Advertisement
Guest User

Untitled

a guest
Jan 15th, 2016
360
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 41.34 KB | None | 0 0
  1. Additional scan result of Farbar Recovery Scan Tool (x64) Version:10-01-2015 01
  2. Ran by amin (2016-01-15 05:09:29)
  3. Running from C:\Users\amin\Downloads
  4. Windows 10 Pro (X64) (2015-12-26 00:53:19)
  5. Boot Mode: Normal
  6. ==========================================================
  7.  
  8.  
  9. ==================== Accounts: =============================
  10.  
  11. Administrator (S-1-5-21-2034507604-4048405394-113968359-500 - Administrator - Disabled)
  12. amin (S-1-5-21-2034507604-4048405394-113968359-1001 - Administrator - Enabled) => C:\Users\amin
  13. DefaultAccount (S-1-5-21-2034507604-4048405394-113968359-503 - Limited - Disabled)
  14. Guest (S-1-5-21-2034507604-4048405394-113968359-501 - Limited - Disabled)
  15.  
  16. ==================== Security Center ========================
  17.  
  18. (If an entry is included in the fixlist, it will be removed.)
  19.  
  20. AV: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
  21. AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
  22.  
  23. ==================== Installed Programs ======================
  24.  
  25. (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
  26.  
  27. Abyss Odyssey (HKLM-x32\...\Steam App 255070) (Version: - ACE Team)
  28. AutoHotkey 1.1.22.09 (HKLM\...\AutoHotkey) (Version: 1.1.22.09 - Lexikos)
  29. Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
  30. CameraHelperMsi (x32 Version: 13.51.815.0 - Logitech) Hidden
  31. CEVO CS:GO Client Beta version 1.0 (HKLM-x32\...\CEVO CS:GO Client Beta_is1) (Version: 1.0 - )
  32. Chromium (HKU\S-1-5-21-2034507604-4048405394-113968359-1001\...\Chromium) (Version: 46.0.2480.0 - Chromium)
  33. Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
  34. D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
  35. Dead Island (HKLM-x32\...\Steam App 91310) (Version: - Techland)
  36. Dirty Bomb (HKLM-x32\...\Steam App 333930) (Version: - Splash Damage®)
  37. Dota 2 (HKLM-x32\...\Steam App 570) (Version: - Valve)
  38. Dropbox (HKLM-x32\...\Dropbox) (Version: 3.12.5 - Dropbox, Inc.)
  39. Dropbox Update Helper (x32 Version: 1.3.27.37 - Dropbox, Inc.) Hidden
  40. EaseUS Partition Master 10.8 (HKLM-x32\...\EaseUS Partition Master_is1) (Version: - EaseUS)
  41. erLT (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
  42. ESEA Client (HKU\S-1-5-21-2034507604-4048405394-113968359-1001\...\ESEA) (Version: 5.0.0.0 - E-Sports Entertainment LLC)
  43. Fallout 4 (HKLM-x32\...\Fallout 4_is1) (Version: - )
  44. Google Chrome (HKLM-x32\...\Google Chrome) (Version: 47.0.2526.111 - Google Inc.)
  45. Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
  46. Gyazo 3.1.6 (HKLM-x32\...\{6DB8C365-E719-4BA5-9594-10DFC244D3FD}_is1) (Version: - Nota Inc.)
  47. Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
  48. Intel(R) Chipset Device Software (x32 Version: 10.1.1.7 - Intel(R) Corporation) Hidden
  49. Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1158 - Intel Corporation)
  50. Intel® Security Assist (HKLM-x32\...\{4B230374-6475-4A73-BA6E-41015E9C5013}) (Version: 1.0.0.532 - Intel Corporation)
  51. Java 8 Update 66 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218066F0}) (Version: 8.0.660.18 - Oracle Corporation)
  52. Life Is Strange™ (HKLM-x32\...\Steam App 319630) (Version: - DONTNOD Entertainment)
  53. Logitech Webcam Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.80 - Logitech Inc.)
  54. Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
  55. MEGAsync (HKLM-x32\...\MEGAsync) (Version: - Mega Limited)
  56. Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
  57. Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
  58. Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
  59. Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
  60. Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
  61. Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
  62. Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
  63. Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
  64. Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
  65. Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
  66. Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
  67. Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
  68. Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
  69. Mumble 1.2.10 (HKLM-x32\...\{63243F5C-E941-4461-A4B0-2689A9A3BF13}) (Version: 1.2.10 - Thorvald Natvig)
  70. NVIDIA 3D Vision Controller Driver 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
  71. NVIDIA 3D Vision Driver 358.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 358.50 - NVIDIA Corporation)
  72. NVIDIA Graphics Driver 358.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 358.50 - NVIDIA Corporation)
  73. NVIDIA HD Audio Driver 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation)
  74. NVIDIA PhysX System Software 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
  75. Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - )
  76. PC Mechanic (HKLM-x32\...\{1F88FC5D-4D46-448A-AF59-7061FFC6ABBF}_is1) (Version: 1.0.15.0 - Uniblue Systems Limited)
  77. Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
  78. TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)
  79. Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
  80. WinRAR 5.30 beta 5 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.30.5 - win.rar GmbH)
  81.  
