

 

 

 

This one is Microsoft Security Essentials fault:

 

1530 - "Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.

DETAIL -
1 user registry handles leaked from \Registry\User\S-1-5-21-1925592742-456944920-4000667399-1009_Classes:
Process 720 (\Device\HarddiskVolume5\Program Files\Microsoft Security Client\MsMpEng.exe) has opened key \REGISTRY\USER\S-1-5-21-1925592742-456944920-4000667399-1009_CLASSES"

 

 

Just poorly designed software.  It won't really hurt anything despite the dire warning.

 

 

This one is apparently a Windows oops but the fixit supposedly helps.

3036 - "The content source <csc://{S-1-5-21-1925592742-456944920-4000667399-1005}/> cannot be accessed.

 

Context: Application, SystemIndex Catalog

 

Details:

(HRESULT : 0x80004005) (0x80004005)"

 

 

 

Method 1:

You may run the fixit from the following link and check for the issue:

Fix Windows Desktop Search when it crashes or not showing results

http://support.microsoft.com/mats/windows_search/

Method 2:

You may try rebuilding the index to see if it works:

Change advanced indexing options

http://windows.micro...ndexing-options

 

 

 

[hmp3]

Okay thanks I have done what you asked.

 

Error 11 registry info request:

 

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows
    IconServiceLib    REG_SZ    IconCodecService.dll
    DdeSendTimeout    REG_DWORD    0x0
    DesktopHeapLogging    REG_DWORD    0x1
    GDIProcessHandleQuota    REG_DWORD    0x2710
    ShutdownWarningDialogTimeout    REG_DWORD    0xffffffff
    USERNestedWindowLimit    REG_DWORD    0x32
    USERPostMessageLimit    REG_DWORD    0x2710
    USERProcessHandleQuota    REG_DWORD    0x2710
    (Default)    REG_SZ    mnmsrvc
    DeviceNotSelectedTimeout    REG_SZ    15
    Spooler    REG_SZ    yes
    TransmissionRetryTimeout    REG_SZ    90
    AppInit_DLLs    REG_SZ        
    LoadAppInit_DLLs    REG_DWORD    0x1
 

For Errors 7000 & 7026 there was no problems deleting the files.

 

FixIt found 2 search errors none of which showed error 3036. I allowed it to repair them anyway.

 

Have restarted several times and roamed around pc.

 

Symptoms still persist but only Error 11 shows up on event viewer.

Edited by harvestthesouls, 01 February 2016 - 08:31 AM.

[RKinner]

If we look at your reg query we see:

 

  AppInit_DLLs    REG_SZ        
    LoadAppInit_DLLs    REG_DWORD    0x1

 

 

So there is nothing being loaded by AppInit_DLLS but LoadAppInit_DLLS is set to 1.  You can manually go in to regedit and change it or we can fix it as follows:

 

Download the attached win.zip file and save it.  

 

 

Right click on the file and Extract All.  Right click on win.reg and Merge.  Allow it to merge. 

 

This should fix your error 11.

[RKinner]

I'm sure the errors have nothing to do with your symptoms so  assuming the error 11 is gone now after my previous post let's look at a boot log.  In the search box type:

 

msconfig 

 

and hit Enter. In the window that opens, click on Boot then on Boot log then on OK.  Reboot.

 

Now find the file:

 

C:\Windows\ntbtlog.txt and attach it to a reply.

 

(Windows may hide it from you.  In that case:

 Open the Control Panel menu and click Folder Options.

    After the new window appears select the View tab.

    Put a checkmark in the checkbox labeled Display the contents of system folders.

    Under the Hidden files and folders section select the radio button labeled Show hidden files and folders.

    Remove the checkmark from the checkbox labeled Hide file extensions for known file types.

    Remove the checkmark from the checkbox labeled Hide protected operating system files.

    Press the Apply button and then the OK button)

[hmp3]

Okay, error 11 is gone thanks.

