Guest User

Untitled

a guest
Nov 10th, 2015
588
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 45.26 KB | None | 0 0
  1. Additional scan result of Farbar Recovery Scan Tool (x64) Version:07-11-2015
  2. Ran by Sigma (2015-11-10 06:44:40)
  3. Running from C:\Users\Sigma\Desktop
  4. Windows 10 Pro (X64) (2015-09-07 13:29:25)
  5. Boot Mode: Normal
  6. ==========================================================
  7.  
  8.  
  9. ==================== Accounts: =============================
  10.  
  11. Administrator (S-1-5-21-3290876315-848689152-142388844-500 - Administrator - Disabled)
  12. DefaultAccount (S-1-5-21-3290876315-848689152-142388844-503 - Limited - Disabled)
  13. Guest (S-1-5-21-3290876315-848689152-142388844-501 - Limited - Disabled)
  14. HomeGroupUser$ (S-1-5-21-3290876315-848689152-142388844-1002 - Limited - Enabled)
  15. Sigma (S-1-5-21-3290876315-848689152-142388844-1001 - Administrator - Enabled) => C:\Users\Sigma
  16.  
  17. ==================== Security Center ========================
  18.  
  19. (If an entry is included in the fixlist, it will be removed.)
  20.  
  21. AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
  22. AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
  23.  
  24. ==================== Installed Programs ======================
  25.  
  26. (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
  27.  
  28. µTorrent (HKU\S-1-5-21-3290876315-848689152-142388844-1001\...\uTorrent) (Version: 3.4.5.41202 - BitTorrent Inc.)
  29. 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
  30. Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.009.20077 - Adobe Systems Incorporated)
  31. Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.7.157 - Adobe Systems, Inc.)
  32. Apple Application Support (32-bit) (HKLM-x32\...\{7FE25256-B7C1-480D-B736-10A67A833AEA}) (Version: 3.2 - Apple Inc.)
  33. Apple Application Support (64-bit) (HKLM\...\{B255D495-4734-4E9B-B4F5-96702FD4A7B9}) (Version: 3.2 - Apple Inc.)
  34. Application Insights Tools for Visual Studio 2015 (x32 Version: 3.3 - Microsoft Corporation) Hidden
  35. Azure AD Authentication Connected Service (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
  36. AzureTools.Notifications (x32 Version: 2.7.30611.1601 - Microsoft Corporation) Hidden
  37. Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
  38. CopyTrans Control Center Uninstall Only (HKU\S-1-5-21-3290876315-848689152-142388844-1001\...\CopyTrans Suite) (Version: 4.002 - WindSolutions)
  39. CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.9.5009 - CyberLink Corp.)
  40. CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 5.0.6.5011 - CyberLink Corp.)
  41. Dia (remove only) (HKLM-x32\...\Dia) (Version: - )
  42. DisableMSDefender (Version: 1.0.0 - Hewlett-Packard Company) Hidden
  43. Dotfuscator and Analytics Community Edition 5.18.1 (x32 Version: 5.18.1.2898 - PreEmptive Solutions) Hidden
  44. Entity Framework 6.1.3 Tools for Visual Studio 2015 (HKLM-x32\...\{1A8A9739-BAD7-491F-B5B9-A79A2B965422}) (Version: 14.0.40302.0 - Microsoft Corporation)
  45. ESU for Microsoft Windows 7 SP1 (HKLM-x32\...\{E1ACF120-CD69-47F0-B202-9A4B95C436D8}) (Version: 5.1.5 - Hewlett-Packard)
  46. Evernote v. 5.8.1 (HKLM-x32\...\{4FD2D1C8-8636-11E4-9D21-00163E98E7D6}) (Version: 5.8.1.6061 - Evernote Corp.)
  47. Extreme NAC Assessment Agent (HKLM-x32\...\{64CC9DEE-5692-45BD-B245-21DC59695FFB}) (Version: 1.15.0.0 - Extreme Networks)
  48. Foxit PhantomPDF (HKLM-x32\...\{4E32271C-B55A-4CDF-8DB7-88FD1C45927C}) (Version: 7.0.310.226 - Foxit Software Inc.)
  49. Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.80 - Google Inc.)
