Every Shutdown now triggers a restart

Yes please - you'll need to zip it first, as the forum doesn't accept bare CAB files.

The only data in the posted log is actually from the SFC scan, so there are no other errors present.
 

My Computer My Computer

At a glance

Win 7 x64 Home Premium (and x86 VirtualBox VM...i3 370M/i7 6500U8GB - finally :)/8GBit's an i3, dude!/dual Intel&nVidia
Computer type
Laptop
Computer Manufacturer/Model Number
Asus K52F or Lenovo B51-80
OS
Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
CPU
i3 370M/i7 6500U
Motherboard
Asus/Lenovo
Memory
8GB - finally :)/8GB
Graphics Card(s)
it's an i3, dude!/dual Intel&nVidia
Sound Card
onboard
Monitor(s) Displays
15.6" built-in
Screen Resolution
1366x768/1920x1080
Hard Drives
750GB Seagate internal
Sundry external drives attached to other computers on the local network
1TB SSD on the Lenovo
PSU
n/a
Internet Speed
as much as I can get - usually on a dongle/phone, so <1MB/s
Antivirus
MSE/Defender
Browser
IE11/12/Edge/Chrome/FF(if I must)
You appear to be having a lot of problems with the Performance Counters -
YOu also seem to have problems with permissions for the PNRP service - which is affecting other services.


Open an Elevated Command Prompt, and run the following commands:

lodctr /r
typeperf -qx
ICACLS C:\ProgramData\Microsoft\Crypto\RSA

post the results.

Here are some instructions to make life easier :)
1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.
2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.
3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.
 

My Computer My Computer

At a glance

Win 7 x64 Home Premium (and x86 VirtualBox VM...i3 370M/i7 6500U8GB - finally :)/8GBit's an i3, dude!/dual Intel&nVidia
Computer type
Laptop
Computer Manufacturer/Model Number
Asus K52F or Lenovo B51-80
OS
Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
CPU
i3 370M/i7 6500U
Motherboard
Asus/Lenovo
Memory
8GB - finally :)/8GB
Graphics Card(s)
it's an i3, dude!/dual Intel&nVidia
Sound Card
onboard
Monitor(s) Displays
15.6" built-in
Screen Resolution
1366x768/1920x1080
Hard Drives
750GB Seagate internal
Sundry external drives attached to other computers on the local network
1TB SSD on the Lenovo
PSU
n/a
Internet Speed
as much as I can get - usually on a dongle/phone, so <1MB/s
Antivirus
MSE/Defender
Browser
IE11/12/Edge/Chrome/FF(if I must)
\Terminal Services Session(Services)\Total Timeouts
\Terminal Services Session(Console)\Total Timeouts
\Terminal Services Session(Services)\Total Async Frame Error
\Terminal Services Session(Console)\Total Async Frame Error
\Terminal Services Session(Services)\Total Async Overrun
\Terminal Services Session(Console)\Total Async Overrun
\Terminal Services Session(Services)\Total Async Overflow
\Terminal Services Session(Console)\Total Async Overflow
\Terminal Services Session(Services)\Total Async Parity Error
\Terminal Services Session(Console)\Total Async Parity Error
\Terminal Services Session(Services)\Total Transport Errors
\Terminal Services Session(Console)\Total Transport Errors
\Terminal Services Session(Services)\Total Protocol Cache Reads
\Terminal Services Session(Console)\Total Protocol Cache Reads
\Terminal Services Session(Services)\Total Protocol Cache Hits
\Terminal Services Session(Console)\Total Protocol Cache Hits
\Terminal Services Session(Services)\Total Protocol Cache Hit Ratio
\Terminal Services Session(Console)\Total Protocol Cache Hit Ratio
\Terminal Services Session(Services)\Protocol Bitmap Cache Reads
\Terminal Services Session(Console)\Protocol Bitmap Cache Reads
\Terminal Services Session(Services)\Protocol Bitmap Cache Hits
\Terminal Services Session(Console)\Protocol Bitmap Cache Hits
\Terminal Services Session(Services)\Protocol Bitmap Cache Hit Ratio
\Terminal Services Session(Console)\Protocol Bitmap Cache Hit Ratio
\Terminal Services Session(Services)\Protocol Glyph Cache Reads
\Terminal Services Session(Console)\Protocol Glyph Cache Reads
\Terminal Services Session(Services)\Protocol Glyph Cache Hits
\Terminal Services Session(Console)\Protocol Glyph Cache Hits
\Terminal Services Session(Services)\Protocol Glyph Cache Hit Ratio
\Terminal Services Session(Console)\Protocol Glyph Cache Hit Ratio
\Terminal Services Session(Services)\Protocol Brush Cache Reads
\Terminal Services Session(Console)\Protocol Brush Cache Reads
\Terminal Services Session(Services)\Protocol Brush Cache Hits
\Terminal Services Session(Console)\Protocol Brush Cache Hits
\Terminal Services Session(Services)\Protocol Brush Cache Hit Ratio
\Terminal Services Session(Console)\Protocol Brush Cache Hit Ratio
\Terminal Services Session(Services)\Protocol Save Screen Bitmap Cache Reads
\Terminal Services Session(Console)\Protocol Save Screen Bitmap Cache Reads
\Terminal Services Session(Services)\Protocol Save Screen Bitmap Cache Hits
\Terminal Services Session(Console)\Protocol Save Screen Bitmap Cache Hits
\Terminal Services Session(Services)\Protocol Save Screen Bitmap Cache Hit Ratio

\Terminal Services Session(Console)\Protocol Save Screen Bitmap Cache Hit Ratio
\Terminal Services Session(Services)\Input Compression Ratio
\Terminal Services Session(Console)\Input Compression Ratio
\Terminal Services Session(Services)\Output Compression Ratio
\Terminal Services Session(Console)\Output Compression Ratio
\Terminal Services Session(Services)\Total Compression Ratio
\Terminal Services Session(Console)\Total Compression Ratio
\USB(Intel(R) 7 Series-C216 Chipset Family USB Enhanced Host Con)\Bulk Bytes/Sec

\USB(Intel(R) 7 Series-C216 Chipset Family USB Enhanced Host Con#1)\Bulk Bytes/S
ec
\USB(Generic USB Hub)\Bulk Bytes/Sec
\USB(Generic USB Hub#1)\Bulk Bytes/Sec
\USB(Realtek USB 2.0 Card Reader)\Bulk Bytes/Sec
\USB(USB Composite Device)\Bulk Bytes/Sec
\USB(Intel(R) 7 Series-C216 Chipset Family USB Enhanced Host Con)\Isochronous By
tes/Sec
\USB(Intel(R) 7 Series-C216 Chipset Family USB Enhanced Host Con#1)\Isochronous
Bytes/Sec
\USB(Generic USB Hub)\Isochronous Bytes/Sec
\USB(Generic USB Hub#1)\Isochronous Bytes/Sec
\USB(Realtek USB 2.0 Card Reader)\Isochronous Bytes/Sec
\USB(USB Composite Device)\Isochronous Bytes/Sec
\USB(Intel(R) 7 Series-C216 Chipset Family USB Enhanced Host Con)\Interrupt Byte
s/Sec
\USB(Intel(R) 7 Series-C216 Chipset Family USB Enhanced Host Con#1)\Interrupt By
tes/Sec
\USB(Generic USB Hub)\Interrupt Bytes/Sec
\USB(Generic USB Hub#1)\Interrupt Bytes/Sec
\USB(Realtek USB 2.0 Card Reader)\Interrupt Bytes/Sec
\USB(USB Composite Device)\Interrupt Bytes/Sec
\USB(Intel(R) 7 Series-C216 Chipset Family USB Enhanced Host Con)\Control Data B
ytes/Sec
\USB(Intel(R) 7 Series-C216 Chipset Family USB Enhanced Host Con#1)\Control Data
Bytes/Sec
\USB(Generic USB Hub)\Control Data Bytes/Sec
\USB(Generic USB Hub#1)\Control Data Bytes/Sec
\USB(Realtek USB 2.0 Card Reader)\Control Data Bytes/Sec
\USB(USB Composite Device)\Control Data Bytes/Sec
\USB(Intel(R) 7 Series-C216 Chipset Family USB Enhanced Host Con)\Controller PCI
Interrupts/Sec
\USB(Intel(R) 7 Series-C216 Chipset Family USB Enhanced Host Con#1)\Controller P
CI Interrupts/Sec
\USB(Generic USB Hub)\Controller PCI Interrupts/Sec
\USB(Generic USB Hub#1)\Controller PCI Interrupts/Sec
\USB(Realtek USB 2.0 Card Reader)\Controller PCI Interrupts/Sec
\USB(USB Composite Device)\Controller PCI Interrupts/Sec
\USB(Intel(R) 7 Series-C216 Chipset Family USB Enhanced Host Con)\Controller Wor
kSignals/Sec
\USB(Intel(R) 7 Series-C216 Chipset Family USB Enhanced Host Con#1)\Controller W
orkSignals/Sec
\USB(Generic USB Hub)\Controller WorkSignals/Sec
\USB(Generic USB Hub#1)\Controller WorkSignals/Sec
\USB(Realtek USB 2.0 Card Reader)\Controller WorkSignals/Sec
\USB(USB Composite Device)\Controller WorkSignals/Sec
\USB(Intel(R) 7 Series-C216 Chipset Family USB Enhanced Host Con)\% Total Bandwi
dth Used for Interrupt
\USB(Intel(R) 7 Series-C216 Chipset Family USB Enhanced Host Con#1)\% Total Band
width Used for Interrupt
\USB(Generic USB Hub)\% Total Bandwidth Used for Interrupt
\USB(Generic USB Hub#1)\% Total Bandwidth Used for Interrupt
\USB(Realtek USB 2.0 Card Reader)\% Total Bandwidth Used for Interrupt
\USB(USB Composite Device)\% Total Bandwidth Used for Interrupt
\USB(Intel(R) 7 Series-C216 Chipset Family USB Enhanced Host Con)\% Total Bandwi
dth Used for Iso
\USB(Intel(R) 7 Series-C216 Chipset Family USB Enhanced Host Con#1)\% Total Band
width Used for Iso
\USB(Generic USB Hub)\% Total Bandwidth Used for Iso
\USB(Generic USB Hub#1)\% Total Bandwidth Used for Iso
\USB(Realtek USB 2.0 Card Reader)\% Total Bandwidth Used for Iso
\USB(USB Composite Device)\% Total Bandwidth Used for Iso
\USB(Intel(R) 7 Series-C216 Chipset Family USB Enhanced Host Con)\Avg. Bytes/Tra
nsfer
\USB(Intel(R) 7 Series-C216 Chipset Family USB Enhanced Host Con#1)\Avg. Bytes/T
ransfer
\USB(Generic USB Hub)\Avg. Bytes/Transfer
\USB(Generic USB Hub#1)\Avg. Bytes/Transfer
\USB(Realtek USB 2.0 Card Reader)\Avg. Bytes/Transfer
\USB(USB Composite Device)\Avg. Bytes/Transfer
\USB(Intel(R) 7 Series-C216 Chipset Family USB Enhanced Host Con)\Iso Packet Err
ors/Sec
\USB(Intel(R) 7 Series-C216 Chipset Family USB Enhanced Host Con#1)\Iso Packet E
rrors/Sec
\USB(Generic USB Hub)\Iso Packet Errors/Sec
\USB(Generic USB Hub#1)\Iso Packet Errors/Sec