 

Restarted. Application hang error for microsoft mouse settings:

Error 1002:

"The program rundll32.exe version 6.1.7600.16385 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
 Process ID: ec0
 Start Time: 01d15cff9bcf0195
 Termination Time: 0
 Application Path: C:\Windows\System32\rundll32.exe
 Report Id: eb3e10c2-c8f2-11e5-aa56-00248c02da27"
 

[hmp3]

Boot Log Attached.  ntbtlog.txt   305.64KB   281 downloads

 

This is my personal and music composition pc.

Crypkey was linked to tascam gigastudio. I no longer have the program installed. I've now deleted the registry key and the error is gone.

This all began with the goal of duplicating my main user account to have one account for personal and one for music composition.

 

I just recently created the 3 admin accounts. I began with one account, and tweaked it to my liking. I wanted to use this as a template to develop a personal user profile independently but with the settings intact. So I changed the name in user accounts. Doing so resulted in software hangs upon startup and the username in file explorer was still the old one. It just wouldnt change the user name fully, alsmost as if it thought I wanted to see it displayed only for cosmetic purposes.

I then decided to create a new user with my preferred name, copied all contents from my template profile.

However the new profile failed to load, so a balloon showed to notify me that it loaded a 'temp' one instead.

Then I deleted the new user and re-created it.

Then I used windows easy transfer to back up my user template and restore it once logged into the new user.

The third user account is one that I created to help me diagnose, investigate and handle the migration the other 2 profiles.

I dont intent to keep my third account.

Edited by harvestthesouls, 01 February 2016 - 09:18 AM.

[RKinner]

From the log:

 

Did not load driver \SystemRoot\system32\DRIVERS\MpFilter.sys

 

 

This is a leftover from Microsoft Security Essentials.  I think we should be able to get rid of it this way:

 

 

 

Copy the next line:

sc delete MpFilter

 

Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, Continue.  Right click and Paste or Edit then Paste and the copied line should appear.

Hit Enter.  Did you get an error?

 

Otherwise the log looks good.  Go back in to MSCONFIG and uncheck the log, OK.  You do not need to reboot.

 

Let's check your hard drive and the critical windows files:

 

1. Double-click My Computer, and then right-click the hard disk that you want to check. C:

2. Click Properties, and then click Tools.

3. Under Error-checking, click Check Now. A dialog box that shows the Check disk options is displayed,

4. Check both boxes and then click Start.

You will receive the following message:

The disk check could not be performed because the disk check utility needs exclusive access to some Windows files on the disk. These files can be accessed by restarting Windows. Do you want to schedule the disk check to occur the next time you restart the computer?

Click Yes to schedule the disk check, but don't restart yet.

 

Right click on Computer and select Manage (Continue) Then the Event Viewer. Next select Windows Logs.  Right click on System and Clear Log, Clear. Repeat for Application.

 

Reboot.

 

The disk check will run and will probably take an hour or more to finish.

 

 

Start, All Programs, Accessories then right click on Command Prompt and Run as Administrator.  Then type (with an Enter after each line).

 

sfc  /scannow

 

(1 SPACE after sfc.  This will check your critical system files. Does this finish without complaint?  IF it says it couldn't fix everything then:

 

Copy the next two lines:

 

findstr  /c:"[SR]"  \windows\logs\cbs\cbs.log  >  \windows\logs\cbs\junk.txt 
notepad \windows\logs\cbs\junk.txt 

 

Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, Continue.  Right click and Paste or Edit then Paste and the copied lines should appear.

Hit Enter if notepad does not open.  Copy and paste the text from notepad into a reply.  Close notepad.  Close the Command Window.

 

In either case:

 

1. Please download the Event Viewer Tool by Vino Rosso

http://images.malwar...om/vino/VEW.exe

and save it to your Desktop:

2. Right-click VEW.exe and Run AS Administrator

3. Under 'Select log to query', select:

 

* System

4. Under 'Select type to list', select:

* Error

* Warning

 

 

Then use the 'Number of events' as follows:

 

 

1. Click the radio button for 'Number of events'

Type 20 in the 1 to 20 box

Then click the Run button.

Notepad will open with the output log.

 

 

Please post the Output log in your next reply then repeat but select Application. (Second time you run vew, it will overwrite the first log so copy it to a reply or rename it first.)