  50. Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
  51. Gyazo 3.1.6 (HKLM-x32\...\{6DB8C365-E719-4BA5-9594-10DFC244D3FD}_is1) (Version: - Nota Inc.)
  52. Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
  53. HP 3D DriveGuard (HKLM-x32\...\{E8D0E2B8-B64B-44BC-8E01-00DDACBDF78A}) (Version: 6.0.28.1 - Hewlett-Packard Company)
  54. HP CoolSense (HKLM-x32\...\{ADE2F6A7-E7BD-4955-BD66-30903B223DDF}) (Version: 2.20.41 - Hewlett-Packard Company)
  55. HP Documentation (HKLM-x32\...\{CF43D82B-1165-483F-A2EB-D11FED649BE1}) (Version: 1.1.0.0 - Hewlett-Packard)
  56. HP On Screen Display (HKLM-x32\...\{BB83BE06-E69A-4CC5-8421-96CCD196589E}) (Version: 1.3.6 - Hewlett-Packard Company)
  57. HP Quick Launch (HKLM-x32\...\{6BA7C52E-4071-47CC-9060-ABB143862DB0}) (Version: 3.0.7 - Hewlett-Packard Company)
  58. HP Setup (HKLM-x32\...\{438363A8-F486-4C37-834C-4955773CB3D3}) (Version: 9.1.15453.4066 - Hewlett-Packard Company)
  59. HP Support Assistant (HKLM-x32\...\{904822F1-6C7D-4B91-B936-6A1C0810544C}) (Version: 7.7.34.34 - Hewlett-Packard Company)
  60. HP Support Solutions Framework (HKLM-x32\...\{F6A11738-3EE4-4573-AEA5-6CD5D491C167}) (Version: 12.0.30.219 - Hewlett-Packard Company)
  61. Intel(R) Chipset Device Software (x32 Version: 10.1.1.8 - Intel(R) Corporation) Hidden
  62. Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.1.10600.150 - Intel Corporation)
  63. Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1156 - Intel Corporation)
  64. Intel(R) PRO/Wireless Driver (HKLM\...\{4d4a045b-9761-43d2-811c-1c29cbdb7459}) (Version: 18.12.0000.3040 - Intel Corporation)
  65. Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.15.4279 - Intel Corporation)
  66. Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.6.2.1001 - Intel Corporation)
  67. Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 1.1.253.0 - Intel Corporation)
  68. Intel(R) Update Manager (HKLM-x32\...\{84A2B59B-6A7B-4C01-8592-15C9BFE6AC36}) (Version: 2.4.3 - Intel Corporation)
  69. Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{C345A462-2044-47D6-81F6-A4416453A514}) (Version: 17.1.1529.1613 - Intel Corporation)
  70. Intel(R) Wireless Bluetooth(R)(patch version 17.1.1434.2) (HKLM\...\{302600C1-6BDF-4FD1-1407-148929CC1385}) (Version: 17.1.1407.0480 - Intel Corporation)
  71. Java 8 Update 60 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418060F0}) (Version: 8.0.600.27 - Oracle Corporation)
  72. Java SE Development Kit 8 Update 60 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180600}) (Version: 8.0.600.27 - Oracle Corporation)
  73. Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
  74. Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
  75. Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation)
  76. Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)
  77. Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)
  78. Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (ENU) (HKLM-x32\...\{290FC320-2F5A-329E-8840-C4193BD7A9EE}) (Version: 4.5.51209 - Microsoft Corporation)
  79. Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (HKLM-x32\...\{B941AFB4-8851-33A1-9E72-0C33D463C41C}) (Version: 4.5.51209 - Microsoft Corporation)
  80. Microsoft .NET Framework 4.6 SDK (HKLM-x32\...\{B5915D37-0637-4A26-A3AA-C5DC9F856370}) (Version: 4.6.00081 - Microsoft Corporation)
  81. Microsoft .NET Framework 4.6 Targeting Pack (ENU) (HKLM-x32\...\{3D3CEBE6-40EA-4C48-97FD-73828281AB4A}) (Version: 4.6.00081 - Microsoft Corporation)
  82. Microsoft .NET Framework 4.6 Targeting Pack (HKLM-x32\...\{2CC6A4A7-AAC2-46C9-9DBB-3727B5954F65}) (Version: 4.6.00081 - Microsoft Corporation)
  83. Microsoft .NET Version Manager (x64) 1.0.0-beta5 (HKLM\...\{c5a4aba3-1aba-3ef8-b2d5-c3fa37f59738}) (Version: 1.0.10609.0 - Microsoft Corporation)
  84. Microsoft Excel 2010 (HKLM\...\Office14.EXCEL) (Version: 14.0.7015.1000 - Microsoft Corporation)
  85. Microsoft Help Viewer 2.2 (HKLM-x32\...\Microsoft Help Viewer 2.2) (Version: 2.2.23107 - Microsoft Corporation)
  86. Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4641.1005 - Microsoft Corporation)
  87. Microsoft PowerPoint 2010 (HKLM\...\Office14.POWERPOINT) (Version: 14.0.7015.1000 - Microsoft Corporation)
  88. Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{9D573E71-1077-4C7E-B4DB-4E22A5D2B48B}) (Version: 11.0.2100.60 - Microsoft Corporation)
  89. Microsoft SQL Server 2012 Native Client (HKLM\...\{49D665A2-4C2A-476E-9AB8-FCC425F526FC}) (Version: 11.0.2100.60 - Microsoft Corporation)
  90. Microsoft SQL Server 2014 Management Objects (HKLM-x32\...\{2774595F-BC2A-4B12-A25B-0C37A37049B0}) (Version: 12.0.2000.8 - Microsoft Corporation)
  91. Microsoft SQL Server 2014 Management Objects (x64) (HKLM\...\{1F9EB3B6-AED7-4AA7-B8F1-8E314B74B2A5}) (Version: 12.0.2000.8 - Microsoft Corporation)
  92. Microsoft SQL Server 2014 Transact-SQL ScriptDom (HKLM\...\{020CDFE0-C127-4047-B571-37C82396B662}) (Version: 12.0.2000.8 - Microsoft Corporation)
  93. Microsoft SQL Server 2014 T-SQL Language Service (HKLM-x32\...\{47D08E7A-92A1-489B-B0BF-415516497BCE}) (Version: 12.0.2000.8 - Microsoft Corporation)
  94. Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
  95. Microsoft SQL Server Data Tools - enu (14.0.50616.0) (HKLM-x32\...\{58246C80-3941-4B69-AE31-264644E2ADB8}) (Version: 14.0.50616.0 - Microsoft Corporation)
  96. Microsoft System CLR Types for SQL Server 2014 (HKLM\...\{68BA34E8-9B9D-4A74-83F0-7D366B532D75}) (Version: 12.0.2402.11 - Microsoft Corporation)
  97. Microsoft System CLR Types for SQL Server 2014 (HKLM-x32\...\{718FFB65-F6E4-4D62-861F-ED10ED32C936}) (Version: 12.0.2402.11 - Microsoft Corporation)
  98. Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
  99. Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
  100. Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
  101. Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
  102. Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
  103. Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
  104. Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
  105. Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)
  106. Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
  107. Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
  108. Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
  109. Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
  110. Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation)
  111. Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
  112. Microsoft Visual Studio Community 2015 (HKLM-x32\...\{50b32652-69d2-4b93-9316-edcd12067b8b}) (Version: 14.0.23107.10 - Microsoft Corporation)
  113. Microsoft Word 2010 (HKLM\...\Office14.WORD) (Version: 14.0.7015.1000 - Microsoft Corporation)
  114. Multi-Device Hybrid Apps using C# - Templates - ENU (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
  115. NetBeans IDE 8.0.2 (HKLM\...\nbi-nb-base-8.0.2.0.201411181905) (Version: 8.0.2 - NetBeans.org)
  116. NVIDIA GeForce Experience 2.5.13.6 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.13.6 - NVIDIA Corporation)
  117. NVIDIA Graphics Driver 353.62 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 353.62 - NVIDIA Corporation)
  118. NVIDIA PhysX System Software 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
  119. opensource (x32 Version: 1.0.14960.3876 - Your Company Name) Hidden
  120. PowerISO (HKLM-x32\...\PowerISO) (Version: 4.7 - PowerISO Computing, Inc.)
  121. PreEmptive Analytics Visual Studio Components (x32 Version: 1.2.5134.1 - PreEmptive Solutions) Hidden
  122. Prerequisites for SSDT (HKLM-x32\...\{21373064-AD95-48DB-A32E-0D9E08EF7355}) (Version: 12.0.2000.8 - Microsoft Corporation)
  123. Python 3.5.0 (32-bit) (HKU\S-1-5-21-3290876315-848689152-142388844-1001\...\{1197d2bb-6cf8-488a-b994-d5bf6d7efe7b}) (Version: 3.5.150.0 - Python Software Foundation)
  124. Python 3.5.0 Core Interpreter (32-bit) (x32 Version: 3.5.150.0 - Python Software Foundation) Hidden
  125. Python 3.5.0 Development Libraries (32-bit) (x32 Version: 3.5.150.0 - Python Software Foundation) Hidden
  126. Python 3.5.0 Documentation (32-bit) (x32 Version: 3.5.150.0 - Python Software Foundation) Hidden
  127. Python 3.5.0 Executables (32-bit) (x32 Version: 3.5.150.0 - Python Software Foundation) Hidden
  128. Python 3.5.0 Launcher (32-bit) (x32 Version: 3.5.150.0 - Python Software Foundation) Hidden
  129. Python 3.5.0 pip Bootstrap (32-bit) (x32 Version: 3.5.150.0 - Python Software Foundation) Hidden
  130. Python 3.5.0 Standard Library (32-bit) (x32 Version: 3.5.150.0 - Python Software Foundation) Hidden
  131. Python 3.5.0 Tcl/Tk Support (32-bit) (x32 Version: 3.5.150.0 - Python Software Foundation) Hidden
  132. Python 3.5.0 Test Suite (32-bit) (x32 Version: 3.5.150.0 - Python Software Foundation) Hidden
  133. Python 3.5.0 Utility Scripts (32-bit) (x32 Version: 3.5.150.0 - Python Software Foundation) Hidden
  134. Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.370.77 - Realtek Semiconductor Corp.)
  135. Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7560 - Realtek Semiconductor Corp.)
  136. Reimage Repair (HKLM\...\Reimage Repair) (Version: 1.8.2.5 - Reimage) <==== ATTENTION
  137. Roslyn Language Services - x86 (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
  138. Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft)
  139. Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0018-0000-1000-0000000FF1CE}_Office14.POWERPOINT_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft)
  140. Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-001B-0000-1000-0000000FF1CE}_Office14.WORD_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft)
  141. Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version: - Microsoft) Hidden
  142. SHIELD Streaming (Version: 4.1.3000 - NVIDIA Corporation) Hidden
  143. SHIELD Wireless Controller Driver (Version: 2.5.13.6 - NVIDIA Corporation) Hidden
  144. Skype™ 7.12 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.12.101 - Skype Technologies S.A.)
  145. swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
  146. Synaptics ClickPad Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.12.95 - Synaptics Incorporated)
  147. Synaptics WBF DDK (HKLM\...\{963DDEF5-52CF-4313-81D9-B186B89C0A57}) (Version: 4.5.289.0 - Synaptics)
  148. Team Explorer for Microsoft Visual Studio 2015 (x32 Version: 14.0.23102 - Microsoft Corporation) Hidden
  149. TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.47484 - TeamViewer)
  150. Test Tools for Microsoft Visual Studio 2015 (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
  151. TypeScript Power Tool (x32 Version: 1.5.4.0 - Microsoft Corporation) Hidden
  152. TypeScript Tools for Microsoft Visual Studio 2015 (x32 Version: 1.5.4.0 - Microsoft Corporation) Hidden
  153. TypeScript Tools for Microsoft Visual Studio 2015 1.5.4.0 (HKLM-x32\...\{4cde0c8c-47b3-448f-babf-fe5d392432a6}) (Version: 1.5.23128.0 - Microsoft Corporation)
  154. Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
  155. WCF Data Services 5.6.4 Runtime (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden
  156. WCF Data Services Tools for Microsoft Visual Studio 2015 (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden
  157. WinRAR 5.30 beta 2 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.30.2 - win.rar GmbH)
  158.  
  159. ==================== Custom CLSID (Whitelisted): ==========================
  160.  
  161. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  162.  
  163.  
  164. ==================== Restore Points =========================
  165.  
  166. 04-11-2015 17:15:48 Malwarebytes Anti-Rootkit Restore Point
  167. 07-11-2015 08:14:22 Removed Skype™ 7.12
  168.  
  169. ==================== Hosts content: ===============================
  170.  
  171. (If needed Hosts: directive could be included in the fixlist to reset Hosts.)
  172.  
  173. 2009-07-13 21:34 - 2009-06-10 16:00 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
  174.  
  175.  
  176. ==================== Scheduled Tasks (Whitelisted) =============
  177.  
  178. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  179.  
  180. Task: {034A21FF-3103-47C2-BCF7-7D84DD2BB605} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe
  181. Task: {122BBE7F-DF6A-4876-81AE-2B28ED300A73} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-06-23] (Adobe Systems Incorporated)
  182. Task: {19CAC975-AF59-4D78-BF9C-5A8D543EFF26} - System32\Tasks\ReimageUpdater => C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe [2015-08-19] (Reimage®) <==== ATTENTION
  183. Task: {1A5C2508-4584-41BF-B6C5-BB1E39BDC8D7} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2015-10-20] (Hewlett-Packard)
  184. Task: {227B1E0B-6299-43F7-9451-A56AB2E0D892} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe
  185. Task: {2715C5FF-9B9C-4481-8FE7-CDCC7C533283} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
  186. Task: {2CD87684-E84E-4B10-9841-AA3AB5CB5BF9} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
  187. Task: {331F7C28-7020-4437-A22A-B632E346BCDA} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
  188. Task: {34EECBF6-5E08-4934-9C47-9E4A2D0B1B59} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe
  189. Task: {35D1BF1E-DC41-4BB4-BEEF-F7222E483F80} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
  190. Task: {364F66A3-EC91-484C-B72E-AED4639A2780} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe
  191. Task: {36CC9A7C-01A0-481F-AA5E-D7F7E3B51654} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2015-10-20] (Hewlett-Packard)
  192. Task: {3A128C4F-044A-4A71-8646-6AEB6944D655} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe
  193. Task: {41C0C686-788A-4464-B48D-619992487B1B} - System32\Tasks\GyazoUpdateTaskMachine => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2015-08-19] ()
  194. Task: {431576B1-CEC8-42E9-BB62-7CD3F7B69510} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe
  195. Task: {4A8C0DF7-2186-4E40-BB72-393F7C8505E8} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe
  196. Task: {4B691D92-654A-407B-89C4-F4C595C9A1A9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-26] (Google Inc.)
  197. Task: {4E610F2D-A08C-4C19-84C2-28C2C09AAB7C} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe
  198. Task: {55816F6B-E2C8-4C38-B81D-CA9339C6E95E} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
  199. Task: {62A6346B-A6E0-4B85-9DE1-091211808540} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe
  200. Task: {647A6CD4-2FAA-45C3-9F7A-6F61C02F84BB} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
  201. Task: {66A37307-2820-41F3-B439-DDF328867C0A} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe
  202. Task: {693F3EF4-90C7-450D-AB1F-E42FD24B941F} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe
  203. Task: {71FBB64F-BDFC-436A-A05B-147D30657C0D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-09-14] (Adobe Systems Incorporated)
  204. Task: {7374F2D3-B166-4A40-B2A9-8E704C860D95} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2014-08-22] (Hewlett-Packard Company)
  205. Task: {75D4583F-2A93-4B33-86B7-A3D3DC4E7C49} - System32\Tasks\HPCeeScheduleForSigma => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard)
  206. Task: {76B7653D-1294-4916-9994-4D29A5EB6D1B} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe
  207. Task: {7D7FFA88-028E-4819-A1FB-759ECC10C186} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2014-05-12] (Hewlett-Packard Company)
  208. Task: {8105E305-F674-4B4B-89A5-6D7DD087564E} - System32\Tasks\GyazoUpdateTaskMachineDaily => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2015-08-19] ()
  209. Task: {81157CED-F264-40E9-A295-99EE1AEC36F2} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
  210. Task: {8732690A-75E4-4594-88AE-54FDE746AF5C} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-04-09] ()
  211. Task: {8F4C3A2F-D807-437E-BAA4-10DF9721ED47} - \Microsoft\Windows\File Classification Infrastructure\Property Definition Sync -> No File <==== ATTENTION
  212. Task: {8F92AEAC-1408-459D-A7C5-E6A120407482} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe
  213. Task: {8FDF1B22-E8BE-42FE-BC0D-41F64C23BA2D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2015-09-28] (Hewlett-Packard)
  214. Task: {9381C66E-04B6-4A35-B678-09EBE9E03CB7} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe
  215. Task: {9406034B-2F9C-4231-AE20-8B781B0FE3FF} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe
  216. Task: {965E881E-9EA0-4D54-A752-858F70D75CCD} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
  217. Task: {98AD7B7E-572B-4B13-81C4-74E241E85BA3} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe
  218. Task: {9F56C1D8-5A4E-4350-A825-DBE5410478D6} - System32\Tasks\Reimage Reminder => C:\Program Files\Reimage\Reimage Repair\ReimageReminder.exe [2015-11-05] (Reimage ltd.) <==== ATTENTION
  219. Task: {A33D2200-8034-4A37-91B9-5E56A640FD6D} - System32\Tasks\Registration => C:\Program Files (x86)\Hewlett-Packard\HP Setup\Dependencies\RemEngine.exe [2012-03-21] ()
  220. Task: {B3663AA3-D607-4E92-821D-9E3D529F9313} - System32\Tasks\YCMServiceAgent => c:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [2015-02-11] (CyberLink Corp.)
  221. Task: {B458A0AC-5D54-411F-8D98-842A49CC3562} - System32\Tasks\Hewlett-Packard\HP CoolSense\HP CoolSense Start at Logon => C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [2014-05-19] (Hewlett-Packard Development Company, L.P.)
  222. Task: {B68AAF3A-5A00-42C3-92CA-F682AF78D678} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-04-09] ()
  223. Task: {BEAF84B7-E7F5-4AB1-9FA6-881EB8FF9DE1} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe
  224. Task: {CC414B0A-F5CB-49B9-8144-D8EA8E86FF3F} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe
  225. Task: {CE35E833-AE98-4B7A-B8BC-AEF84A7A1D8C} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
  226. Task: {CE800406-4838-4244-B72D-3890B250FE62} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe
  227. Task: {D1FD3591-C129-45D1-B720-4F0C53E8F436} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-26] (Google Inc.)
  228. Task: {D2F37ABC-F5C1-42C3-8D39-E70A1EF69918} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
  229. Task: {DCBE0747-BC2C-49FC-981B-47758B3FC64E} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
  230. Task: {DFDDA7FA-8937-4C36-B76C-6886F0D72BC3} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe
  231. Task: {E485CDF8-58F8-45C3-83F2-9ED74990D66C} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe
  232. Task: {E612CFA0-EA8F-4F35-8A7D-49ADE06BA84C} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
  233. Task: {E869F065-04B0-4F8B-8D07-80C55687606C} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe
  234. Task: {EC56CF83-F1FB-4AE9-998D-CEC4FCA23FFE} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-10-02] (Microsoft Corporation)
  235. Task: {FDC1A9C2-6A32-454F-B41F-727211BCC26C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2014-08-22] (Hewlett-Packard Company)
  236.  
  237. (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
  238.  
  239. Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
  240. Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
  241. Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  242. Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  243. Task: C:\WINDOWS\Tasks\HPCeeScheduleForSigma.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
  244.  
  245. ==================== Loaded Modules (Whitelisted) ==============
  246.  
  247. 2015-09-07 10:49 - 2015-09-07 10:49 - 00032768 _____ () C:\WINDOWS\SYSTEM32\licensemanagerapi.dll
  248. 2015-10-07 08:40 - 2015-07-22 20:10 - 00116552 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
  249. 2015-09-07 10:49 - 2015-09-07 10:49 - 00404480 _____ () C:\WINDOWS\System32\diagtrack_wininternal.dll
  250. 2015-10-01 12:52 - 2015-09-17 01:48 - 02494712 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
  251. 2015-10-01 12:52 - 2015-09-17 01:48 - 02494712 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
  252. 2015-10-01 12:52 - 2015-09-17 00:48 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
  253. 2015-07-10 05:59 - 2015-07-10 05:59 - 00143360 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\XamlTileRendering.dll
  254. 2015-10-01 12:51 - 2015-09-17 01:04 - 00642048 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\MtcUvc.dll
  255. 2015-08-19 03:56 - 2015-08-19 03:56 - 06908904 _____ () C:\Program Files\Reimage\Reimage Protector\ReiSystem.exe
  256. 2015-10-01 12:52 - 2015-09-17 00:44 - 06569472 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
  257. 2015-10-01 12:51 - 2015-09-17 00:42 - 00471040 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
  258. 2015-10-01 12:51 - 2015-09-17 00:42 - 01808384 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
  259. 2015-10-01 12:52 - 2015-09-17 00:43 - 02274816 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
  260. 2015-10-22 18:44 - 2015-10-20 09:08 - 01532744 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.80\libglesv2.dll
  261. 2015-10-22 18:44 - 2015-10-20 09:08 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.80\libegl.dll
  262.  
  263. ==================== Alternate Data Streams (Whitelisted) =========
  264.  
  265. (If an entry is included in the fixlist, only the ADS will be removed.)
  266.  
  267.  
  268. ==================== Safe Mode (Whitelisted) ===================
  269.  
  270. (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
  271.  
  272.  
  273. ==================== EXE Association (Whitelisted) ===============
  274.  
  275. (If an entry is included in the fixlist, the registry item will be restored to default or removed.)
  276.  
  277.  
  278. ==================== Internet Explorer trusted/restricted ===============
  279.  
  280. (If an entry is included in the fixlist, it will be removed from the registry.)
  281.  
  282.  
  283. ==================== Other Areas ============================
  284.  
  285. (Currently there is no automatic fix for this section.)
  286.  
  287. HKU\S-1-5-21-3290876315-848689152-142388844-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Sigma\AppData\Roaming\Microsoft\Windows Photo Viewer\Windows Photo Viewer Wallpaper.jpg
  288. DNS Servers: 8.8.8.8
  289. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
  290. Windows Firewall is enabled.
  291.  
  292. ==================== MSCONFIG/TASK MANAGER disabled items ==
  293.  
  294. (Currently there is no automatic fix for this section.)
  295.  
  296. MSCONFIG\Services: Fax => 3
  297. MSCONFIG\Services: IEEtwCollectorService => 3
  298. MSCONFIG\Services: NvNetworkService => 2
  299. HKLM\...\StartupApproved\Run: => "ShadowPlay"
  300. HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
  301. HKLM\...\StartupApproved\Run32: => "PWRISOVM.EXE"
  302. HKU\S-1-5-21-3290876315-848689152-142388844-1001\...\StartupApproved\Run: => "Gyazo"
  303. HKU\S-1-5-21-3290876315-848689152-142388844-1001\...\StartupApproved\Run: => "OneDrive"
  304.  
  305. ==================== FirewallRules (Whitelisted) ===============
  306.  
  307. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  308.  
  309. FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
  310. FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
  311. FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
  312. FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
  313. FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
  314. FirewallRules: [TCP Query User{0243BD76-3256-4E0C-B1E0-8E2A8A72CE2F}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
  315. FirewallRules: [UDP Query User{94744385-47D2-493B-8397-388D3BC56226}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
  316. FirewallRules: [{E51055BC-98E3-4B49-B797-38F1682810A8}] => (Block) C:\program files (x86)\skype\phone\skype.exe
  317. FirewallRules: [{C89B85A8-5C82-4AF5-9E73-3CBCEEEC9D22}] => (Block) C:\program files (x86)\skype\phone\skype.exe
  318. FirewallRules: [{6D13F7BE-E42A-4F3D-B141-A1FF324DA07B}] => (Allow) C:\Program Files\Intel Corporation\USB over IP\bin\UoipService.exe
  319. FirewallRules: [TCP Query User{ABB56470-AB83-439F-95E6-4F958837D1D4}C:\users\sigma\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\sigma\appdata\roaming\utorrent\utorrent.exe
  320. FirewallRules: [UDP Query User{6535ED96-151F-49E8-83DA-F06EC03AF169}C:\users\sigma\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\sigma\appdata\roaming\utorrent\utorrent.exe
  321. FirewallRules: [TCP Query User{54C7714E-71D4-4EB2-BEB5-0067A7AB3A00}C:\users\sigma\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\sigma\appdata\roaming\utorrent\utorrent.exe
  322. FirewallRules: [UDP Query User{D42D72C7-C9BE-4D83-BF56-7347D64C576A}C:\users\sigma\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\sigma\appdata\roaming\utorrent\utorrent.exe
  323. FirewallRules: [{E4C54DB0-FEA9-4ED9-943E-EAD0145955CF}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
  324. FirewallRules: [{F04AD91F-CCA8-4009-B31E-A0A211E15CC9}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
  325. FirewallRules: [{6D3445FF-7E02-483C-92C6-BC38FA8308DC}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
  326. FirewallRules: [{59CC2592-A48D-4093-BFDA-99B192DA7341}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
  327. FirewallRules: [{6C349269-93A4-4221-8CC2-C27577C5353A}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  328. FirewallRules: [{EE98DF37-CF82-46A6-891F-CDD380A6A765}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPDeviceDetection3.exe
  329. StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\xchat\xchat.exe] => Enabled:XChat IRC Client
  330.  
  331. ==================== Faulty Device Manager Devices =============
  332.  
  333. Name: Intel(R) PRO/Wireless 3965ABG Network Connection
  334. Description: Intel(R) PRO/Wireless 3965ABG Network Connection
  335. Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
  336. Manufacturer: Intel Corporation
  337. Service: netwlv64
  338. Problem: : This device is disabled. (Code 22)
  339. Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
  340.  
  341.  
  342. ==================== Event log errors: =========================
  343.  
  344. Application errors:
  345. ==================
  346. Error: (11/09/2015 09:02:07 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Sigma-HP)
  347. Description: Activation of app Microsoft.SkypeApp_kzf8qxf38zg5c!App failed with error: -1058406399 See the Microsoft-Windows-TWinUI/Operational log for additional information.
  348.  
  349. Error: (11/09/2015 05:19:15 PM) (Source: DPTF) (EventID: 256) (User: )
  350. Description: Intel(R) Dynamic Platform and Thermal Framework : ESIF(8.1.10600.150) TYPE: ERROR
  351.  
  352. DPTF Build Version: 8.1.10600.150
  353. DPTF Build Date: Jun 26 2015 11:46:12
  354. Source File: ..\..\..\Sources\Manager\EsifApplicationInterface.cpp @ line 737
  355. Executing Function: DptfEvent
  356. Message: Received unexpected event
  357. Framework Event: DptfResume [3]
  358.  
  359. Error: (11/09/2015 11:01:16 AM) (Source: Application Error) (EventID: 1000) (User: )
  360. Description: Faulting application name: Network Wizard.exe, version: 0.0.0.0, time stamp: 0x5543d165
  361. Faulting module name: Network Wizard.exe, version: 0.0.0.0, time stamp: 0x5543d165
  362. Exception code: 0xc0000005
  363. Fault offset: 0x0000426e
  364. Faulting process id: 0xb60
  365. Faulting application start time: 0xNetwork Wizard.exe0
  366. Faulting application path: Network Wizard.exe1
  367. Faulting module path: Network Wizard.exe2
  368. Report Id: Network Wizard.exe3
  369. Faulting package full name: Network Wizard.exe4
  370. Faulting package-relative application ID: Network Wizard.exe5
  371.  
  372. Error: (11/09/2015 11:00:11 AM) (Source: DPTF) (EventID: 256) (User: )
  373. Description: Intel(R) Dynamic Platform and Thermal Framework : ESIF(8.1.10600.150) TYPE: ERROR
  374.  
  375. DPTF Build Version: 8.1.10600.150
  376. DPTF Build Date: Jun 26 2015 11:46:12
  377. Source File: ..\..\..\Sources\Manager\EsifApplicationInterface.cpp @ line 737
  378. Executing Function: DptfEvent
  379. Message: Received unexpected event
  380. Framework Event: DptfResume [3]
  381.  
  382. Error: (11/08/2015 05:15:45 PM) (Source: DPTF) (EventID: 256) (User: )
  383. Description: Intel(R) Dynamic Platform and Thermal Framework : ESIF(8.1.10600.150) TYPE: ERROR
  384.  
  385. DPTF Build Version: 8.1.10600.150
  386. DPTF Build Date: Jun 26 2015 11:46:12
  387. Source File: ..\..\..\Sources\Manager\EsifApplicationInterface.cpp @ line 737
  388. Executing Function: DptfEvent
  389. Message: Received unexpected event
  390. Framework Event: DptfResume [3]
  391.  
  392. Error: (11/08/2015 02:06:32 PM) (Source: DPTF) (EventID: 256) (User: )
  393. Description: Intel(R) Dynamic Platform and Thermal Framework : ESIF(8.1.10600.150) TYPE: ERROR
  394.  
  395. DPTF Build Version: 8.1.10600.150
  396. DPTF Build Date: Jun 26 2015 11:46:12
  397. Source File: ..\..\..\Sources\Manager\EsifApplicationInterface.cpp @ line 737
  398. Executing Function: DptfEvent
  399. Message: Received unexpected event
  400. Framework Event: DptfResume [3]
  401.  
  402. Error: (11/08/2015 01:17:12 PM) (Source: DPTF) (EventID: 256) (User: )
  403. Description: Intel(R) Dynamic Platform and Thermal Framework : ESIF(8.1.10600.150) TYPE: ERROR
  404.  
  405. DPTF Build Version: 8.1.10600.150
  406. DPTF Build Date: Jun 26 2015 11:46:12
  407. Source File: ..\..\..\Sources\Manager\EsifApplicationInterface.cpp @ line 737
  408. Executing Function: DptfEvent
  409. Message: Received unexpected event
  410. Framework Event: DptfResume [3]
  411.  
  412. Error: (11/08/2015 09:49:11 AM) (Source: DPTF) (EventID: 256) (User: )
  413. Description: Intel(R) Dynamic Platform and Thermal Framework : ESIF(8.1.10600.150) TYPE: ERROR
  414.  
  415. DPTF Build Version: 8.1.10600.150
  416. DPTF Build Date: Jun 26 2015 11:46:12
  417. Source File: ..\..\..\Sources\Manager\EsifApplicationInterface.cpp @ line 737
  418. Executing Function: DptfEvent
  419. Message: Received unexpected event
  420. Framework Event: DptfResume [3]
  421.  
  422. Error: (11/08/2015 08:13:35 AM) (Source: DPTF) (EventID: 256) (User: )
  423. Description: Intel(R) Dynamic Platform and Thermal Framework : ESIF(8.1.10600.150) TYPE: ERROR
  424.  
  425. DPTF Build Version: 8.1.10600.150
  426. DPTF Build Date: Jun 26 2015 11:46:12
  427. Source File: ..\..\..\Sources\Manager\EsifApplicationInterface.cpp @ line 737
  428. Executing Function: DptfEvent
  429. Message: Received unexpected event
  430. Framework Event: DptfResume [3]
  431.  
  432. Error: (11/07/2015 01:40:47 PM) (Source: PerfNet) (EventID: 2004) (User: )
  433. Description:
  434.  
  435.  
  436. System errors:
  437. =============
  438. Error: (11/09/2015 09:39:05 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
  439. Description: The Adobe Acrobat Update Service service terminated unexpectedly. It has done this 1 time(s).
  440.  
  441. Error: (11/09/2015 09:02:07 PM) (Source: DCOM) (EventID: 10001) (User: Sigma-HP)
  442. Description: "C:\Program Files\WindowsApps\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\GetSkype.exe" -ServerName:App.AppXd9hrtyv8f50cbpnsp68wvxkhryqetej2.mca3236560897AppUnavailableUnavailable
  443.  
  444. Error: (11/09/2015 11:49:02 AM) (Source: NetBT) (EventID: 4321) (User: )
  445. Description: The name "WORKGROUP :1d" could not be registered on the interface with IP address 10.21.21.114.
  446. The computer with the IP address 10.21.30.31 did not allow the name to be claimed by
  447. this computer.
  448.  
  449. Error: (11/09/2015 11:43:43 AM) (Source: NetBT) (EventID: 4321) (User: )
  450. Description: The name "WORKGROUP :1d" could not be registered on the interface with IP address 10.21.21.114.
  451. The computer with the IP address 10.21.21.167 did not allow the name to be claimed by
  452. this computer.
  453.  
  454. Error: (11/09/2015 11:38:24 AM) (Source: NetBT) (EventID: 4321) (User: )
  455. Description: The name "WORKGROUP :1d" could not be registered on the interface with IP address 10.21.21.114.
  456. The computer with the IP address 10.21.30.31 did not allow the name to be claimed by
  457. this computer.
  458.  
  459. Error: (11/09/2015 11:33:05 AM) (Source: NetBT) (EventID: 4321) (User: )
  460. Description: The name "WORKGROUP :1d" could not be registered on the interface with IP address 10.21.21.114.
  461. The computer with the IP address 10.21.30.31 did not allow the name to be claimed by
  462. this computer.
  463.  
  464. Error: (11/09/2015 11:27:54 AM) (Source: NetBT) (EventID: 4321) (User: )
  465. Description: The name "WORKGROUP :1d" could not be registered on the interface with IP address 10.21.21.114.
  466. The computer with the IP address 10.21.4.156 did not allow the name to be claimed by
  467. this computer.
  468.  
  469. Error: (11/09/2015 11:22:35 AM) (Source: BROWSER) (EventID: 8009) (User: )
  470. Description: The browser was unable to promote itself to master browser. The computer that currently
  471. believes it is the master browser is ANGEL-PC.
  472.  
  473. Error: (11/09/2015 11:22:26 AM) (Source: NetBT) (EventID: 4321) (User: )
  474. Description: The name "WORKGROUP :1d" could not be registered on the interface with IP address 10.21.21.114.
  475. The computer with the IP address 10.21.30.31 did not allow the name to be claimed by
  476. this computer.
  477.  
  478. Error: (11/09/2015 11:17:07 AM) (Source: NetBT) (EventID: 4321) (User: )
  479. Description: The name "WORKGROUP :1d" could not be registered on the interface with IP address 10.21.21.114.
  480. The computer with the IP address 10.21.30.31 did not allow the name to be claimed by
  481. this computer.
  482.  
  483.  
  484. CodeIntegrity:
  485. ===================================
  486. Date: 2015-11-08 20:18:15.972
  487. Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
  488.  
  489. Date: 2015-11-08 20:18:15.863
  490. Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
  491.  
  492. Date: 2015-11-07 09:00:43.038
  493. Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
  494.  
  495. Date: 2015-11-07 09:00:42.961
  496. Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
  497.  
  498. Date: 2015-11-04 16:41:43.970
  499. Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
  500.  
  501. Date: 2015-11-04 16:41:43.875
  502. Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
  503.  
  504. Date: 2015-11-03 15:39:14.175
  505. Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
  506.  
  507. Date: 2015-11-02 21:40:31.747
  508. Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
  509.  
  510. Date: 2015-11-02 21:40:31.641
  511. Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
  512.  
  513. Date: 2015-11-02 21:27:14.355
  514. Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.
  515.  
  516.  
  517. ==================== Memory info ===========================
  518.  
  519. Processor: Intel(R) Core(TM) i7-5500U CPU @ 2.40GHz
  520. Percentage of memory in use: 31%
  521. Total physical RAM: 8112.67 MB
  522. Available physical RAM: 5544.22 MB
  523. Total Virtual: 16304.67 MB
  524. Available Virtual: 13536.66 MB
  525.  
  526. ==================== Drives ================================
  527.  
  528. Drive c: () (Fixed) (Total:901.01 GB) (Free:835 GB) NTFS ==>[system with boot components (obtained from drive)]
  529. Drive d: (Recovery) (Fixed) (Total:30.21 GB) (Free:3.19 GB) NTFS ==>[system with boot components (obtained from drive)]
  530.  
  531. ==================== MBR & Partition Table ==================
  532.  
  533. ========================================================
  534. Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: A4A21A17)
  535. Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
  536. Partition 2: (Not Active) - (Size=901 GB) - (Type=07 NTFS)
  537. Partition 3: (Not Active) - (Size=30.2 GB) - (Type=07 NTFS)
  538. Partition 4: (Not Active) - (Size=102 MB) - (Type=0C)
  539.  
  540. ==================== End of Addition.txt ============================
Advertisement
Add Comment
Please, Sign In to add comment