Advertisement
Guest User

Untitled

a guest
Jul 28th, 2015
288
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 87.77 KB | None | 0 0
  1. OTL logfile created on: 28/07/2015 19:25:16 - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Eva\Downloads
  3. 64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.11.9600.17905)
  5. Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy
  6.  
  7. 3.89 Gb Total Physical Memory | 0.84 Gb Available Physical Memory | 21.68% Memory free
  8. 6.37 Gb Paging File | 1.19 Gb Available in Paging File | 18.70% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 888.90 Gb Total Space | 844.11 Gb Free Space | 94.96% Space Free | Partition Type: NTFS
  13. Drive D: | 25.00 Gb Total Space | 24.92 Gb Free Space | 99.68% Space Free | Partition Type: NTFS
  14.  
  15. Computer Name: MIZZCHIEVEA | User Name: Eva | Logged in as Administrator.
  16. Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
  17. Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
  18.  
  19. [color=#E56717]========== Processes (SafeList) ==========[/color]
  20.  
  21. PRC - [2015/07/28 19:24:11 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Eva\Downloads\OTL.exe
  22. PRC - [2015/07/25 06:07:10 | 007,863,808 | ---- | M] (Pokki) -- C:\Users\Eva\AppData\Local\Pokki\Engine\HostAppService.exe
  23. PRC - [2015/07/23 23:39:58 | 000,813,896 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  24. PRC - [2015/07/23 07:22:25 | 003,175,312 | ---- | M] () -- C:\Program Files (x86)\AVG Web TuneUp\vprot.exe
  25. PRC - [2015/07/23 07:22:25 | 001,874,320 | ---- | M] (AVG Secure Search) -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.8.0\ToolbarUpdater.exe
  26. PRC - [2015/07/23 07:22:25 | 001,402,768 | ---- | M] (AVG Secure Search) -- C:\Program Files (x86)\AVG Web TuneUp\avgcefrend.exe
  27. PRC - [2015/07/23 07:22:25 | 001,195,920 | ---- | M] () -- C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe
  28. PRC - [2015/07/23 07:22:25 | 000,168,336 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.8.0\loggingserver.exe
  29. PRC - [2015/05/06 13:14:48 | 005,058,352 | ---- | M] (ClientConnect LTD) -- C:\Program Files (x86)\LenovoBrowserGuard\LenovoBrowserGuard\bin\cltmng.exe
  30. PRC - [2015/05/06 13:14:48 | 002,735,408 | ---- | M] (ClientConnect LTD) -- C:\Program Files (x86)\LenovoBrowserGuard\Main\bin\CltMngSvc.exe
  31. PRC - [2014/06/14 00:06:43 | 000,154,896 | ---- | M] (Lenovo) -- C:\Program Files (x86)\Lenovo\Lenovo Smart Voice\LsvTrayLoad.exe
  32. PRC - [2014/06/14 00:06:43 | 000,153,872 | ---- | M] (Lenovo) -- C:\Program Files (x86)\Lenovo\Lenovo Smart Voice\LsvController.exe
  33. PRC - [2014/04/30 11:56:02 | 000,065,296 | ---- | M] (Greatis Software, LLC) -- C:\Program Files (x86)\BootRacer\BootRacerServ.exe
  34. PRC - [2013/12/13 02:57:54 | 000,069,640 | ---- | M] (Nalpeiron Ltd.) -- C:\Windows\SysWOW64\NLSSRV32.EXE
  35. PRC - [2013/10/18 00:04:58 | 001,028,384 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
  36. PRC - [2013/10/18 00:04:28 | 001,914,656 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
  37. PRC - [2013/09/16 20:20:16 | 000,390,616 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  38. PRC - [2013/09/16 20:20:10 | 000,169,432 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
  39. PRC - [2013/08/07 22:24:00 | 000,287,592 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
  40. PRC - [2013/08/07 22:24:00 | 000,015,720 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
  41. PRC - [2013/03/08 23:18:34 | 000,095,192 | ---- | M] (CyberLink Corp.) -- C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
  42. PRC - [2011/09/01 08:23:44 | 000,447,104 | ---- | M] (Conexant Systems, Inc.) -- C:\Windows\SysWOW64\SASrv.exe
  43.  
  44.  
  45. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  46.  
  47. MOD - [2015/07/23 23:39:57 | 016,308,040 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.107\PepperFlash\pepflashplayer.dll
  48. MOD - [2015/07/23 23:39:56 | 001,405,768 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.107\libglesv2.dll
  49. MOD - [2015/07/23 23:39:55 | 000,081,224 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.107\libegl.dll
  50. MOD - [2015/07/23 07:22:25 | 040,638,864 | ---- | M] () -- C:\Program Files (x86)\AVG Web TuneUp\libcef.dll
  51. MOD - [2015/07/23 07:22:25 | 003,175,312 | ---- | M] () -- C:\Program Files (x86)\AVG Web TuneUp\vprot.exe
  52. MOD - [2015/07/23 07:22:25 | 000,528,272 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.8.0\log4cplusU.dll
  53. MOD - [2015/04/28 21:15:22 | 001,400,846 | ---- | M] () -- C:\Users\Eva\AppData\Local\Pokki\Engine\avcodec-54.dll
  54. MOD - [2015/04/28 21:15:22 | 000,569,856 | ---- | M] () -- C:\Users\Eva\AppData\Local\Pokki\Engine\ppGoogleNaClPluginChrome.dll
  55. MOD - [2015/04/28 21:15:22 | 000,222,734 | ---- | M] () -- C:\Users\Eva\AppData\Local\Pokki\Engine\avformat-54.dll
  56. MOD - [2015/04/28 21:15:22 | 000,151,054 | ---- | M] () -- C:\Users\Eva\AppData\Local\Pokki\Engine\avutil-51.dll
  57. MOD - [2014/06/14 00:06:43 | 000,101,648 | ---- | M] () -- C:\Program Files (x86)\Lenovo\Lenovo Smart Voice\LUpdatePackage.dll
  58.  
  59.  
  60. [color=#E56717]========== Services (SafeList) ==========[/color]
  61.  
  62. SRV:[b]64bit:[/b] - [2015/05/30 20:36:24 | 000,230,400 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
  63. SRV:[b]64bit:[/b] - [2015/05/25 14:07:50 | 001,430,528 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\diagtrack.dll -- (DiagTrack)
  64. SRV:[b]64bit:[/b] - [2015/05/12 14:19:37 | 000,294,912 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
  65. SRV:[b]64bit:[/b] - [2015/05/07 16:21:51 | 000,522,240 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\GeofenceMonitorService.dll -- (lfsvc)
  66. SRV:[b]64bit:[/b] - [2015/02/21 00:49:18 | 000,780,800 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM)
  67. SRV:[b]64bit:[/b] - [2015/02/04 00:58:28 | 000,366,520 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Windows Defender\NisSrv.exe -- (WdNisSvc)
  68. SRV:[b]64bit:[/b] - [2015/02/04 00:58:28 | 000,023,792 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
  69. SRV:[b]64bit:[/b] - [2014/10/31 05:51:25 | 000,114,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
  70. SRV:[b]64bit:[/b] - [2014/10/29 04:59:51 | 003,460,472 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WSService.dll -- (WSService)
  71. SRV:[b]64bit:[/b] - [2014/10/29 04:50:12 | 002,987,520 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
  72. SRV:[b]64bit:[/b] - [2014/10/29 03:42:19 | 000,026,112 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wephostsvc.dll -- (WEPHOSTSVC)
  73. SRV:[b]64bit:[/b] - [2014/10/29 03:42:03 | 000,041,472 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\efssvc.dll -- (EFS)
  74. SRV:[b]64bit:[/b] - [2014/10/29 03:34:51 | 000,067,584 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc)
  75. SRV:[b]64bit:[/b] - [2014/10/29 03:33:55 | 000,013,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc)
  76. SRV:[b]64bit:[/b] - [2014/10/29 03:29:22 | 000,121,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc)
  77. SRV:[b]64bit:[/b] - [2014/10/29 02:57:05 | 000,324,608 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\BthHFSrv.dll -- (BthHFSrv)
  78. SRV:[b]64bit:[/b] - [2014/10/29 02:48:20 | 000,166,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc)
  79. SRV:[b]64bit:[/b] - [2014/10/29 02:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss)
  80. SRV:[b]64bit:[/b] - [2014/10/29 02:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync)
  81. SRV:[b]64bit:[/b] - [2014/10/29 02:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown)
  82. SRV:[b]64bit:[/b] - [2014/10/29 02:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv)
  83. SRV:[b]64bit:[/b] - [2014/10/29 02:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange)
  84. SRV:[b]64bit:[/b] - [2014/10/29 02:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat)
  85. SRV:[b]64bit:[/b] - [2014/10/29 02:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicguestinterface)
  86. SRV:[b]64bit:[/b] - [2014/10/29 02:27:21 | 000,013,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\smphost.dll -- (smphost)
  87. SRV:[b]64bit:[/b] - [2014/10/29 02:26:21 | 000,838,656 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon)
  88. SRV:[b]64bit:[/b] - [2014/10/29 02:24:37 | 000,131,072 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ScDeviceEnum.dll -- (ScDeviceEnum)
  89. SRV:[b]64bit:[/b] - [2014/10/29 02:22:40 | 000,062,464 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)
  90. SRV:[b]64bit:[/b] - [2014/10/29 02:20:03 | 000,262,656 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker)
  91. SRV:[b]64bit:[/b] - [2014/10/29 02:19:20 | 000,550,912 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)
  92. SRV:[b]64bit:[/b] - [2014/10/29 02:16:17 | 000,154,112 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ncbservice.dll -- (NcbService)
  93. SRV:[b]64bit:[/b] - [2014/10/29 02:13:24 | 000,374,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc)
  94. SRV:[b]64bit:[/b] - [2014/10/29 02:13:02 | 000,260,608 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc)
  95. SRV:[b]64bit:[/b] - [2014/10/29 02:12:36 | 000,407,040 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService)