 

 

 

Let's also check your system health:

 

Get the free version of Speccy:

 

http://www.filehippo...download_speccy (Look in the upper right for the Download

Latest Version button  - Do NOT press the large Start Download button on the upper left!)  Download, Save and Install it.  

 

Close all browsers and open progrms before running Speccy.  Run Speccy.  When it finishes (the little icon in the bottom left will stop moving), File, Save as Text File,  (to your desktop) note the name it gives. OK.  Open the file in notepad and delete the line that gives the serial number of your Operating System.  (It will be near the top about 10 lines down.)  Save the file and close notepad  Attach the file to your next post as it is usually too large for the forum (Click on More Reply Options then Choose file, select the file, Open, Attach this File) Uninstall Speccy.

 

 

Finally we will check for CPU and memory hogs and suspicious programs:

 

Get Process Explorer

 

http://live.sysinter...com/procexp.exe

Save it to your desktop then run it (Vista or Win7 - right click and Run As Administrator).  

 

View, Select Column, check Verified Signer, OK

Options, Verify Image Signatures

 

 

Click twice on the CPU column header  to sort things by CPU usage with the big hitters at the top.  

 

Wait a full minute then:

 

File, Save As, Save.  Open the file Procexp.txt on your desktop and copy and paste the text to a reply.

 

[hmp3]

Access is Denied when performing "sc delete MpFilter" in cmd.

[RKinner]

Did you use the Run As Administrator option when starting the Command Prompt?

 

 

Copy the next 3 lines:

reg query HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MpFilter  > \junk.txt 2>>&1
reg delete  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MpFilter  >> \junk.txt 2>>&1
notepad \junk.txt

 

Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, Continue.  (If the prompt is not C:|Windows\System32. then you didn't get the elevated Command Prompt - try again.)  Right click and Paste or Edit then Paste and the copied lines should appear.

Hit Enter if notepad does not open.  Copy and paste the text from notepad into a reply.  

[hmp3]

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MpFilter
    Type    REG_DWORD    0x2
    Start    REG_DWORD    0x0
    ErrorControl    REG_DWORD    0x1
    Tag    REG_DWORD    0x9
    ImagePath    REG_EXPAND_SZ    system32\DRIVERS\MpFilter.sys
    DisplayName    REG_SZ    Microsoft Malware Protection Driver
    Group    REG_SZ    FSFilter Anti-Virus
    DependOnService    REG_MULTI_SZ    FltMgr
    Description    REG_SZ    Microsoft On-Access Malware Protection Mini-Filter Driver
    SupportedFeatures    REG_DWORD    0x3

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MpFilter\Instances
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MpFilter\Security
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MpFilter\Enum
Permanently delete the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MpFilter (Yes/No)? The operation was canceled by the user.
 

[hmp3]

SFC ran fine, no violations found.

VEW had no errors on either run, so no logs to report.

Speccy report attached.  NIV.txt   62.18KB   322 downloads

 

[hmp3]

Saved to desktop but it saves as "System Idle Process.txt"

 