\USB(Realtek USB 2.0 Card Reader)\Iso Packet Errors/Sec
\USB(USB Composite Device)\Iso Packet Errors/Sec
\USB(Intel(R) 7 Series-C216 Chipset Family USB Enhanced Host Con)\Avg ms latency
for ISO transfers
\USB(Intel(R) 7 Series-C216 Chipset Family USB Enhanced Host Con#1)\Avg ms laten
cy for ISO transfers
\USB(Generic USB Hub)\Avg ms latency for ISO transfers
\USB(Generic USB Hub#1)\Avg ms latency for ISO transfers
\USB(Realtek USB 2.0 Card Reader)\Avg ms latency for ISO transfers
\USB(USB Composite Device)\Avg ms latency for ISO transfers
\USB(Intel(R) 7 Series-C216 Chipset Family USB Enhanced Host Con)\Transfer Error
s/Sec
\USB(Intel(R) 7 Series-C216 Chipset Family USB Enhanced Host Con#1)\Transfer Err
ors/Sec
\USB(Generic USB Hub)\Transfer Errors/Sec
\USB(Generic USB Hub#1)\Transfer Errors/Sec
\USB(Realtek USB 2.0 Card Reader)\Transfer Errors/Sec
\USB(USB Composite Device)\Transfer Errors/Sec
\USB(Intel(R) 7 Series-C216 Chipset Family USB Enhanced Host Con)\Host Controlle
r Idle
\USB(Intel(R) 7 Series-C216 Chipset Family USB Enhanced Host Con#1)\Host Control
ler Idle
\USB(Generic USB Hub)\Host Controller Idle
\USB(Generic USB Hub#1)\Host Controller Idle
\USB(Realtek USB 2.0 Card Reader)\Host Controller Idle
\USB(USB Composite Device)\Host Controller Idle
\USB(Intel(R) 7 Series-C216 Chipset Family USB Enhanced Host Con)\Host Controlle
r Async Idle
\USB(Intel(R) 7 Series-C216 Chipset Family USB Enhanced Host Con#1)\Host Control
ler Async Idle
\USB(Generic USB Hub)\Host Controller Async Idle
\USB(Generic USB Hub#1)\Host Controller Async Idle
\USB(Realtek USB 2.0 Card Reader)\Host Controller Async Idle
\USB(USB Composite Device)\Host Controller Async Idle
\USB(Intel(R) 7 Series-C216 Chipset Family USB Enhanced Host Con)\Host Controlle
r Async Cache Flush Count
\USB(Intel(R) 7 Series-C216 Chipset Family USB Enhanced Host Con#1)\Host Control
ler Async Cache Flush Count
\USB(Generic USB Hub)\Host Controller Async Cache Flush Count
\USB(Generic USB Hub#1)\Host Controller Async Cache Flush Count
\USB(Realtek USB 2.0 Card Reader)\Host Controller Async Cache Flush Count
\USB(USB Composite Device)\Host Controller Async Cache Flush Count
\USB(Intel(R) 7 Series-C216 Chipset Family USB Enhanced Host Con)\Host Controlle
r Periodic Idle
\USB(Intel(R) 7 Series-C216 Chipset Family USB Enhanced Host Con#1)\Host Control
ler Periodic Idle
\USB(Generic USB Hub)\Host Controller Periodic Idle
\USB(Generic USB Hub#1)\Host Controller Periodic Idle
\USB(Realtek USB 2.0 Card Reader)\Host Controller Periodic Idle
\USB(USB Composite Device)\Host Controller Periodic Idle
\USB(Intel(R) 7 Series-C216 Chipset Family USB Enhanced Host Con)\Host Controlle
r Periodic Cache Flush Count
\USB(Intel(R) 7 Series-C216 Chipset Family USB Enhanced Host Con#1)\Host Control
ler Periodic Cache Flush Count
\USB(Generic USB Hub)\Host Controller Periodic Cache Flush Count
\USB(Generic USB Hub#1)\Host Controller Periodic Cache Flush Count
\USB(Realtek USB 2.0 Card Reader)\Host Controller Periodic Cache Flush Count
\USB(USB Composite Device)\Host Controller Periodic Cache Flush Count
\WMI Objects\HiPerf Classes
\WMI Objects\HiPerf Validity
\Battery Status(ACPI\PNP0C0A\1_0)\Charge Rate
\Battery Status(ACPI\PNP0C0A\1_0)\Discharge Rate
\Battery Status(ACPI\PNP0C0A\1_0)\Remaining Capacity
\Battery Status(ACPI\PNP0C0A\1_0)\Tag
\Battery Status(ACPI\PNP0C0A\1_0)\Voltage
\Processor Performance(PPM_Processor_0)\Processor Frequency
\Processor Performance(PPM_Processor_1)\Processor Frequency
\Processor Performance(PPM_Processor_0)\% of Maximum Frequency
\Processor Performance(PPM_Processor_1)\% of Maximum Frequency
\Processor Performance(PPM_Processor_0)\Processor State Flags
\Processor Performance(PPM_Processor_1)\Processor State Flags
\Queued Messages Dropped(SystemIndex)\Queued Messages Dropped Per Second
\Queued Messages Dropped(SystemIndex)\Percent Of Max Concurrent Calls
\Queued Messages Dropped(SystemIndex)\Percent Of Max Concurrent Instances
\Queued Messages Dropped(SystemIndex)\Percent Of Max Concurrent Sessions
\Queued Messages Dropped(SystemIndex)\CallDurationBase
\Queued Messages Dropped(SystemIndex)\CallsPercentMaxConcurrentCallsBase
\Queued Messages Dropped(SystemIndex)\InstancesPercentMaxConcurrentInstancesBase

\Queued Messages Dropped(SystemIndex)\SessionsPercentMaxConcurrentSessionsBase
\Queued Messages Dropped(SystemIndex)\Teredo Client
\Queued Messages Dropped(SystemIndex)\In - Teredo Router Advertisement
\Queued Messages Dropped(SystemIndex)\In - Teredo Bubble
\Queued Messages Dropped(SystemIndex)\In - Teredo Data
\Queued Messages Dropped(SystemIndex)\In - Teredo Invalid
\Queued Messages Dropped(SystemIndex)\Out - Teredo Router Solicitation
\Queued Messages Dropped(SystemIndex)\Out - Teredo Bubble
\Queued Messages Dropped(SystemIndex)\Out - Teredo Data
\Queued Messages Dropped(SystemIndex)\In - Teredo Data User Mode
\Queued Messages Dropped(SystemIndex)\In - Teredo Data Kernel Mode
\Queued Messages Dropped(SystemIndex)\Out - Teredo Data User Mode
\Queued Messages Dropped(SystemIndex)\Out - Teredo Data Kernel Mode
\Queued Messages Dropped(SystemIndex)\Teredo Server
\Queued Messages Dropped(SystemIndex)\In - Teredo Server Total Packets: Success
+ Error
\Queued Messages Dropped(SystemIndex)\In - Teredo Server Success Packets: Total
\Queued Messages Dropped(SystemIndex)\In - Teredo Server Success Packets: Bubble
s
\Queued Messages Dropped(SystemIndex)\In - Teredo Server Success Packets: Echo
\Queued Messages Dropped(SystemIndex)\In - Teredo Server Success Packets: RS-Pri
mary
\Queued Messages Dropped(SystemIndex)\In - Teredo Server Success Packets: RS-Sec
ondary
\Queued Messages Dropped(SystemIndex)\In - Teredo Server Error Packets: Total
\Queued Messages Dropped(SystemIndex)\In - Teredo Server Error Packets: Header E
rror
\Queued Messages Dropped(SystemIndex)\In - Teredo Server Error Packets: Source E
rror
\Queued Messages Dropped(SystemIndex)\In - Teredo Server Error Packets: Destinat
ion Error
\Queued Messages Dropped(SystemIndex)\In - Teredo Server Error Packets: Authenti
cation Error
\Queued Messages Dropped(SystemIndex)\Out - Teredo Server: RA-Primary
\Queued Messages Dropped(SystemIndex)\Out - Teredo Server: RA-Secondary
\Queued Messages Dropped(SystemIndex)\In - Teredo Server Total Packets: Success
+ Error / sec
\Queued Messages Dropped(SystemIndex)\IPHTTPS Global
\Queued Messages Dropped(SystemIndex)\In - Total bytes received
\Queued Messages Dropped(SystemIndex)\Out - Total bytes sent
\Queued Messages Dropped(SystemIndex)\Drops - Neighbor resolution timeouts
\Queued Messages Dropped(SystemIndex)\Errors - Authentication Errors
\Queued Messages Dropped(SystemIndex)\Out - Total bytes forwarded
\Queued Messages Dropped(SystemIndex)\Errors - Transmit errors on the server
\Queued Messages Dropped(SystemIndex)\Errors - Receive errors on the server
\Queued Messages Dropped(SystemIndex)\In - Total packets received
\Queued Messages Dropped(SystemIndex)\Out - Total packets sent
\Queued Messages Dropped(SystemIndex)\Sessions - Total sessions
\Queued Messages Dropped(SystemIndex)\IPHTTPS Session
\Queued Messages Dropped(SystemIndex)\Packets received on this session
\Queued Messages Dropped(SystemIndex)\Packets sent on this session
\Queued Messages Dropped(SystemIndex)\Bytes received on this session
\Queued Messages Dropped(SystemIndex)\Bytes sent on this session
\Queued Messages Dropped(SystemIndex)\Errors - Transmit errors on this session
\Queued Messages Dropped(SystemIndex)\Errors - Receive errors on this session
\Queued Messages Dropped(SystemIndex)\Duration - Duration of the session (Second
s)
\Queued Messages Dropped(SystemIndex)\Teredo Relay
\Queued Messages Dropped(SystemIndex)\In - Teredo Relay Total Packets: Success +
Error
\Queued Messages Dropped(SystemIndex)\In - Teredo Relay Success Packets: Total
\Queued Messages Dropped(SystemIndex)\In - Teredo Relay Success Packets: Bubbles

\Queued Messages Dropped(SystemIndex)\In - Teredo Relay Success Packets: Data Pa
ckets
\Queued Messages Dropped(SystemIndex)\In - Teredo Relay Error Packets: Total
\Queued Messages Dropped(SystemIndex)\In - Teredo Relay Error Packets: Header Er
ror
\Queued Messages Dropped(SystemIndex)\In - Teredo Relay Error Packets: Source Er
ror
\Queued Messages Dropped(SystemIndex)\In - Teredo Relay Error Packets: Destinati
on Error

The command completed successfully.

C:\windows\system32>ICACLS C:\ProgramData\Microsoft\Crypto\RSA^V
C:\ProgramData\Microsoft\Crypto\RSA▬: The filename, directory name, or volume la
bel syntax is incorrect.
Successfully processed 0 files; Failed processing 1 files

C:\windows\system32>ICACLS C:\ProgramData\Microsoft\Crypto\RSA^V
C:\ProgramData\Microsoft\Crypto\RSA▬: The filename, directory name, or volume la
bel syntax is incorrect.
Successfully processed 0 files; Failed processing 1 files

C:\windows\system32>ICACLS C:\ProgramData\Microsoft\Crypto\RSA
C:\ProgramData\Microsoft\Crypto\RSA NT AUTHORITY\SYSTEM(I)(OI)(CI)(F)
BUILTIN\Administrators(I)(OI)(CI)(F)
BUILTIN\Users(I)(OI)(CI)(RX)
Everyone(I)(OI)(CI)(RX)

Successfully processed 1 files; Failed processing 0 files

C:\windows\system32>http://www.sevenforums.com//www.pinterest.com/pin/create/extension/
 

My Computer My Computer

At a glance

Windows 7 64 bit
Computer type
Laptop
Computer Manufacturer/Model Number
Toshiba
OS
Windows 7 64 bit
I looked at the Device Mgr and see that Teredo Tunneling Pseudo-Interface Properties has an Exclamation point. When I looked at the General tab it said 'This device cannot start. (Code 10). Not sure if this is helpful to you?
 

My Computer My Computer

At a glance

Windows 7 64 bit
Computer type
Laptop
Computer Manufacturer/Model Number
Toshiba
OS
Windows 7 64 bit
OK - reboot and post a new set or event logs, and we'll see if anything has changed.
 

My Computer My Computer

At a glance

Win 7 x64 Home Premium (and x86 VirtualBox VM...i3 370M/i7 6500U8GB - finally :)/8GBit's an i3, dude!/dual Intel&nVidia
Computer type
Laptop
Computer Manufacturer/Model Number
Asus K52F or Lenovo B51-80
OS
Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
CPU
i3 370M/i7 6500U
Motherboard
Asus/Lenovo
Memory
8GB - finally :)/8GB
Graphics Card(s)
it's an i3, dude!/dual Intel&nVidia
Sound Card
onboard
Monitor(s) Displays
15.6" built-in
Screen Resolution
1366x768/1920x1080
Hard Drives
750GB Seagate internal
Sundry external drives attached to other computers on the local network
1TB SSD on the Lenovo
PSU
n/a
Internet Speed
as much as I can get - usually on a dongle/phone, so <1MB/s
Antivirus
MSE/Defender
Browser
IE11/12/Edge/Chrome/FF(if I must)
Very odd :(
- Also, I seem to have gotten my threads confused (not too surprising, dealing with 30+threads today!)

However I am definitely confused with these latest results, as I would have expected a lot more data in the CBS.log than is there currently. It seems that almost nothing has been put in the log for 15 hours!
Have you by any chance corrected a clock error?
 

My Computer My Computer

At a glance

Win 7 x64 Home Premium (and x86 VirtualBox VM...i3 370M/i7 6500U8GB - finally :)/8GBit's an i3, dude!/dual Intel&nVidia
Computer type
Laptop
Computer Manufacturer/Model Number
Asus K52F or Lenovo B51-80
OS
Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
CPU
i3 370M/i7 6500U
Motherboard
Asus/Lenovo
Memory
8GB - finally :)/8GB
Graphics Card(s)
it's an i3, dude!/dual Intel&nVidia
Sound Card
onboard
Monitor(s) Displays
15.6" built-in
Screen Resolution
1366x768/1920x1080
Hard Drives
750GB Seagate internal
Sundry external drives attached to other computers on the local network
1TB SSD on the Lenovo
PSU
n/a
Internet Speed
as much as I can get - usually on a dongle/phone, so <1MB/s
Antivirus
MSE/Defender
Browser
IE11/12/Edge/Chrome/FF(if I must)
I haven't done anything to the clock or time.
From what you saw in the cmd prompt results I just sent the CBS should have been updated and show the current hour/time?
 

My Computer My Computer

At a glance

Windows 7 64 bit
Computer type
Laptop
Computer Manufacturer/Model Number
Toshiba
OS
Windows 7 64 bit
Also, I seem to have gotten my threads confused
Click to expand...
Heh, I know the feeling :D
 

My Computer My Computer

At a glance

Windows 7 Ultimate x64 SP1AMD Phenom 2 1090T2x8GB Kingston HyperX Fury Black 1600Mhz Unga...MSI GTX 970 Gaming 4G
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Custom Build
OS
Windows 7 Ultimate x64 SP1
CPU
AMD Phenom 2 1090T
Motherboard
Gigabyte GA-890FXA-UD5
Memory
2x8GB Kingston HyperX Fury Black 1600Mhz Unganged
Graphics Card(s)
MSI GTX 970 Gaming 4G
Sound Card
Realtek On-Board HD 7.1 Audio / Logitech G35
Monitor(s) Displays
3xAcer GD245HQ
Screen Resolution
1920x1080
Hard Drives
Samsung 850 Pro 512GB SSD - OS /
WD Caviar Black SATA 3 - 1 TBx2 - Dynamic RAID 0 /
WD Caviar Green SATA 2 - 640GBx2 - Dynamic RAID 0 /
WD Caviar Green SATA 2 - 640GB - Internal Backup /
Seagate Barracude SATA 3 - 3TB - External Backup/ Sync
PSU
HighPower 1000W
Case
Cooler Master HAF 932
Cooling
Noctua NH-D14
Keyboard
Logitech G19
Mouse
Logitech G500
Internet Speed
100/4 Mbit Cable (100GB quota)
Antivirus
ZoneAlarm Extreme Security / MBAM Pro / MBAE Free / SAS Free
Browser
IE 11 - Firefox - Chrome
Other Info
Logitech F710/ G27/ G940/ Z5500 // TrackIR 5 // Nvidia 3D Surround Vision
krc52 said:
I haven't done anything to the clock or time.
From what you saw in the cmd prompt results I just sent the CBS should have been updated and show the current hour/time?
Click to expand...

Here's the last few lines....
Code: 
2015-09-13 00:24:02, Info                  CBS    Unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}GLOBALROOT/Device/HarddiskVolumeShadowCopy5/windows/System32/config/SOFTWARE
2015-09-13 00:24:02, Info                  CBS    Unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}GLOBALROOT/Device/HarddiskVolumeShadowCopy5/windows/System32/config/SYSTEM
2015-09-13 00:24:02, Info                  CBS    Unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}GLOBALROOT/Device/HarddiskVolumeShadowCopy5/windows/System32/config/SECURITY
2015-09-13 00:24:02, Info                  CBS    Unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}GLOBALROOT/Device/HarddiskVolumeShadowCopy5/windows/System32/config/SAM
2015-09-13 00:24:02, Info                  CBS    Unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}GLOBALROOT/Device/HarddiskVolumeShadowCopy5/windows/System32/config/COMPONENTS
2015-09-13 00:24:02, Info                  CBS    Unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}GLOBALROOT/Device/HarddiskVolumeShadowCopy5/windows/System32/config/DEFAULT
2015-09-13 00:24:02, Info                  CBS    Unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}GLOBALROOT/Device/HarddiskVolumeShadowCopy5/Users/default/ntuser.dat
[COLOR="Blue"]2015-09-13 00:24:02,[/COLOR] Info                  CBS    Unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}GLOBALROOT/Device/HarddiskVolumeShadowCopy5/windows/system32/smi/store/Machine/schema.dat
[COLOR="Red"]2015-09-13 15:28:46,[/COLOR] Info                  CBS    Trusted Installer signaled for shutdown, going to exit.
2015-09-13 15:28:47, Info                  CBS    Ending the TrustedInstaller main loop.
2015-09-13 15:28:47, Info                  CBS    Starting TrustedInstaller finalization.
- over 15 hours between entries!
 

My Computer My Computer

At a glance

Win 7 x64 Home Premium (and x86 VirtualBox VM...i3 370M/i7 6500U8GB - finally :)/8GBit's an i3, dude!/dual Intel&nVidia
Computer type
Laptop
Computer Manufacturer/Model Number
Asus K52F or Lenovo B51-80
OS
Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
CPU
i3 370M/i7 6500U
Motherboard
Asus/Lenovo
Memory
8GB - finally :)/8GB
Graphics Card(s)
it's an i3, dude!/dual Intel&nVidia
Sound Card
onboard
Monitor(s) Displays
15.6" built-in
Screen Resolution
1366x768/1920x1080
Hard Drives
750GB Seagate internal
Sundry external drives attached to other computers on the local network
1TB SSD on the Lenovo
PSU
n/a
Internet Speed
as much as I can get - usually on a dongle/phone, so <1MB/s
Antivirus
MSE/Defender
Browser
IE11/12/Edge/Chrome/FF(if I must)
I see what you mean. Do the entries with the 2015-09-13 15:28:46 give you any needed info?
Anything I can do from here?
Really appreciate your help.
 

My Computer My Computer

At a glance

Windows 7 64 bit
Computer type
Laptop
Computer Manufacturer/Model Number
Toshiba
OS
Windows 7 64 bit
Because I see Teredo listed in the log would it do any good to use regedit and turn that from 8a to 0 or disable? Grasping at straws to get this thing to shutdown. :>( Also, my Windows Updates has Important Updates grayed out. Should I sign in as admin and change that? I'm afraid to hard shutdown each day. Does it help for me to delete pending folders?
 

