Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09-06-2014 03
- Ran by owner at 2014-06-09 17:19:30
- Running from C:\Users\owner\Desktop
- Boot Mode: Normal
- ==========================================================
- ==================== Security Center ========================
- AV: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
- AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
- AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
- AS: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}
- ==================== Installed Programs ======================
- 4 Elements II (x32 Version: 2.2.0.98 - WildTangent) Hidden
- 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
- Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.2.122 - Adobe Systems, Inc.)
- Airport Mania (x32 Version: 2.2.0.95 - WildTangent) Hidden
- Aloha TriPeaks (x32 Version: 2.2.0.98 - WildTangent) Hidden
- AMD Accelerated Video Transcoding (Version: 12.10.100.30416 - Advanced Micro Devices, Inc.) Hidden
- AMD Catalyst Install Manager (HKLM\...\{301D3AA1-5DCC-FCFD-622E-3C7CBA87C80F}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
- AMD Fuel (Version: 2013.0416.2338.40605 - Advanced Micro Devices, Inc.) Hidden
- AMD Start Now (Version: 2013.0416.2338.40605 - Advanced Micro Devices, Inc.) Hidden
- AMD VISION Engine Control Center (x32 Version: 2013.0416.2338.40605 - Advanced Micro Devices, Inc.) Hidden
- AVG 2014 (HKLM\...\AVG) (Version: 2014.0.4570 - AVG Technologies)
- AVG 2014 (Version: 14.0.3955 - AVG Technologies) Hidden
- AVG 2014 (Version: 14.0.4570 - AVG Technologies) Hidden
- Azteca (x32 Version: 2.2.0.97 - WildTangent) Hidden
- Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
- Bejeweled 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
- Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
- Bounce Symphony (x32 Version: 2.2.0.97 - WildTangent) Hidden
- Build-a-lot (x32 Version: 2.2.0.98 - WildTangent) Hidden
- Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
- Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0416.2338.40605 - Advanced Micro Devices, Inc.) Hidden
- Catalyst Control Center InstallProxy (x32 Version: 2013.0925.645.10236 - Advanced Micro Devices, Inc.) Hidden
- Catalyst Control Center Localization All (x32 Version: 2013.0416.2338.40605 - Advanced Micro Devices, Inc.) Hidden
- CCC Help Chinese Standard (x32 Version: 2013.0416.2337.40605 - Advanced Micro Devices, Inc.) Hidden
- CCC Help Chinese Traditional (x32 Version: 2013.0416.2337.40605 - Advanced Micro Devices, Inc.) Hidden
- CCC Help Czech (x32 Version: 2013.0416.2337.40605 - Advanced Micro Devices, Inc.) Hidden
- CCC Help Danish (x32 Version: 2013.0416.2337.40605 - Advanced Micro Devices, Inc.) Hidden
- CCC Help Dutch (x32 Version: 2013.0416.2337.40605 - Advanced Micro Devices, Inc.) Hidden
- CCC Help English (x32 Version: 2013.0416.2337.40605 - Advanced Micro Devices, Inc.) Hidden
- CCC Help Finnish (x32 Version: 2013.0416.2337.40605 - Advanced Micro Devices, Inc.) Hidden
- CCC Help French (x32 Version: 2013.0416.2337.40605 - Advanced Micro Devices, Inc.) Hidden
- CCC Help German (x32 Version: 2013.0416.2337.40605 - Advanced Micro Devices, Inc.) Hidden
- CCC Help Greek (x32 Version: 2013.0416.2337.40605 - Advanced Micro Devices, Inc.) Hidden