Process    CPU    Private Bytes    Working Set    PID    Description    Company Name    Verified Signer
System Idle Process    98.44    0 K    24 K    0            
procexp64.exe    1.00    31,144 K    49,372 K    712    Sysinternals Process Explorer    Sysinternals - www.sysinternals.com    (Verified) Microsoft Corporation
firefox.exe    0.16    326,236 K    343,728 K    5084    Firefox    Mozilla Corporation    (Verified) Mozilla Corporation
dwm.exe    0.09    37,532 K    36,628 K    2348    Desktop Window Manager    Microsoft Corporation    (Verified) Microsoft Windows
System    0.09    332 K    3,280 K    4            
csrss.exe    0.05    3,116 K    7,180 K    876    Client Server Runtime Process    Microsoft Corporation    (Verified) Microsoft Windows
Interrupts    0.05    0 K    0 K    n/a    Hardware Interrupts and DPCs        
mbam.exe    0.05    29,212 K    47,388 K    2788    Malwarebytes Anti-Malware    Malwarebytes    (Verified) Malwarebytes Corporation
MsMpEng.exe    0.04    124,160 K    140,900 K    164    Antimalware Service Executable    Microsoft Corporation    (Verified) Microsoft Corporation
explorer.exe    0.02    71,548 K    82,696 K    2376    Windows Explorer    Microsoft Corporation    (Verified) Microsoft Windows
ipoint.exe    < 0.01    11,552 K    1,476 K    2152    IPoint.exe    Microsoft Corporation    (Verified) Microsoft Corporation
WmiApSrv.exe    < 0.01    2,760 K    6,768 K    4576    WMI Performance Reverse Adapter    Microsoft Corporation    (Verified) Microsoft Windows
taskhost.exe    < 0.01    9,704 K    12,468 K    2264    Host Process for Windows Tasks    Microsoft Corporation    (Verified) Microsoft Windows
unchecky_bg.exe    < 0.01    2,544 K    7,748 K    3040    Unchecky Background Process    RaMMicHaeL    (Verified) Reason Software Company Inc.
SearchIndexer.exe    < 0.01    29,452 K    19,948 K    3120    Microsoft Windows Search Indexer    Microsoft Corporation    (Verified) Microsoft Windows
svchost.exe    < 0.01    8,264 K    13,052 K    1236    Host Process for Windows Services    Microsoft Corporation    (Verified) Microsoft Windows
svchost.exe    < 0.01    29,164 K    44,296 K    1272    Host Process for Windows Services    Microsoft Corporation    (Verified) Microsoft Windows
svchost.exe    < 0.01    16,980 K    17,440 K    1496    Host Process for Windows Services    Microsoft Corporation    (Verified) Microsoft Windows
SASCore64.exe    < 0.01    2,172 K    4,476 K    1812    Core Service    SUPERAntiSpyware.com    (Verified) SuperAdBlocker.com
peerblock.exe    < 0.01    15,676 K    18,004 K    2220    PeerBlock    PeerBlock, LLC    (Verified) PeerBlock
WmiPrvSE.exe    < 0.01    25,620 K    29,868 K    5104    WMI Provider Host    Microsoft Corporation    (Verified) Microsoft Windows
csrss.exe    < 0.01    2,792 K    5,008 K    796    Client Server Runtime Process    Microsoft Corporation    (Verified) Microsoft Windows
wmpnetwk.exe        4,848 K    3,004 K    4140    Windows Media Player Network Sharing Service    Microsoft Corporation    (Verified) Microsoft Windows
winlogon.exe        4,288 K    8,564 K    1016    Windows Logon Application    Microsoft Corporation    (Verified) Microsoft Windows
wininit.exe        2,536 K    5,548 K    852    Windows Start-Up Application    Microsoft Corporation    (Verified) Microsoft Windows
unchecky_svc.exe        1,696 K    5,016 K    2972    Unchecky Service    RaMMicHaeL    (Verified) Reason Software Company Inc.
TrustedInstaller.exe        10,764 K    17,116 K    4740    Windows Modules Installer    Microsoft Corporation    (Verified) Microsoft Windows
svchost.exe        4,540 K    8,108 K    772    Host Process for Windows Services    Microsoft Corporation    (Verified) Microsoft Windows
svchost.exe        11,348 K    14,108 K    1704    Host Process for Windows Services    Microsoft Corporation    (Verified) Microsoft Windows
svchost.exe        222,644 K    229,188 K    1196    Host Process for Windows Services    Microsoft Corporation    (Verified) Microsoft Windows
svchost.exe        5,696 K    10,584 K    660    Host Process for Windows Services    Microsoft Corporation    (Verified) Microsoft Windows
svchost.exe        5,400 K    9,400 K    1900    Host Process for Windows Services    Microsoft Corporation    (Verified) Microsoft Windows
svchost.exe        2,992 K    6,060 K    1372    Host Process for Windows Services    Microsoft Corporation    (Verified) Microsoft Windows
svchost.exe        18,312 K    23,588 K    1164    Host Process for Windows Services    Microsoft Corporation    (Verified) Microsoft Windows
svchost.exe        3,536 K    7,624 K    4996    Host Process for Windows Services    Microsoft Corporation    (Verified) Microsoft Windows
svchost.exe        2,556 K    6,120 K    2736    Host Process for Windows Services    Microsoft Corporation    (Verified) Microsoft Windows
svchost.exe        6,384 K    11,620 K    1860    Host Process for Windows Services    Microsoft Corporation    (Verified) Microsoft Windows
spoolsv.exe        7,960 K    13,124 K    1668    Spooler SubSystem App    Microsoft Corporation    (Verified) Microsoft Windows
smss.exe        772 K    1,476 K    620    Windows Session Manager    Microsoft Corporation    (Verified) Microsoft Windows
services.exe        6,424 K    10,300 K    912    Services and Controller app    Microsoft Corporation    (Verified) Microsoft Windows
procexp.exe        2,892 K    7,388 K    4860    Sysinternals Process Explorer    Sysinternals - www.sysinternals.com    (Verified) Microsoft Corporation
nlssrv32.exe        2,264 K    5,092 K    2072    This service enables products that use the Nalpeiron Licensing System     Nalpeiron Ltd.    (No signature was present in the subject) Nalpeiron Ltd.
NisSrv.exe        16,468 K    10,940 K    3160    Microsoft Network Realtime Inspection Service    Microsoft Corporation    (Verified) Microsoft Corporation
msseces.exe        7,060 K    15,200 K    3012    Microsoft Security Client User Interface    Microsoft Corporation    (Verified) Microsoft Corporation
mbamservice.exe        307,348 K    135,284 K    1228    Malwarebytes Anti-Malware    Malwarebytes    (Verified) Malwarebytes Corporation
mbamscheduler.exe        5,784 K    11,168 K    1988    Malwarebytes Anti-Malware    Malwarebytes    (Verified) Malwarebytes Corporation
MAFWTray.exe        1,580 K    5,480 K    3616    M-Audio FW Tray Application    Avid Technology, Inc.    (Verified) M-Audio
lsm.exe        3,040 K    4,796 K    944    Local Session Manager Service    Microsoft Corporation    (Verified) Microsoft Windows
lsass.exe        4,984 K    12,140 K    936    Local Security Authority Process    Microsoft Corporation    (Verified) Microsoft Windows
jusched.exe        7,032 K    14,416 K    4012    Java Update Scheduler    Oracle Corporation    (Verified) Oracle America
atiesrxx.exe        2,348 K    5,116 K    1124    AMD External Events Service Module    AMD    (Verified) Microsoft Windows Hardware Compatibility Publisher
atieclxx.exe        3,552 K    7,444 K    1596    AMD External Events Client Module    AMD    (Verified) Microsoft Windows Hardware Compatibility Publisher
 

[RKinner]

Your PC is running a bit hot for a desktop.  (51 C )  It's not critical yet but usually a sign that dust is building up on the heatsink.  When you get a chance, shut it down, leave it connected to the wall, open it up.  Locate the CPU heatsink and use a vacuum cleaner hose and a small brush to suck out the dust around the heatsink, the fans, and any vents.  DO NOT REMOVE THE HEATSINK FROM THE CPU!  (OK to remove the fan tho)

 

Hard drive has more errors than I like:

 

Attribute name Read Error Rate

Real value 0

Current 111

Worst 99

Threshold 6

Raw Value 0002510DD8

Status Good

03

 

 

Attribute name Seek Error Rate

Real value 0

Current 68

Worst 60

Threshold 30

Raw Value 00019E171A

 

It may claim it's good but I'm not convinced.  I have a WD black 2 TB and it's not showing any errors.  Make sure you back up anything you can't afford to lose.

 

Process Explorer looks very good.  Nothing odd going on.

 

If the mouse is still giving you problems I would uninstall the software for the mouse and reinstall it.

[hmp3]

I reinstalled many times. Plus, the third user profile (uncustomised, no startmenu items, made from default) doesnt have this issue.

Seatools and HD Tune say the hdd is fine.

Warranties don't acknowledge that the drive is faulty unless the drive to fail Seatools.

Edited by harvestthesouls, 01 February 2016 - 01:26 PM.