Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Additional scan result of Farbar Recovery Scan Tool (x64) Version:07-11-2015
- Ran by Sigma (2015-11-10 06:44:40)
- Running from C:\Users\Sigma\Desktop
- Windows 10 Pro (X64) (2015-09-07 13:29:25)
- Boot Mode: Normal
- ==========================================================
- ==================== Accounts: =============================
- Administrator (S-1-5-21-3290876315-848689152-142388844-500 - Administrator - Disabled)
- DefaultAccount (S-1-5-21-3290876315-848689152-142388844-503 - Limited - Disabled)
- Guest (S-1-5-21-3290876315-848689152-142388844-501 - Limited - Disabled)
- HomeGroupUser$ (S-1-5-21-3290876315-848689152-142388844-1002 - Limited - Enabled)
- Sigma (S-1-5-21-3290876315-848689152-142388844-1001 - Administrator - Enabled) => C:\Users\Sigma
- ==================== Security Center ========================
- (If an entry is included in the fixlist, it will be removed.)
- AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
- AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
- ==================== Installed Programs ======================
- (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
- µTorrent (HKU\S-1-5-21-3290876315-848689152-142388844-1001\...\uTorrent) (Version: 3.4.5.41202 - BitTorrent Inc.)
- 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
- Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.009.20077 - Adobe Systems Incorporated)
- Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.7.157 - Adobe Systems, Inc.)
- Apple Application Support (32-bit) (HKLM-x32\...\{7FE25256-B7C1-480D-B736-10A67A833AEA}) (Version: 3.2 - Apple Inc.)
- Apple Application Support (64-bit) (HKLM\...\{B255D495-4734-4E9B-B4F5-96702FD4A7B9}) (Version: 3.2 - Apple Inc.)
- Application Insights Tools for Visual Studio 2015 (x32 Version: 3.3 - Microsoft Corporation) Hidden
- Azure AD Authentication Connected Service (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
- AzureTools.Notifications (x32 Version: 2.7.30611.1601 - Microsoft Corporation) Hidden
- Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
- CopyTrans Control Center Uninstall Only (HKU\S-1-5-21-3290876315-848689152-142388844-1001\...\CopyTrans Suite) (Version: 4.002 - WindSolutions)
- CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.9.5009 - CyberLink Corp.)
- CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 5.0.6.5011 - CyberLink Corp.)
- Dia (remove only) (HKLM-x32\...\Dia) (Version: - )
- DisableMSDefender (Version: 1.0.0 - Hewlett-Packard Company) Hidden
- Dotfuscator and Analytics Community Edition 5.18.1 (x32 Version: 5.18.1.2898 - PreEmptive Solutions) Hidden
- Entity Framework 6.1.3 Tools for Visual Studio 2015 (HKLM-x32\...\{1A8A9739-BAD7-491F-B5B9-A79A2B965422}) (Version: 14.0.40302.0 - Microsoft Corporation)
- ESU for Microsoft Windows 7 SP1 (HKLM-x32\...\{E1ACF120-CD69-47F0-B202-9A4B95C436D8}) (Version: 5.1.5 - Hewlett-Packard)
- Evernote v. 5.8.1 (HKLM-x32\...\{4FD2D1C8-8636-11E4-9D21-00163E98E7D6}) (Version: 5.8.1.6061 - Evernote Corp.)
- Extreme NAC Assessment Agent (HKLM-x32\...\{64CC9DEE-5692-45BD-B245-21DC59695FFB}) (Version: 1.15.0.0 - Extreme Networks)
- Foxit PhantomPDF (HKLM-x32\...\{4E32271C-B55A-4CDF-8DB7-88FD1C45927C}) (Version: 7.0.310.226 - Foxit Software Inc.)
- Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.80 - Google Inc.)
- Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
- Gyazo 3.1.6 (HKLM-x32\...\{6DB8C365-E719-4BA5-9594-10DFC244D3FD}_is1) (Version: - Nota Inc.)
- Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
- HP 3D DriveGuard (HKLM-x32\...\{E8D0E2B8-B64B-44BC-8E01-00DDACBDF78A}) (Version: 6.0.28.1 - Hewlett-Packard Company)
- HP CoolSense (HKLM-x32\...\{ADE2F6A7-E7BD-4955-BD66-30903B223DDF}) (Version: 2.20.41 - Hewlett-Packard Company)
- HP Documentation (HKLM-x32\...\{CF43D82B-1165-483F-A2EB-D11FED649BE1}) (Version: 1.1.0.0 - Hewlett-Packard)
- HP On Screen Display (HKLM-x32\...\{BB83BE06-E69A-4CC5-8421-96CCD196589E}) (Version: 1.3.6 - Hewlett-Packard Company)
- HP Quick Launch (HKLM-x32\...\{6BA7C52E-4071-47CC-9060-ABB143862DB0}) (Version: 3.0.7 - Hewlett-Packard Company)
- HP Setup (HKLM-x32\...\{438363A8-F486-4C37-834C-4955773CB3D3}) (Version: 9.1.15453.4066 - Hewlett-Packard Company)
- HP Support Assistant (HKLM-x32\...\{904822F1-6C7D-4B91-B936-6A1C0810544C}) (Version: 7.7.34.34 - Hewlett-Packard Company)
- HP Support Solutions Framework (HKLM-x32\...\{F6A11738-3EE4-4573-AEA5-6CD5D491C167}) (Version: 12.0.30.219 - Hewlett-Packard Company)
- Intel(R) Chipset Device Software (x32 Version: 10.1.1.8 - Intel(R) Corporation) Hidden
- Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.1.10600.150 - Intel Corporation)
- Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1156 - Intel Corporation)
- Intel(R) PRO/Wireless Driver (HKLM\...\{4d4a045b-9761-43d2-811c-1c29cbdb7459}) (Version: 18.12.0000.3040 - Intel Corporation)
- Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.15.4279 - Intel Corporation)
- Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.6.2.1001 - Intel Corporation)
- Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 1.1.253.0 - Intel Corporation)
- Intel(R) Update Manager (HKLM-x32\...\{84A2B59B-6A7B-4C01-8592-15C9BFE6AC36}) (Version: 2.4.3 - Intel Corporation)
- Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{C345A462-2044-47D6-81F6-A4416453A514}) (Version: 17.1.1529.1613 - Intel Corporation)
- Intel(R) Wireless Bluetooth(R)(patch version 17.1.1434.2) (HKLM\...\{302600C1-6BDF-4FD1-1407-148929CC1385}) (Version: 17.1.1407.0480 - Intel Corporation)
- Java 8 Update 60 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418060F0}) (Version: 8.0.600.27 - Oracle Corporation)
- Java SE Development Kit 8 Update 60 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180600}) (Version: 8.0.600.27 - Oracle Corporation)
- Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
- Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
- Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation)
- Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)
- Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)
- Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (ENU) (HKLM-x32\...\{290FC320-2F5A-329E-8840-C4193BD7A9EE}) (Version: 4.5.51209 - Microsoft Corporation)
- Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (HKLM-x32\...\{B941AFB4-8851-33A1-9E72-0C33D463C41C}) (Version: 4.5.51209 - Microsoft Corporation)
- Microsoft .NET Framework 4.6 SDK (HKLM-x32\...\{B5915D37-0637-4A26-A3AA-C5DC9F856370}) (Version: 4.6.00081 - Microsoft Corporation)
- Microsoft .NET Framework 4.6 Targeting Pack (ENU) (HKLM-x32\...\{3D3CEBE6-40EA-4C48-97FD-73828281AB4A}) (Version: 4.6.00081 - Microsoft Corporation)
- Microsoft .NET Framework 4.6 Targeting Pack (HKLM-x32\...\{2CC6A4A7-AAC2-46C9-9DBB-3727B5954F65}) (Version: 4.6.00081 - Microsoft Corporation)
- Microsoft .NET Version Manager (x64) 1.0.0-beta5 (HKLM\...\{c5a4aba3-1aba-3ef8-b2d5-c3fa37f59738}) (Version: 1.0.10609.0 - Microsoft Corporation)
- Microsoft Excel 2010 (HKLM\...\Office14.EXCEL) (Version: 14.0.7015.1000 - Microsoft Corporation)
- Microsoft Help Viewer 2.2 (HKLM-x32\...\Microsoft Help Viewer 2.2) (Version: 2.2.23107 - Microsoft Corporation)
- Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4641.1005 - Microsoft Corporation)
- Microsoft PowerPoint 2010 (HKLM\...\Office14.POWERPOINT) (Version: 14.0.7015.1000 - Microsoft Corporation)
- Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{9D573E71-1077-4C7E-B4DB-4E22A5D2B48B}) (Version: 11.0.2100.60 - Microsoft Corporation)
- Microsoft SQL Server 2012 Native Client (HKLM\...\{49D665A2-4C2A-476E-9AB8-FCC425F526FC}) (Version: 11.0.2100.60 - Microsoft Corporation)
- Microsoft SQL Server 2014 Management Objects (HKLM-x32\...\{2774595F-BC2A-4B12-A25B-0C37A37049B0}) (Version: 12.0.2000.8 - Microsoft Corporation)
- Microsoft SQL Server 2014 Management Objects (x64) (HKLM\...\{1F9EB3B6-AED7-4AA7-B8F1-8E314B74B2A5}) (Version: 12.0.2000.8 - Microsoft Corporation)
- Microsoft SQL Server 2014 Transact-SQL ScriptDom (HKLM\...\{020CDFE0-C127-4047-B571-37C82396B662}) (Version: 12.0.2000.8 - Microsoft Corporation)
- Microsoft SQL Server 2014 T-SQL Language Service (HKLM-x32\...\{47D08E7A-92A1-489B-B0BF-415516497BCE}) (Version: 12.0.2000.8 - Microsoft Corporation)
- Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
- Microsoft SQL Server Data Tools - enu (14.0.50616.0) (HKLM-x32\...\{58246C80-3941-4B69-AE31-264644E2ADB8}) (Version: 14.0.50616.0 - Microsoft Corporation)
- Microsoft System CLR Types for SQL Server 2014 (HKLM\...\{68BA34E8-9B9D-4A74-83F0-7D366B532D75}) (Version: 12.0.2402.11 - Microsoft Corporation)
- Microsoft System CLR Types for SQL Server 2014 (HKLM-x32\...\{718FFB65-F6E4-4D62-861F-ED10ED32C936}) (Version: 12.0.2402.11 - Microsoft Corporation)
- Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
- Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
- Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
- Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
- Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
- Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
- Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
- Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)
- Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
- Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
- Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
- Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
- Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation)
- Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
- Microsoft Visual Studio Community 2015 (HKLM-x32\...\{50b32652-69d2-4b93-9316-edcd12067b8b}) (Version: 14.0.23107.10 - Microsoft Corporation)
- Microsoft Word 2010 (HKLM\...\Office14.WORD) (Version: 14.0.7015.1000 - Microsoft Corporation)
- Multi-Device Hybrid Apps using C# - Templates - ENU (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
- NetBeans IDE 8.0.2 (HKLM\...\nbi-nb-base-8.0.2.0.201411181905) (Version: 8.0.2 - NetBeans.org)
- NVIDIA GeForce Experience 2.5.13.6 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.13.6 - NVIDIA Corporation)
- NVIDIA Graphics Driver 353.62 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 353.62 - NVIDIA Corporation)
- NVIDIA PhysX System Software 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
- opensource (x32 Version: 1.0.14960.3876 - Your Company Name) Hidden
- PowerISO (HKLM-x32\...\PowerISO) (Version: 4.7 - PowerISO Computing, Inc.)
- PreEmptive Analytics Visual Studio Components (x32 Version: 1.2.5134.1 - PreEmptive Solutions) Hidden
- Prerequisites for SSDT (HKLM-x32\...\{21373064-AD95-48DB-A32E-0D9E08EF7355}) (Version: 12.0.2000.8 - Microsoft Corporation)
- Python 3.5.0 (32-bit) (HKU\S-1-5-21-3290876315-848689152-142388844-1001\...\{1197d2bb-6cf8-488a-b994-d5bf6d7efe7b}) (Version: 3.5.150.0 - Python Software Foundation)
- Python 3.5.0 Core Interpreter (32-bit) (x32 Version: 3.5.150.0 - Python Software Foundation) Hidden
- Python 3.5.0 Development Libraries (32-bit) (x32 Version: 3.5.150.0 - Python Software Foundation) Hidden
- Python 3.5.0 Documentation (32-bit) (x32 Version: 3.5.150.0 - Python Software Foundation) Hidden
- Python 3.5.0 Executables (32-bit) (x32 Version: 3.5.150.0 - Python Software Foundation) Hidden
- Python 3.5.0 Launcher (32-bit) (x32 Version: 3.5.150.0 - Python Software Foundation) Hidden
- Python 3.5.0 pip Bootstrap (32-bit) (x32 Version: 3.5.150.0 - Python Software Foundation) Hidden
- Python 3.5.0 Standard Library (32-bit) (x32 Version: 3.5.150.0 - Python Software Foundation) Hidden
- Python 3.5.0 Tcl/Tk Support (32-bit) (x32 Version: 3.5.150.0 - Python Software Foundation) Hidden
- Python 3.5.0 Test Suite (32-bit) (x32 Version: 3.5.150.0 - Python Software Foundation) Hidden
- Python 3.5.0 Utility Scripts (32-bit) (x32 Version: 3.5.150.0 - Python Software Foundation) Hidden
- Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.370.77 - Realtek Semiconductor Corp.)
- Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7560 - Realtek Semiconductor Corp.)
- Reimage Repair (HKLM\...\Reimage Repair) (Version: 1.8.2.5 - Reimage) <==== ATTENTION
- Roslyn Language Services - x86 (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
- Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0016-0000-1000-0000000FF1CE}_Office14.EXCEL_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft)
- Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0018-0000-1000-0000000FF1CE}_Office14.POWERPOINT_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft)
- Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-001B-0000-1000-0000000FF1CE}_Office14.WORD_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft)
- Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version: - Microsoft) Hidden
- SHIELD Streaming (Version: 4.1.3000 - NVIDIA Corporation) Hidden
- SHIELD Wireless Controller Driver (Version: 2.5.13.6 - NVIDIA Corporation) Hidden
- Skype™ 7.12 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.12.101 - Skype Technologies S.A.)
- swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
- Synaptics ClickPad Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.12.95 - Synaptics Incorporated)
- Synaptics WBF DDK (HKLM\...\{963DDEF5-52CF-4313-81D9-B186B89C0A57}) (Version: 4.5.289.0 - Synaptics)
- Team Explorer for Microsoft Visual Studio 2015 (x32 Version: 14.0.23102 - Microsoft Corporation) Hidden
- TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.47484 - TeamViewer)
- Test Tools for Microsoft Visual Studio 2015 (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
- TypeScript Power Tool (x32 Version: 1.5.4.0 - Microsoft Corporation) Hidden
- TypeScript Tools for Microsoft Visual Studio 2015 (x32 Version: 1.5.4.0 - Microsoft Corporation) Hidden
- TypeScript Tools for Microsoft Visual Studio 2015 1.5.4.0 (HKLM-x32\...\{4cde0c8c-47b3-448f-babf-fe5d392432a6}) (Version: 1.5.23128.0 - Microsoft Corporation)
- Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
- WCF Data Services 5.6.4 Runtime (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden
- WCF Data Services Tools for Microsoft Visual Studio 2015 (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden
- WinRAR 5.30 beta 2 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.30.2 - win.rar GmbH)
- ==================== Custom CLSID (Whitelisted): ==========================
- (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
- ==================== Restore Points =========================
- 04-11-2015 17:15:48 Malwarebytes Anti-Rootkit Restore Point
- 07-11-2015 08:14:22 Removed Skype™ 7.12
- ==================== Hosts content: ===============================
- (If needed Hosts: directive could be included in the fixlist to reset Hosts.)
- 2009-07-13 21:34 - 2009-06-10 16:00 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
- ==================== Scheduled Tasks (Whitelisted) =============
- (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
- Task: {034A21FF-3103-47C2-BCF7-7D84DD2BB605} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe
- Task: {122BBE7F-DF6A-4876-81AE-2B28ED300A73} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-06-23] (Adobe Systems Incorporated)
- Task: {19CAC975-AF59-4D78-BF9C-5A8D543EFF26} - System32\Tasks\ReimageUpdater => C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe [2015-08-19] (Reimage®) <==== ATTENTION
- Task: {1A5C2508-4584-41BF-B6C5-BB1E39BDC8D7} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2015-10-20] (Hewlett-Packard)
- Task: {227B1E0B-6299-43F7-9451-A56AB2E0D892} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe
- Task: {2715C5FF-9B9C-4481-8FE7-CDCC7C533283} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
- Task: {2CD87684-E84E-4B10-9841-AA3AB5CB5BF9} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
- Task: {331F7C28-7020-4437-A22A-B632E346BCDA} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
- Task: {34EECBF6-5E08-4934-9C47-9E4A2D0B1B59} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe
- Task: {35D1BF1E-DC41-4BB4-BEEF-F7222E483F80} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
- Task: {364F66A3-EC91-484C-B72E-AED4639A2780} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe
- Task: {36CC9A7C-01A0-481F-AA5E-D7F7E3B51654} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2015-10-20] (Hewlett-Packard)
- Task: {3A128C4F-044A-4A71-8646-6AEB6944D655} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe
- Task: {41C0C686-788A-4464-B48D-619992487B1B} - System32\Tasks\GyazoUpdateTaskMachine => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2015-08-19] ()
- Task: {431576B1-CEC8-42E9-BB62-7CD3F7B69510} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe
- Task: {4A8C0DF7-2186-4E40-BB72-393F7C8505E8} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe
- Task: {4B691D92-654A-407B-89C4-F4C595C9A1A9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-26] (Google Inc.)
- Task: {4E610F2D-A08C-4C19-84C2-28C2C09AAB7C} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe
- Task: {55816F6B-E2C8-4C38-B81D-CA9339C6E95E} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
- Task: {62A6346B-A6E0-4B85-9DE1-091211808540} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe
- Task: {647A6CD4-2FAA-45C3-9F7A-6F61C02F84BB} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
- Task: {66A37307-2820-41F3-B439-DDF328867C0A} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe
- Task: {693F3EF4-90C7-450D-AB1F-E42FD24B941F} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe
- Task: {71FBB64F-BDFC-436A-A05B-147D30657C0D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-09-14] (Adobe Systems Incorporated)
- Task: {7374F2D3-B166-4A40-B2A9-8E704C860D95} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2014-08-22] (Hewlett-Packard Company)
- Task: {75D4583F-2A93-4B33-86B7-A3D3DC4E7C49} - System32\Tasks\HPCeeScheduleForSigma => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard)
- Task: {76B7653D-1294-4916-9994-4D29A5EB6D1B} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe
- Task: {7D7FFA88-028E-4819-A1FB-759ECC10C186} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2014-05-12] (Hewlett-Packard Company)
- Task: {8105E305-F674-4B4B-89A5-6D7DD087564E} - System32\Tasks\GyazoUpdateTaskMachineDaily => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2015-08-19] ()
- Task: {81157CED-F264-40E9-A295-99EE1AEC36F2} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
- Task: {8732690A-75E4-4594-88AE-54FDE746AF5C} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-04-09] ()
- Task: {8F4C3A2F-D807-437E-BAA4-10DF9721ED47} - \Microsoft\Windows\File Classification Infrastructure\Property Definition Sync -> No File <==== ATTENTION
- Task: {8F92AEAC-1408-459D-A7C5-E6A120407482} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe
- Task: {8FDF1B22-E8BE-42FE-BC0D-41F64C23BA2D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2015-09-28] (Hewlett-Packard)
- Task: {9381C66E-04B6-4A35-B678-09EBE9E03CB7} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe
- Task: {9406034B-2F9C-4231-AE20-8B781B0FE3FF} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe
- Task: {965E881E-9EA0-4D54-A752-858F70D75CCD} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
- Task: {98AD7B7E-572B-4B13-81C4-74E241E85BA3} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe
- Task: {9F56C1D8-5A4E-4350-A825-DBE5410478D6} - System32\Tasks\Reimage Reminder => C:\Program Files\Reimage\Reimage Repair\ReimageReminder.exe [2015-11-05] (Reimage ltd.) <==== ATTENTION
- Task: {A33D2200-8034-4A37-91B9-5E56A640FD6D} - System32\Tasks\Registration => C:\Program Files (x86)\Hewlett-Packard\HP Setup\Dependencies\RemEngine.exe [2012-03-21] ()
- Task: {B3663AA3-D607-4E92-821D-9E3D529F9313} - System32\Tasks\YCMServiceAgent => c:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [2015-02-11] (CyberLink Corp.)
- Task: {B458A0AC-5D54-411F-8D98-842A49CC3562} - System32\Tasks\Hewlett-Packard\HP CoolSense\HP CoolSense Start at Logon => C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [2014-05-19] (Hewlett-Packard Development Company, L.P.)
- Task: {B68AAF3A-5A00-42C3-92CA-F682AF78D678} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-04-09] ()
- Task: {BEAF84B7-E7F5-4AB1-9FA6-881EB8FF9DE1} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe
- Task: {CC414B0A-F5CB-49B9-8144-D8EA8E86FF3F} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe
- Task: {CE35E833-AE98-4B7A-B8BC-AEF84A7A1D8C} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
- Task: {CE800406-4838-4244-B72D-3890B250FE62} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe
- Task: {D1FD3591-C129-45D1-B720-4F0C53E8F436} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-26] (Google Inc.)
- Task: {D2F37ABC-F5C1-42C3-8D39-E70A1EF69918} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
- Task: {DCBE0747-BC2C-49FC-981B-47758B3FC64E} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
- Task: {DFDDA7FA-8937-4C36-B76C-6886F0D72BC3} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe
- Task: {E485CDF8-58F8-45C3-83F2-9ED74990D66C} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe
- Task: {E612CFA0-EA8F-4F35-8A7D-49ADE06BA84C} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
- Task: {E869F065-04B0-4F8B-8D07-80C55687606C} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe
- Task: {EC56CF83-F1FB-4AE9-998D-CEC4FCA23FFE} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-10-02] (Microsoft Corporation)
- Task: {FDC1A9C2-6A32-454F-B41F-727211BCC26C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2014-08-22] (Hewlett-Packard Company)
- (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
- Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
- Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
- Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
- Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
- Task: C:\WINDOWS\Tasks\HPCeeScheduleForSigma.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
- ==================== Loaded Modules (Whitelisted) ==============
- 2015-09-07 10:49 - 2015-09-07 10:49 - 00032768 _____ () C:\WINDOWS\SYSTEM32\licensemanagerapi.dll
- 2015-10-07 08:40 - 2015-07-22 20:10 - 00116552 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
- 2015-09-07 10:49 - 2015-09-07 10:49 - 00404480 _____ () C:\WINDOWS\System32\diagtrack_wininternal.dll
- 2015-10-01 12:52 - 2015-09-17 01:48 - 02494712 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
- 2015-10-01 12:52 - 2015-09-17 01:48 - 02494712 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
- 2015-10-01 12:52 - 2015-09-17 00:48 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
- 2015-07-10 05:59 - 2015-07-10 05:59 - 00143360 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\XamlTileRendering.dll
- 2015-10-01 12:51 - 2015-09-17 01:04 - 00642048 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\MtcUvc.dll
- 2015-08-19 03:56 - 2015-08-19 03:56 - 06908904 _____ () C:\Program Files\Reimage\Reimage Protector\ReiSystem.exe
- 2015-10-01 12:52 - 2015-09-17 00:44 - 06569472 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
- 2015-10-01 12:51 - 2015-09-17 00:42 - 00471040 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
- 2015-10-01 12:51 - 2015-09-17 00:42 - 01808384 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
- 2015-10-01 12:52 - 2015-09-17 00:43 - 02274816 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
- 2015-10-22 18:44 - 2015-10-20 09:08 - 01532744 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.80\libglesv2.dll
- 2015-10-22 18:44 - 2015-10-20 09:08 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.80\libegl.dll
- ==================== Alternate Data Streams (Whitelisted) =========
- (If an entry is included in the fixlist, only the ADS will be removed.)
- ==================== Safe Mode (Whitelisted) ===================
- (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
- ==================== EXE Association (Whitelisted) ===============
- (If an entry is included in the fixlist, the registry item will be restored to default or removed.)
- ==================== Internet Explorer trusted/restricted ===============
- (If an entry is included in the fixlist, it will be removed from the registry.)
- ==================== Other Areas ============================
- (Currently there is no automatic fix for this section.)
- HKU\S-1-5-21-3290876315-848689152-142388844-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Sigma\AppData\Roaming\Microsoft\Windows Photo Viewer\Windows Photo Viewer Wallpaper.jpg
- DNS Servers: 8.8.8.8
- HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
- Windows Firewall is enabled.
- ==================== MSCONFIG/TASK MANAGER disabled items ==
- (Currently there is no automatic fix for this section.)
- MSCONFIG\Services: Fax => 3
- MSCONFIG\Services: IEEtwCollectorService => 3
- MSCONFIG\Services: NvNetworkService => 2
- HKLM\...\StartupApproved\Run: => "ShadowPlay"
- HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
- HKLM\...\StartupApproved\Run32: => "PWRISOVM.EXE"
- HKU\S-1-5-21-3290876315-848689152-142388844-1001\...\StartupApproved\Run: => "Gyazo"
- HKU\S-1-5-21-3290876315-848689152-142388844-1001\...\StartupApproved\Run: => "OneDrive"
- ==================== FirewallRules (Whitelisted) ===============
- (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
- FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
- FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
- FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
- FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
- FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
- FirewallRules: [TCP Query User{0243BD76-3256-4E0C-B1E0-8E2A8A72CE2F}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
- FirewallRules: [UDP Query User{94744385-47D2-493B-8397-388D3BC56226}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
- FirewallRules: [{E51055BC-98E3-4B49-B797-38F1682810A8}] => (Block) C:\program files (x86)\skype\phone\skype.exe
- FirewallRules: [{C89B85A8-5C82-4AF5-9E73-3CBCEEEC9D22}] => (Block) C:\program files (x86)\skype\phone\skype.exe
- FirewallRules: [{6D13F7BE-E42A-4F3D-B141-A1FF324DA07B}] => (Allow) C:\Program Files\Intel Corporation\USB over IP\bin\UoipService.exe
- FirewallRules: [TCP Query User{ABB56470-AB83-439F-95E6-4F958837D1D4}C:\users\sigma\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\sigma\appdata\roaming\utorrent\utorrent.exe
- FirewallRules: [UDP Query User{6535ED96-151F-49E8-83DA-F06EC03AF169}C:\users\sigma\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\sigma\appdata\roaming\utorrent\utorrent.exe
- FirewallRules: [TCP Query User{54C7714E-71D4-4EB2-BEB5-0067A7AB3A00}C:\users\sigma\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\sigma\appdata\roaming\utorrent\utorrent.exe
- FirewallRules: [UDP Query User{D42D72C7-C9BE-4D83-BF56-7347D64C576A}C:\users\sigma\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\sigma\appdata\roaming\utorrent\utorrent.exe
- FirewallRules: [{E4C54DB0-FEA9-4ED9-943E-EAD0145955CF}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
- FirewallRules: [{F04AD91F-CCA8-4009-B31E-A0A211E15CC9}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
- FirewallRules: [{6D3445FF-7E02-483C-92C6-BC38FA8308DC}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
- FirewallRules: [{59CC2592-A48D-4093-BFDA-99B192DA7341}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
- FirewallRules: [{6C349269-93A4-4221-8CC2-C27577C5353A}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- FirewallRules: [{EE98DF37-CF82-46A6-891F-CDD380A6A765}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPDeviceDetection3.exe
- StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\xchat\xchat.exe] => Enabled:XChat IRC Client
- ==================== Faulty Device Manager Devices =============
- Name: Intel(R) PRO/Wireless 3965ABG Network Connection
- Description: Intel(R) PRO/Wireless 3965ABG Network Connection
- Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
- Manufacturer: Intel Corporation
- Service: netwlv64
- Problem: : This device is disabled. (Code 22)
- Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
- ==================== Event log errors: =========================
- Application errors:
- ==================
- Error: (11/09/2015 09:02:07 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Sigma-HP)
- Description: Activation of app Microsoft.SkypeApp_kzf8qxf38zg5c!App failed with error: -1058406399 See the Microsoft-Windows-TWinUI/Operational log for additional information.
- Error: (11/09/2015 05:19:15 PM) (Source: DPTF) (EventID: 256) (User: )
- Description: Intel(R) Dynamic Platform and Thermal Framework : ESIF(8.1.10600.150) TYPE: ERROR
- DPTF Build Version: 8.1.10600.150
- DPTF Build Date: Jun 26 2015 11:46:12
- Source File: ..\..\..\Sources\Manager\EsifApplicationInterface.cpp @ line 737
- Executing Function: DptfEvent
- Message: Received unexpected event
- Framework Event: DptfResume [3]
- Error: (11/09/2015 11:01:16 AM) (Source: Application Error) (EventID: 1000) (User: )
- Description: Faulting application name: Network Wizard.exe, version: 0.0.0.0, time stamp: 0x5543d165
- Faulting module name: Network Wizard.exe, version: 0.0.0.0, time stamp: 0x5543d165
- Exception code: 0xc0000005
- Fault offset: 0x0000426e
- Faulting process id: 0xb60
- Faulting application start time: 0xNetwork Wizard.exe0
- Faulting application path: Network Wizard.exe1
- Faulting module path: Network Wizard.exe2
- Report Id: Network Wizard.exe3
- Faulting package full name: Network Wizard.exe4
- Faulting package-relative application ID: Network Wizard.exe5
- Error: (11/09/2015 11:00:11 AM) (Source: DPTF) (EventID: 256) (User: )
- Description: Intel(R) Dynamic Platform and Thermal Framework : ESIF(8.1.10600.150) TYPE: ERROR
- DPTF Build Version: 8.1.10600.150
- DPTF Build Date: Jun 26 2015 11:46:12
- Source File: ..\..\..\Sources\Manager\EsifApplicationInterface.cpp @ line 737
- Executing Function: DptfEvent
- Message: Received unexpected event
- Framework Event: DptfResume [3]
- Error: (11/08/2015 05:15:45 PM) (Source: DPTF) (EventID: 256) (User: )
- Description: Intel(R) Dynamic Platform and Thermal Framework : ESIF(8.1.10600.150) TYPE: ERROR
- DPTF Build Version: 8.1.10600.150
- DPTF Build Date: Jun 26 2015 11:46:12
- Source File: ..\..\..\Sources\Manager\EsifApplicationInterface.cpp @ line 737
- Executing Function: DptfEvent
- Message: Received unexpected event
- Framework Event: DptfResume [3]
- Error: (11/08/2015 02:06:32 PM) (Source: DPTF) (EventID: 256) (User: )
- Description: Intel(R) Dynamic Platform and Thermal Framework : ESIF(8.1.10600.150) TYPE: ERROR
- DPTF Build Version: 8.1.10600.150
- DPTF Build Date: Jun 26 2015 11:46:12
- Source File: ..\..\..\Sources\Manager\EsifApplicationInterface.cpp @ line 737
- Executing Function: DptfEvent
- Message: Received unexpected event
- Framework Event: DptfResume [3]
- Error: (11/08/2015 01:17:12 PM) (Source: DPTF) (EventID: 256) (User: )
- Description: Intel(R) Dynamic Platform and Thermal Framework : ESIF(8.1.10600.150) TYPE: ERROR
- DPTF Build Version: 8.1.10600.150
- DPTF Build Date: Jun 26 2015 11:46:12
- Source File: ..\..\..\Sources\Manager\EsifApplicationInterface.cpp @ line 737
- Executing Function: DptfEvent
- Message: Received unexpected event
- Framework Event: DptfResume [3]
- Error: (11/08/2015 09:49:11 AM) (Source: DPTF) (EventID: 256) (User: )
- Description: Intel(R) Dynamic Platform and Thermal Framework : ESIF(8.1.10600.150) TYPE: ERROR
- DPTF Build Version: 8.1.10600.150
- DPTF Build Date: Jun 26 2015 11:46:12
- Source File: ..\..\..\Sources\Manager\EsifApplicationInterface.cpp @ line 737
- Executing Function: DptfEvent
- Message: Received unexpected event
- Framework Event: DptfResume [3]
- Error: (11/08/2015 08:13:35 AM) (Source: DPTF) (EventID: 256) (User: )
- Description: Intel(R) Dynamic Platform and Thermal Framework : ESIF(8.1.10600.150) TYPE: ERROR
- DPTF Build Version: 8.1.10600.150
- DPTF Build Date: Jun 26 2015 11:46:12
- Source File: ..\..\..\Sources\Manager\EsifApplicationInterface.cpp @ line 737
- Executing Function: DptfEvent
- Message: Received unexpected event
- Framework Event: DptfResume [3]
- Error: (11/07/2015 01:40:47 PM) (Source: PerfNet) (EventID: 2004) (User: )
- Description:
- System errors:
- =============
- Error: (11/09/2015 09:39:05 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
- Description: The Adobe Acrobat Update Service service terminated unexpectedly. It has done this 1 time(s).
- Error: (11/09/2015 09:02:07 PM) (Source: DCOM) (EventID: 10001) (User: Sigma-HP)
- Description: "C:\Program Files\WindowsApps\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\GetSkype.exe" -ServerName:App.AppXd9hrtyv8f50cbpnsp68wvxkhryqetej2.mca3236560897AppUnavailableUnavailable
- Error: (11/09/2015 11:49:02 AM) (Source: NetBT) (EventID: 4321) (User: )
- Description: The name "WORKGROUP :1d" could not be registered on the interface with IP address 10.21.21.114.
- The computer with the IP address 10.21.30.31 did not allow the name to be claimed by
- this computer.
- Error: (11/09/2015 11:43:43 AM) (Source: NetBT) (EventID: 4321) (User: )
- Description: The name "WORKGROUP :1d" could not be registered on the interface with IP address 10.21.21.114.
- The computer with the IP address 10.21.21.167 did not allow the name to be claimed by
- this computer.
- Error: (11/09/2015 11:38:24 AM) (Source: NetBT) (EventID: 4321) (User: )
- Description: The name "WORKGROUP :1d" could not be registered on the interface with IP address 10.21.21.114.
- The computer with the IP address 10.21.30.31 did not allow the name to be claimed by
- this computer.
- Error: (11/09/2015 11:33:05 AM) (Source: NetBT) (EventID: 4321) (User: )
- Description: The name "WORKGROUP :1d" could not be registered on the interface with IP address 10.21.21.114.
- The computer with the IP address 10.21.30.31 did not allow the name to be claimed by
- this computer.
- Error: (11/09/2015 11:27:54 AM) (Source: NetBT) (EventID: 4321) (User: )
- Description: The name "WORKGROUP :1d" could not be registered on the interface with IP address 10.21.21.114.
- The computer with the IP address 10.21.4.156 did not allow the name to be claimed by
- this computer.
- Error: (11/09/2015 11:22:35 AM) (Source: BROWSER) (EventID: 8009) (User: )
- Description: The browser was unable to promote itself to master browser. The computer that currently
- believes it is the master browser is ANGEL-PC.
- Error: (11/09/2015 11:22:26 AM) (Source: NetBT) (EventID: 4321) (User: )
- Description: The name "WORKGROUP :1d" could not be registered on the interface with IP address 10.21.21.114.
- The computer with the IP address 10.21.30.31 did not allow the name to be claimed by
- this computer.
- Error: (11/09/2015 11:17:07 AM) (Source: NetBT) (EventID: 4321) (User: )
- Description: The name "WORKGROUP :1d" could not be registered on the interface with IP address 10.21.21.114.
- The computer with the IP address 10.21.30.31 did not allow the name to be claimed by
- this computer.
- CodeIntegrity:
- ===================================
- Date: 2015-11-08 20:18:15.972
- Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
- Date: 2015-11-08 20:18:15.863
- Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
- Date: 2015-11-07 09:00:43.038
- Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
- Date: 2015-11-07 09:00:42.961
- Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
- Date: 2015-11-04 16:41:43.970
- Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
- Date: 2015-11-04 16:41:43.875
- Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
- Date: 2015-11-03 15:39:14.175
- Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
- Date: 2015-11-02 21:40:31.747
- Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
- Date: 2015-11-02 21:40:31.641
- Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
- Date: 2015-11-02 21:27:14.355
- Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.
- ==================== Memory info ===========================
- Processor: Intel(R) Core(TM) i7-5500U CPU @ 2.40GHz
- Percentage of memory in use: 31%
- Total physical RAM: 8112.67 MB
- Available physical RAM: 5544.22 MB
- Total Virtual: 16304.67 MB
- Available Virtual: 13536.66 MB
- ==================== Drives ================================
- Drive c: () (Fixed) (Total:901.01 GB) (Free:835 GB) NTFS ==>[system with boot components (obtained from drive)]
- Drive d: (Recovery) (Fixed) (Total:30.21 GB) (Free:3.19 GB) NTFS ==>[system with boot components (obtained from drive)]
- ==================== MBR & Partition Table ==================
- ========================================================
- Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: A4A21A17)
- Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
- Partition 2: (Not Active) - (Size=901 GB) - (Type=07 NTFS)
- Partition 3: (Not Active) - (Size=30.2 GB) - (Type=07 NTFS)
- Partition 4: (Not Active) - (Size=102 MB) - (Type=0C)
- ==================== End of Addition.txt ============================
Advertisement
Add Comment
Please, Sign In to add comment