My Computer My Computer

At a glance

Windows 7 64 bit
Computer type
Laptop
Computer Manufacturer/Model Number
Toshiba
OS
Windows 7 64 bit
Ignore Teredo - it's irrelevant to your problems.

The only reason I can think of for Important Updates being greyed out is being in a non-genuine state...
I need to see a full copy of the report produced by the MGADiag tool
(download and save to desktop - http://go.microsoft.com/fwlink/?linkid=52012 )
Once saved, run the tool.
Click on the Continue button, which will produce the report.
To copy the report to your response, click on the Copy button in the tool (ignore any error messages at this point), and then paste (using either r-click/Paste, or Ctrl+V ) into your response.x
 

My Computer My Computer

At a glance

Win 7 x64 Home Premium (and x86 VirtualBox VM...i3 370M/i7 6500U8GB - finally :)/8GBit's an i3, dude!/dual Intel&nVidia
Computer type
Laptop
Computer Manufacturer/Model Number
Asus K52F or Lenovo B51-80
OS
Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
CPU
i3 370M/i7 6500U
Motherboard
Asus/Lenovo
Memory
8GB - finally :)/8GB
Graphics Card(s)
it's an i3, dude!/dual Intel&nVidia
Sound Card
onboard
Monitor(s) Displays
15.6" built-in
Screen Resolution
1366x768/1920x1080
Hard Drives
750GB Seagate internal
Sundry external drives attached to other computers on the local network
1TB SSD on the Lenovo
PSU
n/a
Internet Speed
as much as I can get - usually on a dongle/phone, so <1MB/s
Antivirus
MSE/Defender
Browser
IE11/12/Edge/Chrome/FF(if I must)
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-4F8HK-M4P73-W8DQG
Windows Product Key Hash: Xs1iQgVeo0C+sObJxS7eu+FuBPQ=
Windows Product ID: 00359-OEM-8992687-00057
Windows Product ID Type: 2
Windows License Type: OEM SLP
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {A6758C37-89C9-41AF-82FF-DFAD95FA2052}(3)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Home Premium
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.150525-0603
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{922F27FB-65CA-476C-8A01-8DBD0BF7CA79}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-W8DQG</PKey><PID>00359-OEM-8992687-00057</PID><PIDType>2</PIDType><SID>S-1-5-21-35071626-1651299499-2114152193</SID><SYSTEM><Manufacturer>TOSHIBA</Manufacturer><Model>Satellite C855</Model></SYSTEM><BIOS><Manufacturer>Insyde Corp.</Manufacturer><Version>6.50</Version><SMBIOSVersion major="2" minor="7"/><Date>20121122000000.000000+000</Date></BIOS><HWID>4D363607018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>TOSINV</OEMID><OEMTableID>TOSINV00</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>

Spsys.log Content: 0x80070002

Licensing Data-->
Software licensing service version: 6.1.7601.17514

Name: Windows(R) 7, HomePremium edition
Description: Windows Operating System - Windows(R) 7, OEM_SLP channel
Activation ID: d2c04e90-c3dd-4260-b0f3-f845f5d27d64
Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Extended PID: 00359-00178-926-800057-02-1033-7601.0000-0822012
Installation ID: 015343603622993291331671981111245701161194464641946896
Processor Certificate URL: SpcService Web Service
Machine Certificate URL: RacService Web Service
Use License URL: UseLicenseService Web Service
Product Key Certificate URL: PkcService Web Service
Partial Product Key: W8DQG
License Status: Licensed
Remaining Windows rearm count: 2
Trusted time: 9/14/2015 12:03:12 PM

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 7:1:2015 15:47
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: LgAAAAEAAQABAAEAAAACAAAAAgABAAEA6GHk/YRGWPjSn0DyHqm+pFbhetoucw==

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC TOSINV TOSINV00
FACP TOSINV TOSINV00
HPET TOSINV TOSINV00
BOOT TOSINV TOSINV00
MCFG TOSINV TOSINV00
WDAT TOSINV TOSINV00
UEFI TOSINV TOSINV00
ASF! TOSINV TOSINV00
SLIC TOSINV TOSINV00
SSDT INSYDE CR CRB
ASPT TOSINV TOSINV00
SSDT INSYDE CR CRB
FPDT TOSINV TOSINV00
SSDT INSYDE CR CRB
SSDT INSYDE CR CRB
 

My Computer My Computer

At a glance

Windows 7 64 bit
Computer type
Laptop
Computer Manufacturer/Model Number
Toshiba
OS
Windows 7 64 bit

My Computer My Computer

At a glance

Win 7 x64 Home Premium (and x86 VirtualBox VM...i3 370M/i7 6500U8GB - finally :)/8GBit's an i3, dude!/dual Intel&nVidia
Computer type
Laptop
Computer Manufacturer/Model Number
Asus K52F or Lenovo B51-80
OS
Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
CPU
i3 370M/i7 6500U
Motherboard
Asus/Lenovo
Memory
8GB - finally :)/8GB
Graphics Card(s)
it's an i3, dude!/dual Intel&nVidia
Sound Card
onboard
Monitor(s) Displays
15.6" built-in
Screen Resolution
1366x768/1920x1080
Hard Drives
750GB Seagate internal
Sundry external drives attached to other computers on the local network
1TB SSD on the Lenovo
PSU
n/a
Internet Speed
as much as I can get - usually on a dongle/phone, so <1MB/s
Antivirus
MSE/Defender
Browser
IE11/12/Edge/Chrome/FF(if I must)
I wish you/we had been lucky too. :>(
Here is the file attached.
 