- CCC Help Hungarian (x32 Version: 2013.0416.2337.40605 - Advanced Micro Devices, Inc.) Hidden
- CCC Help Italian (x32 Version: 2013.0416.2337.40605 - Advanced Micro Devices, Inc.) Hidden
- CCC Help Japanese (x32 Version: 2013.0416.2337.40605 - Advanced Micro Devices, Inc.) Hidden
- CCC Help Korean (x32 Version: 2013.0416.2337.40605 - Advanced Micro Devices, Inc.) Hidden
- CCC Help Norwegian (x32 Version: 2013.0416.2337.40605 - Advanced Micro Devices, Inc.) Hidden
- CCC Help Polish (x32 Version: 2013.0416.2337.40605 - Advanced Micro Devices, Inc.) Hidden
- CCC Help Portuguese (x32 Version: 2013.0416.2337.40605 - Advanced Micro Devices, Inc.) Hidden
- CCC Help Russian (x32 Version: 2013.0416.2337.40605 - Advanced Micro Devices, Inc.) Hidden
- CCC Help Spanish (x32 Version: 2013.0416.2337.40605 - Advanced Micro Devices, Inc.) Hidden
- CCC Help Swedish (x32 Version: 2013.0416.2337.40605 - Advanced Micro Devices, Inc.) Hidden
- CCC Help Thai (x32 Version: 2013.0416.2337.40605 - Advanced Micro Devices, Inc.) Hidden
- CCC Help Turkish (x32 Version: 2013.0416.2337.40605 - Advanced Micro Devices, Inc.) Hidden
- ccc-utility64 (Version: 2013.0416.2338.40605 - Advanced Micro Devices, Inc.) Hidden
- Classic Shell (HKLM\...\{FEA1590B-540A-41FC-A95C-664493C82A21}) (Version: 3.6.8 - IvoSoft)
- Cradle of Rome 2 (x32 Version: 2.2.0.98 - WildTangent) Hidden
- Curse at Twilight (x32 Version: 3.0.2.32 - WildTangent) Hidden
- CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.6.7225 - CyberLink Corp.)
- CyberLink LabelPrint (x32 Version: 2.5.6.7225 - CyberLink Corp.) Hidden
- CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.5.3606 - CyberLink Corp.)
- CyberLink Media Suite 10 (x32 Version: 10.0.5.3606 - CyberLink Corp.) Hidden
- Cyberlink PhotoDirector (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.4.4824 - CyberLink Corp.)
- Cyberlink PhotoDirector (x32 Version: 3.0.4.4824 - CyberLink Corp.) Hidden
- CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.4.3202 - CyberLink Corp.)
- CyberLink Power2Go 8 (x32 Version: 8.0.4.3202 - CyberLink Corp.) Hidden
- CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.5.3304 - CyberLink Corp.)
- CyberLink PowerDirector 10 (x32 Version: 10.0.5.3304 - CyberLink Corp.) Hidden
- CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3.3709 - CyberLink Corp.)
- CyberLink PowerDVD 12 (x32 Version: 12.0.3.3709 - CyberLink Corp.) Hidden
- CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 5.0.3.3907 - CyberLink Corp.)
- CyberLink YouCam (x32 Version: 5.0.3.3907 - CyberLink Corp.) Hidden
- D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
- Delicious: Emily's Childhood Memories Premium Edition (x32 Version: 3.0.2.32 - WildTangent) Hidden
- DisableMSDefender (Version: 1.0.0 - Hewlett-Packard Company) Hidden
- Energy Star (HKLM-x32\...\{FC0ADA4D-8FA5-4452-8AFF-F0A0BAC97EF7}) (Version: 1.0.9 - Hewlett-Packard Company)
- Farm Frenzy (x32 Version: 2.2.0.98 - WildTangent) Hidden
- Galerie de photos (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
- GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)
- Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.114 - Google Inc.)
- Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
- Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden
- Gyazo 2.1 (HKLM-x32\...\{6DB8C365-E719-4BA5-9594-10DFC244D3FD}_is1) (Version: - Nota Inc.)
- Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
- Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
- House of 1000 Doors: Family Secrets (x32 Version: 2.2.0.98 - WildTangent) Hidden
- HP 3D DriveGuard (HKLM-x32\...\{07F6DC37-0857-4B68-A675-4E35989E85E3}) (Version: 6.0.15.1 - Hewlett-Packard Company)
- HP Connected Music (Meridian - installer) (HKLM-x32\...\StartHPConnectedMusic) (Version: 1.0 - Meridian Audio Ltd)
- HP CoolSense (HKLM-x32\...\{394B14EA-B072-4440-9510-87797CB12371}) (Version: 2.20.21 - Hewlett-Packard Company)
- HP Customer Experience Enhancements (x32 Version: 6.0.1.8 - Hewlett-Packard) Hidden
- HP Documentation (HKLM-x32\...\{61245005-66F1-4001-AEE8-2E2D36F65C28}) (Version: 1.1.0.0 - Hewlett-Packard)
- HP Postscript Converter (Version: 4.0.4100 - Hewlett-Packard) Hidden
- HP Recovery Manager (x32 Version: 11.00 - Hewlett-Packard) Hidden
- HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.6838.4521 - Hewlett-Packard)
- HP Support Assistant (HKLM-x32\...\{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE}) (Version: 7.4.45.4 - Hewlett-Packard Company)
- HP System Event Utility (HKLM-x32\...\{F35EE4BC-95E1-4417-BA36-7C32FF24A59A}) (Version: 1.0.11 - Hewlett-Packard Company)
- HP Utility Center (HKLM\...\{A48BD764-CFDF-40A5-A07A-710908044F5D}) (Version: 2.2.2 - Hewlett-Packard Company)
- HP Wireless Button Driver (HKLM-x32\...\{30B2D1D8-0A07-4B71-9553-0710C5D31E35}) (Version: 1.1.2.1 - Hewlett-Packard Company)
- Java Auto Updater (x32 Version: 2.0.6.1 - Sun Microsystems, Inc.) Hidden
- Java(TM) 6 Update 29 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216029FF}) (Version: 6.0.290 - Oracle)
- Jewel Match 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
- Letters from Nowhere 2 (x32 Version: 2.2.0.97 - WildTangent) Hidden
- LibreOffice 4.0.3.3 (HKLM-x32\...\{F77ED0CD-2E5E-4FC7-82E0-BB7D461E739F}) (Version: 4.0.3.3 - The Document Foundation)
- Luxor Evolved (x32 Version: 2.2.0.98 - WildTangent) Hidden
- Mah Jong Medley (x32 Version: 2.2.0.95 - WildTangent) Hidden
- Mahjongg Dimensions Deluxe: Tiles in Time (x32 Version: 2.2.0.98 - WildTangent) Hidden
- Microsoft App Update for microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe (x64) (Version: 1.0.0.0 - Microsoft Corporation) Hidden
- Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
- Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
- Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
- Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
- Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
- Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
- Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
- Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
- Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
- Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
- Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
- Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
- Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
- Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
- Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
- Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
- Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
- Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
- Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
- Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
- Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
- Mozilla Firefox 29.0.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 29.0.1 (x86 en-US)) (Version: 29.0.1 - Mozilla)
- Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
- MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
- MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
- MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
- OEM Application Profile (HKLM-x32\...\{70D5F822-F4C4-33D9-7EEC-2A4AF4EA7BDC}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.)
- Peggle Nights (x32 Version: 2.2.0.98 - WildTangent) Hidden
- Photo Gallery (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
- Pinger (HKLM-x32\...\Pinger 1.1.1.2) (Version: 1.1.1.2 - Pinger Inc.)
- Pinger (x32 Version: 1.1.1.2 - Pinger Inc.) Hidden
- Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden
- Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden
- Ralink Bluetooth Stack64 (HKLM\...\{8A69F02D-A72B-AEE6-1CD3-6B05B9F9DD83}) (Version: 11.0.742.0 - Mediatek)
- Ralink RT3290 802.11bgn Wi-Fi Adapter (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 5.0.45.0 - Mediatek)
- Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.29068 - Realtek Semiconductor Corp.)
- Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.20.815.2013 - Realtek)
- Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7071 - Realtek Semiconductor Corp.)
- Roads of Rome 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
- Royal Envoy 2 Collector's Edition (x32 Version: 3.0.2.32 - WildTangent) Hidden
- Skype Click to Call (HKLM-x32\...\{BB285C9F-C821-4770-8970-56C4AB52C87E}) (Version: 7.1.15383.6004 - Microsoft Corporation)
- swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
- Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.6.2 - Synaptics Incorporated)
- System Update kb70007 (x32 Version: 1.0.0 - MRS) Hidden
- The Treasures of Mystery Island: The Ghost Ship (x32 Version: 2.2.0.98 - WildTangent) Hidden
- Trinklit Supreme (x32 Version: 2.2.0.98 - WildTangent) Hidden
- Unity Web Player (HKCU\...\UnityWebPlayer) (Version: - Unity Technologies ApS)
- Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
- Vacation Quest™ - Australia (x32 Version: 3.0.2.32 - WildTangent) Hidden
- Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
- Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
- WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)
- WildTangent Games App (HP Games) (x32 Version: 4.0.10.5 - WildTangent) Hidden
- Windows Live (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
- Windows Live Communications Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
- Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
- Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
- Windows Live Installer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
- Windows Live Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
- Windows Live PIMT Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
- Windows Live SOXE (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
- Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
- Windows Live UX Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
- Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
- Youda Jewel Shop (x32 Version: 3.0.2.32 - WildTangent) Hidden
- Zuma's Revenge (x32 Version: 2.2.0.98 - WildTangent) Hidden
- ==================== Restore Points =========================
- 18-05-2014 19:02:55 Scheduled Checkpoint
- 23-05-2014 06:11:56 HPSF Applying updates
- 29-05-2014 18:36:55 HPSF Applying updates
- 03-06-2014 02:06:27 Restore Operation
- ==================== Hosts content: ==========================
- 2012-07-26 01:26 - 2012-07-26 01:26 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
- ==================== Scheduled Tasks (whitelisted) =============
- Task: {0C2C57A8-6AE6-4426-8312-CAD58BC43CDA} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\system32\NotificationUI.exe [2014-04-19] (Microsoft Corporation)
- Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
- Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
- Task: {3744B4E0-92A4-4408-B7E8-FD014EB14F70} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)
- Task: {394E694D-DD97-4CBF-A7B7-882AE8D13D3B} - System32\Tasks\CLVDLauncher => C:\Program Files (x86)\CyberLink\Power2Go8\CLVDLauncher.exe [2013-03-12] (CyberLink Corp.)
- Task: {3DCECDB0-0ACB-4B2C-9EE0-9D2840C2255B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-29] (Google Inc.)
- Task: {56A73511-3502-4717-A638-FA8CEB683D92} - \GPUpdate No Task File <==== ATTENTION
- Task: {6F0E125C-BD82-4C1F-BB2A-D3A3ACB0544C} - System32\Tasks\GyazoUpdateTaskMachine => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2014-05-08] ()
- Task: {6FB492EC-231E-43F2-ACF5-ED8F4AC8B0D5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis Install => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)
- Task: {8E9E7DBD-5F4C-47C0-AC38-E1846526FBB2} - System32\Tasks\Hewlett-Packard\HP CoolSense\HP CoolSense Start at Logon => C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [2013-09-10] (Hewlett-Packard Development Company, L.P.)
- Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
- Task: {A9C88A26-E97E-4239-BC6B-76FB320251CB} - System32\Tasks\GPUpdateCheck => C:\Users\owner\AppData\Roaming\GetPrivate\gp_upd.exe
- Task: {BA1E9D5C-6F80-49A0-B82C-DFF707CA50ED} - System32\Tasks\CLMLSvc_P2G8 => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2013-08-05] (CyberLink)
- Task: {BD43A6CC-D0E1-48BF-89A8-8642D26A39F1} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)
- Task: {C0639D13-4BCA-4DCA-BFC8-C1C257B67D06} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2013-12-12] (Hewlett-Packard Company)
- Task: {C39FBD02-039D-461B-91E1-0E8DA5E593E1} - System32\Tasks\YCMServiceAgent => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [2014-03-07] (CyberLink Corp.)
- Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
- Task: {C87AB76A-87B3-41D4-9F74-30598CC7BB6F} - System32\Tasks\HPCeeScheduleForowner => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard)
- Task: {EADD3001-264F-4854-B172-BF0255A030A6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-29] (Google Inc.)
- Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
- Task: {F71EC349-23C5-4BEC-B038-911F09AADA56} - System32\Tasks\Synaptics TouchPad Enhancements => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-11-28] (Synaptics Incorporated)
- Task: {FBA5A762-D3A7-41ED-BE3A-CD4B7F603281} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2014-03-21] (Hewlett-Packard)
- Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
- Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
- Task: C:\Windows\Tasks\HPCeeScheduleForowner.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
- ==================== Loaded Modules (whitelisted) =============
- 2013-10-22 17:34 - 2013-11-30 01:15 - 09361520 ___RH () C:\Windows\system32\idle-Threads.exe
- 2013-10-22 17:34 - 2013-11-30 01:15 - 00480880 ___SH () C:\Windows\system32\semaphore-Threads.exe
- 2013-04-17 02:51 - 2013-04-17 02:51 - 00103424 _____ () C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe
- 2013-04-17 02:50 - 2013-04-17 02:50 - 00073728 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
- 2014-06-02 16:12 - 2014-05-29 17:59 - 00029184 _____ () C:\Users\owner\AppData\Roaming\MRS\SystemUpdatekb70007\WindowsUpdater.exe
- 2014-06-02 16:12 - 2014-05-29 17:59 - 02322944 _____ () C:\Users\owner\AppData\Local\MRS\svcsystem.exe
- 2013-05-14 18:33 - 2013-05-14 18:33 - 00016632 _____ () C:\Windows\system32\BsHelpCSps.dll
- 2013-04-17 02:51 - 2013-04-17 02:51 - 00016896 _____ () C:\Program Files\ATI Technologies\ATI.ACE\a4\AS4.NativeProxy.dll
- 2013-04-17 02:50 - 2013-04-17 02:50 - 00103424 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
- 2014-06-02 16:12 - 2014-05-29 17:59 - 00021504 _____ () C:\Users\owner\AppData\Local\MRS\winsystem.exe
- 2013-05-14 18:33 - 2013-05-14 18:33 - 00029432 _____ () C:\Windows\SYSTEM32\BsTrace.dll
- 2013-05-14 18:33 - 2013-05-14 18:33 - 00016632 _____ () C:\Windows\SYSTEM32\BsHelpCSps.dll
- 2013-05-14 18:33 - 2013-05-14 18:33 - 00062200 _____ () C:\Windows\SYSTEM32\BlueSoleilCSps.dll
- 2013-05-24 11:22 - 2013-05-24 11:22 - 00334648 _____ () C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\Driver\USB\tl_filter.dll
- 2011-07-05 11:53 - 2011-07-05 11:53 - 00012800 _____ () C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\Driver\AMP\IVTAMPRL.dll
- 2014-06-02 16:12 - 2014-05-29 17:59 - 00017920 _____ () C:\Users\owner\AppData\Roaming\MRS\SystemUpdatekb70007\ConfigurationData.dll
- 2014-06-02 16:12 - 2014-05-29 17:59 - 00013824 _____ () C:\Users\owner\AppData\Roaming\MRS\SystemUpdatekb70007\BaseLibrary.dll
- 2014-06-02 16:12 - 2014-05-29 17:59 - 00015360 _____ () C:\Users\owner\AppData\Roaming\MRS\SystemUpdatekb70007\Installer.dll
- 2014-06-02 16:12 - 2014-05-29 17:59 - 00054784 _____ () C:\Users\owner\AppData\Roaming\MRS\SystemUpdatekb70007\InstallerLibrary.dll
- 2014-06-02 16:12 - 2014-05-29 17:59 - 00017920 _____ () C:\Users\owner\AppData\Local\MRS\ConfigurationData.dll
- 2014-06-02 16:12 - 2014-05-29 17:59 - 00013824 _____ () C:\Users\owner\AppData\Local\MRS\BaseLibrary.dll
- 2014-02-13 15:39 - 2013-08-05 03:49 - 00627672 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll
- 2013-08-05 16:48 - 2013-08-05 16:48 - 00016856 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll
- 2014-02-13 15:39 - 2013-08-05 04:51 - 00806664 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\UNO.dll
- 2014-02-13 15:39 - 2013-03-05 23:04 - 01321944 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\Language\ENU\P2GRC.dll
- 2014-02-13 15:39 - 2013-08-05 04:51 - 00175880 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLVistaAudioMixer.dll
- 2013-05-14 18:33 - 2013-05-14 18:33 - 00080120 _____ () C:\Windows\SYSTEM32\BsProfilefunc.dll
- 2013-05-14 18:33 - 2013-05-14 18:33 - 00371448 _____ () C:\Windows\SYSTEM32\BsExtendFunc.dll
- 2014-05-22 20:16 - 2014-05-13 19:40 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\libglesv2.dll
- 2014-05-22 20:16 - 2014-05-13 19:40 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\libegl.dll
- 2014-05-22 20:16 - 2014-05-13 19:40 - 04217672 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\pdf.dll
- 2014-05-22 20:16 - 2014-05-13 19:40 - 00414536 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ppGoogleNaClPluginChrome.dll
- 2014-05-22 20:16 - 2014-05-13 19:40 - 01732424 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ffmpegsumo.dll
- 2014-05-22 20:16 - 2014-05-13 19:40 - 13695816 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\PepperFlash\pepflashplayer.dll
- 2014-06-02 16:13 - 2014-06-09 17:04 - 00086528 _____ () C:\Program Files (x86)\MRS\pvx\mgwz.dll
- ==================== Alternate Data Streams (whitelisted) =========
- ==================== Safe Mode (whitelisted) ===================
- ==================== EXE Association (whitelisted) =============
- ==================== Disabled items from MSCONFIG ==============
- ==================== Faulty Device Manager Devices =============
- ==================== Event log errors: =========================
- Application errors:
- ==================
- Error: (06/09/2014 05:14:40 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: easyhome)
- Description: Activation of app DefaultBrowser_NOPUBLISHERID!Microsoft.Windows.Desktop failed with error: -2144927148 See the Microsoft-Windows-TWinUI/Operational log for additional information.
- Error: (06/09/2014 03:53:57 PM) (Source: Application Error) (EventID: 1000) (User: )
- Description: Faulting application name: IEXPLORE.EXE, version: 10.0.9200.16537, time stamp: 0x512347f7
- Faulting module name: atidxx32.dll, version: 8.17.10.519, time stamp: 0x5242bb0c
- Exception code: 0xc0000005
- Fault offset: 0x00072e57
- Faulting process id: 0x5b40
- Faulting application start time: 0xIEXPLORE.EXE0
- Faulting application path: IEXPLORE.EXE1
- Faulting module path: IEXPLORE.EXE2
- Report Id: IEXPLORE.EXE3
- Faulting package full name: IEXPLORE.EXE4
- Faulting package-relative application ID: IEXPLORE.EXE5
- Error: (06/09/2014 07:32:03 AM) (Source: Bonjour Service) (EventID: 100) (User: )
- Description: Task Scheduling Error: m->NextScheduledSPRetry 1622
- Error: (06/09/2014 07:32:03 AM) (Source: Bonjour Service) (EventID: 100) (User: )
- Description: Task Scheduling Error: m->NextScheduledEvent 1622
- Error: (06/09/2014 07:32:03 AM) (Source: Bonjour Service) (EventID: 100) (User: )
- Description: Task Scheduling Error: Continuously busy for more than a second
- Error: (06/09/2014 07:01:57 AM) (Source: Bonjour Service) (EventID: 100) (User: )
- Description: Task Scheduling Error: m->NextScheduledSPRetry 12888631
- Error: (06/09/2014 07:01:57 AM) (Source: Bonjour Service) (EventID: 100) (User: )
- Description: Task Scheduling Error: m->NextScheduledEvent 12888631
- Error: (06/09/2014 07:01:57 AM) (Source: Bonjour Service) (EventID: 100) (User: )
- Description: Task Scheduling Error: Continuously busy for more than a second
- Error: (06/09/2014 03:17:27 AM) (Source: Bonjour Service) (EventID: 100) (User: )
- Description: Task Scheduling Error: m->NextScheduledSPRetry 1887
- Error: (06/09/2014 03:17:27 AM) (Source: Bonjour Service) (EventID: 100) (User: )
- Description: Task Scheduling Error: m->NextScheduledEvent 1887
- System errors:
- =============
- Error: (06/06/2014 06:33:40 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
- Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the AdaptiveSleepService service.
- Error: (06/05/2014 00:54:47 AM) (Source: DCOM) (EventID: 10016) (User: easyhome)
- Description: machine-defaultLocalActivation{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}easyhomeownerS-1-5-21-2255616114-2979358920-1297510320-1002LocalHost (Using LRPC)UnavailableUnavailable
- Error: (06/03/2014 07:19:17 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
- Description: The Kaspersky Lab Driver service failed to start due to the following error:
- %%193
- Error: (06/03/2014 06:27:50 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
- Description: The Kaspersky Lab Driver service failed to start due to the following error:
- %%193
- Error: (06/03/2014 05:44:21 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
- Description: The SystemUpdatekb70007 service hung on starting.
- Microsoft Office Sessions:
- =========================
- Error: (06/09/2014 05:14:40 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: easyhome)
- Description: DefaultBrowser_NOPUBLISHERID!Microsoft.Windows.Desktop-2144927148
- Error: (06/09/2014 03:53:57 PM) (Source: Application Error) (EventID: 1000) (User: )
- Description: IEXPLORE.EXE10.0.9200.16537512347f7atidxx32.dll8.17.10.5195242bb0cc000000500072e575b4001cf83ab9090ff60C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\SYSTEM32\atidxx32.dllcaa5737d-f00f-11e3-bed8-70188bf393a0
- Error: (06/09/2014 07:32:03 AM) (Source: Bonjour Service) (EventID: 100) (User: )
- Description: Task Scheduling Error: m->NextScheduledSPRetry 1622
- Error: (06/09/2014 07:32:03 AM) (Source: Bonjour Service) (EventID: 100) (User: )
- Description: Task Scheduling Error: m->NextScheduledEvent 1622
- Error: (06/09/2014 07:32:03 AM) (Source: Bonjour Service) (EventID: 100) (User: )
- Description: Task Scheduling Error: Continuously busy for more than a second
- Error: (06/09/2014 07:01:57 AM) (Source: Bonjour Service) (EventID: 100) (User: )
- Description: Task Scheduling Error: m->NextScheduledSPRetry 12888631
- Error: (06/09/2014 07:01:57 AM) (Source: Bonjour Service) (EventID: 100) (User: )
- Description: Task Scheduling Error: m->NextScheduledEvent 12888631
- Error: (06/09/2014 07:01:57 AM) (Source: Bonjour Service) (EventID: 100) (User: )
- Description: Task Scheduling Error: Continuously busy for more than a second
- Error: (06/09/2014 03:17:27 AM) (Source: Bonjour Service) (EventID: 100) (User: )
- Description: Task Scheduling Error: m->NextScheduledSPRetry 1887
- Error: (06/09/2014 03:17:27 AM) (Source: Bonjour Service) (EventID: 100) (User: )
- Description: Task Scheduling Error: m->NextScheduledEvent 1887
- ==================== Memory info ===========================
- Percentage of memory in use: 63%
- Total physical RAM: 5602.07 MB
- Available physical RAM: 2070.56 MB
- Total Pagefile: 6498.07 MB
- Available Pagefile: 2252.48 MB
- Total Virtual: 8192 MB
- Available Virtual: 8191.79 MB
- ==================== Drives ================================
- Drive c: (Windows) (Fixed) (Total:440.95 GB) (Free:354.76 GB) NTFS ==>[System with boot components (obtained from reading drive)]
- Drive d: (RECOVERY) (Fixed) (Total:24.04 GB) (Free:2.38 GB) NTFS ==>[System with boot components (obtained from reading drive)]
- ==================== MBR & Partition Table ==================
- ========================================================
- Disk: 0 (Size: 466 GB) (Disk ID: BC9E3119)
- Partition: GPT Partition Type.
- Partition 2: (Not Active) - (Size=407 MB) - (Type=00)
- ==================== End Of Log ============================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement