Boot MGR is missing

[PhilipMoore1953]

As my title suggests I'm have difficulties in correcting a boot mgr is missing error. Resulting in the dell computer I'm working on not booting up. The computer has Windows 7 home premium installed.

I've researched all of the videos that Brian has created. Followed them carefully and still get the same result.

I'm at my wits end as to how to proceed. The client is a writer and has a non backed up book on the OS he is working on which is the cause for concern.

I've followed the direction to repair, fix mbr. fix boot and other commands that Brian has listed in his videos regarding correcting this problem. I've followed direction on Brians video about how to set the Primary partition to active. Still no joy.

I've tried all of the auto repair options when using the Windows install media which was again unsuccessful.

I've used the suggestion to use Hirens boot cd to open Windows xp to follow the video Brian has re this topic followed it carefully and at the commands that were given the end result showed they had been successfully accomplished.

Any suggestions would be greatly appreciated.

Phil.

[smirk24]

(09-21-2018, 12:08 PM)PhilipMoore1953 Wrote:  As my title suggests I'm have difficulties in correcting a boot mgr is missing error. Resulting in the dell computer I'm working on not booting up. The computer has Windows 7 home premium installed.

I've researched all of the videos that Brian has created. Followed them carefully and still get the same result.

I'm at my wits end as to how to proceed. The client is a writer and has a non backed up book on the OS he is working on which is the cause for concern.

I've followed the direction to repair, fix mbr. fix boot and other commands that Brian has listed in his videos regarding correcting this problem. I've followed direction on Brians video about how to set the Primary partition to active. Still no joy.

I've tried all of the auto repair options when using the Windows install media which was again unsuccessful.

I've used the suggestion to use Hirens boot cd to open Windows xp to follow the video Brian has re this topic followed it carefully and at the commands that were given the end result showed they had been successfully accomplished.

Any suggestions would be greatly appreciated.

Phil.

Have you tried startup repair using the os disk?
You can also rebuild the mbr with the os disk also. But if you still cant get it id boot from a pe disk and see about getting important files off the drive then reinstall windows

https://support.microsoft.com/en-us/help/2622803/bootmgr-is-missing-press-ctrl-alt-del-to-restart-error-when-you-start


https://www.lifewire.com/how-to-fix-bootmgr-is-missing-errors-2623118


https://www.thewindowsclub.com/fix-bootmgr-missing-windows-7

[Compton]

I would check hard drive health status

I know you can't boot into windows so you will remove the hard drive from the client system

put it into your system


https://briteccomputers.co.uk/forum/showthread.php?tid=695


https://briteccomputers.co.uk/forum/showthread.php?tid=678

[PhilipMoore1953]

I was successful removing the hard drive from computer plugging it directly into my computer via Tripp Lite. I can now see all of the files/folders.

currently i'm running a malwarebytes scan on the HD. It's now showing 89 infections while MB is still scanning. When I go to the document folder and attempt to open it I get the message that folder in inaccessible how do I access these files/folders?

Thanks so much for your prompt attention to my difficulties!

[Compton]

that could because of the malware problem

do the owner use a windows password ?

post-Malwarebytes scan results

[PhilipMoore1953]

and we are still scanning mb's 3hrs 10 minutes 88 infections will send the report when finished

[PhilipMoore1953]

External drive MB scan results

Malwarebytes
http://www.malwarebytes.com

-Log Details-
Scan Date: 9/21/18
Scan Time: 8:03 AM
Log File: 9187ece8-bdaf-11e8-979d-acb57d0672e9.json

-Software Information-
Version: 3.5.1.2522
Components Version: 1.0.441
Update Package Version: 1.0.6951
License: Premium

-System Information-
OS: Windows 10 (Build 17134.319)
CPU: x64
File System: NTFS
User: DESKTOP-3IQLVAN\Philip