Attachments

My Computer My Computer

At a glance

Windows 7 64 bit
Computer type
Laptop
Computer Manufacturer/Model Number
Toshiba
OS
Windows 7 64 bit
You appear to have a number of items which I'd describe as malware in the startup regime - they may just be residues of things already remove, but we need to check then.

ot.shot - definite PUP - uninstall it if it's in the Programs listing
f.lux - optional, but I'd suggest uninstalling it, as it's the type of thing that often comes embedded between adware.
"Bob_Dylan_Things_Have_Changed" - definitely not wanted on Voyage! - it's being loaded from a very unusual place.

Please download and install Malwarebytes Anti-malware (free version) from Malwarebytes | Free Anti-Malware Detection & Removal Software - UNtick 'Enable free trial of MBAM Premium' at the end of the installation - and update it, then run a full scan in your main account, and Quick scans in any other user accounts.

Quarantine everything it finds
 

My Computer My Computer

At a glance

Win 7 x64 Home Premium (and x86 VirtualBox VM...i3 370M/i7 6500U8GB - finally :)/8GBit's an i3, dude!/dual Intel&nVidia
Computer type
Laptop
Computer Manufacturer/Model Number
Asus K52F or Lenovo B51-80
OS
Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
CPU
i3 370M/i7 6500U
Motherboard
Asus/Lenovo
Memory
8GB - finally :)/8GB
Graphics Card(s)
it's an i3, dude!/dual Intel&nVidia
Sound Card
onboard
Monitor(s) Displays
15.6" built-in
Screen Resolution
1366x768/1920x1080
Hard Drives
750GB Seagate internal
Sundry external drives attached to other computers on the local network
1TB SSD on the Lenovo
PSU
n/a
Internet Speed
as much as I can get - usually on a dongle/phone, so <1MB/s
Antivirus
MSE/Defender
Browser
IE11/12/Edge/Chrome/FF(if I must)
Okay, I have done this. Shutdown is still restarting. I see there are many files in a PendingRenames folder. Would deleting these do anything? Is there no way to just stop Windows from trying to update so it will cease restarting? If that is the problem??
I know I do not have enough knowledge to fix this but so tired of working on this since Friday. Thank you for all your help. Should I just find another OS?
 
Last edited:

My Computer My Computer

At a glance

Windows 7 64 bit
Computer type
Laptop
Computer Manufacturer/Model Number
Toshiba
OS
Windows 7 64 bit
You always have the option to move to another OS - you may find you prefer it, or you may hate it.

I'm by no means certain that your problem lies with an update, although I have no real evidence either way.

Look on this as a learning experience - once we do manage to fix it (hopefully) chances are that you'll know more about fixing Windows than anyone within a mile or two! :)

My own machine has a number of files in the PendingRenames folder - it's not unusual, and the data is usually irrelevant.

I couldn't see anything nasty in the BSOD data, so let's have a closer look at the Event logs - which *should* tell us what's causing the reboot if it's actually happening late enough in the boot process....

Please open Event Viewer
In the left pane, navigate to the Windows Logs
right-click on Applications and select 'Save all events as...' save as Apps.evtx
repeat for the System logs - save as Sys.evtx
Compress both files, and attach to your reply or upload to your favourite fileshare site (preferably Dropbox or OneDrive/SkyDrive)*and post a link in your reply
 

My Computer My Computer

At a glance

Win 7 x64 Home Premium (and x86 VirtualBox VM...i3 370M/i7 6500U8GB - finally :)/8GBit's an i3, dude!/dual Intel&nVidia
Computer type
Laptop
Computer Manufacturer/Model Number
Asus K52F or Lenovo B51-80
OS
Win 7 x64 Home Premium (and x86 VirtualBox VM)/Win10
CPU
i3 370M/i7 6500U
Motherboard
Asus/Lenovo
Memory
8GB - finally :)/8GB
Graphics Card(s)
it's an i3, dude!/dual Intel&nVidia
Sound Card
onboard
Monitor(s) Displays
15.6" built-in
Screen Resolution
1366x768/1920x1080
Hard Drives
750GB Seagate internal
Sundry external drives attached to other computers on the local network
1TB SSD on the Lenovo
PSU
n/a
Internet Speed
as much as I can get - usually on a dongle/phone, so <1MB/s
Antivirus
MSE/Defender
Browser
IE11/12/Edge/Chrome/FF(if I must)
You must log in or register to reply here.

Similar threads

wd.sys BSOD every shutdown
Replies
2
Views
3K
torchwood
torchwood
Solved BSOD on every shutdown - error 0x1000007e
Replies
1
Views
2K
Justus2017
J
BSOD on every shutdown after windows updates installed, F4 error
Replies
1
Views
3K
essenbe
essenbe
Solved BSOD every shutdown & restart
Replies
6
Views
4K
zigzag3143
zigzag3143
Back
Top