Additional scan result of Farbar Recovery Scan Tool (x64) Version: 29-10-2016
Ran by [removed] (29-10-2016 13:05:48)
Running from C:\Users\[removed]\Downloads
Windows 10 Home Version 1607 (X64) (2016-09-09 09:59:58)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-544537358-3987665657-1448127362-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-544537358-3987665657-1448127362-503 - Limited - Disabled)
ElizabethH (S-1-5-21-544537358-3987665657-1448127362-1001 - Administrator - Enabled) => C:\Users\ElizabethH
Guest (S-1-5-21-544537358-3987665657-1448127362-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-544537358-3987665657-1448127362-1005 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-544537358-3987665657-1448127362-1001\...\uTorrent) (Version: 3.4.8.42576 - BitTorrent Inc.)
64 Bit HP CIO Components Installer (Version: 16.2.1 - Hewlett-Packard) Hidden
7-Zip 15.14 (HKLM-x32\...\7-Zip) (Version: 15.14 - Igor Pavlov)
abDocs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.10.2001 - Acer Incorporated)
abDocs Office AddIn (HKLM-x32\...\{DCBF3379-246B-47E1-8173-639B63940838}) (Version: 3.02.2001 - Acer Incorporated)
abFiles (HKLM-x32\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 2.00.3009 - Acer Incorporated)
abMusic (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 3.01.2002.1 - Acer Incorporated)
abPhoto (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 3.08.2003.3 - Acer Incorporated)
Acer Care Center (HKLM\...\{A424844F-CDB3-45E2-BB77-1DDE4A091E76}) (Version: 1.00.3012 - Acer Incorporated)
Acer Explorer Agent (HKLM\...\{4D0F42CF-1693-43D9-BDC8-19141D023EE0}) (Version: 2.00.3001 - Acer Incorporated)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8115 - Acer Incorporated)
Acer Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 3.12.2004 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8106.0 - Acer Incorporated)
Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.01.3018 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8108 - Acer Incorporated)
Acer User Experience Improvement Program App Monitor Plugin (HKLM\...\{978724F6-1863-4DD5-9E66-FB77F5AB5613}) (Version: 1.02.3005 - Acer Incorporated)
Acer User Experience Improvement Program Framework (HKLM\...\{12A718F2-2357-4D41-9E1F-18583A4745F7}) (Version: 1.02.3005 - Acer Incorporated)
Acer Video Player (HKLM-x32\...\{B6846F20-4821-11E3-8F96-0800200C9A66}) (Version: 1.00.2011.1 - Acer Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated)
Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.205 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Illustrator CS6 (HKLM-x32\...\{4869414E-7AEA-4C8E-BE1C-8D40977FD517}) (Version: 16.0 - Adobe Systems Incorporated)
Adobe Premiere Pro 2.0 (HKLM-x32\...\Adobe Premiere Pro 2.0) (Version: 2.000.000 - Adobe Systems, Inc.)
Akamai NetSession Interface (HKU\S-1-5-21-544537358-3987665657-1448127362-1001\...\Akamai) (Version:  - Akamai Technologies, Inc)
Aloha TriPeaks (x32 Version: 2.2.0.98 - WildTangent) Hidden
Amazon 1Button App (HKLM-x32\...\{FF0A904E-8827-4F6E-9A59-900D4C997AD1}) (Version: 1.0.8 - Amazon) <==== ATTENTION
Amazon Kindle (HKU\S-1-5-21-544537358-3987665657-1448127362-1001\...\Amazon Kindle) (Version: 1.16.0.44025 - Amazon)
Ansel (Version: 372.54 - NVIDIA Corporation) Hidden
AOP Framework (HKLM-x32\...\{4A37A114-702F-4055-A4B6-16571D4A5353}) (Version: 3.22.2001.0 - Acer Incorporated)
Application Insights Tools for Visual Studio 2015 (HKLM-x32\...\{0E4C791E-B78E-477D-BD5A-CDD0985BA6EC}) (Version: 7.0.20622.1 - Microsoft Corporation)
ARK: Survival Evolved (HKLM\...\Steam App 346110) (Version:  - Studio Wildcard)
Autodesk Desktop App (HKLM-x32\...\Autodesk Desktop App) (Version: 6.2.0.174 - Autodesk)
Autodesk License Service (x64) - 4.1 (HKLM\...\{B827D6B7-7731-43BA-92EC-916C89C88964}) (Version: 4.1.1.0 - Autodesk)
Autodesk Maya 2017 (HKLM\...\Autodesk Maya 2017) (Version: 17.0.1720.0 - Autodesk)
Autodesk Maya 2017 (Version: 17.0.1720.0 - Autodesk) Hidden
Autodesk Mudbox 2017 (HKLM\...\Autodesk Mudbox 2017) (Version: 11.0.0.95 - Autodesk)
Autodesk Mudbox 2017 (Version: 11.0.0.95 - Autodesk) Hidden
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 12.3.2280 - AVAST Software)
Azure AD Authentication Connected Service (x32 Version: 14.0.25420 - Microsoft Corporation) Hidden
AzureTools.Notifications (x32 Version: 2.7.30611.1601 - Microsoft Corporation) Hidden
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Blender (HKLM\...\{D593042C-8739-488D-93B8-E6B202013E57}) (Version: 2.76.1 - Blender Foundation)
Brothers - A Tale of Two Sons (HKLM\...\Steam App 225080) (Version:  - Starbreeze Studios AB)
CyberLink PhotoDirector 3 (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.1.5524 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.4220 - CyberLink Corp.)
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.4609.02 - CyberLink Corp.)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.4.0.0190 - Disc Soft Ltd)
DC Universe Online (HKU\S-1-5-21-544537358-3987665657-1448127362-1001\...\DGC-DC Universe Online) (Version: 1.0.3.192 - Daybreak Game Company)
DC Universe Online Live (HKU\S-1-5-21-544537358-3987665657-1448127362-1001\...\DG0-DC Universe Online Live) (Version:  - Sony Online Entertainment)
DesignDoll (HKU\S-1-5-21-544537358-3987665657-1448127362-1001\...\a94d3e1b3ab3bea6) (Version: 1.4.0.0 - Terawell)
Dolby Digital Plus Home Theater (HKLM\...\{7E3D8FA1-6092-469A-955B-68FC4A2C67CA}) (Version: 7.6.3.1 - Dolby Laboratories Inc)
Dotfuscator and Analytics Community Edition 5.22.0 (x32 Version: 5.22.0.3788 - PreEmptive Solutions) Hidden
Drawpile 1.0.2 (HKLM-x32\...\{DC47B534-E365-4054-85F0-2E7C6CCB76CC}_is1) (Version: 1.0.2 - )
esyPlanner 2 (HKLM-x32\...\esyPlanner_is1) (Version:  - esySoft)
FaceRig Pro v1.555 (HKLM-x32\...\FaceRig Pro v1.555_is1) (Version:  - )
FaceRig virtual audio driver version 1.0 (HKLM-x32\...\{D605CD1D-D626-4740-B657-86DC30723FCF}_is1) (Version: 1.0 - Adoriasoft LLC)
FaceRig Virtual Video driver version 1.0.1.1000 (HKLM-x32\...\{7D6A1A0F-F57E-4C6B-9331-86CBC7D5C787}_is1) (Version: 1.0.1.1000 - Adoriasoft LLC)
Farm to Fork Collector's Edition (x32 Version: 3.0.2.59 - WildTangent) Hidden
Foxit PhantomPDF (HKLM-x32\...\{2DF18CA8-86F2-4F3A-A1BF-A2A7D39B9161}) (Version: 7.0.49.127 - Foxit Software Inc.)
Game Explorer Categories - genres (HKLM-x32\...\WildTangentGameProvider-acer-genres) (Version: 11.0.0.7 - WildTangent, Inc.)
Game Explorer Categories - main (HKLM-x32\...\WildTangentGameProvider-acer-main) (Version: 11.0.0.7 - WildTangent, Inc.)
GameMaker: Player (HKLM-x32\...\GameMakerPlayer) (Version: 1.4.1242.41000 - YoYo Games Ltd.)
GameMaker-Studio 1.4 (HKU\S-1-5-21-544537358-3987665657-1448127362-1001\...\GameMaker-Studio14) (Version:  - YoYo Games Ltd.)
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Facepunch Studios)
Geometry Dash (HKLM\...\Steam App 322170) (Version:  - RobTop Games)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 54.0.2840.71 - Google Inc.)
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
Governor of Poker 2 Premium Edition (x32 Version: 3.0.2.59 - WildTangent) Hidden
GRAV (HKLM\...\Steam App 332500) (Version:  - BitMonster, Inc.)
Gtk# for .Net 2.12.26 (HKLM-x32\...\{BC25B808-A11C-4C9F-9C0A-6682E47AAB83}) (Version: 2.12.26 - Xamarin, Inc.)
Intel(R) Chipset Device Software (x32 Version: 10.0.22 - Intel(R) Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.30.1072 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3977 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 1.1.226.0 - Intel Corporation)
Intel® RealSense™ SDK Runtime (HKLM-x32\...\ARP_for_prd_rs_sdk_runtime_v7_7.0.23.8048) (Version: 7.0.23.8048 - Intel Corporation)
Intel® RealSense™ SDK Runtime Gold (x86): 3D Scan (x32 Version: 7.0.23.8048 - Intel Corporation) Hidden
Intel® RealSense™ SDK Runtime Gold (x86): Blob/Contour Extraction (x32 Version: 7.0.23.8048 - Intel Corporation) Hidden
Intel® RealSense™ SDK Runtime Gold (x86): Core (x32 Version: 7.0.23.8048 - Intel Corporation) Hidden
Intel® RealSense™ SDK Runtime Gold (x86): Core: Calibration (x32 Version: 7.0.23.8048 - Intel Corporation) Hidden
Intel® RealSense™ SDK Runtime Gold (x86): Data Collector (x32 Version: 7.0.23.8048 - Intel Corporation) Hidden
Intel® RealSense™ SDK Runtime Gold (x86): Enhanced Photography And Videography (x32 Version: 7.0.23.8048 - Intel Corporation) Hidden
Intel® RealSense™ SDK Runtime Gold (x86): Face Tracking (x32 Version: 7.0.23.8048 - Intel Corporation) Hidden
Intel® RealSense™ SDK Runtime Gold (x86): Face Tracking: Models (x32 Version: 7.0.23.8048 - Intel Corporation) Hidden
Intel® RealSense™ SDK Runtime Gold (x86): Hand Tracking (x32 Version: 7.0.23.8048 - Intel Corporation) Hidden
Intel® RealSense™ SDK Runtime Gold (x86): Hand Tracking: Models (x32 Version: 7.0.23.8048 - Intel Corporation) Hidden
Intel® RealSense™ SDK Runtime Gold (x86): Human (x32 Version: 7.0.23.8048 - Intel Corporation) Hidden
Intel® RealSense™ SDK Runtime Gold (x86): Human: Models (x32 Version: 7.0.23.8048 - Intel Corporation) Hidden
Intel® RealSense™ SDK Runtime Gold (x86): Object Tracking (x32 Version: 7.0.23.8048 - Intel Corporation) Hidden
Intel® RealSense™ SDK Runtime Gold (x86): Scene Perception (x32 Version: 7.0.23.8048 - Intel Corporation) Hidden
Intel® RealSense™ SDK Runtime Gold (x86): TouchlessController (x32 Version: 7.0.23.8048 - Intel Corporation) Hidden
Intel® RealSense™ SDK Runtime Gold (x86): TouchlessController: Models (x32 Version: 7.0.23.8048 - Intel Corporation) Hidden
Intel® RealSense™ SDK Runtime Gold (x86): User Segmentation (x32 Version: 7.0.23.8048 - Intel Corporation) Hidden
Intel® RealSense™ SDK Runtime Gold (x86): Utilities (x32 Version: 7.0.23.8048 - Intel Corporation) Hidden
Java 8 Update 101 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
Java 8 Update 91 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218091F0}) (Version: 8.0.910.14 - Oracle Corporation)