  82. ==================== Custom CLSID (Whitelisted): ==========================
  83.  
  84. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  85.  
  86. CustomCLSID: HKU\S-1-5-21-2034507604-4048405394-113968359-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\amin\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\FileCoAuth.exe (Microsoft Corporation)
  87.  
  88. ==================== Scheduled Tasks (Whitelisted) =============
  89.  
  90. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  91.  
  92. Task: {074FEDAE-658D-49C3-891D-6BFBD3308A9C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-15] (Google Inc.)
  93. Task: {0CFE2E40-6A97-48C5-9F38-DE82315CF1B0} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto
  94. Task: {1B240059-D98E-4DCA-A94A-CDDEFA505B3D} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-12-10] (Microsoft Corporation)
  95. Task: {1BDFDF2B-E698-4C1E-9070-DF4DF65831B8} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-10-23] (Dropbox, Inc.)
  96. Task: {1DBD87D6-2538-4B66-8183-60236CE231C8} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe
  97. Task: {560AAC20-5398-45DF-8F6B-7C0325721B22} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-15] (Google Inc.)
  98. Task: {A4AFA4FE-1D05-48D9-B4E0-46D672B16557} - System32\Tasks\PC-Mechanic Maintenance => C:\Program Files (x86)\Uniblue\PC-Mechanic\pc-mechanic.exe [2015-11-30] (Uniblue Systems Limited)
  99. Task: {A533E250-FF9F-47E6-9762-28B9A6C7B8E7} - System32\Tasks\GyazoUpdateTaskMachine => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2015-08-19] ()
  100. Task: {C1FC89D8-20F1-44C8-8432-4F2138BDDD5D} - System32\Tasks\PC-Mechanic Startup => C:\Program Files (x86)\Uniblue\PC-Mechanic\pc-mechanic.exe [2015-11-30] (Uniblue Systems Limited)
  101. Task: {C34DD084-7732-43D6-9241-50691D0B06C3} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-10-23] (Dropbox, Inc.)
  102. Task: {C7EF487D-CDE2-4BDE-8FF0-A193EA6FF590} - System32\Tasks\GyazoUpdateTaskMachineDaily => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2015-08-19] ()
  103. Task: {DEADDA15-34D7-4E56-8C87-25EE2D45A18D} - System32\Tasks\EVGAPrecisionX => C:\Program Files (x86)\EVGA\PrecisionX 16\PrecisionX_x64.exe
  104.  
  105. (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
  106.  
  107. Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
  108. Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
  109. Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  110. Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  111. Task: C:\WINDOWS\Tasks\PC-Mechanic Maintenance.job => C:\Program Files (x86)\Uniblue\PC-Mechanic\pc-mechanic.exe
  112. Task: C:\WINDOWS\Tasks\PC-Mechanic Startup.job => C:\Program Files (x86)\Uniblue\PC-Mechanic\pc-mechanic.exe
  113.  
  114. ==================== Shortcuts =============================
  115.  
  116. (The entries could be listed to be restored or removed.)
  117.  
  118. Shortcut: C:\Users\amin\Desktop\VAC Repair Program.lnk -> C:\Program Files (x86)\Steam\bin\vac solution\Vac Repair Program.bat ()
  119.  
  120. ==================== Loaded Modules (Whitelisted) ==============
  121.  
  122. 2015-10-30 01:18 - 2015-10-30 01:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
  123. 2015-12-25 18:48 - 2015-10-02 20:38 - 00116344 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
  124. 2015-12-25 20:43 - 2015-12-25 20:43 - 02653816 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
  125. 2015-12-25 20:43 - 2015-12-25 20:43 - 02653816 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
  126. 2015-12-26 03:38 - 2015-12-06 22:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
  127. 2015-12-26 03:38 - 2015-12-06 22:00 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
  128. 2016-01-15 04:43 - 2014-11-18 14:44 - 00255072 _____ () C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.8\bin\TrayPopupE\TrayTipAgentE.exe
  129. 2015-12-10 07:33 - 2015-12-10 07:33 - 00012800 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1208.10480.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
  130. 2015-12-10 07:33 - 2015-12-10 07:33 - 11542016 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1208.10480.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
  131. 2015-11-19 22:27 - 2015-11-19 22:27 - 00258560 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1208.10480.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll
  132. 2016-01-12 13:03 - 2016-01-04 19:29 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
  133. 2016-01-12 13:03 - 2016-01-04 19:23 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
  134. 2016-01-12 13:03 - 2016-01-04 19:24 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
  135. 2016-01-12 13:03 - 2016-01-04 19:26 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
  136. 2015-12-25 19:27 - 2015-12-25 19:28 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.15004.0_x86__8wekyb3d8bbwe\SkypeHost.exe
  137. 2015-10-15 10:43 - 2015-11-10 13:55 - 00778752 _____ () C:\Program Files (x86)\Steam\SDL2.dll
  138. 2015-10-15 10:43 - 2015-07-03 10:12 - 04962816 _____ () C:\Program Files (x86)\Steam\v8.dll
  139. 2015-10-15 10:43 - 2015-12-14 14:01 - 02547280 _____ () C:\Program Files (x86)\Steam\video.dll
  140. 2015-10-15 10:43 - 2015-09-23 18:33 - 02549248 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
  141. 2015-10-15 10:43 - 2015-09-23 18:33 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
  142. 2015-10-15 10:43 - 2015-09-23 18:33 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
  143. 2015-10-15 10:43 - 2015-09-23 18:33 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
  144. 2015-10-15 10:43 - 2015-09-23 18:33 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
  145. 2015-10-15 10:43 - 2015-07-03 10:12 - 01556992 _____ () C:\Program Files (x86)\Steam\icui18n.dll
  146. 2015-10-15 10:43 - 2015-07-03 10:12 - 01187840 _____ () C:\Program Files (x86)\Steam\icuuc.dll
  147. 2015-10-15 10:43 - 2015-12-14 14:01 - 00804432 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
  148. 2015-11-04 05:40 - 2015-11-04 05:40 - 00052224 _____ () C:\Users\amin\AppData\Local\MEGAsync\cares.dll
  149. 2015-12-11 21:12 - 2015-10-30 18:59 - 00034768 _____ () C:\Program Files (x86)\Dropbox\Client\_multiprocessing.pyd
  150. 2015-12-11 21:11 - 2015-10-30 19:00 - 00019408 _____ () C:\Program Files (x86)\Dropbox\Client\faulthandler.pyd
  151. 2015-12-11 21:11 - 2015-12-08 15:36 - 00022848 _____ () C:\Program Files (x86)\Dropbox\Client\Crypto.Random.OSRNG.winrandom.pyd
  152. 2015-12-11 21:11 - 2015-12-08 15:36 - 00023352 _____ () C:\Program Files (x86)\Dropbox\Client\Crypto.Util._counter.pyd
  153. 2015-12-11 21:11 - 2015-12-08 15:36 - 00042296 _____ () C:\Program Files (x86)\Dropbox\Client\Crypto.Cipher._AES.pyd
  154. 2015-12-11 21:11 - 2015-10-30 18:59 - 00116688 _____ () C:\Program Files (x86)\Dropbox\Client\pywintypes27.dll
  155. 2015-12-11 21:12 - 2015-10-30 18:59 - 00093640 _____ () C:\Program Files (x86)\Dropbox\Client\_ctypes.pyd
  156. 2015-12-11 21:12 - 2015-10-30 18:59 - 00018376 _____ () C:\Program Files (x86)\Dropbox\Client\select.pyd
  157. 2015-12-11 21:12 - 2015-12-08 15:36 - 00019760 _____ () C:\Program Files (x86)\Dropbox\Client\tornado.speedups.pyd
  158. 2015-12-11 21:12 - 2015-10-30 19:00 - 00105928 _____ () C:\Program Files (x86)\Dropbox\Client\win32api.pyd
  159. 2015-12-11 21:11 - 2015-10-30 18:59 - 00392144 _____ () C:\Program Files (x86)\Dropbox\Client\pythoncom27.dll
  160. 2015-12-11 21:12 - 2015-12-08 15:36 - 00381752 _____ () C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.pyd
  161. 2015-12-11 21:12 - 2015-10-30 18:59 - 00692688 _____ () C:\Program Files (x86)\Dropbox\Client\unicodedata.pyd
  162. 2015-12-11 21:11 - 2015-12-08 15:36 - 00020816 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd
  163. 2015-12-11 21:12 - 2015-10-30 19:00 - 00109520 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_backend.pyd
  164. 2015-12-11 21:11 - 2015-12-08 15:36 - 01737032 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd
  165. 2015-12-11 21:11 - 2015-12-08 15:36 - 00020808 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd
  166. 2015-12-11 21:12 - 2015-12-08 15:36 - 00020800 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_python_x66cf7a7cx17a72769.pyd
  167. 2015-12-11 21:12 - 2015-12-08 15:36 - 00021840 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_unicode_environ_win32_x8bf8e68bx9968e850.pyd
  168. 2015-12-11 21:11 - 2015-12-08 15:36 - 00038696 _____ () C:\Program Files (x86)\Dropbox\Client\fastpath.pyd
  169. 2015-12-11 21:12 - 2015-10-30 19:00 - 00024528 _____ () C:\Program Files (x86)\Dropbox\Client\win32event.pyd
  170. 2015-12-11 21:11 - 2015-10-30 19:00 - 00020936 _____ () C:\Program Files (x86)\Dropbox\Client\mmapfile.pyd
  171. 2015-12-11 21:12 - 2015-10-30 19:00 - 00114640 _____ () C:\Program Files (x86)\Dropbox\Client\win32security.pyd
  172. 2015-12-11 21:12 - 2015-12-08 15:36 - 00021320 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_pywin_kernel32_xde9e4433x360333f0.pyd
  173. 2015-12-11 21:12 - 2015-10-30 19:00 - 00124880 _____ () C:\Program Files (x86)\Dropbox\Client\win32file.pyd
  174. 2015-12-11 21:12 - 2015-10-30 19:00 - 00030160 _____ () C:\Program Files (x86)\Dropbox\Client\win32pipe.pyd
  175. 2015-12-11 21:12 - 2015-10-30 19:00 - 00043472 _____ () C:\Program Files (x86)\Dropbox\Client\win32process.pyd
  176. 2015-12-11 21:12 - 2015-10-30 19:00 - 00175560 _____ () C:\Program Files (x86)\Dropbox\Client\win32gui.pyd
  177. 2015-12-11 21:12 - 2015-10-30 19:00 - 00028616 _____ () C:\Program Files (x86)\Dropbox\Client\win32ts.pyd
  178. 2015-12-11 21:12 - 2015-10-30 19:00 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32clipboard.pyd
  179. 2015-12-11 21:12 - 2015-10-30 19:00 - 00048592 _____ () C:\Program Files (x86)\Dropbox\Client\win32service.pyd
  180. 2015-12-11 21:11 - 2015-12-08 15:36 - 00024392 _____ () C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd
  181. 2015-12-11 21:11 - 2015-10-30 19:00 - 00036296 _____ () C:\Program Files (x86)\Dropbox\Client\librsync.dll
  182. 2015-12-11 21:12 - 2015-10-30 19:00 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32profile.pyd
  183. 2015-12-11 21:11 - 2015-12-08 15:36 - 00117056 _____ () C:\Program Files (x86)\Dropbox\Client\breakpad.client.windows.handler.pyd
  184. 2015-12-11 21:11 - 2015-12-08 15:36 - 00031568 _____ () C:\Program Files (x86)\Dropbox\Client\enterprise_data.compiled._enterprise_data.pyd
  185. 2015-10-23 23:06 - 2015-11-04 18:04 - 00293392 _____ () C:\Program Files (x86)\Dropbox\Client\EnterpriseDataAdapter.dll
  186. 2015-12-11 21:12 - 2015-12-08 15:36 - 00023376 _____ () C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd
  187. 2015-12-11 21:12 - 2015-10-30 18:59 - 00134608 _____ () C:\Program Files (x86)\Dropbox\Client\_elementtree.pyd
  188. 2015-12-11 21:11 - 2015-10-30 18:59 - 00134088 _____ () C:\Program Files (x86)\Dropbox\Client\pyexpat.pyd
  189. 2015-12-11 21:11 - 2015-10-30 19:00 - 00240584 _____ () C:\Program Files (x86)\Dropbox\Client\jpegtran.pyd
  190. 2015-12-11 21:11 - 2015-12-08 15:36 - 00020280 _____ () C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.pyd
  191. 2015-12-11 21:11 - 2015-12-08 15:36 - 00052024 _____ () C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.pyd
  192. 2015-12-11 21:11 - 2015-12-08 15:36 - 00021304 _____ () C:\Program Files (x86)\Dropbox\Client\Crypto.Util.strxor.pyd
  193. 2015-12-11 21:12 - 2015-10-30 19:00 - 00350152 _____ () C:\Program Files (x86)\Dropbox\Client\winxpgui.pyd
  194. 2015-12-11 21:11 - 2015-12-08 15:36 - 00084792 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL
  195. 2015-12-11 21:11 - 2015-12-08 15:36 - 01826608 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.pyd
  196. 2015-12-11 21:12 - 2015-10-30 19:00 - 00083912 _____ () C:\Program Files (x86)\Dropbox\Client\sip.pyd
  197. 2015-12-11 21:11 - 2015-12-08 15:36 - 03891504 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.pyd
  198. 2015-12-11 21:11 - 2015-12-08 15:36 - 01950000 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.pyd
  199. 2015-12-11 21:11 - 2015-12-08 15:36 - 00519984 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.pyd
  200. 2015-12-11 21:11 - 2015-12-08 15:36 - 00133936 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.pyd
  201. 2015-12-11 21:11 - 2015-12-08 15:36 - 00225080 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd
  202. 2015-12-11 21:11 - 2015-12-08 15:36 - 00207672 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.pyd
  203. 2015-12-11 21:12 - 2015-12-08 15:36 - 00024904 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_wpad_proxy_win_x752e3d61xdcfdcc84.pyd
  204. 2015-12-11 21:11 - 2015-12-08 15:36 - 00486704 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.pyd
  205. 2015-12-11 21:11 - 2015-12-08 15:36 - 00357680 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.pyd
  206. 2015-10-23 23:06 - 2015-10-30 19:01 - 00019920 _____ () C:\Program Files (x86)\Dropbox\Client\QtQuick.2\qtquick2plugin.dll
  207. 2015-10-23 23:06 - 2015-10-30 19:00 - 00786904 _____ () C:\Program Files (x86)\Dropbox\Client\QtQuick\Controls\qtquickcontrolsplugin.dll
  208. 2015-10-23 23:06 - 2015-10-30 19:00 - 00063448 _____ () C:\Program Files (x86)\Dropbox\Client\QtQuick\Layouts\qquicklayoutsplugin.dll
  209. 2015-10-23 23:06 - 2015-10-30 19:00 - 00019408 _____ () C:\Program Files (x86)\Dropbox\Client\QtQuick\Window.2\windowplugin.dll
  210. 2016-01-15 04:43 - 2014-02-13 15:27 - 00222792 _____ () C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.8\bin\TrayPopupE\traynet.dll
  211. 2016-01-15 04:43 - 2014-02-13 15:27 - 00275528 _____ () C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.8\bin\TrayPopupE\libcurl.dll
  212. 2016-01-15 04:43 - 2014-02-13 15:27 - 00113166 _____ () C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.8\bin\TrayPopupE\zlib1.dll
  213. 2016-01-15 04:43 - 2014-02-13 15:27 - 00249928 _____ () C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.8\bin\TrayPopupE\uexper.dll
  214. 2015-10-15 10:43 - 2015-11-16 18:31 - 47846176 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
  215. 2016-01-14 19:51 - 2016-01-12 10:35 - 01590088 _____ () C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.111\libglesv2.dll
  216. 2016-01-14 19:51 - 2016-01-12 10:35 - 00087880 _____ () C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.111\libegl.dll
  217. 2015-12-25 19:27 - 2015-12-25 19:28 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.15004.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
  218. 2015-12-25 19:27 - 2015-12-25 19:28 - 21845504 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.15004.0_x86__8wekyb3d8bbwe\SkyWrap.dll
  219.  
  220. ==================== Alternate Data Streams (Whitelisted) =========
  221.  
  222. (If an entry is included in the fixlist, only the ADS will be removed.)
  223.  
  224.  
  225. ==================== Safe Mode (Whitelisted) ===================
  226.  
  227. (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
  228.  
  229.  
  230. ==================== EXE Association (Whitelisted) ===============
  231.  
  232. (If an entry is included in the fixlist, the registry item will be restored to default or removed.)
  233.  
  234.  
  235. ==================== Internet Explorer trusted/restricted ===============
  236.  
  237. (If an entry is included in the fixlist, it will be removed from the registry.)
  238.  
  239.  
  240. ==================== Hosts content: ===============================
  241.  
  242. (If needed Hosts: directive could be included in the fixlist to reset Hosts.)
  243.  
  244. 2015-07-10 05:04 - 2015-07-10 05:02 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
  245.  
  246.  
  247. ==================== Other Areas ============================
  248.  
  249. (Currently there is no automatic fix for this section.)
  250.  
  251. HKU\S-1-5-21-2034507604-4048405394-113968359-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\amin\Desktop\amin\IMAGES\8DoaMtV.jpg
  252. DNS Servers: Media is not connected to internet.
  253. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
  254. Windows Firewall is disabled.
  255.  
  256. ==================== MSCONFIG/TASK MANAGER disabled items ==
  257.  
  258. (Currently there is no automatic fix for this section.)
  259.  
  260. MSCONFIG\Services: celavimushost => 3
  261. MSCONFIG\Services: dbupdate => 2
  262. MSCONFIG\Services: dbupdatem => 3
  263. MSCONFIG\Services: GfExperienceService => 2
  264. MSCONFIG\Services: gupdate => 2
  265. MSCONFIG\Services: gupdatem => 3
  266. MSCONFIG\Services: Intel(R) Capability Licensing Service TCP IP Interface => 3
  267. MSCONFIG\Services: Intel(R) Security Assist => 3
  268. MSCONFIG\Services: isaHelperSvc => 2
  269. MSCONFIG\Services: jhi_service => 2
  270. MSCONFIG\Services: LMS => 2
  271. MSCONFIG\Services: NvNetworkService => 2
  272. MSCONFIG\Services: NvStreamSvc => 2
  273. MSCONFIG\Services: nvsvc => 2
  274. MSCONFIG\Services: Steam Client Service => 3
  275. MSCONFIG\Services: Stereo Service => 2
  276. HKLM\...\StartupApproved\Run32: => "LWS"
  277. HKU\S-1-5-21-2034507604-4048405394-113968359-1001\...\StartupApproved\StartupFolder: => "Logitech . Product Registration.lnk"
  278.  
  279. ==================== FirewallRules (Whitelisted) ===============
  280.  
  281. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  282.  
  283. FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
  284. FirewallRules: [{B8237FB7-790C-455B-ADFF-ABEDD08EEF53}] => (Allow) LPort=1900
  285. FirewallRules: [{30147FF8-B4C0-4E22-88F2-53683FDADD87}] => (Allow) LPort=2869
  286. FirewallRules: [{F8B4A150-A2DC-4223-AE2A-16D498BD694D}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
  287. FirewallRules: [{5D308202-1B54-4E27-ACE6-4698D800567C}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
  288. FirewallRules: [{418B18D6-BD48-46F0-9257-D1C5D5606D89}] => (Block) D:\Games\Fallout 4\Fallout4Launcher.exe
  289. FirewallRules: [{F1F2D09C-7DAA-4494-B7AF-0CE8F1766C2B}] => (Allow) C:\Users\amin\AppData\Local\Chromium\Application\chrome.exe
  290. FirewallRules: [{13F673F1-8003-4C70-B709-F98AD7173FFC}] => (Allow) C:\Users\amin\AppData\Local\Maelstrom\Application\chrome.native.torrent.exe
  291. FirewallRules: [{AD11589F-27F5-4F9E-A870-B2CEF18F42D5}] => (Allow) C:\Users\amin\AppData\Local\Maelstrom\Application\chrome.native.torrent.exe
  292. FirewallRules: [{4720BE3B-5EFA-49E9-AA01-22229D173394}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
  293. FirewallRules: [{1E313414-0505-47F2-A3DA-B6582B514650}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
  294. FirewallRules: [{2910894A-5BA4-4CDF-8D8B-5AA05D9C4505}] => (Allow) E:\Windows 10 Activators\KMSpico.10.0.102040 Beta\KMSELDI.exe
  295. FirewallRules: [{47FF5CCF-6C60-45B4-B307-62FB7F5F585E}] => (Allow) E:\Windows 10 Activators\KMSpico.10.0.102040 Beta\KMSELDI.exe
  296. FirewallRules: [{4C4C3A81-0E99-4899-BA5B-348426177B16}] => (Allow) LPort=1688
  297. FirewallRules: [{D480A771-83C1-4EA0-B31C-23680BB6C2A6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\abyss_odyssey\Binaries\Win32\AO.exe
  298. FirewallRules: [{F8658444-B8BB-431C-A546-25E5B50AE81C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\abyss_odyssey\Binaries\Win32\AO.exe
  299. FirewallRules: [UDP Query User{EFA28652-9BCC-49D9-A89D-5F416775FA77}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
  300. FirewallRules: [TCP Query User{AC710FFF-95B2-4425-9A90-CD90BCF15C59}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
  301. FirewallRules: [{C0CA5FC8-63C8-45F3-A1FB-9ED8CBF5021D}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
  302. FirewallRules: [{709AA475-B9DF-4B40-860C-B186A11FE66D}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
  303. FirewallRules: [{F4E8351C-72C7-4D35-BFFB-7AB587CAD184}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
  304. FirewallRules: [{D91A2EF6-E634-496D-AF05-DC4C4D27CCE4}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
  305. FirewallRules: [{896B46BB-213A-484A-96E9-3C760D9546B9}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
  306. FirewallRules: [{FFE3D4AA-64F0-4CEA-B4C6-BFA23EF2C18F}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
  307. FirewallRules: [{89B15355-ABB4-4E68-BE65-BA7A93E3BB40}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
  308. FirewallRules: [{D98A32AF-889C-406A-8160-4F797CCD15DA}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
  309. FirewallRules: [{7442616C-44A3-4369-B817-0DA873CA523D}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe
  310. FirewallRules: [{50C99285-FE35-4751-A6B2-112E2FEF8310}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe
  311. FirewallRules: [{F98A7DC2-9552-41C2-BC9C-2D9A2CEC71C4}] => (Allow) C:\Program Files\KMSpico\KMSELDI.exe
  312. FirewallRules: [{B7D66918-13A7-434C-B893-E09125A5A696}] => (Allow) C:\Program Files\KMSpico\KMSELDI.exe
  313. FirewallRules: [{9B7DD668-23BE-4652-9B84-152EB679361E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
  314. FirewallRules: [{7B363660-68BC-4E15-9F09-277581F32989}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
  315. FirewallRules: [{4C53356B-72A7-4983-85F6-61C64F77ADAB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dead Island\DeadIslandGame.exe
  316. FirewallRules: [{DCC4FDA1-81E6-4067-9F66-CF883291F234}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dead Island\DeadIslandGame.exe
  317. FirewallRules: [{C8F2D591-F4D6-4167-AD72-7D109940D57B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
  318. FirewallRules: [{77F70192-DBE2-4AB2-9064-5200C5A50F1E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
  319. FirewallRules: [{9F47A26A-42FE-457D-B6C2-3DDAC50B30C5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dirty Bomb\Binaries\Win32\ShooterGame-Win32-Shipping.exe
  320. FirewallRules: [{60A5DCA6-4088-43BC-8539-D5C92F35B6DE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dirty Bomb\Binaries\Win32\ShooterGame-Win32-Shipping.exe
  321. FirewallRules: [{47AD7BEC-984C-4909-97CE-5D45A63B8CA5}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  322.  
  323. ==================== Restore Points =========================
  324.  
  325. ATTENTION: System Restore is disabled
  326.  
  327. ==================== Faulty Device Manager Devices =============
  328.  
  329.  
  330. ==================== Event log errors: =========================
  331.  
  332. Application errors:
  333. ==================
  334. Error: (01/15/2016 04:49:33 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
  335. Description: License Activation (slui.exe) failed with the following error code:
  336. hr=0x803F7001
  337. Command-line arguments:
  338. RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=NetworkAvailable
  339.  
  340. Error: (01/15/2016 04:49:30 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
  341. Description: License Activation (slui.exe) failed with the following error code:
  342. hr=0x803F7001
  343. Command-line arguments:
  344. RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=UserLogon;SessionId=1
  345.  
  346. Error: (01/14/2016 11:58:23 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
  347. Description: License Activation (slui.exe) failed with the following error code:
  348. hr=0x803F7001
  349. Command-line arguments:
  350. RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=NetworkAvailable
  351.  
  352. Error: (01/14/2016 11:58:23 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
  353. Description: License Activation (slui.exe) failed with the following error code:
  354. hr=0x803F7001
  355. Command-line arguments:
  356. RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=UserLogon;SessionId=1
  357.  
  358. Error: (01/14/2016 07:24:58 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
  359. Description: License Activation (slui.exe) failed with the following error code:
  360. hr=0x803F7001
  361. Command-line arguments:
  362. RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=NetworkAvailable
  363.  
  364. Error: (01/14/2016 07:24:57 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
  365. Description: License Activation (slui.exe) failed with the following error code:
  366. hr=0x803F7001
  367. Command-line arguments:
  368. RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=UserLogon;SessionId=1
  369.  
  370. Error: (01/14/2016 02:42:15 AM) (Source: Application Error) (EventID: 1000) (User: )
  371. Description: Faulting application name: utorrentie.exe, version: 1.0.0.41372, time stamp: 0x564b8ce9
  372. Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
  373. Exception code: 0xc0000005
  374. Fault offset: 0x5d6cc6d1
  375. Faulting process id: 0x1450
  376. Faulting application start time: 0xutorrentie.exe0
  377. Faulting application path: utorrentie.exe1
  378. Faulting module path: utorrentie.exe2
  379. Report Id: utorrentie.exe3
  380. Faulting package full name: utorrentie.exe4
  381. Faulting package-relative application ID: utorrentie.exe5
  382.  
  383. Error: (01/14/2016 02:41:03 AM) (Source: Application Error) (EventID: 1000) (User: )
  384. Description: Faulting application name: Explorer.EXE, version: 10.0.10586.0, time stamp: 0x5632d4c0
  385. Faulting module name: PrecisionXServerHooks_x64.dll_unloaded, version: 5.3.8.0, time stamp: 0x55fa593c
  386. Exception code: 0xc0000005
  387. Fault offset: 0x0000000000003bb1
  388. Faulting process id: 0xd64
  389. Faulting application start time: 0xExplorer.EXE0
  390. Faulting application path: Explorer.EXE1
  391. Faulting module path: Explorer.EXE2
  392. Report Id: Explorer.EXE3
  393. Faulting package full name: Explorer.EXE4
  394. Faulting package-relative application ID: Explorer.EXE5
  395.  
  396. Error: (01/14/2016 02:38:58 AM) (Source: Application Error) (EventID: 1000) (User: )
  397. Description: Faulting application name: utorrentie.exe, version: 1.0.0.41372, time stamp: 0x564b8ce9
  398. Faulting module name: Flash.ocx, version: 20.0.0.272, time stamp: 0x56870c97
  399. Exception code: 0xc0000005
  400. Fault offset: 0x00356e71
  401. Faulting process id: 0x1480
  402. Faulting application start time: 0xutorrentie.exe0
  403. Faulting application path: utorrentie.exe1
  404. Faulting module path: utorrentie.exe2
  405. Report Id: utorrentie.exe3
  406. Faulting package full name: utorrentie.exe4
  407. Faulting package-relative application ID: utorrentie.exe5
  408.  
  409. Error: (01/14/2016 02:37:20 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
  410. Description: License Activation (slui.exe) failed with the following error code:
  411. hr=0x803F7001
  412. Command-line arguments:
  413. RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=NetworkAvailable
  414.  
  415.  
  416. System errors:
  417. =============
  418. Error: (01/15/2016 05:09:40 AM) (Source: Ntfs) (EventID: 55) (User: NT AUTHORITY)
  419. Description: A corruption was discovered in the file system structure on volume F:.
  420.  
  421. The Master File Table (MFT) contains a corrupted file record. The file reference number is 0x3000000000003. The name of the file is "<unable to determine file name>".
  422.  
  423. Error: (01/15/2016 05:09:40 AM) (Source: Ntfs) (EventID: 55) (User: NT AUTHORITY)
  424. Description: A corruption was discovered in the file system structure on volume F:.
  425.  
  426. The Master File Table (MFT) contains a corrupted file record. The file reference number is 0x1000000000000. The name of the file is "<unable to determine file name>".
  427.  
  428. Error: (01/15/2016 05:09:40 AM) (Source: Ntfs) (EventID: 55) (User: NT AUTHORITY)
  429. Description: A corruption was discovered in the file system structure on volume F:.
  430.  
  431. The Master File Table (MFT) contains a corrupted file record. The file reference number is 0x3000000000003. The name of the file is "<unable to determine file name>".
  432.  
  433. Error: (01/15/2016 05:09:40 AM) (Source: Ntfs) (EventID: 55) (User: NT AUTHORITY)
  434. Description: A corruption was discovered in the file system structure on volume F:.
  435.  
  436. The Master File Table (MFT) contains a corrupted file record. The file reference number is 0x1000000000000. The name of the file is "<unable to determine file name>".
  437.  
  438. Error: (01/15/2016 05:09:38 AM) (Source: Ntfs) (EventID: 55) (User: NT AUTHORITY)
  439. Description: A corruption was discovered in the file system structure on volume F:.
  440.  
  441. The Master File Table (MFT) contains a corrupted file record. The file reference number is 0x3000000000003. The name of the file is "<unable to determine file name>".
  442.  
  443. Error: (01/15/2016 05:09:38 AM) (Source: Ntfs) (EventID: 55) (User: NT AUTHORITY)
  444. Description: A corruption was discovered in the file system structure on volume F:.
  445.  
  446. The Master File Table (MFT) contains a corrupted file record. The file reference number is 0x1000000000000. The name of the file is "<unable to determine file name>".
  447.  
  448. Error: (01/15/2016 05:09:38 AM) (Source: Ntfs) (EventID: 55) (User: NT AUTHORITY)
  449. Description: A corruption was discovered in the file system structure on volume F:.
  450.  
  451. The Master File Table (MFT) contains a corrupted file record. The file reference number is 0x3000000000003. The name of the file is "<unable to determine file name>".
  452.  
  453. Error: (01/15/2016 05:09:38 AM) (Source: Ntfs) (EventID: 55) (User: NT AUTHORITY)
  454. Description: A corruption was discovered in the file system structure on volume F:.
  455.  
  456. The Master File Table (MFT) contains a corrupted file record. The file reference number is 0x1000000000000. The name of the file is "<unable to determine file name>".
  457.  
  458. Error: (01/15/2016 05:09:36 AM) (Source: Ntfs) (EventID: 55) (User: NT AUTHORITY)
  459. Description: A corruption was discovered in the file system structure on volume F:.
  460.  
  461. The Master File Table (MFT) contains a corrupted file record. The file reference number is 0x3000000000003. The name of the file is "<unable to determine file name>".
  462.  
  463. Error: (01/15/2016 05:09:36 AM) (Source: Ntfs) (EventID: 55) (User: NT AUTHORITY)
  464. Description: A corruption was discovered in the file system structure on volume F:.
  465.  
  466. The Master File Table (MFT) contains a corrupted file record. The file reference number is 0x1000000000000. The name of the file is "<unable to determine file name>".
  467.  
  468.  
  469. CodeIntegrity:
  470. ===================================
  471. Date: 2016-01-12 15:13:34.064
  472. Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
  473.  
  474. Date: 2016-01-06 04:52:16.287
  475. Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
  476.  
  477. Date: 2016-01-02 17:51:25.155
  478. Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
  479.  
  480. Date: 2016-01-01 19:51:44.103
  481. Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
  482.  
  483. Date: 2016-01-01 17:51:51.444
  484. Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
  485.  
  486. Date: 2015-12-31 06:25:41.694
  487. Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
  488.  
  489. Date: 2015-12-29 03:30:53.259
  490. Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
  491.  
  492. Date: 2015-12-29 01:31:07.426
  493. Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
  494.  
  495. Date: 2015-12-25 18:51:28.404
  496. Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
  497.  
  498. Date: 2015-12-25 18:47:40.666
  499. Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
  500.  
  501.  
  502. ==================== Memory info ===========================
  503.  
  504. Processor: Intel(R) Core(TM) i5-3570K CPU @ 3.40GHz
  505. Percentage of memory in use: 26%
  506. Total physical RAM: 8139.06 MB
  507. Available physical RAM: 6014.38 MB
  508. Total Virtual: 9419.06 MB
  509. Available Virtual: 7185.3 MB
  510.  
  511. ==================== Drives ================================
  512.  
  513. Drive c: () (Fixed) (Total:118.8 GB) (Free:5.53 GB) NTFS ==>[drive with boot components (obtained from BCD)]
  514. Drive d: (data) (Fixed) (Total:465.76 GB) (Free:398.35 GB) NTFS
  515.  
  516. ==================== MBR & Partition Table ==================
  517.  
  518. ========================================================
  519. Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119.2 GB) (Disk ID: 17B1CD44)
  520. Partition 1: (Active) - (Size=118.8 GB) - (Type=07 NTFS)
  521. Partition 2: (Not Active) - (Size=450 MB) - (Type=27)
  522. Partition 3: (Not Active) - (Size=1360 KB) - (Type=07 NTFS)
  523.  
  524. ========================================================
  525. Disk: 1 (Size: 465.8 GB) (Disk ID: 00000001)
  526. Partition 1: (Active) - (Size=465.8 GB) - (Type=04)
  527.  
  528. ==================== End of Addition.txt ============================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement