Additional scan result of Farbar Recovery Scan Tool (x64) Version:25-12-2015 Ran by [removed] (2015-12-25 22:31:28) Running from C:\Users\[removed]\Downloads Windows 10 Home (X64) (2015-12-09 13:52:14) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-3915831028-228235209-3607861613-500 - Administrator - Disabled) Christian (S-1-5-21-3915831028-228235209-3607861613-1001 - Administrator - Enabled) => C:\Users\Christian DefaultAccount (S-1-5-21-3915831028-228235209-3607861613-503 - Limited - Disabled) Guest (S-1-5-21-3915831028-228235209-3607861613-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-3915831028-228235209-3607861613-1003 - Limited - Enabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} FW: avast! Antivirus (Enabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 7-Zip 15.12 (x64 edition) (HKLM\...\{23170F69-40C1-2702-1512-000001000000}) (Version: 15.12.00.0 - Igor Pavlov) Adblock Plus for IE (32-bit and 64-bit) (HKLM\...\{77588F59-3C58-4675-8EEE-998E5BC33CF4}) (Version: 1.4 - Eyeo GmbH) Adobe After Effects CS6 (HKLM-x32\...\{4817D846-700B-474E-A31B-80892B3E92E3}) (Version: 11 - Adobe Systems Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 20.0.0.204 - Adobe Systems Incorporated) Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated) Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated) Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.1.171 - Adobe Systems, Inc.) Audacity 2.1.0 (HKLM-x32\...\Audacity_is1) (Version: 2.1.0 - Audacity Team) Avast Internet Security (HKLM-x32\...\Avast) (Version: 11.1.2245 - AVAST Software) avast! SecureLine (HKLM\...\{2CD3C92F-EDC5-4B02-9B0A-9C1D37C58EF5}_is1) (Version: 1.0.139.2 - AVAST Software) BitTorrent (HKU\S-1-5-21-3915831028-228235209-3607861613-1001\...\BitTorrent) (Version: 7.9.5.41373 - BitTorrent Inc.) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) BYOND (HKLM-x32\...\BYOND) (Version: 507.1286 - BYOND) Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.) Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.) Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.) Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve) CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.8.4420 - CyberLink Corp.) Cyberlink PhotoDirector (HKLM-x32\...\InstallShield_{5A454EC5-217A-42a5-8CE1-2DDEC4E70E01}) (Version: 5.0.3.5715 - CyberLink Corp.) Cyberlink PhotoDirector (Version: 5.0.3.5715 - CyberLink Corp.) Hidden CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.8.4316 - CyberLink Corp.) CyberLink PowerBackup 2.6 (HKLM-x32\...\InstallShield_{ADD5DB49-72CF-11D8-9D75-000129760D75}) (Version: 2.6.1.0903 - CyberLink Corp.) CyberLink PowerDirector 12 (HKLM-x32\...\InstallShield_{E1646825-D391-42A0-93AA-27FA810DA093}) (Version: 12.0.2.3324 - CyberLink Corp.) CyberLink PowerDirector 12 (Version: 12.0.2.3324 - CyberLink Corp.) Hidden CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 5.0.5.4523 - CyberLink Corp.) DisableMSDefender (Version: 1.0.0 - Hewlett-Packard Company) Hidden Discord (HKU\S-1-5-21-3915831028-228235209-3607861613-1001\...\Discord) (Version: 0.0.283 - Hammer & Chisel, Inc.) Dropbox (HKU\S-1-5-21-3915831028-228235209-3607861613-1001\...\Dropbox) (Version: 3.12.5 - Dropbox, Inc.) Dropbox 25 GB (HKLM-x32\...\{597A58EC-42D6-4940-8739-FB94491B013C}) (Version: 0.9.0 - Dropbox, Inc.) Energy Star (HKLM\...\{465CA2B6-98AF-4E77-BE22-A908C34BB9EC}) (Version: 1.0.9 - Hewlett-Packard Company) Evolve (HKLM\...\{670B1B49-9FD3-4827-9B41-471EFF580AA8}) (Version: 1.8.18 - Echobit, LLC) GIF Viewer (HKLM-x32\...\GIF Viewer) (Version: - ) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 47.0.2526.106 - Google Inc.) Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden Gyazo 3.1.6 (HKLM-x32\...\{6DB8C365-E719-4BA5-9594-10DFC244D3FD}_is1) (Version: - Nota Inc.) Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden HP Documentation (HKLM-x32\...\{EA7EA537-8F93-42A2-9384-66E7F049E6B0}) (Version: 1.4.0.0 - Hewlett-Packard) HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.7745.4851 - Hewlett-Packard) HP SimplePass (HKLM-x32\...\InstallShield_{314FAD12-F785-4471-BCE8-AB506642B9A1}) (Version: 8.01.11 - Hewlett-Packard) HP Support Solutions Framework (HKLM-x32\...\{55065080-504F-43BB-BE00-36B80D7D39A5}) (Version: 12.0.30.219 - Hewlett-Packard Company) HP System Event Utility (HKLM-x32\...\{8B4EE87E-6D40-4C91-B5E8-0DC77DC412F1}) (Version: 1.4.1 - Hewlett-Packard Company) HP Wireless Button Driver (HKLM-x32\...\{30B2D1D8-0A07-4B71-9553-0710C5D31E35}) (Version: 1.1.2.1 - Hewlett-Packard Company) Inst5675 (Version: 8.01.11 - Softex Inc.) Hidden Inst5676 (Version: 8.01.11 - Softex Inc.) Hidden Instant Eyedropper 1.75 (HKLM-x32\...\Instant Eyedropper_is1) (Version: - ) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4276 - Intel Corporation) Intel(R) Sideband Fabric Device Driver (HKLM-x32\...\C5A8BC6E-723A-4C0F-96E1-C426D1A4BCA9) (Version: 1.70.305.16316 - Intel Corporation) Intel(R) Trusted Execution Engine (HKLM\...\{176E2755-0A17-42C6-88E2-192AB2131278}) (Version: 1.0.0.1064 - Intel Corporation) Java 8 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218065F0}) (Version: 8.0.650.17 - Oracle Corporation) Java 8 Update 66 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218066F0}) (Version: 8.0.660.17 - Oracle Corporation) join.me (HKU\S-1-5-21-3915831028-228235209-3607861613-1001\...\JoinMe) (Version: 1.20.0.503 - LogMeIn, Inc.) Logitech Unifying Software 2.50 (HKLM\...\Logitech Unifying) (Version: 2.50.25 - Logitech) LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.410 - LogMeIn, Inc.) LogMeIn Hamachi (x32 Version: 2.2.0.410 - LogMeIn, Inc.) Hidden Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation) Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation) Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang) Mozilla Firefox 43.0.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 43.0.1 (x86 en-US)) (Version: 43.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 42.0.0.5780 - Mozilla) Nexon Launcher (HKLM-x32\...\Nexon Nexon Launcher) (Version: 1.3.0 - Nexon) Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.8.1 - Notepad++ Team) paint.net (HKLM\...\{DF3A46D9-67B3-44B2-9D01-25C8BA772C8A}) (Version: 4.0.6 - dotPDN LLC) PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.9600.29082 - Realtek Semiconductor Corp.) Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 8.35.716.2014 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.) REALTEK Wireless LAN Driver (HKLM-x32\...\{A5107464-AA9B-4177-8129-5FF2F42DD322}) (Version: 1.0.0.38 - REALTEK Semiconductor Corp.) SafeZone Stable 1.46.1990.139 (x32 Version: 1.46.1990.139 - Avast Software) Hidden Skype™ 7.13 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.13.101 - Skype Technologies S.A.) Starbound (HKLM-x32\...\Steam App 211820) (Version: - ) Starbound Composer (HKLM-x32\...\{080132B2-6551-43ED-850A-560F649E55CE}_is1) (Version: 0.8.6 - Lourens Elzinga) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) SWF Opener (HKLM-x32\...\{01386D1F-ADE7-43B4-A4E9-312FC5BC726F}_is1) (Version: 1.3 - UnH Solutions) SWFPlayer 2.6.2.0 (HKLM-x32\...\SWFPlayer_is1) (Version: 2.6.2.0 - Michael Faust, Alpha Interactive) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.12.95 - Synaptics Incorporated) System Requirements Lab Detection (HKLM-x32\...\{8CD57582-4E28-4F7F-AEA6-0D860571F5DB}) (Version: 6.1.4.0 - Husdawg, LLC) Tablet Driver V8.01 (HKLM-x32\...\TabletDriver) (Version: - ) Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version: - Valve) TeamSpeak 3 Client (HKU\S-1-5-21-3915831028-228235209-3607861613-1001\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH) TEdit 3 (HKLM-x32\...\{56642CE5-5D04-4A3D-B774-754499672E39}) (Version: 3.5.14228.27 - BinaryConstruct) Terraria (HKLM-x32\...\Steam App 105600) (Version: - Re-Logic) Trove (HKLM-x32\...\Steam App 304050) (Version: - Trion Worlds) UninstallTabletDeviceDriver (HKLM\...\{39089688-F09E-4DAD-8C80-647D3DF68630}_is1) (Version: 10.3 - Huion Animation) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN) Windows Driver Package - Graphics Tablet (WinUsb) USBDevice (04/10/2014 8.33.30.0) (HKLM\...\142118DF51345EA02D2B1583E102C8FB95FD6D52) (Version: 04/10/2014 8.33.30.0 - Graphics Tablet) WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH) WinSCP 5.7.5 (HKLM-x32\...\winscp3_is1) (Version: 5.7.5 - Martin Prikryl) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-3915831028-228235209-3607861613-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Christian\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3915831028-228235209-3607861613-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation) CustomCLSID: HKU\S-1-5-21-3915831028-228235209-3607861613-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Christian\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3915831028-228235209-3607861613-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Christian\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3915831028-228235209-3607861613-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Christian\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3915831028-228235209-3607861613-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Christian\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3915831028-228235209-3607861613-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Christian\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3915831028-228235209-3607861613-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Christian\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3915831028-228235209-3607861613-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Christian\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3915831028-228235209-3607861613-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Christian\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3915831028-228235209-3607861613-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Christian\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3915831028-228235209-3607861613-1001_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Christian\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {01C06B1D-EAA2-42D9-8751-B077FA8A2819} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION Task: {03FA71AF-DB57-47E6-9E2D-3082809650EC} - System32\Tasks\[removed] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04] (Adobe Systems Incorporated) Task: {0B78DBA0-4F6A-4913-83BF-7C5F9A6559FC} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION Task: {0B8D1DF8-B568-4878-B5AD-A7D32956C172} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2015-09-27] (Hewlett-Packard) Task: {119806D5-FEA7-4655-95AE-25D9B20422D3} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION Task: {16C63084-ADF3-4F17-A543-62A74FE26DD3} - System32\Tasks\GyazoUpdateTaskMachineDaily => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2015-08-19] () Task: {2D800B59-1946-4E4D-95B7-07D44C60DBBA} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3915831028-228235209-3607861613-1001UA => C:\Users\Christian\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-17] (Dropbox, Inc.) Task: {370F80D5-AA62-4248-958D-906103F8757F} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION Task: {5CF13446-A87C-42FA-90EB-0D1B9EF3F7BB} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION Task: {5D270FB2-DF78-48F2-95DB-49DAFC1524F9} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION Task: {5DB73794-E271-4EE8-AC1F-848F68644E0F} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION Task: {63DE4ABC-5433-43A8-950F-C71F83807AE8} - System32\Tasks\avast! SL Update => C:\Program Files\AVAST Software\SecureLine\SLUpdate.exe [2014-10-15] (AVAST Software) Task: {681266FA-263A-495D-BD42-FF4D97AC1729} - System32\Tasks\McAfee Remediation (Prepare) => C:\Program Files\Common Files\AV\McAfee Anti-Virus And Anti-Spyware\upgrade.exe [2015-06-01] (McAfee, Inc.) Task: {689799A0-ABBB-4722-A78A-34C0467C6D86} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION Task: {6EB3947D-F59F-4B7B-ACC9-7DDB1580B15D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-22] (Google Inc.) Task: {7641957C-408D-4E0B-B4AA-9950F0540C15} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3915831028-228235209-3607861613-1001Core => C:\Users\Christian\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-17] (Dropbox, Inc.) Task: {86DA2D7E-4853-4092-BEBD-B9F40193A196} - System32\Tasks\{F027A471-0E64-41F4-8515-1BC8813F0806} => pcalua.exe -a "E:\Windows Driver\Driver for 1060PRO\Pen Tablet Setup\SETUP.EXE" -d "E:\Windows Driver\Driver for 1060PRO\Pen Tablet Setup" Task: {8BEA43CE-90AC-4B9B-8132-C2EAC3E53FBE} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION Task: {8F328C52-D225-41C7-B3EB-C3CEE5EB983F} - System32\Tasks\HPCeeScheduleForChristian => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe Task: {9E42A2E6-FC7F-4990-A7B4-B62F09B41B8C} - System32\Tasks\YCMServiceAgent => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [2014-09-22] (CyberLink Corp.) Task: {9F9674E0-E630-4387-8C6D-14416CD6D0A6} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION Task: {B4A44ED1-D59C-46D6-B7A9-DB20AE940CE0} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION Task: {B7E21346-62FA-4F05-AD4B-073FCDE6DAFF} - System32\Tasks\SafeZone scheduled Autoupdate 1448244999 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2015-12-01] (Avast Software) Task: {C83914E0-6D67-4201-A1BD-30BE9BB4F4DE} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-22] (Google Inc.) Task: {CEC7D25B-5CA8-409D-BAE2-35373705253B} - System32\Tasks\GyazoUpdateTaskMachine => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2015-08-19] () Task: {E48D4F7F-D040-41BC-B3A9-3FD648459389} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-12-14] (Microsoft Corporation) Task: {EE889C20-A1F3-43B7-BCF0-0DB38486E1FA} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-12-16] (AVAST Software) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-3915831028-228235209-3607861613-1001Core.job => C:\Users\Christian\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-3915831028-228235209-3607861613-1001UA.job => C:\Users\Christian\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\HPCeeScheduleForChristian.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe ==================== Shortcuts ============================= (The entries could be listed to be restored or removed.) ==================== Loaded Modules (Whitelisted) ============== 2015-10-30 00:18 - 2015-10-30 00:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll 2014-03-28 14:31 - 2014-03-28 14:31 - 02110464 _____ () C:\Program Files\Hewlett-Packard\SimplePass\autheng.dll 2014-03-28 14:27 - 2014-03-28 14:27 - 00021504 _____ () C:\Program Files\Hewlett-Packard\SimplePass\cryptodll.dll 2014-03-28 14:27 - 2014-03-28 14:27 - 00035328 _____ () C:\Program Files\Hewlett-Packard\SimplePass\ssplogon.dll 2014-03-28 14:27 - 2014-03-28 14:27 - 00055296 _____ () C:\Program Files\Hewlett-Packard\SimplePass\RandomPass.dll 2014-03-28 14:48 - 2014-03-28 14:48 - 00367504 _____ () C:\Program Files\Hewlett-Packard\SimplePass\mstrpwd.dll 2014-03-28 14:48 - 2014-03-28 14:48 - 00712080 _____ () C:\Program Files\Hewlett-Packard\SimplePass\GraphicalPwd.dll 2015-04-11 23:37 - 2014-10-15 15:02 - 00435064 _____ () C:\Program Files\AVAST Software\SecureLine\VpnSvc.exe 2015-12-09 06:49 - 2015-12-09 06:49 - 02653816 _____ () C:\WINDOWS\system32\CoreUIComponents.dll 2015-12-09 06:49 - 2015-12-09 06:49 - 02653816 _____ () C:\WINDOWS\System32\CoreUIComponents.dll 2015-04-15 13:13 - 2015-04-15 13:13 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll 2015-12-17 22:17 - 2015-12-06 21:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll 2015-12-17 22:17 - 2015-12-06 21:00 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll 2015-12-17 22:17 - 2015-12-06 21:00 - 00674816 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\MtcUvc.dll 2015-12-17 22:17 - 2015-12-06 20:37 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2015-12-17 22:17 - 2015-12-06 20:33 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2015-12-17 22:17 - 2015-12-06 20:34 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2015-12-17 22:17 - 2015-12-06 20:36 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll 2015-12-17 05:44 - 2015-12-17 05:44 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.15004.0_x86__8wekyb3d8bbwe\SkypeHost.exe 2015-12-09 15:49 - 2015-12-09 15:49 - 00012800 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1208.10480.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 2015-12-09 15:49 - 2015-12-09 15:49 - 11542016 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1208.10480.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll 2015-11-19 17:42 - 2015-11-19 17:43 - 00258560 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1208.10480.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll 2015-04-26 14:36 - 2007-10-17 15:22 - 00352256 _____ () C:\Program Files (x86)\InstantEyedropper\InstantEyedropper.exe 2015-12-18 22:55 - 2015-12-16 02:18 - 02733733 _____ () C:\Users\Christian\Desktop\SB Tools\Starcheat Shit\starcheat.exe 2015-12-18 22:55 - 2015-02-24 15:44 - 00052224 _____ () C:\Users\Christian\Desktop\SB Tools\Starcheat Shit\_socket.pyd 2015-12-18 22:55 - 2015-07-17 06:35 - 04750848 _____ () C:\Users\Christian\Desktop\SB Tools\Starcheat Shit\PyQt5.QtWidgets.pyd 2015-12-18 22:55 - 2015-07-17 06:24 - 00095744 _____ () C:\Users\Christian\Desktop\SB Tools\Starcheat Shit\sip.pyd 2015-12-18 22:55 - 2015-07-17 06:28 - 02250752 _____ () C:\Users\Christian\Desktop\SB Tools\Starcheat Shit\PyQt5.QtCore.pyd 2015-12-18 22:55 - 2015-07-17 06:30 - 02412032 _____ () C:\Users\Christian\Desktop\SB Tools\Starcheat Shit\PyQt5.QtGui.pyd 2015-12-18 22:55 - 2015-02-24 15:44 - 00058880 _____ () C:\Users\Christian\Desktop\SB Tools\Starcheat Shit\_sqlite3.pyd 2015-12-18 22:55 - 2015-02-24 15:42 - 00628224 _____ () C:\Users\Christian\Desktop\SB Tools\Starcheat Shit\sqlite3.dll 2015-12-18 22:55 - 2015-02-24 15:44 - 01149952 _____ () C:\Users\Christian\Desktop\SB Tools\Starcheat Shit\_hashlib.pyd 2015-12-18 22:55 - 2015-12-16 02:18 - 01192960 _____ () C:\Users\Christian\Desktop\SB Tools\Starcheat Shit\PIL._imaging.pyd 2015-12-18 22:55 - 2015-02-24 15:44 - 00062976 _____ () C:\Users\Christian\Desktop\SB Tools\Starcheat Shit\_bz2.pyd 2015-12-18 22:55 - 2015-02-24 15:44 - 01738240 _____ () C:\Users\Christian\Desktop\SB Tools\Starcheat Shit\_ssl.pyd 2015-12-18 22:55 - 2015-02-24 15:44 - 00762880 _____ () C:\Users\Christian\Desktop\SB Tools\Starcheat Shit\unicodedata.pyd 2015-12-18 22:55 - 2015-02-24 15:44 - 00242688 _____ () C:\Users\Christian\Desktop\SB Tools\Starcheat Shit\_decimal.pyd 2015-08-02 16:01 - 2015-08-02 16:01 - 01068616 _____ () C:\Program Files\paint.net\PaintDotNet.SystemLayer.Native.x64.dll 2015-10-30 00:18 - 2015-10-30 00:18 - 02100064 _____ () C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe 2014-03-28 14:36 - 2014-03-28 14:36 - 00065024 _____ () C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe 2015-12-16 21:23 - 2015-12-16 21:23 - 00103888 _____ () C:\Program Files\AVAST Software\Avast\log.dll 2015-12-16 21:23 - 2015-12-16 21:23 - 00125512 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll 2015-12-23 12:50 - 2015-12-23 12:50 - 02806272 _____ () C:\Program Files\AVAST Software\Avast\defs\15122302\algo.dll 2015-12-16 21:23 - 2015-12-16 21:23 - 00469008 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll 2015-12-24 17:01 - 2015-12-24 17:01 - 02806272 _____ () C:\Program Files\AVAST Software\Avast\defs\15122405\algo.dll 2015-12-25 06:20 - 2015-12-25 06:20 - 02806272 _____ () C:\Program Files\AVAST Software\Avast\defs\15122505\algo.dll 2015-12-16 21:23 - 2015-12-16 21:23 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2015-12-17 05:44 - 2015-12-17 05:44 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.15004.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll 2015-12-17 05:44 - 2015-12-17 05:44 - 21845504 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.15004.0_x86__8wekyb3d8bbwe\SkyWrap.dll 2015-04-22 19:57 - 2015-11-10 12:55 - 00778752 _____ () C:\Program Files (x86)\Steam\SDL2.dll 2015-04-22 19:57 - 2015-07-03 09:12 - 04962816 _____ () C:\Program Files (x86)\Steam\v8.dll 2015-04-22 19:57 - 2015-12-14 13:01 - 02547280 _____ () C:\Program Files (x86)\Steam\video.dll 2015-04-22 19:57 - 2015-09-23 17:33 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll 2015-04-22 19:57 - 2015-09-23 17:33 - 02549248 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll 2015-04-22 19:57 - 2015-09-23 17:33 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll 2015-04-22 19:57 - 2015-09-23 17:33 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll 2015-04-22 19:57 - 2015-09-23 17:33 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll 2015-04-22 19:57 - 2015-07-03 09:12 - 01556992 _____ () C:\Program Files (x86)\Steam\icui18n.dll 2015-04-22 19:57 - 2015-07-03 09:12 - 01187840 _____ () C:\Program Files (x86)\Steam\icuuc.dll 2015-04-22 19:57 - 2015-12-14 13:01 - 00804432 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL 2015-07-22 19:28 - 2015-11-03 15:00 - 00201728 _____ () C:\Program Files (x86)\Steam\bin\openvr_api.dll 2015-04-22 19:57 - 2015-11-16 17:31 - 47846176 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll 2015-04-22 19:57 - 2015-09-24 16:56 - 00119208 _____ () C:\Program Files (x86)\Steam\winh264.dll 2015-12-16 14:28 - 2015-12-10 20:54 - 01583432 _____ () C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.106\libglesv2.dll 2015-12-16 14:28 - 2015-12-10 20:54 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.106\libegl.dll 2015-09-02 17:18 - 2015-09-02 17:18 - 00119822 _____ () C:\Program Files (x86)\Steam\steamapps\common\Starbound\win32\launcher\libgcc_s_dw2-1.dll 2015-09-02 17:13 - 2015-09-02 17:18 - 01026062 _____ () C:\Program Files (x86)\Steam\steamapps\common\Starbound\win32\launcher\libstdc++-6.dll 2015-09-02 17:13 - 2015-09-02 17:18 - 02177557 _____ () C:\Program Files (x86)\Steam\steamapps\common\Starbound\win32\launcher\icuuc54.dll 2015-09-02 17:13 - 2015-09-02 17:18 - 03920542 _____ () C:\Program Files (x86)\Steam\steamapps\common\Starbound\win32\launcher\icuin54.dll 2015-09-02 17:13 - 2015-09-02 17:22 - 25382664 _____ () C:\Program Files (x86)\Steam\steamapps\common\Starbound\win32\launcher\icudt54.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2013-08-22 06:25 - 2013-08-22 06:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-3915831028-228235209-3607861613-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Hewlett-Packard Backgrounds\backgroundDefault.jpg DNS Servers: 75.75.76.76 - 75.75.75.75 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) MSCONFIG\Services: RichVideo64 => 2 HKLM\...\StartupApproved\Run: => "LogMeIn GUI" HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0" HKLM\...\StartupApproved\Run32: => "LogMeIn Hamachi Ui" HKLM\...\StartupApproved\Run32: => "SwitchBoard" HKU\S-1-5-21-3915831028-228235209-3607861613-1001\...\StartupApproved\StartupFolder: => "PdaNet Desktop.lnk" HKU\S-1-5-21-3915831028-228235209-3607861613-1001\...\StartupApproved\StartupFolder: => "Send to OneNote.lnk" HKU\S-1-5-21-3915831028-228235209-3607861613-1001\...\StartupApproved\Run: => "EvolveClient" HKU\S-1-5-21-3915831028-228235209-3607861613-1001\...\StartupApproved\Run: => "GoogleChromeAutoLaunch_F95133299531DA24C7CB703BC8432DCE" HKU\S-1-5-21-3915831028-228235209-3607861613-1001\...\StartupApproved\Run: => "Dropbox Update" HKU\S-1-5-21-3915831028-228235209-3607861613-1001\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-3915831028-228235209-3607861613-1001\...\StartupApproved\Run: => "Discord" ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [{99F6F792-5D75-4575-8A29-D3E0E76D30D6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{07BCEC03-FFAB-4BB5-A52C-F05483DF6606}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{6DEACD56-EBCF-473B-86E8-5BE68D0ED3EB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\RollerCoaster Tycoon Deluxe\RCT.EXE FirewallRules: [{BC6CBEF4-F961-4F84-B53B-C8A098AF38E0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\RollerCoaster Tycoon Deluxe\RCT.EXE FirewallRules: [{B1E8F556-BEE8-434A-B6C1-322C46E5AE07}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe FirewallRules: [{C8857884-5FC4-4EEB-842B-324297C821A4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe FirewallRules: [{DB14DB32-E45A-4CC9-B73B-9F0757223302}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{40D2D459-8DC8-40F0-8E32-F1A15D26A540}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [UDP Query User{85AF70AD-8307-402C-B879-19276C0DE062}C:\program files (x86)\steam\steamapps\common\starbound\win32\starbound_server.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\starbound\win32\starbound_server.exe FirewallRules: [TCP Query User{D523E5E4-7055-43DF-ACBC-EBAC26B90AA8}C:\program files (x86)\steam\steamapps\common\starbound\win32\starbound_server.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\starbound\win32\starbound_server.exe FirewallRules: [UDP Query User{D43F9E0D-E37D-4917-A055-E1023CD63457}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe FirewallRules: [TCP Query User{B519FCDE-9E89-49DF-8619-15E1B5877E8A}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe FirewallRules: [{F8E034B1-FD31-4198-8106-D2F01993BF19}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPDeviceDetection3.exe FirewallRules: [UDP Query User{AE2C2826-6714-4C2A-8739-EBFBF1B56420}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [TCP Query User{8E303C50-7929-43DD-A75A-7F3BEC31304E}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [{18459C2B-1EA1-4DE0-ADE6-549C6BA282D8}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{A928F104-4AAE-4414-9D32-6905CB6B0017}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{7BB1E938-5911-4365-93CC-C9BA32D28A54}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{549C8082-369D-48F2-A42D-EC47418A1B50}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{062E3059-B23E-44DB-869E-11BFFD2237C0}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12.exe FirewallRules: [{82CA9E3A-63FB-484A-B5FB-7E75880B1732}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe FirewallRules: [{932C34DC-B362-4E1B-BB10-0935AF458B19}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe FirewallRules: [{FE42134A-507A-48E6-A85A-FEF6A726E294}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe FirewallRules: [{44DEB9ED-0F0E-45C1-BFFC-9A553290903E}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12ML.exe FirewallRules: [{A8A33981-DA61-4790-97A4-763D14366B5B}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Movie\PowerDVD.exe FirewallRules: [{D25ECBA5-5694-4E17-A01B-17CDE2D8923A}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe FirewallRules: [{6A7198D3-9CE1-4882-BBF2-7AE01F58EBAC}] => (Allow) C:\Program Files\CyberLink\PowerDirector12\PDR10.EXE FirewallRules: [{423F066F-3653-4D84-907D-7FCFDCAD111E}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{AFF71F4B-A68F-4F6A-9AF6-DA31804D2A12}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{4D2539B5-62BC-4484-833E-CDE15B35547B}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{A0845B99-AEBC-4245-B640-977374D8F414}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{88965F4E-D4C2-4DCE-A0F2-40E7C76F4FBC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe FirewallRules: [{B1368A6A-0480-40CD-80F4-5648A4232ABF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe FirewallRules: [{A139EC38-E695-44FE-BD8A-BFA64005E63E}] => (Allow) C:\Program Files\Echobit\Evolve\EvoSvc.exe FirewallRules: [{9D750CF3-2382-4D3B-AFDB-DB6655477A08}] => (Allow) C:\Program Files\Echobit\Evolve\EvolveClient.exe FirewallRules: [{9EA94BC6-00C7-42BE-B879-AF81F7CD1FB7}] => (Allow) C:\Users\Christian\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{6728FC2A-B24A-46DE-9289-A0B2584B356A}] => (Allow) C:\Users\Christian\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{EFFFAA3C-C145-469B-ACFE-D7FB97DAFC4C}] => (Allow) C:\Users\Christian\AppData\Roaming\BitTorrent\BitTorrent.exe