Jewel Match 3 (x32 Version: 3.0.2.59 - WildTangent) Hidden
King Oddball (x32 Version: 3.0.2.48 - WildTangent) Hidden
Krita Desktop (x64) 2.9.11.0 (HKLM\...\{AF6A4BDD-B912-42DD-972B-986DA81A429A}) (Version: 2.9.11.0 - Krita Foundation)
LibreOffice 5.1.0.3 (HKLM-x32\...\{2F75F86D-8362-4F49-9536-D87DCBF6ABAE}) (Version: 5.1.0.3 - The Document Foundation)
LoveBeat (HKLM-x32\...\Steam App 354290) (Version:  - CRAZYDIAMOND CO., LTD.)
LUXOR Evolved (x32 Version: 2.2.0.98 - WildTangent) Hidden
Magic Academy (x32 Version: 2.2.0.98 - WildTangent) Hidden
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (ENU) (HKLM-x32\...\{290FC320-2F5A-329E-8840-C4193BD7A9EE}) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (HKLM-x32\...\{19E8AE59-4D4A-3534-B567-6CC08FA4102E}) (Version: 4.5.51651 - Microsoft Corporation)
Microsoft .NET Framework 4.6 SDK (HKLM-x32\...\{B5915D37-0637-4A26-A3AA-C5DC9F856370}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6 Targeting Pack (ENU) (HKLM-x32\...\{034547E9-D8FA-49E7-8B9C-4C9861FB9146}) (Version: 4.6.00127 - Microsoft Corporation)
Microsoft .NET Framework 4.6 Targeting Pack (HKLM-x32\...\{2CC6A4A7-AAC2-46C9-9DBB-3727B5954F65}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 SDK (HKLM-x32\...\{2F0ECC80-B9E4-4485-8083-CD32F22ABD92}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 Targeting Pack (ENU) (HKLM-x32\...\{8EEB28EE-5141-411C-9CF0-9952264FE4AF}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 Targeting Pack (HKLM-x32\...\{8BC3EEC9-090F-4C53-A8DA-1BEC913040F9}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Help Viewer 2.2 (HKLM-x32\...\Microsoft Help Viewer 2.2) (Version: 2.2.25420 - Microsoft Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20513.0 - Microsoft Corporation)
Microsoft SQL Server 2014 Management Objects  (HKLM-x32\...\{2774595F-BC2A-4B12-A25B-0C37A37049B0}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 Management Objects  (x64) (HKLM\...\{1F9EB3B6-AED7-4AA7-B8F1-8E314B74B2A5}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 Transact-SQL ScriptDom  (HKLM\...\{020CDFE0-C127-4047-B571-37C82396B662}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 T-SQL Language Service  (HKLM-x32\...\{47D08E7A-92A1-489B-B0BF-415516497BCE}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2014 (HKLM\...\{FC3BB979-AA54-4B60-BBA3-2C4DA6E08D80}) (Version: 12.0.2402.29 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2014 (HKLM-x32\...\{091CE6AA-2753-4F6E-AD1C-0E875744EB54}) (Version: 12.0.2402.29 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24212 (HKLM-x32\...\{323dad84-0974-4d90-a1c1-e006c7fdbb7d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212 (HKLM-x32\...\{462f63a8-6347-4894-a1b3-dbfe3a4c981d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Microsoft Visual Studio 2015 Tools for Unity (HKLM-x32\...\{5359C5C6-F83D-4E74-9170-F9A68BE1C57F}) (Version: 2.3.0.0 - Microsoft Corporation)
Microsoft Visual Studio Community 2015 with Updates (HKLM-x32\...\{79b486b9-c5f0-4096-a00c-8351f59587c2}) (Version: 14.0.25420.1 - Microsoft Corporation)
Microsoft Web Deploy 3.6 (HKLM\...\{94E1227C-08A9-4962-B388-1F05D89AEA75}) (Version: 3.1238.1962 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mozilla Firefox 49.0.2 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 49.0.2 (x86 en-US)) (Version: 49.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 49.0.2.6136 - Mozilla)
Mp3tag v2.74a (HKLM-x32\...\Mp3tag) (Version: v2.74a - Florian Heidenreich)
MSBuild/NuGet Integration 14.0 (x86) (x32 Version: 14.0.25420 - Microsoft Corporation) Hidden
MtoA for Maya 2017 (HKU\S-1-5-21-544537358-3987665657-1448127362-1001\...\MtoA2017) (Version: 1.3.0.0 - Solid Angle)
Multi-Device Hybrid Apps using C# - Templates - ENU (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
NihongoFlash (HKLM-x32\...\{B3E0F563-1B4F-4C7F-B472-B1635534A13E}) (Version: 1.0.0 - NihongoFlash)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.8.8 - Notepad++ Team)
NVIDIA GeForce Experience 2.11.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.4.0 - NVIDIA Corporation)
NVIDIA Graphics Driver 372.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 372.54 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
PCSX2 - Playstation 2 Emulator (HKLM-x32\...\pcsx2) (Version:  - )
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
Peggle Nights (x32 Version: 2.2.0.98 - WildTangent) Hidden
Pepakura Designer 4 (HKLM-x32\...\pepakura_designer4en) (Version:  - TamaSoftware)
Plants vs. Zombies - Game of the Year (x32 Version: 3.0.2.59 - WildTangent) Hidden
Polar Bowler 1st Frame (x32 Version: 3.0.2.59 - WildTangent) Hidden
PreEmptive Analytics Visual Studio Components (x32 Version: 1.2.5134.1 - PreEmptive Solutions) Hidden
Python 2.7.11 (HKLM-x32\...\{16E52445-1392-469F-9ADB-FC03AF00CD61}) (Version: 2.7.11150 - Python Software Foundation)
Python 3.5.1 (32-bit) (HKU\S-1-5-21-544537358-3987665657-1448127362-1001\...\{c39d559b-aa83-4476-ba20-988a35a1199a}) (Version: 3.5.1150.0 - Python Software Foundation)
Python 3.5.1 Core Interpreter (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Development Libraries (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Documentation (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Executables (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Launcher (32-bit) (HKLM-x32\...\{17778F7B-FB5A-4A93-9719-D75BAF673498}) (Version: 3.5.150.0 - Python Software Foundation)
Python 3.5.1 pip Bootstrap (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Standard Library (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Tcl/Tk Support (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Test Suite (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Utility Scripts (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Qualcomm Atheros 61x4 Wireless LAN&Bluetooth Installer (HKLM-x32\...\{3241744A-BA36-41F0-B4AA-EF3946D00632}) (Version: 11.0.0.619A - Qualcomm Atheros)
Rainlendar2 (remove only) (HKLM-x32\...\Rainlendar2) (Version:  - )
Rainmeter (HKLM-x32\...\Rainmeter) (Version: 3.3 r2519 - )
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.9600.39059 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.33.529.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7358 - Realtek Semiconductor Corp.)
Revo Uninstaller 2.0.1 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.1 - VS Revo Group, Ltd.)
Roslyn Language Services - x86 (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
Roslyn Language Services - x86 (x32 Version: 14.0.25425 - Microsoft Corporation) Hidden
RPG Maker MV (HKLM-x32\...\RPGMV_is1) (Version: 1.0.0.0 - KADOKAWA)
SafeZone Stable 1.51.2220.62 (x32 Version: 1.51.2220.62 - Avast Software) Hidden
SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.11.4.0 - NVIDIA Corporation) Hidden
Skype™ 7.29 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.29.102 - Skype Technologies S.A.)
Snaz version 1.12.2.1 (HKLM-x32\...\{70A76031-FDC6-4F9B-BB5C-33776703F45A}_is1) (Version: 1.12.2.1 - JimsApps)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
StepMania v5.0 beta 1a (remove only) (HKLM-x32\...\StepMania 5) (Version:  - StepMania Team)
Team Explorer for Microsoft Visual Studio 2015 Update 3.1 (x32 Version: 14.102.25521 - Microsoft) Hidden
Test Tools for Microsoft Visual Studio 2015 (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
The Chronicles of Emerland Solitaire (x32 Version: 3.0.2.51 - WildTangent) Hidden
The Sims 4 (HKLM-x32\...\VGhlU2ltczQ=_is1) (Version: 1 - )
The Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.0.732.20 - Electronic Arts Inc.)
Trinklit Supreme (x32 Version: 2.2.0.98 - WildTangent) Hidden
Tropico 5 v.1.0.9 (HKLM-x32\...\Tropico 5_is1) (Version:  - )
TurboTop 2.8 (HKLM-x32\...\TurboTop_is1) (Version: 2.8.0.21 - Savard Software)
TypeScript Power Tool (x32 Version: 1.8.34.0 - Microsoft Corporation) Hidden
TypeScript Tools for Microsoft Visual Studio 2015 (x32 Version: 1.8.36.0 - Microsoft Corporation) Hidden
Unity (HKLM-x32\...\Unity) (Version: 5.4.0f3 - Unity Technologies ApS)
Update for  (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
Visual Studio 2015 Update 3 (KB3022398) (HKLM-x32\...\{7a68448b-9cf2-4049-bd73-5875f1aa7ba2}) (Version: 14.0.25420 - Microsoft Corporation)
VS Update core components (x32 Version: 14.0.25425 - Microsoft Corporation) Hidden
vs_update3notification (x32 Version: 14.0.25425 - Microsoft Corporation) Hidden
Vulkan Run Time Libraries 1.0.11.1 (HKLM\...\VulkanRT1.0.11.1) (Version: 1.0.11.1 - LunarG, Inc.)
Wacom Tablet (HKLM\...\Wacom Tablet Driver) (Version: 6.3.15-3 - Wacom Technology Corp.)
WAKFU (HKLM\...\Steam App 215080) (Version:  - Ankama Studio)
WCF Data Services 5.6.4 Runtime (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden
WCF Data Services Tools for Microsoft Visual Studio 2015 (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden
WebM Project Directshow Filters (HKU\S-1-5-21-544537358-3987665657-1448127362-1001\...\webmdshow) (Version:  - )
WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)
WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)
Welcome to the Game (HKLM\...\Steam App 485380) (Version:  - Reflect Studios)
WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)
WildTangent Games App (x32 Version: 4.0.11.13 - WildTangent) Hidden
Winamp (HKLM-x32\...\Winamp) (Version: 5.666  - Nullsoft, Inc)
wxPython 3.0.2.0 for Python 2.7 (HKLM\...\wxPython3.0-py27_is1) (Version: 3.0.2.0 - Total Control Software)
Xiph.Org Open Codecs 0.85.17777 (HKLM-x32\...\Open Codecs) (Version: 0.85.17777 - Xiph.Org)
XSplit Broadcaster (HKLM-x32\...\{8831088F-02FC-42DF-A2C4-8E21ADCB4EE6}) (Version: 2.8.1607.1944 - SplitmediaLabs)
yWriter5 (HKLM-x32\...\yWriter5_is1) (Version:  - Spacejock Software)
Zim Desktop Wiki (HKLM-x32\...\Zim Desktop Wiki) (Version:  - )
Zuma's Revenge (x32 Version: 2.2.0.97 - WildTangent) Hidden

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-544537358-3987665657-1448127362-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\ElizabethH\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\FileCoAuth.exe (Microsoft Corporation)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {01A4C2CF-ECD8-4C3E-8094-A17F5A5BC23F} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {05CABB61-0D9D-49CD-B05E-A5FB0A1A3DA5} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\ElizabethH\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe [2016-09-10] (Microsoft Corporation)
Task: {0F030344-6FED-4266-80EB-51D262C42597} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-10-28] (Adobe Systems Incorporated)
Task: {158AEF87-7B84-475A-931A-70FC389B15DB} - \WPD\SqmUpload_S-1-5-21-544537358-3987665657-1448127362-1001 -> No File <==== ATTENTION
Task: {18CDBF10-547A-4B22-8AD1-9F2A966BD2D3} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-10-12] (Microsoft Corporation)
Task: {195C70E4-EE9E-4AED-A86B-260A9B735E33} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-09-26] (AVAST Software)
Task: {240F2DE8-30E5-44BF-A1B8-9B553851F2EC} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-10-17] (Acer Incorporate)
Task: {250E8776-D37E-4C9B-8D50-4270F81A25A5} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2014-12-30] (Acer Incorporate)
Task: {33253BA0-C10D-40E9-B7DC-C35E740C1AD1} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {3351B44A-2DB6-4E30-89BF-1DDA8AEB237C} - System32\Tasks\AcerCloud => C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2016-09-09] (Acer)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe
Task: {362317E1-DB16-4E34-ACE9-042A1AD6D6D5} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {38F9AE5D-CF86-4D41-A758-04FC3414BD02} - System32\Tasks\abDocsDllLoader => C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe [2016-08-15] ()
Task: {39A4947C-D7D9-49BB-9852-A502D0F3127F} - System32\Tasks\BacKGroundAgent => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe [2016-08-30] (Acer Incorporated)
Task: {4352CC6B-9721-4B5D-8152-945E5CEB8501} - System32\Tasks\{66AA906E-7A30-45B0-8BEE-4C8EEFF5E281} => pcalua.exe -a "C:\Program Files\Bullfrog\Setup.exe" -d "C:\Program Files\Bullfrog"
Task: {4F38AD3F-E044-4462-A6ED-6EF9B8284D24} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-07] (Google Inc.)
Task: {574CBD71-2FB2-445B-A3C6-7674BC58A1AE} - System32\Tasks\DolbySelectorTask => C:\Program Files\Dolby Digital Plus\ddp.exe [2014-04-07] (Dolby Laboratories Inc.)
Task: {70967E0F-CDC4-46C2-8187-25F664642FD2} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {7854FFD5-1320-45B1-A4B6-4B4C51C45F98} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [2014-03-12] (TODO: <Company name>)
Task: {845C907A-4853-469D-81FB-0F256B9A1654} - System32\Tasks\[removed] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
Task: {94B8BF58-FD15-4F1E-AA04-BC3AB9E9BB77} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {A7464F72-2B44-41A5-A832-95A326E9663C} - System32\Tasks\Yahoo! Powered ratil => Wscript.exe "C:\ProgramData\{715AB439-FB18-3EFF-7DDE-A0BDE79C2B73}\sada.txt" "687474703a2f2f7761676e672e636f6d" "433a5c50726f6772616d446174615c7b37313541423433392d464231382d334546462d374444452d4130424445373943324237337d5c6e657369666f" "433a5c50726f6772616d446174615c7b37313541423433392d464231382d334546462d374444 (the data entry has 78 more characters).
Task: {A76E1604-7D7D-46F2-9F80-D2BAB210ADCA} - System32\Tasks\{70DCD278-E295-4ADF-87E7-81064DE2D994} => pcalua.exe -a C:\Users\ElizabethH\AppData\Local\{18182E44-3CB0-42FC-5128-671475409B8C}\uninst.exe -c -FN=""-P=/Uninstall /s /noun /DelSelfDir
Task: {ADA1DC24-3F4B-4C9B-87EC-DD081E877BBD} - System32\Tasks\Microsoft\VisualStudio\VSIX Auto Update 14 => C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\VSIXAutoUpdate.exe [2016-06-20] (Microsoft Corporation)
Task: {B5547592-71C0-4AAB-B4DD-9F51EE6A06E5} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTrayLauncher.exe [2014-07-22] (Acer Incorporated)
Task: {B7D66F54-A146-4C10-A7EC-20DA3EF04831} - System32\Tasks\Intel\Intel Telemetry 2 (x86) => C:\Program Files (x86)\Intel\Telemetry 2.0\lrio.exe [2015-11-17] (Intel Corporation)
Task: {B7FD26A9-7C04-4747-8C50-857E368BBA25} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [2014-08-29] ()
Task: {C581356A-7078-477F-B3D0-8DC322DE688D} - System32\Tasks\Quick Access Quick Launcher => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-10-17] (Acer Incorporate)
Task: {C997E84F-8D40-4505-BF89-146E8CE8E483} - System32\Tasks\SafeZone scheduled Autoupdate 1458753818 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-09-06] (Avast Software)
Task: {DC322416-692E-46ED-A269-8620FD29C031} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-07] (Google Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Yahoo! Powered ratil.job => Wscript.exe  C:\ProgramData\{715AB439-FB18-3EFF-7DDE-A0BDE79C2B73}\sada.txt <==== ATTENTION