  96. SRV:[b]64bit:[/b] - [2014/10/29 02:12:22 | 000,270,336 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure)
  97. SRV:[b]64bit:[/b] - [2014/10/29 02:11:10 | 001,639,424 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc)
  98. SRV:[b]64bit:[/b] - [2014/10/29 02:05:09 | 000,206,848 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc)
  99. SRV:[b]64bit:[/b] - [2014/10/29 01:57:18 | 000,074,752 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)
  100. SRV:[b]64bit:[/b] - [2014/10/29 01:48:52 | 000,562,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppReadiness.dll -- (AppReadiness)
  101. SRV:[b]64bit:[/b] - [2014/10/29 01:46:48 | 001,348,096 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppXDeploymentServer.dll -- (AppXSvc)
  102. SRV:[b]64bit:[/b] - [2014/10/29 01:35:51 | 001,668,096 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\workfolderssvc.dll -- (workfolderssvc)
  103. SRV:[b]64bit:[/b] - [2014/07/23 00:31:23 | 000,172,344 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCore64.exe -- (!SASCORE)
  104. SRV:[b]64bit:[/b] - [2013/12/13 02:57:44 | 000,230,920 | ---- | M] (Nitro PDF Software) [Auto | Running] -- C:\Program Files\Common Files\Nitro\Pro\9.0\NitroPDFDriverService9x64.exe -- (NitroDriverReadSpool9)
  105. SRV:[b]64bit:[/b] - [2013/08/27 22:32:30 | 000,828,376 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe -- (Intel(R)
  106. SRV:[b]64bit:[/b] - [2013/08/27 22:32:14 | 000,747,520 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R)
  107. SRV:[b]64bit:[/b] - [2013/08/07 22:24:00 | 000,015,720 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
  108. SRV:[b]64bit:[/b] - [2013/07/25 07:39:26 | 000,206,552 | ---- | M] (Conexant Systems Inc.) [Auto | Running] -- C:\Windows\SysNative\CxAudMsg64.exe -- (CxAudMsg)
  109. SRV - [2015/07/23 07:22:25 | 001,874,320 | ---- | M] (AVG Secure Search) [Auto | Running] -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.8.0\ToolbarUpdater.exe -- (vToolbarUpdater18.8.0)
  110. SRV - [2015/07/23 07:22:25 | 001,195,920 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe -- (WtuSystemSupport)
  111. SRV - [2015/07/02 20:50:19 | 000,134,512 | ---- | M] (Dropbox, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe -- (dbupdatem)
  112. SRV - [2015/07/02 20:50:19 | 000,134,512 | ---- | M] (Dropbox, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe -- (dbupdate)
  113. SRV - [2015/05/07 16:05:40 | 000,367,104 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GeofenceMonitorService.dll -- (lfsvc)
  114. SRV - [2015/05/06 13:14:48 | 002,735,408 | ---- | M] (ClientConnect LTD) [Auto | Running] -- C:\Program Files (x86)\LenovoBrowserGuard\Main\bin\CltMngSvc.exe -- (CltMngSvc)
  115. SRV - [2014/10/29 04:50:12 | 002,987,520 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\windows\system32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
  116. SRV - [2014/10/29 02:51:55 | 000,017,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\StorSvc.dll -- (StorSvc)
  117. SRV - [2014/10/29 02:04:45 | 000,011,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\smphost.dll -- (smphost)
  118. SRV - [2014/06/14 00:06:50 | 000,068,368 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe -- (VeriFaceSrv)
  119. SRV - [2014/06/14 00:06:43 | 000,070,416 | ---- | M] (Lenovo) [Auto | Running] -- C:\Program Files (x86)\Lenovo\Lenovo Smart Voice\LsvUIService.exe -- (LsvUIService)
  120. SRV - [2014/04/30 11:56:02 | 000,065,296 | ---- | M] (Greatis Software, LLC) [Auto | Running] -- C:\Program Files (x86)\BootRacer\BootRacerServ.exe -- (BootRacerServ)
  121. SRV - [2014/01/06 22:56:50 | 000,079,872 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTDevMgr.exe -- (BTDevManager)
  122. SRV - [2013/12/24 02:14:33 | 000,279,024 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)
  123. SRV - [2013/12/13 02:57:54 | 000,069,640 | ---- | M] (Nalpeiron Ltd.) [Auto | Running] -- C:\Windows\SysWOW64\NLSSRV32.EXE -- (nlsX86cc)
  124. SRV - [2013/10/18 00:04:28 | 001,914,656 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
  125. SRV - [2013/09/16 20:20:16 | 000,390,616 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
  126. SRV - [2013/09/16 20:20:10 | 000,169,432 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe -- (jhi_service)
  127. SRV - [2011/09/01 08:23:44 | 000,447,104 | ---- | M] (Conexant Systems, Inc.) [Auto | Running] -- C:\Windows\SysWOW64\SASrv.exe -- (SAService)
  128.  
  129.  
  130. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  131.  
  132. DRV:[b]64bit:[/b] - [2015/04/16 07:17:07 | 000,325,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBXHCI.SYS -- (USBXHCI)
  133. DRV:[b]64bit:[/b] - [2015/03/20 02:56:10 | 000,080,384 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ahcache.sys -- (ahcache)
  134. DRV:[b]64bit:[/b] - [2015/03/17 18:26:06 | 000,467,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBHUB3.SYS -- (USBHUB3)
  135. DRV:[b]64bit:[/b] - [2015/03/13 05:03:31 | 000,239,424 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
  136. DRV:[b]64bit:[/b] - [2015/03/09 03:02:51 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bthhfenum.sys -- (BthHFEnum)
  137. DRV:[b]64bit:[/b] - [2015/03/04 11:25:11 | 000,377,152 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\clfs.sys -- (CLFS)
  138. DRV:[b]64bit:[/b] - [2015/02/04 00:58:33 | 000,264,000 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\WdFilter.sys -- (WdFilter)
  139. DRV:[b]64bit:[/b] - [2015/02/04 00:58:33 | 000,114,496 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WdNisDrv.sys -- (WdNisDrv)
  140. DRV:[b]64bit:[/b] - [2015/02/04 00:58:04 | 000,044,024 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\WdBoot.sys -- (WdBoot)
  141. DRV:[b]64bit:[/b] - [2014/10/29 04:59:47 | 000,415,040 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\spaceport.sys -- (spaceport)
  142. DRV:[b]64bit:[/b] - [2014/10/29 04:59:12 | 000,136,512 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\wfplwfs.sys -- (WFPLWFS)
  143. DRV:[b]64bit:[/b] - [2014/10/29 04:57:42 | 000,054,784 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wpcfltr.sys -- (wpcfltr)
  144. DRV:[b]64bit:[/b] - [2014/10/29 04:56:04 | 000,027,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
  145. DRV:[b]64bit:[/b] - [2014/10/29 03:46:43 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
  146. DRV:[b]64bit:[/b] - [2014/10/29 03:46:09 | 000,087,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netvsc63.sys -- (netvsc)
  147. DRV:[b]64bit:[/b] - [2014/10/29 03:45:54 | 000,126,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NdisImPlatform.sys -- (NdisImPlatform)
  148. DRV:[b]64bit:[/b] - [2014/10/29 03:45:39 | 000,066,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mslldp.sys -- (MsLldp)
  149. DRV:[b]64bit:[/b] - [2014/10/29 03:45:16 | 000,103,424 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\Ndu.sys -- (Ndu)
  150. DRV:[b]64bit:[/b] - [2014/10/15 09:32:36 | 000,921,920 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\windows\SysNative\drivers\refs.sys -- (ReFS)
  151. DRV:[b]64bit:[/b] - [2014/10/13 03:43:17 | 000,086,336 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pdc.sys -- (pdc)
  152. DRV:[b]64bit:[/b] - [2014/10/13 03:43:17 | 000,039,744 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\intelpep.sys -- (intelpep)
  153. DRV:[b]64bit:[/b] - [2014/10/07 07:54:45 | 000,189,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\UCX01000.SYS -- (UCX01000)
  154. DRV:[b]64bit:[/b] - [2014/10/07 07:44:39 | 000,069,952 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpci.sys -- (vpci)
  155. DRV:[b]64bit:[/b] - [2014/08/15 01:36:55 | 000,146,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpioclx.sys -- (GPIOClx0101)
  156. DRV:[b]64bit:[/b] - [2014/06/14 00:09:42 | 000,035,600 | ---- | M] (Lenovo Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AcpiVpc.sys -- (ACPIVPC)
  157. DRV:[b]64bit:[/b] - [2014/03/18 10:54:54 | 000,146,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx2.sys -- (SerCx2)
  158. DRV:[b]64bit:[/b] - [2014/03/18 10:54:43 | 000,175,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VerifierExt.sys -- (VerifierExt)
  159. DRV:[b]64bit:[/b] - [2014/03/18 10:54:42 | 000,226,304 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BthLEEnum.sys -- (BthLEEnum)
  160. DRV:[b]64bit:[/b] - [2014/03/18 10:54:42 | 000,079,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdstor.sys -- (sdstor)
  161. DRV:[b]64bit:[/b] - [2014/03/18 10:54:42 | 000,057,176 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stornvme.sys -- (stornvme)
  162. DRV:[b]64bit:[/b] - [2014/03/18 10:54:42 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicRender.sys -- (BasicRender)
  163. DRV:[b]64bit:[/b] - [2014/03/18 10:38:02 | 000,037,216 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
  164. DRV:[b]64bit:[/b] - [2014/03/13 13:35:24 | 000,157,016 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\windows\SysNative\drivers\wof.sys -- (Wof)
  165. DRV:[b]64bit:[/b] - [2014/01/27 09:23:56 | 001,474,240 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CHDRT64.sys -- (CnxtHdAudService)
  166. DRV:[b]64bit:[/b] - [2014/01/22 09:52:10 | 000,206,080 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudmdm.sys -- (ssudmdm)
  167. DRV:[b]64bit:[/b] - [2014/01/22 09:52:10 | 000,108,800 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudbus.sys -- (dg_ssudbus)
  168. DRV:[b]64bit:[/b] - [2014/01/05 19:42:08 | 000,558,296 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtkBtfilter.sys -- (RtkBtFilter)
  169. DRV:[b]64bit:[/b] - [2013/12/26 09:31:00 | 002,982,104 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rtwlane.sys -- (RTWlanE)
  170. DRV:[b]64bit:[/b] - [2013/12/24 02:14:50 | 000,532,720 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
  171. DRV:[b]64bit:[/b] - [2013/12/24 02:14:44 | 000,034,544 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Smb_driver_Intel.sys -- (SmbDrvI)
  172. DRV:[b]64bit:[/b] - [2013/12/18 22:02:19 | 000,450,520 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
  173. DRV:[b]64bit:[/b] - [2013/12/18 21:56:10 | 004,216,320 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
  174. DRV:[b]64bit:[/b] - [2013/12/15 00:34:54 | 000,039,320 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\intelaud.sys -- (intaud_WaveExtensible)
  175. DRV:[b]64bit:[/b] - [2013/12/15 00:34:54 | 000,027,032 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iwdbus.sys -- (iwdbus)
  176. DRV:[b]64bit:[/b] - [2013/10/17 20:36:54 | 008,876,248 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rtsuvc.sys -- (rtsuvc)
  177. DRV:[b]64bit:[/b] - [2013/09/16 20:20:12 | 000,099,288 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\TeeDriverx64.sys -- (MEIx64)
  178. DRV:[b]64bit:[/b] - [2013/08/22 14:25:40 | 000,043,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\condrv.sys -- (condrv)
  179. DRV:[b]64bit:[/b] - [2013/08/22 14:25:40 | 000,030,048 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  180. DRV:[b]64bit:[/b] - [2013/08/22 13:50:19 | 000,057,696 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\dam.sys -- (dam)
  181. DRV:[b]64bit:[/b] - [2013/08/22 13:49:54 | 000,079,712 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\acpiex.sys -- (acpiex)
  182. DRV:[b]64bit:[/b] - [2013/08/22 13:49:33 | 000,159,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM)
  183. DRV:[b]64bit:[/b] - [2013/08/22 13:43:49 | 000,063,840 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\mvumis.sys -- (mvumis)
  184. DRV:[b]64bit:[/b] - [2013/08/22 13:43:48 | 000,041,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\msgpiowin32.sys -- (msgpiowin32)
  185. DRV:[b]64bit:[/b] - [2013/08/22 13:43:45 | 003,357,024 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  186. DRV:[b]64bit:[/b] - [2013/08/22 13:43:45 | 000,093,536 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  187. DRV:[b]64bit:[/b] - [2013/08/22 13:43:45 | 000,082,784 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sss.sys -- (LSI_SSS)
  188. DRV:[b]64bit:[/b] - [2013/08/22 13:43:45 | 000,064,352 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  189. DRV:[b]64bit:[/b] - [2013/08/22 13:43:44 | 000,081,760 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas3.sys -- (LSI_SAS3)
  190. DRV:[b]64bit:[/b] - [2013/08/22 13:43:41 | 000,782,176 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\adp80xx.sys -- (ADP80XX)
  191. DRV:[b]64bit:[/b] - [2013/08/22 13:43:41 | 000,531,296 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  192. DRV:[b]64bit:[/b] - [2013/08/22 13:43:41 | 000,259,424 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  193. DRV:[b]64bit:[/b] - [2013/08/22 13:43:41 | 000,108,896 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\3ware.sys -- (3ware)
  194. DRV:[b]64bit:[/b] - [2013/08/22 13:43:41 | 000,079,200 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  195. DRV:[b]64bit:[/b] - [2013/08/22 13:43:40 | 000,114,016 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
  196. DRV:[b]64bit:[/b] - [2013/08/22 13:43:40 | 000,082,784 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\EhStorClass.sys -- (EhStorClass)
  197. DRV:[b]64bit:[/b] - [2013/08/22 13:43:40 | 000,025,952 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  198. DRV:[b]64bit:[/b] - [2013/08/22 13:43:34 | 000,305,504 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\VSTXRAID.SYS -- (VSTXRAID)
  199. DRV:[b]64bit:[/b] - [2013/08/22 13:43:33 | 000,074,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uaspstor.sys -- (UASPStor)
  200. DRV:[b]64bit:[/b] - [2013/08/22 13:43:32 | 000,031,072 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  201. DRV:[b]64bit:[/b] - [2013/08/22 13:43:31 | 000,107,872 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\storahci.sys -- (storahci)
  202. DRV:[b]64bit:[/b] - [2013/08/22 13:43:31 | 000,072,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SpbCx.sys -- (SpbCx)
  203. DRV:[b]64bit:[/b] - [2013/08/22 13:43:31 | 000,069,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx.sys -- (SerCx)
  204. DRV:[b]64bit:[/b] - [2013/08/22 13:39:15 | 000,026,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uefi.sys -- (UEFI)
  205. DRV:[b]64bit:[/b] - [2013/08/22 13:36:12 | 000,026,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WpdUpFltr.sys -- (WpdUpFltr)
  206. DRV:[b]64bit:[/b] - [2013/08/22 12:39:31 | 000,050,688 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicDisplay.sys -- (BasicDisplay)
  207. DRV:[b]64bit:[/b] - [2013/08/22 12:39:20 | 000,022,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HyperVideo.sys -- (HyperVideo)
  208. DRV:[b]64bit:[/b] - [2013/08/22 12:39:06 | 000,009,728 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mshidumdf.sys -- (mshidumdf)
  209. DRV:[b]64bit:[/b] - [2013/08/22 12:38:58 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpitime.sys -- (acpitime)
  210. DRV:[b]64bit:[/b] - [2013/08/22 12:38:48 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipagr.sys -- (acpipagr)
  211. DRV:[b]64bit:[/b] - [2013/08/22 12:38:39 | 000,036,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
  212. DRV:[b]64bit:[/b] - [2013/08/22 12:38:26 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kdnic.sys -- (kdnic)
  213. DRV:[b]64bit:[/b] - [2013/08/22 12:38:23 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgencounter.sys -- (gencounter)
  214. DRV:[b]64bit:[/b] - [2013/08/22 12:38:22 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\npsvctrig.sys -- (npsvctrig)
  215. DRV:[b]64bit:[/b] - [2013/08/22 12:38:16 | 000,030,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthhfHid.sys -- (bthhfhid)
  216. DRV:[b]64bit:[/b] - [2013/08/22 12:37:49 | 000,013,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hyperkbd.sys -- (hyperkbd)
  217. DRV:[b]64bit:[/b] - [2013/08/22 12:37:28 | 000,056,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  218. DRV:[b]64bit:[/b] - [2013/08/22 12:37:28 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidi2c.sys -- (hidi2c)
  219. DRV:[b]64bit:[/b] - [2013/08/22 12:37:14 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
  220. DRV:[b]64bit:[/b] - [2013/08/22 12:36:25 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys -- (NdisVirtualBus)
  221. DRV:[b]64bit:[/b] - [2013/08/22 09:46:33 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fxppm.sys -- (FxPPM)
  222. DRV:[b]64bit:[/b] - [2013/08/15 07:28:42 | 000,830,680 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt630x64.sys -- (RTL8168)
  223. DRV:[b]64bit:[/b] - [2013/08/13 00:25:46 | 000,017,624 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn2.sys -- (bcmfn2)
  224. DRV:[b]64bit:[/b] - [2013/08/10 01:39:30 | 000,651,248 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\iaStorAV.sys -- (iaStorAV)
  225. DRV:[b]64bit:[/b] - [2013/08/08 09:27:54 | 000,329,944 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsUVStor.sys -- (RSUSBVSTOR)
  226. DRV:[b]64bit:[/b] - [2013/08/07 22:23:46 | 000,644,968 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStorA.sys -- (iaStorA)
  227. DRV:[b]64bit:[/b] - [2013/07/30 19:47:35 | 000,024,568 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys -- (iaLPSSi_GPIO)
  228. DRV:[b]64bit:[/b] - [2013/07/25 20:05:39 | 000,099,320 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys -- (iaLPSSi_I2C)
  229. DRV:[b]64bit:[/b] - [2013/06/18 15:45:43 | 004,649,440 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NETwew02.sys -- (NETwNe64)
  230. DRV:[b]64bit:[/b] - [2013/06/18 15:45:26 | 000,460,288 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\e1i63x64.sys -- (e1iexpress)
  231. DRV:[b]64bit:[/b] - [2012/06/14 01:10:32 | 000,102,376 | ---- | M] ("CyberLink) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wsvd.sys -- (wsvd)
  232. DRV:[b]64bit:[/b] - [2011/07/22 17:26:56 | 000,014,928 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys -- (SASDIFSV)
  233. DRV:[b]64bit:[/b] - [2011/07/12 22:55:18 | 000,012,368 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\saskutil64.sys -- (SASKUTIL)
  234.  
  235. [color=#E56717]========== Standard Registry (SafeList) ==========[/color]
  236.  
  237.  
  238. [color=#E56717]========== Internet Explorer ==========[/color]
  239.  
  240. IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {036E1BAE-4DB8-4ADD-9ABE-6A894ED079ED}
  241. IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{036E1BAE-4DB8-4ADD-9ABE-6A894ED079ED}: "URL" = http://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=LCJB
  242. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  243. IE - HKLM\..\SearchScopes,DefaultScope = {036E1BAE-4DB8-4ADD-9ABE-6A894ED079ED}
  244. IE - HKLM\..\SearchScopes\{036E1BAE-4DB8-4ADD-9ABE-6A894ED079ED}: "URL" = http://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=LCJB
  245.  
  246. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com/?pc=LCJB
  247. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com [binary data]
  248. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com [binary data]
  249. IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://mysearch.avg.com/?cid={779678D7-05FC-4A43-904B-D5A6CCCA3112}&mid=4a24ba99f19647cda1c8f99b0245df16-a2ef7db1fe3ddb4ee7b51193392ad683c428db3f&lang=en&ds=AVG&coid=avgtbavg&cmpid=0715tb&pr=fr&d=2015-02-28 21:08:01&v=4.1.4.948&pid=wtu&sg=&sap=hp
  250. IE - HKCU\..\SearchScopes,DefaultScope = {036E1BAE-4DB8-4ADD-9ABE-6A894ED079ED}
  251. IE - HKCU\..\SearchScopes\{036E1BAE-4DB8-4ADD-9ABE-6A894ED079ED}: "URL" = http://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=LCJB
  252. IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = https://mysearch.avg.com/search?cid={779678D7-05FC-4A43-904B-D5A6CCCA3112}&mid=4a24ba99f19647cda1c8f99b0245df16-a2ef7db1fe3ddb4ee7b51193392ad683c428db3f&lang=en&ds=AVG&coid=avgtbavg&cmpid=0715tb&pr=fr&d=2015-02-28 21:08:01&v=4.1.4.948&pid=wtu&sg=&sap=dsp&q={searchTerms}
  253. IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  254.  
  255.  
  256. [color=#E56717]========== FireFox ==========[/color]
  257.  
  258. FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.8.0\\npsitesafety.dll File not found
  259. FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
  260. FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
  261. FF - HKLM\Software\MozillaPlugins\@nitropdf.com/NitroPDF: C:\Program Files (x86)\Nitro\Pro 9\npnitromozilla.dll (Nitro PDF)
  262. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll (Google Inc.)
  263. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll (Google Inc.)
  264.  
  265.  
  266.  
  267. [color=#E56717]========== Chrome ==========[/color]
  268.  
  269. CHR - Extension: No name found = C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\
  270. CHR - Extension: No name found = C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\
  271. CHR - Extension: No name found = C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.0_0\
  272. CHR - Extension: No name found = C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0\
  273. CHR - Extension: No name found = C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.7_0\
  274. CHR - Extension: No name found = C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.30_0\
  275. CHR - Extension: No name found = C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba\1.6_0\
  276. CHR - Extension: No name found = C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\
  277. CHR - Extension: No name found = C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.5_0\
  278. CHR - Extension: No name found = C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\
  279. CHR - Extension: No name found = C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\
  280.  
  281. O1 HOSTS File: ([2013/08/22 14:25:41 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  282. O2:[b]64bit:[/b] - BHO: (AVG Web TuneUp) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Web TuneUp\4.1.5.143\AVG Web TuneUp.dll (AVG)
  283. O2 - BHO: (AVG Web TuneUp) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Web TuneUp\4.1.5.143\AVG Web TuneUp.dll (AVG)
  284. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
  285. O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
  286. O4:[b]64bit:[/b] - HKLM..\Run: [BtServer] C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe (Realtek Semiconductor Corporation)
  287. O4:[b]64bit:[/b] - HKLM..\Run: [cAudioFilterAgent] C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe (Conexant Systems, Inc.)
  288. O4:[b]64bit:[/b] - HKLM..\Run: [Energy Manager] C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe (Lenovo(beijing) Limited)
  289. O4:[b]64bit:[/b] - HKLM..\Run: [ForteConfig] C:\Program Files\CONEXANT\ForteConfig\fmapp.exe ()
  290. O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\windows\SysNative\hkcmd.exe (Intel Corporation)
  291. O4:[b]64bit:[/b] - HKLM..\Run: [IAStorIcon] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe (Intel Corporation)
  292. O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\windows\SysNative\igfxtray.exe (Intel Corporation)
  293. O4:[b]64bit:[/b] - HKLM..\Run: [Lenovo Utility] C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe (Lenovo(beijing) Limited)
  294. O4:[b]64bit:[/b] - HKLM..\Run: [Nvtmru] C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe (NVIDIA Corporation)
  295. O4:[b]64bit:[/b] - HKLM..\Run: [OnekeyStudio] C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe (Lenovo)
  296. O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\windows\SysNative\igfxpers.exe (Intel Corporation)
  297. O4:[b]64bit:[/b] - HKLM..\Run: [RtsFT] C:\windows\RTFTrack.exe (Realtek semiconductor)
  298. O4:[b]64bit:[/b] - HKLM..\Run: [SmartAudio] C:\Program Files\CONEXANT\SAII\SACpl.exe (Conexant Systems, Inc.)
  299. O4 - HKLM..\Run: [Dropbox] C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc.)
  300. O4 - HKLM..\Run: [UpdateP2GShortCut] C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
  301. O4 - HKLM..\Run: [vProt] C:\Program Files (x86)\AVG Web TuneUp\vprot.exe ()
  302. O4 - HKCU..\Run: [GoogleChromeAutoLaunch_36D3F407307A90FC4C1A022BC0D3F4C5] C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
  303. O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE (SUPERAntiSpyware)
  304. O4 - HKCU..\RunOnce: [Application Restart #4] C:\Users\Eva\AppData\Local\Pokki\Engine\HostAppService.exe (Pokki)
  305. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
  306. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  307. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: BootRacer = "C:\Program Files (x86)\BootRacer\Bootrace.exe" /2 (Greatis Software)
  308. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  309. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
  310. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  311. O13[b]64bit:[/b] - gopher Prefix: missing
  312. O13 - gopher Prefix: missing
  313. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
  314. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{17454D5E-1EFC-49EE-9FBA-AA383A561EE8}: DhcpNameServer = 150.206.1.2
  315. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{38DD427F-F82C-41E8-80F4-DFE195B914F9}: DhcpNameServer = 192.168.0.1
  316. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
  317. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  318. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\SysWow64\explorer.exe (Microsoft Corporation)
  319. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\windows\SysWow64\userinit.exe (Microsoft Corporation)
  320. O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\windows\SysNative\igfxdev.dll (Intel Corporation)
  321. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  322. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  323. O32 - HKLM CDRom: AutoRun - 1
  324. O34 - HKLM BootExecute: (autocheck autochk *)
  325. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  326. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  327. O35 - HKLM\..comfile [open] -- "%1" %*
  328. O35 - HKLM\..exefile [open] -- "%1" %*
  329. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  330. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  331. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  332. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  333. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  334. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  335.  
  336. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
  337.  
  338. [2015/07/26 09:14:51 | 000,000,000 | -HSD | C] -- C:\Config.Msi
  339. [2015/07/25 09:02:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
  340. [2015/07/07 17:49:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
  341. [2015/07/03 21:34:50 | 000,000,000 | ---D | C] -- C:\Users\Eva\Desktop\Clares Hen do
  342. [2015/07/02 20:51:20 | 000,000,000 | ---D | C] -- C:\Users\Eva\AppData\Roaming\Dropbox
  343. [2015/07/02 20:50:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Dropbox
  344. [2015/07/02 20:50:21 | 000,000,000 | ---D | C] -- C:\Users\Eva\AppData\Local\Dropbox
  345. [2015/07/02 20:50:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Dropbox
  346. [2015/07/02 19:44:53 | 000,000,000 | ---D | C] -- C:\Users\Eva\AppData\Roaming\SUPERAntiSpyware.com
  347. [2015/07/02 19:44:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
  348. [2015/07/02 19:44:14 | 000,000,000 | ---D | C] -- C:\ProgramData\SUPERAntiSpyware.com
  349. [2015/07/02 19:44:14 | 000,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware
  350. [2015/07/02 19:22:25 | 000,000,000 | ---D | C] -- C:\ProgramData\SupremoRemoteDesktop
  351.  
  352. [color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
  353.  
  354. [2015/07/28 19:00:22 | 000,000,926 | ---- | M] () -- C:\windows\tasks\DropboxUpdateTaskMachineUA.job
  355. [2015/07/28 19:00:09 | 000,000,922 | ---- | M] () -- C:\windows\tasks\DropboxUpdateTaskMachineCore.job
  356. [2015/07/28 18:34:42 | 000,000,930 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA.job
  357. [2015/07/28 18:27:19 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat
  358. [2015/07/27 03:45:00 | 000,000,530 | ---- | M] () -- C:\windows\tasks\SUPERAntiSpyware Scheduled Task b1b22c84-0be5-4cb9-8506-2f5c1a98b6a7.job
  359. [2015/07/27 02:00:00 | 000,000,530 | ---- | M] () -- C:\windows\tasks\SUPERAntiSpyware Scheduled Task c5266b00-2092-47b3-b459-ecd9eb5d0e31.job
  360. [2015/07/26 10:05:22 | 000,000,430 | -H-- | M] () -- C:\Users\Public\Documents\bootracer.ini
  361. [2015/07/26 10:05:05 | 000,180,224 | -H-- | M] () -- C:\Users\Public\Documents\bootracer.his
  362. [2015/07/26 10:04:11 | 000,000,926 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore.job
  363. [2015/07/26 10:02:39 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
  364. [2015/07/26 10:02:37 | 3345,604,608 | -HS- | M] () -- C:\hiberfil.sys
  365. [2015/07/26 10:01:53 | 000,023,040 | ---- | M] () -- C:\windows\SysNative\VfService.trf
  366. [2015/07/26 08:53:18 | 000,129,799 | ---- | M] () -- C:\Users\Eva\Desktop\Gas Meter.jpg
  367. [2015/07/25 19:36:15 | 000,002,214 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
  368. [2015/07/22 21:01:59 | 000,346,744 | ---- | M] () -- C:\windows\SysNative\FNTCACHE.DAT
  369. [2015/07/19 11:35:16 | 000,524,986 | ---- | M] () -- C:\Users\Eva\Desktop\ibiza.jpg
  370. [2015/07/05 12:45:10 | 000,038,441 | ---- | M] () -- C:\Users\Eva\Desktop\unnamed (25).jpg
  371. [2015/07/02 20:59:52 | 000,000,000 | -H-- | M] () -- C:\Users\Eva\Documents\Default.rdp
  372. [2015/07/02 19:44:22 | 000,001,831 | ---- | M] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
  373.  
  374. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  375.  
  376. [2015/07/26 08:53:16 | 000,129,799 | ---- | C] () -- C:\Users\Eva\Desktop\Gas Meter.jpg
  377. [2015/07/19 11:35:36 | 000,524,986 | ---- | C] () -- C:\Users\Eva\Desktop\ibiza.jpg
  378. [2015/07/14 22:34:13 | 000,410,739 | ---- | C] () -- C:\windows\SysNative\ApnDatabase.xml
  379. [2015/07/05 12:45:09 | 000,038,441 | ---- | C] () -- C:\Users\Eva\Desktop\unnamed (25).jpg
  380. [2015/07/02 20:59:52 | 000,000,000 | -H-- | C] () -- C:\Users\Eva\Documents\Default.rdp
  381. [2015/07/02 20:50:36 | 000,000,926 | ---- | C] () -- C:\windows\tasks\DropboxUpdateTaskMachineUA.job
  382. [2015/07/02 20:50:35 | 000,000,922 | ---- | C] () -- C:\windows\tasks\DropboxUpdateTaskMachineCore.job
  383. [2015/07/02 19:45:03 | 000,000,530 | ---- | C] () -- C:\windows\tasks\SUPERAntiSpyware Scheduled Task c5266b00-2092-47b3-b459-ecd9eb5d0e31.job
  384. [2015/07/02 19:45:02 | 000,000,530 | ---- | C] () -- C:\windows\tasks\SUPERAntiSpyware Scheduled Task b1b22c84-0be5-4cb9-8506-2f5c1a98b6a7.job
  385. [2015/07/02 19:44:22 | 000,001,831 | ---- | C] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
  386. [2015/04/22 09:44:18 | 000,107,008 | ---- | C] () -- C:\windows\SysWow64\OEMLicense.dll
  387. [2015/04/22 09:42:33 | 000,046,080 | ---- | C] () -- C:\windows\SysWow64\BWContextHandler.dll
  388. [2014/06/13 23:32:36 | 000,451,072 | ---- | C] () -- C:\windows\SysWow64\ISSRemoveSP.exe
  389. [2014/06/13 23:32:36 | 000,048,856 | ---- | C] () -- C:\windows\runSW.exe
  390. [2014/06/13 23:29:07 | 000,000,000 | -H-- | C] () -- C:\ProgramData\DP45977C.lfl
  391. [2014/06/13 23:21:59 | 000,881,814 | ---- | C] () -- C:\windows\SysWow64\PerfStringBackup.INI
  392. [2014/03/18 10:55:08 | 000,002,255 | ---- | C] () -- C:\windows\SysWow64\WimBootCompress.ini
  393. [2014/01/10 12:16:52 | 000,280,064 | ---- | C] () -- C:\windows\SysWow64\igdmd32.dll
  394. [2014/01/10 12:16:49 | 000,182,272 | ---- | C] () -- C:\windows\SysWow64\igdde32.dll
  395. [2014/01/10 12:16:48 | 000,142,848 | ---- | C] () -- C:\windows\SysWow64\igdail32.dll
  396. [2013/08/27 22:00:08 | 000,001,536 | ---- | C] () -- C:\windows\SysWow64\IusEventLog.dll
  397. [2013/08/22 16:36:43 | 000,215,943 | ---- | C] () -- C:\windows\SysWow64\dssec.dat
  398. [2013/08/22 16:36:42 | 000,000,741 | ---- | C] () -- C:\windows\SysWow64\NOISE.DAT
  399. [2013/08/22 15:46:23 | 000,067,584 | --S- | C] () -- C:\windows\bootstat.dat
  400. [2013/08/22 08:01:23 | 000,043,131 | ---- | C] () -- C:\windows\mib.bin
  401. [2013/08/22 00:55:20 | 000,364,544 | ---- | C] () -- C:\windows\SysWow64\msjetoledb40.dll
  402. [2013/08/22 00:52:39 | 000,673,088 | ---- | C] () -- C:\windows\SysWow64\mlang.dat
  403.  
  404. [color=#E56717]========== ZeroAccess Check ==========[/color]
  405.  
  406.  
  407. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  408.  
  409. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  410.  
  411. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  412.  
  413. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  414.  
  415. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  416. "" = C:\Windows\SysNative\shell32.dll -- [2015/05/07 18:50:50 | 022,292,672 | ---- | M] (Microsoft Corporation)
  417. "ThreadingModel" = Apartment
  418.  
  419. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  420. "" = %SystemRoot%\system32\shell32.dll -- [2015/05/07 17:53:12 | 019,734,960 | ---- | M] (Microsoft Corporation)
  421. "ThreadingModel" = Apartment
  422.  
  423. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  424. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2014/10/29 02:19:43 | 001,013,760 | ---- | M] (Microsoft Corporation)
  425. "ThreadingModel" = Free
  426.  
  427. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  428. "" = %systemroot%\system32\wbem\fastprox.dll -- [2014/10/29 01:59:23 | 000,786,944 | ---- | M] (Microsoft Corporation)
  429. "ThreadingModel" = Free
  430.  
  431. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  432. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2014/10/29 02:16:01 | 000,512,512 | ---- | M] (Microsoft Corporation)
  433. "ThreadingModel" = Both
  434.  
  435. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  436.  
  437. [color=#E56717]========== LOP Check ==========[/color]
  438.  
  439. [2015/02/28 22:00:50 | 000,000,000 | ---D | M] -- C:\Users\Eva\AppData\Roaming\AVG2015
  440. [2015/07/02 20:51:20 | 000,000,000 | ---D | M] -- C:\Users\Eva\AppData\Roaming\Dropbox
  441. [2015/01/13 19:02:48 | 000,000,000 | ---D | M] -- C:\Users\Eva\AppData\Roaming\Nitro
  442. [2015/02/06 21:06:57 | 000,000,000 | ---D | M] -- C:\Users\Eva\AppData\Roaming\Nitro PDF
  443. [2015/02/28 22:00:23 | 000,000,000 | ---D | M] -- C:\Users\Eva\AppData\Roaming\TuneUp Software
  444.  
  445. [color=#E56717]========== Purity Check ==========[/color]
  446.  
  447.  
  448.  
  449. [color=#E56717]========== Alternate Data Streams ==========[/color]
  450.  
  451. @Alternate Data Stream - 94 bytes -> C:\Users\Eva\OneDrive:ms-properties
  452. @Alternate Data Stream - 192 bytes -> C:\Windows:nlsPreferences
  453.  
  454. < End of report >
  455.  
  456.  
  457.  
  458.  
  459.  
  460.  
  461.  
  462.  
  463. OTL Extras logfile created on: 28/07/2015 19:25:16 - Run 1
  464. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Eva\Downloads
  465. 64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation
  466. Internet Explorer (Version = 9.11.9600.17905)
  467. Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy
  468.  
  469. 3.89 Gb Total Physical Memory | 0.84 Gb Available Physical Memory | 21.68% Memory free
  470. 6.37 Gb Paging File | 1.19 Gb Available in Paging File | 18.70% Paging File free
  471. Paging file location(s): ?:\pagefile.sys [binary data]
  472.  
  473. %SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
  474. Drive C: | 888.90 Gb Total Space | 844.11 Gb Free Space | 94.96% Space Free | Partition Type: NTFS
  475. Drive D: | 25.00 Gb Total Space | 24.92 Gb Free Space | 99.68% Space Free | Partition Type: NTFS
  476.  
  477. Computer Name: MIZZCHIEVEA | User Name: Eva | Logged in as Administrator.
  478. Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
  479. Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
  480.  
  481. [color=#E56717]========== Extra Registry (SafeList) ==========[/color]
  482.  
  483.  
  484. [color=#E56717]========== File Associations ==========[/color]
  485.  
  486. [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
  487. .html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
  488. .url[@ = InternetShortcut] -- C:\windows\SysNative\rundll32.exe (Microsoft Corporation)
  489.  
  490. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
  491. .cpl [@ = cplfile] -- C:\windows\SysWow64\control.exe (Microsoft Corporation)
  492. .html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
  493.  
  494. [color=#E56717]========== Shell Spawning ==========[/color]
  495.  
  496. [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
  497. batfile [open] -- "%1" %*
  498. cmdfile [open] -- "%1" %*
  499. comfile [open] -- "%1" %*
  500. exefile [open] -- "%1" %*
  501. helpfile [open] -- Reg Error: Key error.
  502. htmlfile [edit] -- Reg Error: Key error.
  503. htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
  504. htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
  505. htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
  506. http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
  507. https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
  508. inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
  509. InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
  510. InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
  511. piffile [open] -- "%1" %*
  512. regfile [merge] -- Reg Error: Key error.
  513. scrfile [config] -- "%1"
  514. scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
  515. scrfile [open] -- "%1" /S
  516. txtfile [edit] -- Reg Error: Key error.
  517. Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
  518. Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
  519. Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
  520. Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
  521. Folder [explore] -- Reg Error: Value error.
  522. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
  523. Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
  524. CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
  525.  
  526. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
  527. batfile [open] -- "%1" %*
  528. cmdfile [open] -- "%1" %*
  529. comfile [open] -- "%1" %*
  530. cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
  531. exefile [open] -- "%1" %*
  532. helpfile [open] -- Reg Error: Key error.
  533. htmlfile [edit] -- Reg Error: Key error.
  534. htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
  535. htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
  536. htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
  537. http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
  538. https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
  539. inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
  540. piffile [open] -- "%1" %*
  541. regfile [merge] -- Reg Error: Key error.
  542. scrfile [config] -- "%1"
  543. scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
  544. scrfile [open] -- "%1" /S
  545. txtfile [edit] -- Reg Error: Key error.
  546. Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
  547. Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
  548. Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
  549. Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
  550. Folder [explore] -- Reg Error: Value error.
  551. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
  552. Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
  553. CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.
  554.  
  555. [color=#E56717]========== Security Center Settings ==========[/color]
  556.  
  557. [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
  558. "cval" = 1
  559.  
  560. [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
  561.  
  562. [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
  563. "VistaSp1" = AC 1C AE C5 46 9F CE 01 [binary data]
  564. "AntiVirusOverride" = 0
  565. "AntiSpywareOverride" = 0
  566. "FirewallOverride" = 0
  567.  
  568. [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade]
  569. "UpgradeTime" = [binary data]
  570.  
  571. [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
  572.  
  573. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
  574.  
  575. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
  576.  
  577. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade]
  578. "UpgradeTime" = Reg Error: Unknown registry data type -- File not found
  579.  
  580. [color=#E56717]========== Firewall Settings ==========[/color]
  581.  
  582. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
  583. "EnableFirewall" = 1
  584. "DisableNotifications" = 0
  585.  
  586. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
  587. "EnableFirewall" = 1
  588. "DisableNotifications" = 0
  589.  
  590. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
  591. "EnableFirewall" = 1
  592. "DisableNotifications" = 0
  593.  
  594. [color=#E56717]========== Authorized Applications List ==========[/color]
  595.  
  596.  
  597. [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]
  598.  
  599. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
  600. "{0D4F2642-8D70-4378-BE35-195CE030E4D0}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
  601. "{0E13F3CD-BF91-4E78-A80F-36EB4C3BB74C}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
  602. "{1DFBA3A3-8DA2-41E3-A98A-BCD80CCA0D43}" = lport=138 | protocol=17 | dir=in | app=system |
  603. "{24F18F93-6AA5-4B2E-B743-7F13CE563269}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
  604. "{27812798-0D60-4319-A763-55A906D1A2A5}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
  605. "{29BE8FEC-8FAA-414C-B20B-AE52ACC9143D}" = lport=137 | protocol=17 | dir=in | app=system |
  606. "{32C04382-B94F-488E-AE3E-828834C43BF5}" = lport=2869 | protocol=6 | dir=in | app=system |
  607. "{513634B2-19C6-4075-B10C-0C14F81AD4CC}" = rport=139 | protocol=6 | dir=out | app=system |
  608. "{5626114D-F9A8-4523-BE38-332A8EA5CACD}" = lport=139 | protocol=6 | dir=in | app=system |
  609. "{5A31CC24-402D-462E-871C-B73176FD172D}" = lport=445 | protocol=6 | dir=in | app=system |
  610. "{64E97F50-155F-47BE-822A-DA22C6BDCCE0}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
  611. "{7E1C8613-CB6B-43A0-991A-2406D2BC3BA9}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
  612. "{89782F53-B52B-41D4-A78C-3BB2C18028A8}" = rport=138 | protocol=17 | dir=out | app=system |
  613. "{97FE9AA2-8DD6-4AD3-9EAD-43930EE2BAAB}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
  614. "{A1DAB7C1-4D21-427B-9610-2984CFDAE7BD}" = rport=10243 | protocol=6 | dir=out | app=system |
  615. "{B11F4818-9C11-4694-B336-AD94E030F967}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
  616. "{BB4D8D15-6FC7-4407-9517-48A1DE125E1F}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
  617. "{CFE2E8C4-BC1C-4329-9043-3E1BB60AAAA4}" = rport=137 | protocol=17 | dir=out | app=system |
  618. "{D304BD79-04FD-4441-8A95-CE1AFC97E894}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
  619. "{E0FF731C-7904-4B3B-AF82-6DBD737E4FDC}" = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe |
  620. "{E48D7FD4-37EE-4BEF-8E0C-7D6D22BF3D39}" = rport=445 | protocol=6 | dir=out | app=system |
  621. "{F3980D18-AA47-449B-A3AC-9954A0AC48CD}" = lport=10243 | protocol=6 | dir=in | app=system |
  622. "{F51FC142-1882-4660-A47A-B3E74628C9BD}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
  623. "{FA938340-813F-4BB1-947A-0F034B53897C}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
  624.  
  625. [color=#E56717]========== Vista Active Application Exception List ==========[/color]
  626.  
  627. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
  628. "{0D6C3C3F-B5C9-4306-A380-62952647E04B}" = dir=in | name=accuweather for windows 8 |
  629. "{0DE4D10B-4661-408E-9DF3-58F38D715E08}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
  630. "{1246D8C3-7606-4520-A268-A028E4829EAC}" = dir=out | name=@{microsoft.bingnews_3.0.4.336_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/brandedapptitle} |
  631. "{1376EA3C-61DC-4A8D-AEBE-4F66448D7992}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2015\avgemca.exe |
  632. "{1379FC8A-BD84-4F97-BB18-227537B9D321}" = dir=out | name=accuweather for windows 8 |
  633. "{13BB1D2A-0C01-45D7-8B09-2A975DAB0A25}" = dir=out | name=zinio |
  634. "{18FB6419-17D2-47DA-B54B-1E20EED8258F}" = dir=in | name=onenote |
  635. "{1A58A4E0-09CB-4B5B-91C3-05DF40FC3BAE}" = protocol=6 | dir=out | app=system |
  636. "{258D9A80-70ED-4F8C-8D48-B6817706775D}" = dir=out | name=@{microsoft.bingmaps_2.1.3230.2048_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingmaps/resources/appdisplayname} |
  637. "{2D4660F3-3E9C-424E-978B-CAEC2D048891}" = dir=in | name=evernote touch |
  638. "{2E0A9456-6D6C-4418-81E6-4176A996BBDD}" = dir=out | name=@{microsoft.binghealthandfitness_3.0.4.336_x64__8wekyb3d8bbwe?ms-resource://microsoft.binghealthandfitness/resources/apptitle} |
  639. "{30CB8DD5-9267-40EC-9814-35A210DC4DA5}" = dir=in | name=@{microsoft.windowsreadinglist_6.3.9654.20540_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsreadinglist/resources/apppackagename} |
  640. "{32FD296C-5299-4576-9C60-05A9288647A4}" = dir=out | name=@{microsoft.bingfinance_3.0.4.336_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/brandedapptitle} |
  641. "{365B0D0D-89BC-4002-A529-792BBD04C7D8}" = dir=out | name=mcafee® central for lenovo |
  642. "{3835392F-7D60-4A56-B44E-19B2254AA70E}" = dir=in | name=evernote touch |
  643. "{3A6EDD50-70A4-4F68-875E-B7D8E5F4F347}" = dir=out | name=@{microsoft.bingsports_3.0.4.336_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/brandedapptitle} |
  644. "{3D445F2E-CC30-4CC9-BD71-9CED22054A7E}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2015\avgmfapx.exe |
  645. "{3D8DBD46-DA1C-4AEE-9EC2-239D7A7C7BBD}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
  646. "{4282FE99-8560-4BC7-9576-5F3ED84E263F}" = dir=in | name=checkpoint.vpn |
  647. "{42A08971-40BB-4224-8B0A-DA590EFA299C}" = dir=out | name=@{microsoft.bingweather_3.0.4.336_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/brandedapptitle} |
  648. "{430BAF2E-03E7-4FAC-9767-330C88EE642A}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
  649. "{43293B53-2466-44C7-838E-FE143972234F}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2015\avgmfapx.exe |
  650. "{4368B8FE-A69A-4697-B9DD-12DDAE2CDA7A}" = dir=out | name=@{microsoft.bingtravel_3.0.4.336_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingtravel/resources/brandedapptitle} |
  651. "{44359959-2400-4FFC-B099-A9A1913CD9E9}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
  652. "{47D148A9-43EE-40EB-9A24-E1BF5FCE4A53}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2015\avgmfapx.exe |
  653. "{4856B596-A422-4520-9D0A-B380FB849C7C}" = dir=in | name=@{filmonlivetvfree.filmonlivetvfree_1.3.6.115_x64__zx03kxexxb716?ms-resource://filmonlivetvfree.filmonlivetvfree/whitelabel/app-name} |
  654. "{4995D2DA-8D8B-43FF-98C3-0F2591036427}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2015\avgdiagex.exe |
  655. "{4B8DA2B2-6B6A-4BF0-8D57-50E5DBE6CD65}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
  656. "{4C190A20-F65C-4AD7-AF39-AC7CF7457714}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2015\avgnsa.exe |
  657. "{4C8A73AE-9817-4536-A1F6-D3A96043136C}" = dir=out | name=evernote touch |
  658. "{4DD452C0-773D-4492-87FD-784FB88914AD}" = dir=out | name=@{filmonlivetvfree.filmonlivetvfree_1.3.6.115_x64__zx03kxexxb716?ms-resource://filmonlivetvfree.filmonlivetvfree/whitelabel/app-name} |
  659. "{4F617114-D929-4995-9D42-B98DD6869B33}" = dir=in | name=evernote touch |
  660. "{520E5786-E7D6-4CEB-90D2-196CC8A759BF}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
  661. "{548DCF8C-BFF2-4BA4-AA88-FBAF9AC8BCC6}" = dir=in | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} |
  662. "{560448D6-095C-4907-B046-AC7F710701A7}" = dir=in | name=sonicwall.mobileconnect |
  663. "{58674BD3-4EE4-4E94-A5F7-5CC389704C7A}" = dir=out | name=companion |
  664. "{59C7C1D7-F596-40AB-9396-0EF95AE805D3}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
  665. "{5DCA01DC-5D8A-4D3E-9783-19A20494F258}" = dir=out | name=evernote touch |
  666. "{5EC0B02C-EA6F-4715-9F6C-06163F4A7928}" = dir=in | name=skype |
  667. "{5F4632C0-D5B1-40C3-B0D9-E3A759C81B9E}" = dir=out | name=sonicwall.mobileconnect |
  668. "{662B2B67-4D48-4389-9F26-D4154EE17AE0}" = dir=out | name=@{microsoft.xboxlivegames_2.0.139.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxlivegames/resources/34150} |
  669. "{66931274-4A3B-495A-BEAC-7EB0288D0419}" = dir=out | name=onenote |
  670. "{69317320-CDA5-4D41-B3DA-6B720E17646E}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
  671. "{6EF2C9D8-71AD-4BFC-A0BD-B5AB2C090458}" = dir=out | name=@{microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} |
  672. "{73A8D14A-7B78-4397-BBD3-4FFDA3B73FC9}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
  673. "{78709859-C7F0-4FC2-9279-0D3D4F2834A8}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
  674. "{7879FA28-EAD4-46BC-B0C0-9B90A37F397A}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
  675. "{84D574BB-55A2-4457-ACFA-0381B55F2D4B}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
  676. "{859A8852-124F-449E-9D21-4E950B27568B}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
  677. "{8A43223E-625C-46D6-9EA6-F4300DC5719F}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
  678. "{8C03A407-F791-4AC5-99A7-336CA6F61C41}" = dir=out | name=@{microsoft.bingfoodanddrink_3.0.4.336_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfoodanddrink/resources/apptitlewithbranding} |
  679. "{8E293B7A-9A1D-423F-A00B-291C945B5884}" = dir=in | name=powerdvd for lenovo idea |
  680. "{938F7489-B7E2-45B3-AED7-11FED4DABD2C}" = dir=out | name=@{microsoft.zunemusic_2.6.672.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} |
  681. "{966A01F8-CB08-4F23-89B7-EB788CAC2FA9}" = dir=out | name=lenovo support |
  682. "{99225242-6C3F-4D1B-909F-EEA8BEF9E52F}" = dir=in | name=mcafee® central for lenovo |
  683. "{9AFE69D4-8EF3-4E52-8D6B-3B7F19A0E4CF}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
  684. "{9B84FC78-0E77-4675-81F2-B80610C640EF}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
  685. "{9D7F1B08-27A5-4BA9-9911-8F0501404770}" = protocol=6 | dir=in | app=c:\program files\common files\mcafee\platform\mcsvchost\mcsvhost.exe |
  686. "{9E3D57FC-7C37-4424-9352-4831E97D029D}" = dir=out | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} |
  687. "{A22B31CC-057A-4B31-AECD-8E71A3E201CD}" = protocol=17 | dir=in | app=c:\program files\common files\mcafee\platform\mcsvchost\mcsvhost.exe |
  688. "{A4B0DA6A-C6B7-4B19-A104-246EE4F92D31}" = dir=out | name=ebay |
  689. "{A975D07E-5DE4-4877-9908-6875A56FA2BE}" = dir=in | name=zinio |
  690. "{B705AE4D-DC3D-4348-9C8D-448FDE10D496}" = dir=in | app=c:\program files (x86)\lenovo\powerdvd10\powerdvd cinema\powerdvdcinema10.exe |
  691. "{BE10A41D-E519-4665-9BBB-DDEA13A4B364}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2015\avgdiagex.exe |
  692. "{C00F45C5-A16F-409F-B737-78A876D0F64C}" = protocol=6 | dir=in | app=c:\program files\common files\mcafee\platform\mcsvchost\mcsvhost.exe |
  693. "{C06815DF-2E4E-439B-93F3-54FED9DCA8A6}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
  694. "{C9B04CCC-6CCF-468A-B9A3-2C4ECDDCED16}" = dir=in | app=c:\program files (x86)\lenovo\powerdvd10\powerdvd10.exe |
  695. "{CCDE6867-E13C-4732-8F03-AC64C0E26384}" = dir=out | name=yousendit for lenovo |
  696. "{CCF3DA6F-C9B6-49CA-864D-F86E8C7F8066}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2015\avgemca.exe |
  697. "{CF007356-46E8-43E3-88D1-4639D04334FE}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
  698. "{D1D0E2E0-8A6D-4766-A8D3-E0B5DC1C8E90}" = dir=in | name=@{microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} |
  699. "{D23E2753-9120-4BBA-8DE4-B31033245830}" = dir=in | app=c:\program files (x86)\dropbox\client\dropbox.exe |
  700. "{D6980480-941A-4DF6-AB81-3734ECD3D779}" = dir=out | name=junipernetworks.junospulsevpn |
  701. "{DB59588E-ED90-4C47-A7B5-7929DD0C0BD2}" = dir=out | name=checkpoint.vpn |
  702. "{E2ACFBE2-6879-4A2C-A066-E485B6463127}" = dir=out | name=skype |
  703. "{E544FBE0-B51F-4380-975F-3E26818C4B02}" = dir=out | name=windows_ie_ac_001 |
  704. "{E89BE599-7DD4-413B-9D14-F4B8B933F7F6}" = dir=out | name=powerdvd for lenovo idea |
  705. "{EA1CCD6A-A084-434F-A4EE-0D4A09B8735F}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2015\avgnsa.exe |
  706. "{EC799E33-72BA-42D7-9127-DEFE68F9799D}" = dir=in | name=junipernetworks.junospulsevpn |
  707. "{F3B0C783-0A83-4080-8917-E4A7910050F6}" = dir=out | name=@{microsoft.windowsreadinglist_6.3.9654.20540_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsreadinglist/resources/apppackagename} |
  708. "{F50BC780-861F-48FE-ABAA-54183F1D0303}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2015\avgmfapx.exe |
  709. "{F5727ED7-0DAC-4C8E-8FF1-7CCB1CCDD955}" = dir=out | name=@{microsoft.zunevideo_2.6.441.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} |
  710. "{F64300AD-D559-4000-BD45-0997BCC8E70A}" = dir=out | name=f5.vpn.client |
  711. "{F77E5446-4378-4E99-8B7A-7061AAAEA193}" = dir=in | name=f5.vpn.client |
  712. "{FE6C42AA-C795-4057-BEF4-E70DD152010D}" = dir=out | name=camera man |
  713. "{FEB91246-2EF9-42A4-AC80-154CCA9D869B}" = dir=out | name=kindle |
  714.  
  715. [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
  716.  
  717. 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
  718. "{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
  719. "{3C28BFD4-90C7-3138-87EF-418DC16E9598}" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.51106
  720. "{409CB30E-E457-4008-9B1A-ED1B9EA21140}" = Intel(R) Rapid Storage Technology
  721. "{46F4D124-20E5-4D12-BE52-EC177A7A4B42}" = Lenovo OneKey Recovery
  722. "{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
  723. "{5AF4E09F-5C9B-3AAF-B731-544D3DC821DD}" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.51106
  724. "{70B831B7-A8EE-4C5F-8F34-F383D24B3A04}" = Nitro Pro 9
  725. "{7E3D8FA1-6092-469A-955B-68FC4A2C67CA}" = Dolby Digital Plus Home Theater
  726. "{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
  727. "{8C775E70-A791-4DA8-BCC3-6AB7136F4484}" = Visual Studio 2012 x64 Redistributables
  728. "{93F692D4-0C4D-4EED-9BFE-657C1D5959FE}" = Intel(R) Rapid Storage Technology
  729. "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Control Panel 332.33
  730. "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Graphics Driver 332.33
  731. "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience" = NVIDIA GeForce Experience 1.7
  732. "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX System Software 9.13.0927
  733. "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 9.3.16
  734. "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
  735. "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
  736. "{B5E06417-A4AC-4225-B36E-7E34C91616E7}" = Intel® Trusted Connect Service Client
  737. "{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware
  738. "35DD26BE48DAF4A9F35F969F3CB1E3E1435E661E" = Windows Driver Package - Lenovo (ACPIVPC) System (02/17/2013 9.52.0.776)
  739. "6BCA401E9CBEED970D75F55FA5320F60D11984E9" = Windows Driver Package - Lenovo (WUDFRd) LenovoVhid (07/25/2013 10.30.0.288)
  740. "CNXT_AUDIO_HDA" = Conexant HD Audio
  741. "Lenovo SmartVoice" = Lenovo Smart Voice
  742. "Lenovo VeriFace" = Lenovo VeriFace
  743. "StageLight" = StageLight
  744. "SynTPDeinstKey" = Synaptics Pointing Device Driver
  745.  
  746. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
  747. "{099218A5-A723-43DC-8DB5-6173656A1E94}" = Dropbox Update Helper
  748. "{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}" = Cisco PEAP Module
  749. "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
  750. "{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
  751. "{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
  752. "{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}" = Realtek Card Reader
  753. "{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}" = Google Update Helper
  754. "{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}" = Cisco EAP-FAST Module
  755. "{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
  756. "{6e8f74e0-43bd-4dce-8477-6ff6828acc07}" = Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106
  757. "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
  758. "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
  759. "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
  760. "{90150000-0138-0409-0000-0000000FF1CE}" = Microsoft Office
  761. "{91CC5BAE-A098-40D3-A43B-C0DC7CE263FE}" = Onekey Theater
  762. "{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}" = Visual Studio 2012 x86 Redistributables
  763. "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
  764. "{9D3D8C60-A5EF-4123-B2B9-172095903AB}" = REALTEK Bluetooth Driver
  765. "{9DAABC60-A5EF-41FF-B2B9-17329590CD5}" = REALTEK Wireless LAN Driver
  766. "{AC768037-7079-4658-AC24-2897650E0ABE}" = Energy Manager
  767. "{AF312B06-5C5C-468E-89B3-BE6DE2645722}" = Cisco LEAP Module
  768. "{B175520C-86A2-35A7-8619-86DC379688B9}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030
  769. "{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030
  770. "{C38A685C-434B-4EE4-8C4A-AEDCA6876489}" = BootRacer
  771. "{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}" = Lenovo PowerDVD10
  772. "{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}" = Lenovo EasyCamera
  773. "{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}" = User Manuals
  774. "{F0AE9B24-416F-4CAA-8519-75CABCDAC61A}" = NVIDIA PhysX
  775. "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
  776. "{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
  777. "AVG Web TuneUp" = AVG Web TuneUp
  778. "Dropbox" = Dropbox
  779. "Google Chrome" = Google Chrome
  780. "InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}" = Lenovo OneKey Recovery
  781. "InstallShield_{AC768037-7079-4658-AC24-2897650E0ABE}" = Energy Manager
  782. "InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}" = Lenovo PowerDVD10
  783. "InstallShield_{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}" = User Manuals
  784. "LenovoBrowserGuard" = Lenovo Browser Guard
  785.  
  786. [color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color]
  787.  
  788. [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
  789. "Pokki" = Host App Service
  790. "Pokki_04bb6df446330549a2cb8d67fbd1a745025b7bd1" = Lenovo Web Start
  791. "Pokki_Start_Menu" = Start Menu
  792.  
  793. [color=#E56717]========== Last 20 Event Log Errors ==========[/color]
  794.  
  795. [ Application Events ]
  796. Error - 24/07/2015 06:52:47 | Computer Name = Mizzchievea | Source = Application Hang | ID = 1002
  797. Description = The program LiveComm.exe version 17.5.9600.20911 stopped interacting
  798. with Windows and was closed. To see if more information about the problem is available,
  799. check the problem history in the Action Center control panel. Process ID: 900 Start
  800. Time: 01d0c5fe287dc054 Termination Time: 4294967295 Application Path: C:\Program
  801. Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe
  802.  
  803. Report
  804. Id: 1d43e4df-31f2-11e5-8287-90489a91735a Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe
  805.  
  806. Faulting
  807. package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1
  808.  
  809. Error - 24/07/2015 14:36:43 | Computer Name = Mizzchievea | Source = Application Hang | ID = 1002
  810. Description = The program LiveComm.exe version 17.5.9600.20911 stopped interacting
  811. with Windows and was closed. To see if more information about the problem is available,
  812. check the problem history in the Action Center control panel. Process ID: 181c Start
  813. Time: 01d0c63ef926bb6f Termination Time: 4294967295 Application Path: C:\Program
  814. Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe
  815.  
  816. Report
  817. Id: ecbb42c4-3232-11e5-8287-90489a91735a Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe
  818.  
  819. Faulting
  820. package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1
  821.  
  822. Error - 24/07/2015 14:48:42 | Computer Name = Mizzchievea | Source = Application Hang | ID = 1002
  823. Description = The program LiveComm.exe version 17.5.9600.20911 stopped interacting
  824. with Windows and was closed. To see if more information about the problem is available,
  825. check the problem history in the Action Center control panel. Process ID: 146c Start
  826. Time: 01d0c640a377f164 Termination Time: 4294967295 Application Path: C:\Program
  827. Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe
  828.  
  829. Report
  830. Id: 99f8516e-3234-11e5-8287-90489a91735a Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe
  831.  
  832. Faulting
  833. package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1
  834.  
  835. Error - 24/07/2015 14:54:45 | Computer Name = Mizzchievea | Source = Application Hang | ID = 1002
  836. Description = The program LiveComm.exe version 17.5.9600.20911 stopped interacting
  837. with Windows and was closed. To see if more information about the problem is available,
  838. check the problem history in the Action Center control panel. Process ID: 1a80 Start
  839. Time: 01d0c6417e5cc072 Termination Time: 4294967295 Application Path: C:\Program
  840. Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe
  841.  
  842. Report
  843. Id: 71e38940-3235-11e5-8287-90489a91735a Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe
  844.  
  845. Faulting
  846. package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1
  847.  
  848. Error - 25/07/2015 03:37:47 | Computer Name = Mizzchievea | Source = Application Hang | ID = 1002
  849. Description = The program LiveComm.exe version 17.5.9600.20911 stopped interacting
  850. with Windows and was closed. To see if more information about the problem is available,
  851. check the problem history in the Action Center control panel. Process ID: 1e24 Start
  852. Time: 01d0c64250770a87 Termination Time: 4294967295 Application Path: C:\Program
  853. Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe
  854.  
  855. Report
  856. Id: 0939b3fd-32a0-11e5-8287-90489a91735a Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe
  857.  
  858. Faulting
  859. package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1
  860.  
  861. Error - 25/07/2015 03:43:01 | Computer Name = Mizzchievea | Source = Application Hang | ID = 1002
  862. Description = The program LiveComm.exe version 17.5.9600.20911 stopped interacting
  863. with Windows and was closed. To see if more information about the problem is available,
  864. check the problem history in the Action Center control panel. Process ID: 2214 Start
  865. Time: 01d0c6acd080b606 Termination Time: 4294967295 Application Path: C:\Program
  866. Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe
  867.  
  868. Report
  869. Id: c41f4a5b-32a0-11e5-8287-90489a91735a Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe
  870.  
  871. Faulting
  872. package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1
  873.  
  874. Error - 25/07/2015 03:55:50 | Computer Name = Mizzchievea | Source = Application Hang | ID = 1002
  875. Description = The program LiveComm.exe version 17.5.9600.20911 stopped interacting
  876. with Windows and was closed. To see if more information about the problem is available,
  877. check the problem history in the Action Center control panel. Process ID: 2224 Start
  878. Time: 01d0c6ae99962990 Termination Time: 4294967295 Application Path: C:\Program
  879. Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe
  880.  
  881. Report
  882. Id: 8d2fa47b-32a2-11e5-8287-90489a91735a Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe
  883.  
  884. Faulting
  885. package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1
  886.  
  887. Error - 25/07/2015 04:20:20 | Computer Name = Mizzchievea | Source = Application Hang | ID = 1002
  888. Description = The program LiveComm.exe version 17.5.9600.20911 stopped interacting
  889. with Windows and was closed. To see if more information about the problem is available,
  890. check the problem history in the Action Center control panel. Process ID: 20e4 Start
  891. Time: 01d0c6b2066c5c06 Termination Time: 4294967295 Application Path: C:\Program
  892. Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe
  893.  
  894. Report
  895. Id: fa0440f8-32a5-11e5-8287-90489a91735a Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe
  896.  
  897. Faulting
  898. package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1
  899.  
  900. Error - 25/07/2015 04:25:46 | Computer Name = Mizzchievea | Source = Application Hang | ID = 1002
  901. Description = The program LiveComm.exe version 17.5.9600.20911 stopped interacting
  902. with Windows and was closed. To see if more information about the problem is available,
  903. check the problem history in the Action Center control panel. Process ID: 220c Start
  904. Time: 01d0c6b2ca77f5e9 Termination Time: 4294967295 Application Path: C:\Program
  905. Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe
  906.  
  907. Report
  908. Id: be14bc66-32a6-11e5-8287-90489a91735a Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe
  909.  
  910. Faulting
  911. package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1
  912.  
  913. Error - 25/07/2015 07:28:21 | Computer Name = Mizzchievea | Source = Application Hang | ID = 1002
  914. Description = The program LiveComm.exe version 17.5.9600.20911 stopped interacting
  915. with Windows and was closed. To see if more information about the problem is available,
  916. check the problem history in the Action Center control panel. Process ID: 2214 Start
  917. Time: 01d0c6cc4cc6c96c Termination Time: 4294967295 Application Path: C:\Program
  918. Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe
  919.  
  920. Report
  921. Id: 3fef70f9-32c0-11e5-8287-90489a91735a Faulting package full name: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe
  922.  
  923. Faulting
  924. package-relative application ID: ppleae38af2e007f4358a809ac99a64a67c1
  925.  
  926. [ System Events ]
  927. Error - 05/07/2015 05:58:19 | Computer Name = Mizzchievea | Source = Service Control Manager | ID = 7024
  928. Description = The AVGIDSAgent service terminated with the following service-specific
  929. error: %%3758213661
  930.  
  931. Error - 11/07/2015 17:03:51 | Computer Name = Mizzchievea | Source = EventLog | ID = 6008
  932. Description = The previous system shutdown at 21:59:36 on ?11/?07/?2015 was unexpected.
  933.  
  934. Error - 11/07/2015 17:03:04 | Computer Name = Mizzchievea | Source = Microsoft-Windows-HAL | ID = 13
  935. Description = The system watchdog timer was triggered.
  936.  
  937. Error - 11/07/2015 20:19:51 | Computer Name = Mizzchievea | Source = EventLog | ID = 6008
  938. Description = The previous system shutdown at 00:21:45 on ?12/?07/?2015 was unexpected.
  939.  
  940. Error - 13/07/2015 13:09:11 | Computer Name = Mizzchievea | Source = EventLog | ID = 6008
  941. Description = The previous system shutdown at 22:49:35 on ?12/?07/?2015 was unexpected.
  942.  
  943. Error - 13/07/2015 13:08:29 | Computer Name = Mizzchievea | Source = Microsoft-Windows-HAL | ID = 13
  944. Description = The system watchdog timer was triggered.
  945.  
  946. Error - 13/07/2015 13:58:48 | Computer Name = Mizzchievea | Source = EventLog | ID = 6008
  947. Description = The previous system shutdown at 18:49:14 on ?13/?07/?2015 was unexpected.
  948.  
  949. Error - 13/07/2015 13:58:04 | Computer Name = Mizzchievea | Source = Microsoft-Windows-HAL | ID = 13
  950. Description = The system watchdog timer was triggered.
  951.  
  952. Error - 14/07/2015 17:15:46 | Computer Name = Mizzchievea | Source = Microsoft-Windows-Kernel-Boot | ID = 29
  953. Description =
  954.  
  955. Error - 14/07/2015 17:16:31 | Computer Name = Mizzchievea | Source = EventLog | ID = 6008
  956. Description = The previous system shutdown at 07:26:24 on ?14/?07/?2015 was unexpected.
  957.  
  958.  
  959. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement