Fan never worked yesterday but amazingly there where no
icon-problems either!
I relate at least some of my icon-problems with memory-shortage. Today my fan has been working for 8 hours 100% except for one hour recently when temp where allowed to stretch above and around 80 dgr C for shorter periods(but shutdowns).
(Yesterday there where constant shutdowns). Normally it stays around 50-60 dgr C. When I say icon problem I relate to Explorer and searching in folders. The other more strange behavior has to do with the desktop. The Windows-shields(icons) are back. All icon´s can also disappear when programs are executed some way or another. I.e when I deleted my network desktop-icons returned to standard MS icons! This happened during a period when the fan allowed high cpu-temp! 10 sec later they gradually returned. Maybe you then understand why I am not sure it is(only) a
hardware-error(?). Fan worked every day without interuptions after OS reinstallment but started to malfunction around the time I found malware/ virus-infections(before restore). Still I had not visit bad sites or downloaded unknown stuff.
Why 2 identical(long specified commands)
csrss.exe files running(Sessions)? I know it is perfectly normal with multiple csrss-files running but not with 2 identical users(System) when there is only one "interactive" user, me the owner(Ägaren)?
How about the
2 dllhost-files? They are also both runned under System-user- identity?
User "Yxan" which was "deleted"(by the restoring-process) when the OS was restored can
not be found in Control Panel as a "USER"(under User´s). Do I have to do some registry-deletions here?
Could there be some relationship here between the two sets of exe-files above and two sets of USERS?
DNSCache was disabled by me to reduce the possibility of browser-redirections.
Maybe it´s wise to set the service to automatic? For the moment I have not experienced any problems though! It´s still disabled when you look at my FSS-log
below;
Farbar Service Scanner Version: 08-01-2014
Ran by Ägaren (administrator) on 30-01-2014 at 17:18:48
Running from "C:\Users\Ägaren\Desktop"
Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86)
Boot Mode: Normal
****************************************************************
Internet Services:
============
Dnscache Service is not running. Checking service configuration:
The start type of Dnscache service is set to Disabled. The default start type is Auto.
The ImagePath of Dnscache service is OK.
The ServiceDll of Dnscache service is OK.
Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.
Windows Firewall:
=============
Firewall Disabled Policy:
==================
System Restore:
============
System Restore Disabled Policy:
========================
Security Center:
============
Windows Update:
============
Windows Autoupdate Disabled Policy:
============================
Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.
Windows Defender Disabled Policy:
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1
Other Services:
==============
File Check:
========
C:\Windows\system32\nsisvc.dll => MD5 is legit
C:\Windows\system32\Drivers\nsiproxy.sys => MD5 is legit
C:\Windows\system32\dhcpcsvc.dll => MD5 is legit
C:\Windows\system32\Drivers\afd.sys => MD5 is legit
C:\Windows\system32\Drivers\tdx.sys => MD5 is legit
C:\Windows\system32\Drivers\tcpip.sys
[2013-10-22 10:06] - [2013-07-05 04:20] - 0914880 ____A (Microsoft Corporation) 6D0D344F643E28B31262AC2682109A3C
C:\Windows\system32\dnsrslvr.dll => MD5 is legit
C:\Windows\system32\mpssvc.dll => MD5 is legit
C:\Windows\system32\bfe.dll => MD5 is legit
C:\Windows\system32\Drivers\mpsdrv.sys => MD5 is legit
C:\Windows\system32\SDRSVC.dll => MD5 is legit
C:\Windows\system32\vssvc.exe => MD5 is legit
C:\Windows\system32\wscsvc.dll => MD5 is legit
C:\Windows\system32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\system32\wuaueng.dll => MD5 is legit
C:\Windows\system32\qmgr.dll => MD5 is legit
C:\Windows\system32\es.dll => MD5 is legit
C:\Windows\system32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\system32\ipnathlp.dll => MD5 is legit
C:\Windows\system32\iphlpsvc.dll => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
**** End of log ****
At last another strange thing. As I told You before I have had different Firewall(Win) problems. Ports have been open for remote control and without logging and
warning-messages. In Windows Firewall you can list exceptions from the firewall-
blocking. This page(FW settings) today contains a lot of programs that are used for remote control. You just have to check a box to get a free unblocked passage through FW. And the same programs
can not be deleted from this list.
. Since restoring I have not seen I.e remote-control as an exception(or others). BUT the list is still there. A bit worrysome though.