-Scan Summary-
Scan Type: Custom Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 980661
Threats Detected: 88
Threats Quarantined: 88
Time Elapsed: 6 hr, 15 min, 8 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 88
PUP.Optional.APNToolBar, G:\CONFIG.MSI\5C9DF691.RBF, Quarantined, [7661], [76242],1.0.6951
PUP.Optional.ASK.Generic, G:\CONFIG.MSI\5C9DF69C.RBF, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.InstallIQ, G:\GS BACKUP\USERS\DAIRY FARM\APPDATA\LOCAL\MICROSOFT\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\GSB1LCSG\7ZIPAP_718.EXE, Quarantined, [6911], [76847],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\ORJ-SPE\SOURCE\PROGRAM FILES\ASKPARTNERNETWORK\TOOLBAR\UPDATER\IDC\IDCSRV.DLL, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\ORJ-SPE\SOURCE\PROGRAM FILES\ASKPARTNERNETWORK\TOOLBAR\UPDATER\IDC\IDCSRVSTUB_X64.DLL, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\ORJ-SPE\SOURCE\PROGRAM FILES\ASKPARTNERNETWORK\TOOLBAR\UPDATER\IDC\IDCSRV_X64.DLL, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\ORJ-SPE\SOURCE\PROGRAM FILES\ASKPARTNERNETWORK\TOOLBAR\{PARTNERID}\PASSPORT.DLL, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\ORJ-SPE\SOURCE\PROGRAM FILES\ASKPARTNERNETWORK\TOOLBAR\UPDATER\TBNHLPR.EXE, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\ORJ-SPE\SOURCE\PROGRAM FILES\ASKPARTNERNETWORK\TOOLBAR\SERVICELOCATOR.EXE, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\ORJ-SPE\SOURCE\PROGRAM FILES\ASKPARTNERNETWORK\TOOLBAR\BROWSERHOST.DLL, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\ORJ-SPE\SOURCE\PROGRAM FILES\ASKPARTNERNETWORK\TOOLBAR\TOPSITESRT.EXE, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\ORJ-SPE\SOURCE\PROGRAM FILES\ASKPARTNERNETWORK\TOOLBAR\UPDATER\TBNOTIFIER.EXE, Quarantined, [2], [124638],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\ORJ-SPE\SOURCE\PROGRAM FILES\ASKPARTNERNETWORK\TOOLBAR\SEARCHHOOK.DLL, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\ORJ-SPE\SOURCE\PROGRAM FILES\ASKPARTNERNETWORK\TOOLBAR\TOOLBAR.EXE, Quarantined, [2], [307953],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\ORJ-SPE\SOURCE\PROGRAM FILES\ASKPARTNERNETWORK\TOOLBAR\TOOLBAR_X64.DLL, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\ORJ-SPE\SOURCE\PROGRAM FILES\VNT\VNTLDR.EXE, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\UPDATER\TBNHLPR_X64.EXE, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\SEARCHHOOK.DLL, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\TOOLBAR_X64.DLL, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\ORJ-SPE\PASSPORT.DLL, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\ORJ-SPE\SOURCE\PROGRAM FILES\ASKPARTNERNETWORK\TOOLBAR\UPDATER\IDC\IDCLDR_X64.EXE, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\DESKBAR.EXE, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\ORJ-SPE\SOURCE\PROGRAM FILES\ASKPARTNERNETWORK\TOOLBAR\APNMCP.EXE, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\TOOLBARPS.DLL, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\ORJ-SPE\SOURCE\PROGRAM FILES\ASKPARTNERNETWORK\TOOLBAR\TOOLBAR.DLL, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.APNToolBar, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\APNSETUP.EXE, Quarantined, [7661], [76242],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\TOOLBAR.DLL, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\ORJ-SPE\SOURCE\PROGRAM FILES\ASKPARTNERNETWORK\CHROMEUTILS\APNNATIVEMSGHOST.EXE, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\APNMCP.EXE, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\ORJ-SPE\SOURCE\PROGRAM FILES\ASKPARTNERNETWORK\TOOLBAR\UPDATER\IDC\IDCSRVSTUB.DLL, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\ORJ-SPE\SOURCE\PROGRAM FILES\ASKPARTNERNETWORK\TOOLBAR\UPDATER\TBNHLPR_X64.EXE, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\ORJ-SPE\SOURCE\PROGRAM FILES\ASKPARTNERNETWORK\TOOLBAR\UPDATER\IDC\IDCLDR.EXE, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\SO.DLL, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\UPDATEMANAGER.EXE, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\ORJ-SPE\SOURCE\PROGRAM FILES\ASKPARTNERNETWORK\TOOLBAR\DESKBAR.EXE, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\ORJ-SPE\SOURCE\PROGRAM FILES\ASKPARTNERNETWORK\TOOLBAR\{PARTNERID}\PASSPORT_X64.DLL, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\ORJ-SPE\SOURCE\PROGRAM FILES\ASKPARTNERNETWORK\TOOLBAR\TOOLBARPS.DLL, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\ORJ-SPE\SOURCE\PROGRAM FILES\ASKPARTNERNETWORK\TOOLBAR\SO.DLL, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\ORJ-SPE\SOURCE\PROGRAM FILES\ASKPARTNERNETWORK\TOOLBAR\UPDATEMANAGER.EXE, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\ORJ-SPE\PASSPORT_X64.DLL, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\BROWSERHOST.DLL, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\TOOLBAR.EXE, Quarantined, [2], [307953],1.0.6951
PUP.Optional.ASK, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\UPDATER\TBNOTIFIER.EXE, Quarantined, [2], [124638],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\SERVICELOCATOR.EXE, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\PROGRAM FILES (X86)\ASKPARTNERNETWORK\TOOLBAR\TOPSITESRT.EXE, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.Jawego, G:\PROGRAM FILES (X86)\PC PROTECTOR PLUS\APPRESOURCE.DLL, Quarantined, [534], [349695],1.0.6951
PUP.Optional.Jawego, G:\PROGRAM FILES (X86)\PC PROTECTOR PLUS\UNINS000.EXE, Quarantined, [534], [349695],1.0.6951
PUP.Optional.Jawego, G:\PROGRAM FILES (X86)\PC PROTECTOR PLUS\CLAMUNPACK\CLAMSCAN.EXE, Quarantined, [534], [349695],1.0.6951
PUP.Optional.Jawego, G:\PROGRAM FILES (X86)\PC PROTECTOR PLUS\XCEED.ZIP.DLL, Quarantined, [534], [349695],1.0.6951
PUP.Optional.Jawego, G:\PROGRAM FILES (X86)\PC PROTECTOR PLUS\PCPROPLUSSYS.DLL, Quarantined, [534], [349695],1.0.6951
PUP.Optional.Jawego, G:\PROGRAM FILES (X86)\PC PROTECTOR PLUS\XCEED.COMPRESSION.FORMATS.DLL, Quarantined, [534], [349695],1.0.6951
PUP.Optional.Jawego, G:\PROGRAM FILES (X86)\PC PROTECTOR PLUS\XCEED.COMPRESSION.DLL, Quarantined, [534], [349695],1.0.6951
PUP.Optional.Jawego, G:\PROGRAM FILES (X86)\PC PROTECTOR PLUS\PCPUNINSTALL.EXE, Quarantined, [534], [349695],1.0.6951
PUP.Optional.Jawego, G:\PROGRAM FILES (X86)\PC PROTECTOR PLUS\BROWSERCLEANER.EXE, Quarantined, [534], [349695],1.0.6951
PUP.Optional.Jawego, G:\PROGRAM FILES (X86)\PC PROTECTOR PLUS\CLAMUNPACK\LIBCLAMAV.DLL, Quarantined, [534], [349695],1.0.6951
PUP.Optional.Jawego, G:\PROGRAM FILES (X86)\PC PROTECTOR PLUS\INTEROP.IWSHRUNTIMELIBRARY.DLL, Quarantined, [534], [349695],1.0.6951
PUP.Optional.Jawego, G:\PROGRAM FILES (X86)\PC PROTECTOR PLUS\SCANDLL.DLL, Quarantined, [534], [481559],1.0.6951
PUP.Optional.Jawego, G:\PROGRAM FILES (X86)\PC PROTECTOR PLUS\PCPROTECTORPLUS.EXE, Quarantined, [534], [481559],1.0.6951
PUP.Optional.Jawego, G:\PROGRAM FILES (X86)\PC PROTECTOR PLUS\XCEED.FILESYSTEM.DLL, Quarantined, [534], [349695],1.0.6951
PUP.Optional.TopTools, G:\PROGRAM FILES (X86)\SCREENSNAPSHOTTOOL\1.1.0.11416\INSTALLHELPER.EXE, Quarantined, [587], [525895],1.0.6951
PUP.Optional.TopTools, G:\PROGRAM FILES (X86)\SCREENSNAPSHOTTOOL\1.1.0.11416\CRASHREPORT.EXE, Quarantined, [587], [525895],1.0.6951
PUP.Optional.TopTools, G:\PROGRAM FILES (X86)\SCREENSNAPSHOTTOOL\1.1.0.11416\SCREENSHOTSERV.EXE, Quarantined, [587], [525895],1.0.6951
PUP.Optional.TopTools, G:\PROGRAM FILES (X86)\SCREENSNAPSHOTTOOL\1.1.0.11416\SCREENSNAPSHOT.EXE, Quarantined, [587], [525895],1.0.6951
PUP.Optional.TopTools, G:\PROGRAM FILES (X86)\SCREENSNAPSHOTTOOL\1.1.0.11416\CRASHUL.EXE, Quarantined, [587], [525895],1.0.6951
PUP.Optional.TopTools, G:\PROGRAM FILES (X86)\SCREENSNAPSHOTTOOL\1.1.0.11416\REPORT.EXE, Quarantined, [587], [525895],1.0.6951
PUP.Optional.TopTools, G:\PROGRAM FILES (X86)\TOOLS\UPDATE\CRASHUL.EXE, Quarantined, [587], [512674],1.0.6951
PUP.Optional.TopTools, G:\PROGRAM FILES (X86)\TOOLS\UPDATE\CRASHREPORT64.EXE, Quarantined, [587], [512674],1.0.6951
PUP.Optional.UpdatePlatform, G:\PROGRAM FILES (X86)\TOOLSUPDATEPLATFORM\UPDATEPLATFORM.EXE, Quarantined, [10224], [78116],1.0.6951
Adware.TopTools, G:\PROGRAM FILES (X86)\TOOLSUPDATEPLATFORM\CRASHREPORT.EXE, Quarantined, [7827], [340445],1.0.6951
Adware.TopTools, G:\PROGRAM FILES (X86)\TOOLS\UPDATE\TOOLS_UPDATE.EXE, Quarantined, [7827], [495713],1.0.6951
PUP.Optional.TopTools, G:\PROGRAM FILES (X86)\TOOLS\UPDATE\CRASHREPORT.EXE, Quarantined, [587], [512674],1.0.6951
Adware.TopTools, G:\PROGRAM FILES (X86)\TOOLSUPDATEPLATFORM\CRASHUL.EXE, Quarantined, [7827], [340445],1.0.6951
PUP.Optional.ScreenShotPro, G:\PROGRAM FILES (X86)\VSNAPSHOT\1.2.0.0\VSNAPSHOT.EXE, Quarantined, [4246], [342205],1.0.6951
PUP.Optional.vScreenShot, G:\PROGRAM FILES (X86)\VSNAPSHOT\1.2.0.0\INSTALLHELPER.EXE, Quarantined, [14062], [495712],1.0.6951
PUP.Optional.ASK.Generic, G:\USERS\JOE\APPDATA\LOCAL\ASKPARTNERNETWORK\TOOLBAR\UPDATER\IDC\IDCSRV_X64.DLL,​ Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\USERS\JOE\APPDATA\LOCAL\ASKPARTNERNETWORK\TOOLBAR\UPDATER\IDC\IDCLDR.EXE, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\USERS\JOE\APPDATA\LOCAL\ASKPARTNERNETWORK\TOOLBAR\UPDATER\IDC\IDCSRVSTUB.DLL,​ Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\USERS\JOE\APPDATA\LOCAL\ASKPARTNERNETWORK\TOOLBAR\UPDATER\IDC\IDCSRVSTUB_X64.​DLL, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\USERS\JOE\APPDATA\LOCAL\ASKPARTNERNETWORK\TOOLBAR\UPDATER\IDC\IDCLDR_X64.EXE,​ Quarantined, [1969], [345551],1.0.6951
PUP.Optional.ASK.Generic, G:\USERS\JOE\APPDATA\LOCAL\ASKPARTNERNETWORK\TOOLBAR\UPDATER\IDC\IDCSRV.DLL, Quarantined, [1969], [345551],1.0.6951
PUP.Optional.Jawego, G:\USERS\JOE\APPDATA\LOCAL\JAWEGO\PC PROTECTOR PLUS\PCPLUSCONTEXTHELPER64.DLL, Quarantined, [534], [349695],1.0.6951
PUP.Optional.EventMonitor, G:\USERS\JOE\APPDATA\ROAMING\EVENT MONITOR\PRODUCTSETUP_SETUP_11_27_2016.EXE, Quarantined, [3921], [331356],1.0.6951
PUP.Optional.Jawego, G:\USERS\JOE\APPDATA\ROAMING\EVENT MONITOR\PRODUCTSETUP_SETUP_7_21_2016.EXE, Quarantined, [534], [348975],1.0.6951
PUP.Optional.Jawego, G:\USERS\JOE\APPDATA\ROAMING\EVENT MONITOR\PRODUCTSETUP_SETUP_9_28_2016.EXE, Quarantined, [534], [481559],1.0.6951
Generic.Malware/Suspicious, G:\USERS\JOE\APPDATA\ROAMING\SETUP42071.EXE, Quarantined, [0], [392686],1.0.6951
PUP.Optional.InstallIQ, G:\USERS\JOE\DOWNLOADS\7ZIPAP_718.EXE, Quarantined, [6911], [76847],1.0.6951
PUP.Optional.Jawego, G:\WINDOWS\SYSTEM32\PCPLUSNATIVE64.EXE, Quarantined, [534], [349695],1.0.6951
PUP.Optional.ASK.Generic, G:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCAC​HE\IE\ASKTOOLBARINSTALLER-ORJ-SPE[1].7Z, Quarantined, [1969], [345551],1.0.6951

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)


(end)

[Compton]

run Zemana AntiMalware https://www.zemana.com/antimalware

did you check the hard drive health status?

[PhilipMoore1953]

Hi Compton
This is the results of the Crystal disk info scan
The first scan is my hard drive the second scan is the clients.

Overall feedback of clients DR is one of caution (yellow) from the scan.

Clients drive is WDC WD10EALX-759BA1
Zemana is still scanning. Nothing found at 54%

Phil
----------------------------------------------------------------------------
CrystalDiskInfo 7.7.0 © 2008-2018 hiyohiyo
Crystal Dew World : https://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows 10 Professional [10.0 Build 17134] (x64)
Date : 2018/09/22 7:05:53

-- Controller Map ----------------------------------------------------------
+ Intel® Pentium® processor N- and J-series / Intel® Celeron® processor N- and J-series AHCI - 0F23 [ATA]
- WDC WD5000LPVX-22V0TT0
- HL-DT-ST DVDRAM GUC0N
- Microsoft Storage Spaces Controller [SCSI]

-- Disk List ---------------------------------------------------------------
(1) WDC WD5000LPVX-22V0TT0 : 500.1 GB [0/0/0, pd1] - wd
(2) WDC WD10EALX-759BA1 : 1000.2 GB [1/0/0, jm1] - wd