FirewallRules: [{A1F47699-8A91-4271-B3A0-CE587B41E2B2}] => (Allow) C:\Users\Christian\AppData\Roaming\BitTorrent\BitTorrent.exe FirewallRules: [{CDE3A518-02BF-4AB9-B58E-DB1EF7C71923}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{9315D8E0-6662-4B8C-8F00-D7F163AD5A92}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{6BC13FF9-BA19-4595-A5A7-9A94F5E2AC24}] => (Allow) C:\Users\Christian\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe FirewallRules: [{942CC054-D393-4B8A-8A5B-C2FCB138260E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Terraria\Terraria.exe FirewallRules: [{F8A7FAB6-1EB7-424B-9E55-188CAD22A0FB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Terraria\Terraria.exe FirewallRules: [{1B944E52-C971-4E4A-ACDE-1A75816B7BD5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Trove\GlyphClient.exe FirewallRules: [{5692B719-1089-46DB-AE1B-8529BB1F333C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Trove\GlyphClient.exe FirewallRules: [{3CCB7EBD-124D-4C94-8072-A111296993AF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe FirewallRules: [{74AE377E-275D-49EB-AA46-7B7F1B92A480}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe FirewallRules: [{4177192B-02B9-47A3-BCC3-00ADD2F793DD}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Restore Points ========================= Check "winmgmt" service or repair WMI. ==================== Faulty Device Manager Devices ============= Name: Generic PnP Monitor Description: Generic PnP Monitor Class Guid: {4d36e96e-e325-11ce-bfc1-08002be10318} Manufacturer: (Standard monitor types) Service: monitor Problem: : Windows successfully loaded the device driver for this hardware but cannot find the hardware device. (Code 41) Resolution: A driver was loaded but Windows cannot find the device. This happens when Windows does not detect a non-Plug and Play device. If the device was removed, uninstall the driver, install the device, and then click "Scan for hardware changes" to reinstall the driver. If the hardware was not removed, obtain a new or updated driver for the device. If the device is a non-Plug and Play device, a newer version of the driver might be needed. To install non-Plug and Play devices, use the Add Hardware wizard. Click "Performance and Maintenance" on "Control Panel", click "System", and on the "Hardware" tab, click "Add Hardware Wizard". Name: Microsoft Streaming Quality Manager Proxy Description: Microsoft Streaming Quality Manager Proxy Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: MSPQM Problem: : Windows successfully loaded the device driver for this hardware but cannot find the hardware device. (Code 41) Resolution: A driver was loaded but Windows cannot find the device. This happens when Windows does not detect a non-Plug and Play device. If the device was removed, uninstall the driver, install the device, and then click "Scan for hardware changes" to reinstall the driver. If the hardware was not removed, obtain a new or updated driver for the device. If the device is a non-Plug and Play device, a newer version of the driver might be needed. To install non-Plug and Play devices, use the Add Hardware wizard. Click "Performance and Maintenance" on "Control Panel", click "System", and on the "Hardware" tab, click "Add Hardware Wizard". ==================== Event log errors: ========================= Application errors: ================== Error: (12/25/2015 09:24:52 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 52768594 Error: (12/25/2015 09:24:52 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 52768594 Error: (12/25/2015 09:24:52 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (12/25/2015 06:45:31 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 6750 Error: (12/25/2015 06:45:31 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 6750 Error: (12/25/2015 06:45:31 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (12/25/2015 06:45:29 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 5469 Error: (12/25/2015 06:45:29 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 5469 Error: (12/25/2015 06:45:29 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (12/25/2015 06:45:28 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 4313 System errors: ============= Error: (12/25/2015 06:45:19 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: application-specificLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)UnavailableUnavailable Error: (12/24/2015 08:38:52 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: application-specificLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)UnavailableUnavailable Error: (12/24/2015 07:40:15 PM) (Source: Service Control Manager) (EventID: 7006) (User: ) Description: The ScRegSetValueExW call failed for Type with the following error: %%5 Error: (12/24/2015 07:40:07 PM) (Source: Service Control Manager) (EventID: 7006) (User: ) Description: The ScRegSetValueExW call failed for Type with the following error: %%5 Error: (12/24/2015 07:35:15 PM) (Source: Service Control Manager) (EventID: 7006) (User: ) Description: The ScRegSetValueExW call failed for Type with the following error: %%5 Error: (12/24/2015 06:40:47 PM) (Source: Service Control Manager) (EventID: 7006) (User: ) Description: The ScRegSetValueExW call failed for Type with the following error: %%5 Error: (12/24/2015 06:40:26 PM) (Source: Service Control Manager) (EventID: 7006) (User: ) Description: The ScRegSetValueExW call failed for Type with the following error: %%5 Error: (12/24/2015 06:40:25 PM) (Source: Service Control Manager) (EventID: 7006) (User: ) Description: The ScRegSetValueExW call failed for Type with the following error: %%5 Error: (12/24/2015 06:40:25 PM) (Source: Service Control Manager) (EventID: 7006) (User: ) Description: The ScRegSetValueExW call failed for Type with the following error: %%5 Error: (12/24/2015 06:40:25 PM) (Source: Service Control Manager) (EventID: 7006) (User: ) Description: The ScRegSetValueExW call failed for Type with the following error: %%5 CodeIntegrity: =================================== Date: 2015-12-25 05:10:49.440 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows.old\WINDOWS\WinSxS\x86_microsoft-windows-utilman_31bf3856ad364e35_10.0.10240.16384_none_ae8b861a138d2840\Utilman.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2015-12-25 05:10:49.409 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows.old\WINDOWS\WinSxS\x86_microsoft-windows-utilman_31bf3856ad364e35_10.0.10240.16384_none_ae8b861a138d2840\Utilman.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2015-12-25 05:10:49.364 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows.old\WINDOWS\WinSxS\x86_microsoft-windows-utilman_31bf3856ad364e35_10.0.10240.16384_none_ae8b861a138d2840\Utilman.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2015-12-25 05:07:28.141 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows.old\WINDOWS\WinSxS\wow64_windows-devices-perception_31bf3856ad364e35_10.0.10240.16384_none_d7cab6266329c783\Windows.Devices.Perception.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2015-12-25 05:07:28.092 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows.old\WINDOWS\WinSxS\wow64_windows-devices-perception_31bf3856ad364e35_10.0.10240.16384_none_d7cab6266329c783\Windows.Devices.Perception.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2015-12-25 05:07:28.029 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows.old\WINDOWS\WinSxS\wow64_windows-devices-perception_31bf3856ad364e35_10.0.10240.16384_none_d7cab6266329c783\Windows.Devices.Perception.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2015-12-25 05:07:16.417 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows.old\WINDOWS\WinSxS\wow64_microsoft-xbox-gameoverlay_31bf3856ad364e35_10.0.10240.16431_none_510c5232f65d3fa4\GamePanel.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2015-12-25 05:07:16.379 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows.old\WINDOWS\WinSxS\wow64_microsoft-xbox-gameoverlay_31bf3856ad364e35_10.0.10240.16431_none_510c5232f65d3fa4\GamePanel.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2015-12-25 05:07:16.348 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows.old\WINDOWS\WinSxS\wow64_microsoft-xbox-gameoverlay_31bf3856ad364e35_10.0.10240.16431_none_510c5232f65d3fa4\GamePanel.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2015-12-25 05:07:16.227 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows.old\WINDOWS\WinSxS\wow64_microsoft-xbox-gameoverlay_31bf3856ad364e35_10.0.10240.16389_none_510aef30f65e8faa\GamePanel.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. ==================== Memory info =========================== Processor: Intel(R) Pentium(R) CPU N3540 @ 2.16GHz Percentage of memory in use: 80% Total physical RAM: 3982.27 MB Available physical RAM: 787.98 MB Total Virtual: 8334.27 MB Available Virtual: 3747.76 MB ==================== Drives ================================ Drive c: (Windows) (Fixed) (Total:902.82 GB) (Free:756.86 GB) NTFS Drive d: (RECOVERY) (Fixed) (Total:26.85 GB) (Free:2.96 GB) NTFS ==>[system with boot components (obtained from drive)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 931.5 GB) (Disk ID: E85455D1) Partition: GPT. ==================== End of Addition.txt ============================