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

Shortcut: C:\Users\ElizabethH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StepMania 5\StepMania 5 Web Site.lnk -> hxxp://www.stepmania.com/
Shortcut: C:\Users\ElizabethH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Intеrnеt Ехplоrеr.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.bat ()
Shortcut: C:\Users\ElizabethH\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Gооglе Сhrоmе.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.bat ()
Shortcut: C:\Users\ElizabethH\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Lаunсh Intеrnеt Ехplоrеr Вrоwsеr.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.bat ()
Shortcut: C:\Users\ElizabethH\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Моzillа Firеfох.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.bat ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gооglе Сhrоmе.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.bat ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Аvаst SаfеZоnе Вrоwsеr.lnk -> C:\Program Files\AVAST Software\SZBrowser\launcher.bat (No File)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Моzillа Firеfох.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.bat ()

==================== Loaded Modules (Whitelisted) ==============

2016-07-16 06:42 - 2016-07-16 06:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-09-29 21:00 - 2016-09-15 12:25 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-09-09 03:57 - 2016-08-11 07:27 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-01-06 09:30 - 2012-04-24 05:43 - 00254512 ____N () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
2016-07-02 17:11 - 2016-06-14 15:03 - 00288192 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2016-07-02 17:11 - 2016-06-14 15:03 - 00367552 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll
2016-07-02 17:11 - 2016-06-14 15:03 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll
2016-07-02 17:11 - 2016-06-14 15:03 - 03611584 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll
2016-07-02 17:11 - 2016-06-14 15:03 - 02665920 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll
2016-07-02 17:11 - 2016-06-14 15:03 - 01988544 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll
2016-07-02 17:11 - 2016-06-14 15:03 - 01840576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll
2016-07-02 17:11 - 2016-06-14 15:03 - 00207296 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll
2016-07-02 17:11 - 2016-06-14 15:03 - 00034240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll
2016-07-02 17:11 - 2016-06-14 15:03 - 00920000 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll
2016-09-29 21:00 - 2016-09-15 12:25 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-09-10 12:23 - 2016-09-10 12:23 - 01864384 _____ () C:\Users\ElizabethH\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\ClientTelemetry.dll
2016-02-07 11:28 - 2016-01-11 12:30 - 01349824 _____ () C:\Program Files\Tablet\Wacom\libxml2.dll
2016-09-13 16:55 - 2016-09-06 23:56 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-10-12 08:14 - 2016-10-05 04:35 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-10-28 14:55 - 2016-10-14 22:41 - 09760256 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-10-28 14:55 - 2016-10-14 22:34 - 01401344 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-10-28 14:55 - 2016-10-14 22:34 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-10-28 14:55 - 2016-10-14 22:34 - 02424832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-10-28 14:55 - 2016-10-14 22:38 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-09-30 21:39 - 2015-09-30 21:39 - 00415128 _____ () C:\WINDOWS\system32\igfxTray.exe
2016-10-20 08:42 - 2016-10-20 08:42 - 00072192 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.197.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2016-10-20 08:42 - 2016-10-20 08:42 - 00178176 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.197.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2016-10-20 08:42 - 2016-10-20 08:42 - 35253760 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.197.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2015-11-13 07:19 - 2015-11-13 07:19 - 03097640 _____ () C:\Program Files\Rainlendar2\Rainlendar2.exe
2014-04-28 01:19 - 2014-04-28 01:19 - 00184320 _____ () C:\Program Files\Rainlendar2\lua52.dll
2015-11-13 04:51 - 2015-11-13 04:51 - 00330240 _____ () C:\Program Files\Rainlendar2\libical.dll
2015-11-13 04:51 - 2015-11-13 04:51 - 00060928 _____ () C:\Program Files\Rainlendar2\libicalss.dll
2015-11-13 07:19 - 2015-11-13 07:19 - 00075816 _____ () C:\Program Files\Rainlendar2\plugins\iCalendarPlugin.dll
2014-04-28 01:19 - 2014-04-28 01:19 - 00015872 _____ () C:\Program Files\Rainlendar2\lfs.dll
2016-01-03 10:19 - 2016-01-03 10:19 - 00036544 _____ () C:\Program Files\Rainmeter\Rainmeter.exe
2016-01-03 10:19 - 2016-01-03 10:19 - 01409728 _____ () C:\Program Files\Rainmeter\Rainmeter.dll
2016-01-03 10:18 - 2016-01-03 10:18 - 00122880 _____ () C:\Program Files\Rainmeter\Plugins\WindowMessagePlugin.dll
2016-08-15 15:24 - 2016-08-15 15:24 - 01769312 _____ () C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe
2016-08-15 15:24 - 2016-08-15 15:24 - 00091488 _____ () C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe
2016-07-02 17:12 - 2016-06-14 15:03 - 00165824 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\gamecaster64.dll
2016-07-02 17:12 - 2016-06-14 15:03 - 00861120 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\twitchsdk64.dll
2016-09-26 12:19 - 2016-09-26 12:19 - 00169064 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-10-29 04:19 - 2016-10-29 04:19 - 03125136 _____ () C:\Program Files\AVAST Software\Avast\defs\16102900\algo.dll
2016-09-26 12:19 - 2016-09-26 12:19 - 00482928 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2016-08-30 17:55 - 2016-07-01 01:39 - 00061968 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\QtSolutions_Service-head.dll
2016-08-30 17:55 - 2016-07-01 01:39 - 00110608 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\qjson0.dll
2016-07-02 17:11 - 2016-06-14 15:03 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-09-09 10:51 - 2016-09-09 10:51 - 00202456 _____ () C:\Program Files (x86)\Acer\Acer Portal\curllib.dll
2016-09-09 10:51 - 2016-09-09 10:51 - 00119000 _____ () C:\Program Files (x86)\Acer\Acer Portal\OpenLDAP.dll
2016-09-26 12:19 - 2016-09-26 12:19 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2016-08-30 17:55 - 2013-09-23 12:52 - 00043912 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\QtSolutions_MFCMigrationFramework_Ad_2.dll
2016-08-30 17:55 - 2015-11-05 07:07 - 00052224 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\qoauth_Ad_1.dll
2016-08-30 17:55 - 2015-11-05 07:07 - 00195584 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\qjson_Ad_0.dll
2016-08-30 17:55 - 2015-11-05 07:07 - 00742400 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\qca_Ad_2.dll
2016-08-30 17:55 - 2016-07-01 01:05 - 00285120 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\en-US\AdWingManRes.dll
2016-08-15 18:03 - 2016-08-15 18:03 - 00202456 _____ () C:\Program Files (x86)\Acer\abPhoto\curllib.dll
2016-08-15 18:05 - 2016-08-15 18:05 - 00654000 _____ () C:\Program Files (x86)\Acer\abPhoto\sqlite3.dll
2016-08-15 18:05 - 2016-08-15 18:05 - 00641240 _____ () C:\Program Files (x86)\Acer\abPhoto\tag.dll
2016-08-15 18:04 - 2016-08-15 18:04 - 00119000 _____ () C:\Program Files (x86)\Acer\abPhoto\OpenLDAP.dll
2016-09-20 18:30 - 2016-09-20 18:30 - 00015064 _____ () C:\WINDOWS\assembly\GAC_MSIL\MyService\1.0.0.1__2dfa3f50f0bed57d\MyService.dll
2016-08-30 15:09 - 2016-08-30 15:09 - 00013016 _____ () C:\Program Files (x86)\Acer\AOP Framework\ServiceInterface.dll
2016-08-30 15:05 - 2016-08-30 15:05 - 00277856 _____ () C:\Program Files (x86)\Acer\AOP Framework\libcurl.dll
2016-08-15 15:24 - 2016-08-15 15:24 - 00277856 _____ () C:\Program Files (x86)\Acer\abDocs\libcurl.dll
2016-08-30 17:55 - 2015-09-08 01:31 - 40640808 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\acwebbrowser\libcef.dll
2016-08-30 17:55 - 2014-09-02 19:29 - 00912384 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\acwebbrowser\libglesv2.dll
2016-08-30 17:55 - 2014-09-02 19:29 - 00134144 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\acwebbrowser\libegl.dll
2016-08-30 17:55 - 2014-09-02 19:29 - 00950272 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\acwebbrowser\ffmpegsumo.dll
2014-10-10 11:37 - 2014-10-10 11:37 - 01243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-544537358-3987665657-1448127362-1001\...\driversupport.com -> hxxp://apps.driversupport.com
IE trusted site: HKU\S-1-5-21-544537358-3987665657-1448127362-1001\...\driversupport.com -> hxxps://apps.driversupport.com