----------------------------------------------------------------------------
(1) WDC WD5000LPVX-22V0TT0
----------------------------------------------------------------------------
Model : WDC WD5000LPVX-22V0TT0
Firmware : 01.01A01
Serial Number : WD-WX11AA44336T
Disk Size : 500.1 GB (8.4/137.4/500.1/500.1)
Buffer Size : 8192 KB
Queue Depth : 32
# of Sectors : 976773168
Rotation Rate : 5400 RPM
Interface : Serial ATA
Major Version : ACS-2
Minor Version : ----
Transfer Mode : SATA/300 | SATA/600
Power On Hours : 10836 hours
Power On Count : 3605 count
Temperature : 35 C (95 F)
Health Status : Good
Features : S.M.A.R.T., APM, 48bit LBA, NCQ
APM Level : 0060h [ON]
AAM Level : ----
Drive Letter : C:

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 200 200 _51 000000000002 Read Error Rate
03 151 147 _21 000000000588 Spin-Up Time
04 __1 __1 __0 000000018B60 Start/Stop Count
05 200 200 140 000000000000 Reallocated Sectors Count
07 200 200 __0 000000000000 Seek Error Rate
09 _86 _86 __0 000000002A54 Power-On Hours
0A 100 100 __0 000000000000 Spin Retry Count
0B 100 100 __0 000000000000 Recalibration Retries
0C _97 _97 __0 000000000E15 Power Cycle Count
BF __1 __1 __0 000000000091 G-Sense Error Rate
C0 199 199 __0 00000000036B Power-off Retract Count
C1 102 102 __0 00000004815B Load/Unload Cycle Count
C2 108 _91 __0 000000000023 Temperature
C4 200 200 __0 000000000000 Reallocation Event Count
C5 200 200 __0 000000000000 Current Pending Sector Count
C6 100 253 __0 000000000000 Uncorrectable Sector Count
C7 200 200 __0 000000000000 UltraDMA CRC Error Count
C8 100 253 __0 000000000000 Write Error Rate

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 427A 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 2020 2020 2057 442D 5758 3131 4141 3434 3333 3654
020: 0000 4000 0000 3031 2E30 3141 3031 5744 4320 5744
030: 3530 3030 4C50 5658 2D32 3256 3054 5430 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 4000 2F00
050: 4001 0000 0000 0007 3FFF 0010 003F FC10 00FB 0100
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 001F FF0E 0004 004C 0040
080: 03FE 0000 746B 7D69 6123 7469 BC49 6123 017F 0036
090: 0036 0060 FFFE 0000 0000 0000 0000 0000 0000 0000
100: 6030 3A38 0000 0000 0000 0000 6003 0000 5001 4EE6
110: AFCC A17C 0000 0000 0000 0000 0000 0000 0000 4018
120: 4018 0000 0000 0000 0000 0000 0000 0000 0029 0000
130: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
140: 0000 0000 0004 0000 0000 0000 0000 0000 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 7035 0000 0000 4000
210: 0000 0000 0000 0000 0000 0000 0000 1518 0000 0000
220: 0000 0000 103E 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 1000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 C0A5

-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 2F 00 C8 C8 02 00 00 00 00 00 00 03 27
010: 00 97 93 88 05 00 00 00 00 00 04 32 00 01 01 60
020: 8B 01 00 00 00 00 05 33 00 C8 C8 00 00 00 00 00
030: 00 00 07 2E 00 C8 C8 00 00 00 00 00 00 00 09 32
040: 00 56 56 54 2A 00 00 00 00 00 0A 32 00 64 64 00
050: 00 00 00 00 00 00 0B 32 00 64 64 00 00 00 00 00
060: 00 00 0C 32 00 61 61 15 0E 00 00 00 00 00 BF 32
070: 00 01 01 91 00 00 00 00 00 00 C0 32 00 C7 C7 6B
080: 03 00 00 00 00 00 C1 32 00 66 66 5B 81 04 00 00
090: 00 00 C2 22 00 6C 5B 23 00 00 00 00 00 00 C4 32
0A0: 00 C8 C8 00 00 00 00 00 00 00 C5 32 00 C8 C8 00
0B0: 00 00 00 00 00 00 C6 30 00 64 FD 00 00 00 00 00
0C0: 00 00 C7 32 00 C8 C8 00 00 00 00 00 00 00 C8 08
0D0: 00 64 FD 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 60 27 01 7B
170: 03 00 01 00 02 73 05 00 00 00 00 00 00 00 00 00
180: 00 00 01 02 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8A

-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 33 C8 C8 00 00 00 00 00 00 00 00 03 15
010: 00 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00
020: 00 00 00 00 00 00 05 8C 00 00 00 00 00 00 00 00
030: 00 00 07 00 C8 C8 00 00 00 00 00 00 00 00 09 00
040: 00 00 00 00 00 00 00 00 00 00 0A 00 00 00 00 00
050: 00 00 00 00 00 00 0B 00 00 00 00 00 00 00 00 00
060: 00 00 0C 00 00 00 00 00 00 00 00 00 00 00 BF 00
070: 00 00 00 00 00 00 00 00 00 00 C0 00 00 00 00 00
080: 00 00 00 00 00 00 C1 00 00 00 00 00 00 00 00 00
090: 00 00 C2 00 00 00 00 00 00 00 00 00 00 00 C4 00
0A0: 00 00 00 00 00 00 00 00 00 00 C5 00 00 00 00 00
0B0: 00 00 00 00 00 00 C6 00 00 00 00 00 00 00 00 00
0C0: 00 00 C7 00 00 00 00 00 00 00 00 00 00 00 C8 00
0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 DE

----------------------------------------------------------------------------
(2) WDC WD10EALX-759BA1
----------------------------------------------------------------------------
Enclosure : WDC WD10 EALX-759BA1 USB Device (V=152D, P=2338, jm1) - wd
Model : WDC WD10EALX-759BA1
Firmware : 19.01H19
Serial Number : WD-WCATR8788566
Disk Size : 1000.2 GB (8.4/137.4/1000.2/1000.2)
Buffer Size : 32767 KB
Queue Depth : 32
# of Sectors : 1953525168
Rotation Rate : Unknown
Interface : USB (Serial ATA)
Major Version : ATA8-ACS
Minor Version : ----
Transfer Mode : SATA/150 | SATA/600
Power On Hours : 18775 hours
Power On Count : 29034 count
Host Reads : 34889 GB
Host Writes : 34757 GB
Temperature : 51 C (123 F)
Health Status : Caution
Features : S.M.A.R.T., 48bit LBA, NCQ
APM Level : ----
AAM Level : ----
Drive Letter : E: F: G:

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 200 200 _51 000000000006 Read Error Rate
03 193 176 _21 000000000D05 Spin-Up Time
04 _71 _71 __0 00000000716C Start/Stop Count
05 200 200 140 000000000000 Reallocated Sectors Count
07 200 200 __0 000000000000 Seek Error Rate
09 _75 _75 __0 000000004957 Power-On Hours
0A 100 100 __0 000000000000 Spin Retry Count
0B 100 100 __0 000000000000 Recalibration Retries
0C _71 _71 __0 00000000716A Power Cycle Count
C0 200 200 __0 0000000000B5 Power-off Retract Count
C1 191 191 __0 0000000070B6 Load/Unload Cycle Count
C2 _96 _95 __0 000000000033 Temperature
C4 200 200 __0 000000000000 Reallocation Event Count
C5 200 200 __0 000000000000 Current Pending Sector Count
C6 200 200 __0 000000000001 Uncorrectable Sector Count
C7 200 200 __0 000000000000 UltraDMA CRC Error Count
C8 200 200 __0 000000000001 Write Error Rate
F0 _76 _76 __0 0000000044AC Head Flying Hours
F1 200 200 __0 0010F8B6126C Total Host Writes
F2 200 200 __0 00110936D569 Total Host Reads

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 427A 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 2020 2020 2057 442D 5743 4154 5238 3738 3835 3636
020: 0000 FFFF 0032 3139 2E30 3148 3139 5744 4320 5744
030: 3130 4541 4C58 2D37 3539 4241 3120 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 0000 2F00
050: 4001 0000 0000 0007 3FFF 0010 003F FC10 00FB 0100
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 001F 170E 0002 004C 0040
080: 01FE 0000 746B 7D61 4123 7469 BC41 4123 407F 0057
090: 0057 0000 FFFE 0000 0000 0000 0000 0000 0000 0000
100: 6DB0 7470 0000 0000 0000 0000 0000 0000 5001 4EE2
110: 063F 297B 0000 0000 0000 0000 0000 0000 0000 4018
120: 4018 0000 0000 0000 0000 0000 0000 0000 0021 0000
130: 0000 0000 0000 16E2 0000 0000 0000 0000 0000 0000
140: 0000 0000 0004 0000 0000 0000 0000 0000 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 3037 0000 0000 0000
210: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
220: 0000 0000 103E 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 1000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 5BA5

-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 2F 00 C8 C8 06 00 00 00 00 00 00 03 27
010: 00 C1 B0 05 0D 00 00 00 00 00 04 32 00 47 47 6C
020: 71 00 00 00 00 00 05 33 00 C8 C8 00 00 00 00 00
030: 00 00 07 2E 00 C8 C8 00 00 00 00 00 00 00 09 32
040: 00 4B 4B 57 49 00 00 00 00 00 0A 32 00 64 64 00
050: 00 00 00 00 00 00 0B 32 00 64 64 00 00 00 00 00
060: 00 00 0C 32 00 47 47 6A 71 00 00 00 00 00 C0 32
070: 00 C8 C8 B5 00 00 00 00 00 00 C1 32 00 BF BF B6
080: 70 00 00 00 00 00 C2 22 00 60 5F 33 00 00 00 00
090: 00 00 C4 32 00 C8 C8 00 00 00 00 00 00 00 C5 32
0A0: 00 C8 C8 00 00 00 00 00 00 00 C6 30 00 C8 C8 01
0B0: 00 00 00 00 00 00 C7 32 00 C8 C8 00 00 00 00 00
0C0: 00 00 C8 08 00 C8 C8 01 00 00 00 00 00 00 F0 32
0D0: 00 4C 4C AC 44 00 00 00 00 00 F1 32 00 C8 C8 6C
0E0: 12 B6 F8 10 00 00 F2 32 00 C8 C8 69 D5 36 09 11
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 82 11 08 43 01 7B
170: 03 00 01 60 02 C7 05 00 00 00 00 00 00 00 00 00
180: 00 00 01 04 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 A0

-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 33 C8 C8 C8 C8 00 00 00 00 00 00 03 15
010: 00 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00
020: 00 00 00 00 00 00 05 8C 00 00 00 00 00 00 00 00
030: 00 00 07 00 C8 C8 C8 C8 00 00 00 00 00 00 09 00
040: 00 00 00 00 00 00 00 00 00 00 0A 00 00 00 00 00
050: 00 00 00 00 00 00 0B 00 00 00 00 00 00 00 00 00
060: 00 00 0C 00 00 00 00 00 00 00 00 00 00 00 C0 00
070: 00 00 00 00 00 00 00 00 00 00 C1 00 00 00 00 00
080: 00 00 00 00 00 00 C2 00 00 00 00 00 00 00 00 00
090: 00 00 C4 00 00 00 00 00 00 00 00 00 00 00 C5 00
0A0: 00 00 00 00 00 00 00 00 00 00 C6 00 00 00 00 01
0B0: 00 00 00 00 00 00 C7 00 00 00 00 00 00 00 00 00
0C0: 00 00 C8 00 C8 C8 C8 C8 00 00 00 00 00 00 F0 00
0D0: 00 00 00 00 00 00 00 00 00 00 F1 00 00 00 00 00
0E0: 00 00 00 00 00 00 F2 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 89

[Timster]

Thread Moved