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2016-10-18 09:43 - 2016-10-25 19:04 - 00001095 ____A C:\WINDOWS\system32\Drivers\etc\hosts

      127.0.0.1 activate.adobe.com
      127.0.0.1 practivate.adobe.com
      127.0.0.1 lmlicenses.wip4.adobe.com
      127.0.0.1 lm.licenses.adobe.com
      127.0.0.1 na1r.services.adobe.com
      127.0.0.1 hlrcv.stage.adobe.com127.0.0.1 platform.wondershare.com 

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-544537358-3987665657-1448127362-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\ElizabethH\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 10.1.0.19 - 10.1.0.20
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

HKU\S-1-5-21-544537358-3987665657-1448127362-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-544537358-3987665657-1448127362-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-544537358-3987665657-1448127362-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-544537358-3987665657-1448127362-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{22CFB233-3671-4F6E-A2A6-3A6AD34952EC}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\devenv.exe
FirewallRules: [{E57B3EAF-3CFE-447A-AD1C-1656DEAE2167}] => (Allow) C:\PROGRA~1\Unity\Editor\Unity.exe
FirewallRules: [{15EDE22B-9314-4CE1-B2CC-4DE48F53057F}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio Tools for Unity\2015\UnityVS.OpenFile.exe
FirewallRules: [{1BB82FBA-E767-4FB4-8BA6-9E8E5046445B}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\devenv.exe
FirewallRules: [{71808CC8-BE7B-449E-84F5-87989B557A4E}] => (Allow) C:\Program Files\Adobe\Adobe Illustrator CS6 (64 Bit)\Support Files\Contents\Windows\Illustrator.exe
FirewallRules: [{0910619A-51C3-4706-9620-38429FC14CD3}] => (Allow) C:\Program Files\Adobe\Adobe Illustrator CS6 (64 Bit)\Support Files\Contents\Windows\Illustrator.exe
FirewallRules: [UDP Query User{5A711652-F2DE-47C2-A213-34B71465C6B0}C:\users\elizabethh\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\elizabethh\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{08410CD1-6CA8-4588-89DC-099412F65129}C:\users\elizabethh\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\elizabethh\appdata\local\akamai\netsession_win.exe
FirewallRules: [{B9A572AD-4F9C-4606-939E-89216A970D33}] => (Allow) C:\Program Files (x86)\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{171889FD-A22B-4231-8318-0748DE5E5432}] => (Allow) C:\Program Files (x86)\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{A82F7B5D-BF02-482C-9BCA-AD224B6660A7}] => (Allow) C:\Program Files (x86)\Acer\abMusic\WindowsUpnpMV.exe
FirewallRules: [{F31058F8-8822-4D8B-91C0-D34D30EF20F1}] => (Allow) C:\Program Files (x86)\Acer\abMusic\WindowsUpnpMV.exe
FirewallRules: [{1CCBE468-B6DB-45D9-ADBC-FCC7B48097FD}] => (Allow) C:\Program Files (x86)\Acer\abMusic\DMCDaemon.exe
FirewallRules: [{9BEECB52-ADDB-49A6-BC2B-44442F1154C4}] => (Allow) C:\Program Files (x86)\Acer\abMusic\DMCDaemon.exe
FirewallRules: [{333AE331-38F5-4A04-A609-F66803E762C4}] => (Allow) C:\Program Files (x86)\Acer\abMusic\WindowsUpnpMV.exe
FirewallRules: [{8C9F293D-C631-45E9-9D94-5E51D5A8B40E}] => (Allow) C:\Program Files (x86)\Acer\abMusic\WindowsUpnpMV.exe
FirewallRules: [{6C6B51E9-F1EF-4785-91C4-8F65BDF35E4E}] => (Allow) C:\Program Files (x86)\Acer\abMusic\DMCDaemon.exe
FirewallRules: [{C107CDF8-45F8-409D-A8D0-127D2C0B0DE9}] => (Allow) C:\Program Files (x86)\Acer\abMusic\DMCDaemon.exe
FirewallRules: [{2E3B364F-506E-446E-88E9-99F47808335A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{6CF18837-6B7B-461F-A5DF-DE5F31BE1633}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{7DFC5021-9C83-45F0-8627-037340CCA7E3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
FirewallRules: [{AE7945E6-6012-487B-861F-01CEE674B7EB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
FirewallRules: [{605D3E0F-40B5-4442-B28E-34F32BB8B235}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GRAV\Binaries\Win64\CAGGame-Win64-Shipping.exe
FirewallRules: [{ED88E03C-CF88-4EA2-956C-0126743BD68B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GRAV\Binaries\Win64\CAGGame-Win64-Shipping.exe
FirewallRules: [{6C8809FB-66E6-487C-8037-1413C08096D2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{7CD0F274-0BED-4976-8EB6-69BCD5A6B1E0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{CDFA5DC7-2662-4816-A935-EABB2504AFA3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{80619D85-90AA-4A02-9BB7-D098D25A485A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{0604290F-8FD5-48EC-9C19-5B7DE7166CF2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{66181609-054E-46F0-A644-2B9B9D6CCD09}] => (Allow) C:\Program Files (x86)\Acer\abMusic\WindowsUpnpMV.exe
FirewallRules: [{A9C71078-CAF5-4120-B043-FB7F64E48EAE}] => (Allow) C:\Program Files (x86)\Acer\abMusic\WindowsUpnpMV.exe
FirewallRules: [{5B92AB21-97CB-44D8-9DF2-151273273917}] => (Allow) C:\Program Files (x86)\Acer\abMusic\DMCDaemon.exe
FirewallRules: [{B873FC49-489C-45EC-83AD-013DD18BB2EB}] => (Allow) C:\Program Files (x86)\Acer\abMusic\DMCDaemon.exe
FirewallRules: [{89C0D050-6B10-44DA-A233-19D1A26ED2D2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Brothers - A Tale of Two Sons\Binaries\Win32\BrothersLauncher.exe
FirewallRules: [{C74EA840-54E3-4D8C-BD63-D3ADE83709C5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Brothers - A Tale of Two Sons\Binaries\Win32\BrothersLauncher.exe
FirewallRules: [{344437E3-F8C2-481C-8905-9840BAB1CE86}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Brothers - A Tale of Two Sons\Binaries\Win32\Brothers.exe
FirewallRules: [{17204788-2D77-45F9-AAFD-C9B084032827}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Brothers - A Tale of Two Sons\Binaries\Win32\Brothers.exe
FirewallRules: [{925D693A-74C6-41E6-96AE-B5282B365B93}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GRAV\Binaries\Win64\CAGGame-Win64-Shipping.exe
FirewallRules: [{698ABB76-3B0B-4A6D-BE1E-79EC2CB4716B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GRAV\Binaries\Win64\CAGGame-Win64-Shipping.exe
FirewallRules: [{086FC602-A031-4302-A583-1C4D826FF54C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Geometry Dash\GeometryDash.exe
FirewallRules: [{81426A6A-322B-403E-A8B2-23796B9FD791}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Geometry Dash\GeometryDash.exe
FirewallRules: [{05D90081-F3DC-42A9-8401-B2B12013AAA4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Wakfu\transition\transition.exe
FirewallRules: [{1F97DF8D-2045-4352-A981-19AF31A4E3A6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Wakfu\transition\transition.exe
FirewallRules: [{BC91E175-3B9D-4659-9465-5BC7245B0EAD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Welcome to the Game\WTTG.exe
FirewallRules: [{F2946571-E689-45C0-906C-20EED7CA2E1E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Welcome to the Game\WTTG.exe
FirewallRules: [UDP Query User{250AE70A-D5F1-40FC-B836-E772ED2D4CDD}C:\program files (x86)\holotech studios\facerig pro\bin\facerig.exe] => (Block) C:\program files (x86)\holotech studios\facerig pro\bin\facerig.exe
FirewallRules: [TCP Query User{8DCC71FB-2198-48D6-9BA4-689679BFCD44}C:\program files (x86)\holotech studios\facerig pro\bin\facerig.exe] => (Block) C:\program files (x86)\holotech studios\facerig pro\bin\facerig.exe
FirewallRules: [UDP Query User{0DA81DD5-111E-436A-8B24-70AFC7F84FE2}C:\program files (x86)\holotech studios\facerig pro\bin\facerig.exe] => (Block) C:\program files (x86)\holotech studios\facerig pro\bin\facerig.exe
FirewallRules: [TCP Query User{10A8EF8E-3190-4E8D-8ADB-9A77360C6CD5}C:\program files (x86)\holotech studios\facerig pro\bin\facerig.exe] => (Block) C:\program files (x86)\holotech studios\facerig pro\bin\facerig.exe
FirewallRules: [{53A5492D-0BE7-4EC9-83FA-0D2F347D1D32}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [{2F33F6C9-3B25-43EE-B555-C2F7B23D25E5}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [UDP Query User{AEAE0810-B4EB-4887-9156-D075F59C4C0F}C:\windows\explorer.exe] => (Block) C:\windows\explorer.exe
FirewallRules: [TCP Query User{51465619-D22A-4FEF-8DAE-7E6CD8A3FABC}C:\windows\explorer.exe] => (Block) C:\windows\explorer.exe
FirewallRules: [UDP Query User{30CBF127-C827-4DB5-88D7-7F1F4438EADA}C:\windows\system32\sihost.exe] => (Block) C:\windows\system32\sihost.exe
FirewallRules: [TCP Query User{2B01DF1F-0D40-44F3-A9FD-FBA9E67BE40B}C:\windows\system32\sihost.exe] => (Block) C:\windows\system32\sihost.exe
FirewallRules: [UDP Query User{496B4320-CFC0-42E5-A5B2-FEB6B9E2A55E}C:\windows\system32\lockapphost.exe] => (Block) C:\windows\system32\lockapphost.exe
FirewallRules: [TCP Query User{D312881B-5F3D-4BB4-A6E4-43FC419DA2CE}C:\windows\system32\lockapphost.exe] => (Block) C:\windows\system32\lockapphost.exe
FirewallRules: [UDP Query User{D5672E00-0F28-46D9-86E4-50A3B0D78982}C:\users\elizabethh\appdata\roaming\gamemaker-studio\runner.exe] => (Allow) C:\users\elizabethh\appdata\roaming\gamemaker-studio\runner.exe
FirewallRules: [TCP Query User{0B07D816-321D-4D72-8DF1-C648EDF62765}C:\users\elizabethh\appdata\roaming\gamemaker-studio\runner.exe] => (Allow) C:\users\elizabethh\appdata\roaming\gamemaker-studio\runner.exe
FirewallRules: [UDP Query User{02DEBD98-1CDD-46CE-AA76-675F061829AA}C:\users\elizabethh\appdata\roaming\craftstudio\craftstudioserver\craftstudioserver.exe] => (Allow) C:\users\elizabethh\appdata\roaming\craftstudio\craftstudioserver\craftstudioserver.exe
FirewallRules: [TCP Query User{91648437-ABF7-4871-8D90-81C71F40DC19}C:\users\elizabethh\appdata\roaming\craftstudio\craftstudioserver\craftstudioserver.exe] => (Allow) C:\users\elizabethh\appdata\roaming\craftstudio\craftstudioserver\craftstudioserver.exe
FirewallRules: [UDP Query User{F18120B2-4481-4B16-8A22-E73B8C8864B6}C:\users\public\daybreak game company\installed games\dc universe online\unreal3\binaries\win32\dcgame.exe] => (Allow) C:\users\public\daybreak game company\installed games\dc universe online\unreal3\binaries\win32\dcgame.exe
FirewallRules: [TCP Query User{214C5A1A-609D-48F7-92BF-9FB310CA2CE2}C:\users\public\daybreak game company\installed games\dc universe online\unreal3\binaries\win32\dcgame.exe] => (Allow) C:\users\public\daybreak game company\installed games\dc universe online\unreal3\binaries\win32\dcgame.exe
FirewallRules: [{6779F3D8-16E8-4004-8408-97CD5602E8FA}] => (Allow) C:\Program Files (x86)\Acer\abMusic\WindowsUpnpMV.exe
FirewallRules: [{B2E9D0BB-7857-4D4C-BE15-6BAB56BE6216}] => (Allow) C:\Program Files (x86)\Acer\abMusic\WindowsUpnpMV.exe
FirewallRules: [{CBCA26FC-868C-477F-B282-52F53E0F9AFA}] => (Allow) C:\Program Files (x86)\Acer\abMusic\DMCDaemon.exe
FirewallRules: [{75FFC361-89B2-4AB9-AF94-292FA943ED4D}] => (Allow) C:\Program Files (x86)\Acer\abMusic\DMCDaemon.exe
FirewallRules: [{D003A15E-6C9C-4E4E-82A6-DF6FACD7D8BB}] => (Allow) C:\Program Files (x86)\Acer\abMusic\WindowsUpnpMV.exe
FirewallRules: [{28E0D3E8-2F0D-4A4D-B2CB-C3228231AB56}] => (Allow) C:\Program Files (x86)\Acer\abMusic\WindowsUpnpMV.exe
FirewallRules: [{8FDE927E-F048-4ACE-A5D9-F543BD086E4B}] => (Allow) C:\Program Files (x86)\Acer\abMusic\DMCDaemon.exe
FirewallRules: [{4584059C-5C3A-426D-923C-D0A81D964F64}] => (Allow) C:\Program Files (x86)\Acer\abMusic\DMCDaemon.exe
FirewallRules: [UDP Query User{A4568895-CAB5-469D-9F21-116D07E3923A}C:\users\public\daybreak game company\installed games\dc universe online\unreal3\binaries\win32\dcgame.exe] => (Allow) C:\users\public\daybreak game company\installed games\dc universe online\unreal3\binaries\win32\dcgame.exe
FirewallRules: [TCP Query User{070DAFE2-D5EC-4E66-A4DE-5505155A6C46}C:\users\public\daybreak game company\installed games\dc universe online\unreal3\binaries\win32\dcgame.exe] => (Allow) C:\users\public\daybreak game company\installed games\dc universe online\unreal3\binaries\win32\dcgame.exe
FirewallRules: [UDP Query User{75B6B033-77C0-4FF8-8B9C-E4BD9348085F}C:\users\elizabethh\documents\games\igg-huniecam.studio\huniecamstudio.exe] => (Block) C:\users\elizabethh\documents\games\igg-huniecam.studio\huniecamstudio.exe
FirewallRules: [TCP Query User{A139223F-A2E4-404E-A950-15E795B4D4A9}C:\users\elizabethh\documents\games\igg-huniecam.studio\huniecamstudio.exe] => (Block) C:\users\elizabethh\documents\games\igg-huniecam.studio\huniecamstudio.exe
FirewallRules: [UDP Query User{04287661-570D-464F-879A-417DA5938E47}C:\users\elizabethh\documents\games\igg-huniecam.studio\huniecamstudio.exe] => (Block) C:\users\elizabethh\documents\games\igg-huniecam.studio\huniecamstudio.exe
FirewallRules: [TCP Query User{797BC65D-EAE8-441F-B976-4CDF19122989}C:\users\elizabethh\documents\games\igg-huniecam.studio\huniecamstudio.exe] => (Block) C:\users\elizabethh\documents\games\igg-huniecam.studio\huniecamstudio.exe
FirewallRules: [{BE5A406A-C545-415F-B908-497F22ABBC7B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{F1A366D7-EC32-4D80-9621-0706A23E1ED1}] => (Allow) C:\Program Files (x86)\Acer\abMusic\WindowsUpnpMV.exe
FirewallRules: [{2BB6475E-044B-4025-A035-31BC4BE1DA34}] => (Allow) C:\Program Files (x86)\Acer\abMusic\WindowsUpnpMV.exe
FirewallRules: [{2473570F-6DF2-4A0A-9446-59E2E5C8B5F2}] => (Allow) C:\Program Files (x86)\Acer\abMusic\DMCDaemon.exe
FirewallRules: [{35DD2B42-16B8-4A0C-ABDD-693327FE5634}] => (Allow) C:\Program Files (x86)\Acer\abMusic\DMCDaemon.exe
FirewallRules: [{999534FC-0498-4340-9624-40774E701F31}] => (Allow) C:\Program Files (x86)\Acer\abMusic\WindowsUpnpMV.exe
FirewallRules: [{79E381FB-9A20-4C34-BF6C-5614D65DCB02}] => (Allow) C:\Program Files (x86)\Acer\abMusic\WindowsUpnpMV.exe
FirewallRules: [{3AD15B1F-E012-4F82-9526-056CCC61AA60}] => (Allow) C:\Program Files (x86)\Acer\abMusic\DMCDaemon.exe
FirewallRules: [{88535CBF-DB64-4FAC-BD16-182DBF3FB4C9}] => (Allow) C:\Program Files (x86)\Acer\abMusic\DMCDaemon.exe
FirewallRules: [UDP Query User{F7DD937F-E7F8-47DD-BC98-82F4B208D9F0}C:\program files (x86)\stepmania 5\program\stepmania.exe] => (Allow) C:\program files (x86)\stepmania 5\program\stepmania.exe
FirewallRules: [TCP Query User{456B14DE-8DA5-4F57-B005-0FDB817AD7F2}C:\program files (x86)\stepmania 5\program\stepmania.exe] => (Allow) C:\program files (x86)\stepmania 5\program\stepmania.exe
FirewallRules: [UDP Query User{7C3B009A-D1B8-4624-B5A1-8D41F6C58C22}C:\program files (x86)\stepmania 5\program\stepmania-sse2.exe] => (Block) C:\program files (x86)\stepmania 5\program\stepmania-sse2.exe
FirewallRules: [TCP Query User{B7277B8E-032B-4A30-A7F7-449056FEEE12}C:\program files (x86)\stepmania 5\program\stepmania-sse2.exe] => (Block) C:\program files (x86)\stepmania 5\program\stepmania-sse2.exe
FirewallRules: [UDP Query User{56C9EFAC-2487-4AE0-8975-77F12640D700}C:\program files (x86)\stepmania 5\program\stepmania-sse2.exe] => (Allow) C:\program files (x86)\stepmania 5\program\stepmania-sse2.exe
FirewallRules: [TCP Query User{7E96895A-D15F-4D92-A092-3F48769BE4E2}C:\program files (x86)\stepmania 5\program\stepmania-sse2.exe] => (Allow) C:\program files (x86)\stepmania 5\program\stepmania-sse2.exe
FirewallRules: [{D67B1398-5728-4B7C-B38B-FC78037B2B70}] => (Allow) C:\Windows\System32\rundll32.exe
FirewallRules: [{403C2E2D-4FC0-4C2F-8153-283E605EFC0C}] => (Allow) C:\Windows\System32\rundll32.exe
FirewallRules: [{7E741826-4E6E-4887-BC99-69348666B0E8}] => (Allow) C:\WINDOWS\system32\rundll32.exe
FirewallRules: [{4CC6CD37-5AA0-4D18-AA40-E42374A54E61}] => (Allow) C:\Users\ElizabethH\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{F133A6DE-CFAA-4133-A59D-5B168B09B921}] => (Allow) C:\Users\ElizabethH\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{7D4291DE-D07E-48C3-B4DF-DDF705559D54}] => (Allow) C:\Users\ElizabethH\Downloads\BlackDesert_Downloader.exe
FirewallRules: [{78AF14B0-B862-4060-9A61-0218F14433AC}] => (Allow) C:\Users\ElizabethH\Downloads\BlackDesert_Launcher.exe
FirewallRules: [{CCB8500D-BBE1-4D15-8F0C-49B4781D6E93}] => (Allow) C:\Users\ElizabethH\Downloads\bin64\BlackDesert64.exe
FirewallRules: [{74838824-507F-42B9-AE9F-57F44B4A4CE8}] => (Allow) C:\Users\ElizabethH\Downloads\bin\BlackDesert32.exe
FirewallRules: [{333FDD20-6C9D-46B8-8841-496A0C6EA1E6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\LoveBeat\LoveBeat.exe
FirewallRules: [{D39A3D60-E4F3-4D70-B812-645A101AEE5F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\LoveBeat\LoveBeat.exe
FirewallRules: [{3EBF23BC-AC99-4394-8518-CBFF71CE5DE9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GarrysMod\hl2.exe
FirewallRules: [{946F5727-B4DB-4EE7-B3B7-3F141F778E5C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GarrysMod\hl2.exe
FirewallRules: [{27DCFD6D-33A0-49DF-B9AF-E5B4727B2720}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{D352F2FA-836E-4003-80BA-0E366BB4CE0E}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{52670282-4B85-4B0A-A97B-E63AB72CA7E2}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{9316155C-E5C2-4E07-A046-C7C5C7CFCADC}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{77FFD563-F0A5-4967-8E6E-F6740A49DEFF}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{70E08D68-C110-48E5-ABA2-B6F700B5BD7F}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{7FE84880-6BCA-44F8-9377-C4AFD30DFB92}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{05F0B79D-EDAF-4FD2-9210-BB8494DF70C5}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{7BEDC882-C2E2-4F9F-935B-6602ACEBDC9F}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\WindowsUpnp.exe
FirewallRules: [{65FE5C71-C2A5-474C-9D87-C75A3A2F5E39}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\WindowsUpnp.exe
FirewallRules: [{9D6AE91B-FEDE-4378-88D2-FE1A1AF3B716}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\DMCDaemon.exe
FirewallRules: [{6F297393-BCC4-4108-BEFD-6B58C30C8B34}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\DMCDaemon.exe
FirewallRules: [{FE3A5F5F-4639-4DC5-8163-C2032F376A2C}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDirector10\PDR10.EXE
FirewallRules: [{06C40AE6-69D7-450F-9E70-646A3156C0F2}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{C465F832-B81B-4EA2-99A4-2CAC3C6ED587}] => (Allow) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
FirewallRules: [{5CCA5E7F-F2FA-4D0A-9A8F-F4853A4DAB13}] => (Allow) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
FirewallRules: [{EBF249FD-270E-4E7B-938E-B9423FB633F7}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{174E0065-9C3C-4C69-972D-D1D697A22FB9}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{060D54BB-42DD-48EB-B165-166B688F67AE}] => (Allow) C:\Program Files (x86)\Spotify\spotify.exe
FirewallRules: [{91762F7E-67C2-49BB-BE74-FBA16280B1BB}] => (Allow) C:\Program Files (x86)\Spotify\spotify.exe
FirewallRules: [{AB5DD247-B5CA-49E6-8BE0-5A7EA7F48A9F}] => (Allow) C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe
FirewallRules: [{621EE349-7B0E-41A9-9215-0EFDB28027E5}] => (Allow) C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe
FirewallRules: [{703A288C-2A24-4FF8-980A-635E98F06A28}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12.exe
FirewallRules: [{3440DB7F-10D9-4B87-BB40-4E3F9B5F7A86}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe
FirewallRules: [{52E30272-E226-4968-99DC-FAB58B96B8C0}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
FirewallRules: [{53178BED-0617-4E30-B71E-E587EC3BF4A0}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe
FirewallRules: [{60191986-4DD3-4FF7-AE08-9DAEC2FA1D3E}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12ML.exe
FirewallRules: [{C0D25D82-A868-4B29-BD7E-0C70C501B948}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Movie\PowerDVD.exe
FirewallRules: [{65209464-4CFF-4BF6-AE45-7EBAB9CA4CB9}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{141C99A1-695C-4224-A7E9-9CFFF35A9B01}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{51978D16-0AE6-49A9-94D7-F189CF17EA82}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{72EBC12A-5026-4E81-B2CA-B84AC0337BE7}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{84CDEF1B-55B2-4F1F-B479-98816B2C6740}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{A39998BD-E42E-444C-A1DE-BAEA891099E0}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{7F1D3ED7-C183-434F-85C9-DB668E90443F}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{2E74C938-6BB4-4541-874C-027CFBA58D06}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{2356390D-7806-43A7-8934-204A6AE72B35}] => (Allow) %systemroot%\system32\alg.exe
FirewallRules: [{C356FDB7-893E-4B34-9178-82DFA5D01C76}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{FE052668-E443-46EE-A85C-09E62C5C58ED}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{08EB8C82-3AAC-463F-8C1C-44AF88BD0A24}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Broadcaster\XSplit.Core.exe
FirewallRules: [{0482EC12-6918-4DFB-BB3B-B94C2A458A50}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Broadcaster\XSplit.cam.exe
FirewallRules: [{5B8A73E0-52A0-40B9-92DF-9EB8201DEB31}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Broadcaster\XSplit.Core.exe
FirewallRules: [{3FFEA4F7-16FC-4A44-B587-7F073826156F}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Broadcaster\XSplit.cam.exe
FirewallRules: [{61D7245A-A087-4638-8E83-049B3261A1ED}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{C9E9DB5B-249B-48EF-9F0F-3C30E2B4D3A9}] => (Block) %ProgramFiles%\Wondershare\Filmora\Filmora.exe
FirewallRules: [{457BA780-B08A-4429-9AD6-AB48AF77231D}] => (Block) %ProgramFiles%\Wondershare\Filmora\cmdCheckATI.exe
FirewallRules: [{713A688A-A8EC-4392-AD1F-F406C1360206}] => (Block) %ProgramFiles%\Wondershare\Filmora\BugSplatHD64.exe
FirewallRules: [{F5F1EB41-B5E7-4581-99B8-180198A758EB}] => (Block) %ProgramFiles%\Wondershare\Filmora\BsSndRpt64.exe
FirewallRules: [{B8DD8E41-423A-4731-81D0-6015E7B86BEC}] => (Block) %ProgramFiles%\Wondershare\Filmora\ImageHost.exe
FirewallRules: [{ADC45C1A-D385-4316-984D-2A1E61E8C060}] => (Block) %ProgramFiles%\Wondershare\Filmora\unins000.exe
FirewallRules: [{8FB72A23-10BE-483A-84A1-FDF5B926E1D6}] => (Block) %ProgramFiles%\Wondershare\Filmora\Wondershare Helper Compact.exe
FirewallRules: [{90B6D9DD-05A0-4D90-8107-F8AD00A13F8B}] => (Block) %ProgramFiles%\Wondershare\Filmora\WsChrome.exe
FirewallRules: [{B42F64A4-EA8F-41E9-A1A3-EBA9B32F0406}] => (Block) %ProgramFiles%\Wondershare\Filmora\

==================== Restore Points =========================

28-10-2016 20:52:57 Removed Theme Park World Fix

==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (10/29/2016 12:46:07 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: rundll32.exe_DeltaSearch.dll, version: 10.0.14393.0, time stamp: 0x57899977
Faulting module name: DeltaSearch.dll, version: 0.0.0.0, time stamp: 0x56c552c2
Exception code: 0xc0000005
Fault offset: 0x0000000000025081
Faulting process id: 0x1ef0
Faulting application start time: 0x01d2320c5295c9c5
Faulting application path: C:\Windows\System32\rundll32.exe
Faulting module path: C:\ProgramData\DeltaSearch\DeltaSearch.dll
Report Id: fa31b3c2-a47e-46cf-aa96-c76bf876744d
Faulting package full name: 
Faulting package-relative application ID:

Error: (10/29/2016 12:31:00 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: rundll32.exe_DeltaSearch.dll, version: 10.0.14393.0, time stamp: 0x57899977
Faulting module name: DeltaSearch.dll, version: 0.0.0.0, time stamp: 0x56c552c2
Exception code: 0xc0000005
Fault offset: 0x0000000000025081
Faulting process id: 0x21f0
Faulting application start time: 0x01d2320a3645d232
Faulting application path: C:\Windows\System32\rundll32.exe
Faulting module path: C:\ProgramData\DeltaSearch\DeltaSearch.dll
Report Id: c2b59493-10f1-4312-95a1-e419bafbb67e
Faulting package full name: 
Faulting package-relative application ID:

Error: (10/28/2016 10:14:53 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine QueryFullProcessImageNameW.  hr = 0x80070006, The handle is invalid.
.


Operation:
   Executing Asynchronous Operation

Context:
   Current State: DoSnapshotSet

Error: (10/28/2016 10:13:48 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.

System Error:
Access is denied.
.

Error: (10/28/2016 10:12:04 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine QueryFullProcessImageNameW.  hr = 0x80070006, The handle is invalid.
.


Operation:
   Executing Asynchronous Operation

Context:
   Current State: DoSnapshotSet

Error: (10/28/2016 10:11:29 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.

System Error:
Access is denied.
.

Error: (10/28/2016 10:08:40 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine QueryFullProcessImageNameW.  hr = 0x80070006, The handle is invalid.
.


Operation:
   Executing Asynchronous Operation

Context:
   Current State: DoSnapshotSet

Error: (10/28/2016 10:07:49 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.

System Error:
Access is denied.
.

Error: (10/28/2016 10:05:20 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine QueryFullProcessImageNameW.  hr = 0x80070006, The handle is invalid.
.


Operation:
   Executing Asynchronous Operation

Context:
   Current State: DoSnapshotSet

Error: (10/28/2016 10:04:47 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.

System Error:
Access is denied.
.


System errors:
=============
Error: (10/29/2016 12:44:53 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Windows Presentation Foundation Font Cache 3.0.0.0 service failed to start due to the following error: 
The service did not respond to the start or control request in a timely fashion.

Error: (10/29/2016 12:44:53 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Windows Presentation Foundation Font Cache 3.0.0.0 service to connect.

Error: (10/29/2016 12:44:33 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (10/29/2016 12:44:33 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 and APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (10/29/2016 12:44:24 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 and APPID 
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (10/29/2016 12:38:44 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Search service, but this action failed with the following error: 
An instance of the service is already running.

Error: (10/29/2016 12:38:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The User Experience Improvement Program service terminated unexpectedly.  It has done this 1 time(s).

Error: (10/29/2016 12:38:15 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The ePower Service service terminated unexpectedly.  It has done this 1 time(s).

Error: (10/29/2016 12:38:15 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Quick Access Service service terminated unexpectedly.  It has done this 1 time(s).

Error: (10/29/2016 12:38:14 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Windows Presentation Foundation Font Cache 3.0.0.0 service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 0 milliseconds: Restart the service.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i7-5500U CPU @ 2.40GHz
Percentage of memory in use: 35%
Total physical RAM: 8106.45 MB
Available physical RAM: 5263.63 MB
Total Virtual: 9386.45 MB
Available Virtual: 6488.01 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:913.8 GB) (Free:598.3 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 5AC15DCE)

Partition: GPT.

==================== End of Addition.txt ============================