Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-11-2016 Ran by [removed] (09-11-2016 20:50:21) Running from C:\Users\[removed]\Downloads Windows 7 Home Premium Service Pack 1 (X64) (2009-12-10 01:51:55) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-2756045532-2145893136-351098000-500 - Administrator - Disabled) Dwight (S-1-5-21-2756045532-2145893136-351098000-1000 - Administrator - Enabled) => C:\Users\Dwight Guest (S-1-5-21-2756045532-2145893136-351098000-501 - Limited - Enabled) HomeGroupUser$ (S-1-5-21-2756045532-2145893136-351098000-1002 - Limited - Enabled) LogMeInRemoteUser (S-1-5-21-2756045532-2145893136-351098000-1008 - Administrator - Enabled) => C:\Users\LogMeInRemoteUser ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Webroot SecureAnywhere (Enabled - Up to date) {4646A877-74EB-CD3B-8FDB-210DB94FA61A} AS: Webroot SecureAnywhere (Enabled - Up to date) {FD274993-52D1-C2B5-B56B-1A7FC2C8ECA7} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 7 Wonders: Magical Mystery Tour (x32 Version: 2.2.0.98 - WildTangent) Hidden 7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - ) ActiveCheck component for HP Active Support Library (x32 Version: 3.0.0.2 - Hewlett-Packard) Hidden Adobe Flash Player 23 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 23.0.0.205 - Adobe Systems Incorporated) Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.205 - Adobe Systems Incorporated) Adobe Reader XI (11.0.18) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.18 - Adobe Systems Incorporated) Akamai NetSession Interface (HKU\S-1-5-21-2756045532-2145893136-351098000-1000\...\Akamai) (Version: - Akamai Technologies, Inc) Apple Application Support (32-bit) (HKLM-x32\...\{29DB9165-5FC1-48F0-9188-26123F526848}) (Version: 5.0.1 - Apple Inc.) Apple Application Support (64-bit) (HKLM\...\{5905C8CF-1C88-4478-A48E-4E458AD1BC7E}) (Version: 5.0.1 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{D4D86CB2-2370-4691-8272-3869EDED6C64}) (Version: 10.0.0.18 - Apple Inc.) Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.) Audacity 1.2.6 (HKLM-x32\...\Audacity_is1) (Version: - ) Audacity 1.3.14 (Unicode) (HKLM-x32\...\Audacity 1.3 Beta (Unicode)_is1) (Version: - Audacity Team) Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.) BufferChm (x32 Version: 90.0.146.000 - Hewlett-Packard) Hidden CameraDrivers (x32 Version: 9.0.0.163 - Hewlett-Packard) Hidden CameraUserGuides (x32 Version: 9.0.0.163 - Hewlett-Packard) Hidden CCleaner (HKLM\...\CCleaner) (Version: 5.23 - Piriform) Cisco Connect (HKLM-x32\...\Cisco Connect) (Version: 1.4.11299.0 - Cisco Consumer Products LLC) CleanUp! (HKLM-x32\...\CleanUp!) (Version: - ) Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) CyberLink DVD Suite Deluxe (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 6.0.2111 - CyberLink Corp.) DC-Bass Source 1.3.0 (HKLM-x32\...\DC-Bass Source) (Version: - ) Dell Driver Download Manager (HKU\S-1-5-21-2756045532-2145893136-351098000-1000\...\bd4d3a0508d364f5) (Version: 3.0.0.0 - Dell Inc) DeviceDiscovery (x32 Version: 90.0.146.000 - Hewlett-Packard) Hidden DeviceManagementQFolder (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden DirectVobSub 2.40.4209 (HKLM-x32\...\vsfilter_is1) (Version: 2.40.4209 - MPC-HC Team) Disney Toontown Online (HKLM-x32\...\Disney Toontown Online) (Version: - Walt Disney Internet Group) DivX Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.1.8 - DivX, LLC) DriverUpdate (HKLM-x32\...\{554D1038-9882-4CC8-9CC5-F8AB6C556469}) (Version: 2.2.36929 - SlimWare Utilities, Inc.) DWG TrueView 2012 (HKLM\...\DWG TrueView 2012) (Version: 18.2.51.0 - Autodesk) DWG TrueView 2012 (Version: 18.2.51.0 - Autodesk) Hidden Enhanced Multimedia Keyboard Solution (HKLM-x32\...\KBD) (Version: 1.0.9.2 - Hewlett-Packard) eSupportQFolder (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden ffdshow v1.1.4399 [2012-03-22] (HKLM-x32\...\ffdshow_is1) (Version: 1.1.4399.0 - ) gedit 2.30.1 (HKLM-x32\...\gedit_is1) (Version: 2.30.1 - GNOME) GIMP 2.6.10 (HKLM-x32\...\WinGimp-2.0_is1) (Version: 2.6.10 - The GIMP Team) Google Desktop (HKLM-x32\...\Google Desktop) (Version: 5.9.1005.12335 - Google) Google Earth Plug-in (HKLM-x32\...\{57BB4801-61C8-4E74-9672-2160728A461E}) (Version: 7.1.5.1557 - Google) Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.7619.1252 - Google Inc.) Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden GoToMeeting 5.2.0.952 (HKU\S-1-5-21-2756045532-2145893136-351098000-1000\...\GoToMeeting) (Version: 5.2.0.952 - CitrixOnline) Haali Media Splitter (HKLM-x32\...\HaaliMkx) (Version: - ) HoMedics or Walgreens Blood Pressure Monitor v2.2.9 (HKLM\...\{057FC282-826A-41E4-B6D9-9E6BCFD8B8E3}) (Version: 2.2.9 - HoMedics) HP Demo (HKLM-x32\...\{97ABD26A-3249-46CB-B2E2-F66E64B2E480}) (Version: 1.00.0000 - Hewlett-Packard) HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.2.5 - WildTangent) HP Imaging Device Functions 9.0 (HKLM\...\HP Imaging Device Functions) (Version: 9.0 - HP) HP MediaSmart DVD (HKLM-x32\...\InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A}) (Version: 3.0.3420 - Hewlett-Packard) HP MediaSmart Music/Photo/Video (HKLM-x32\...\InstallShield_{B2EE25B9-5B00-4ACF-94F0-92433C28C39E}) (Version: 2.0.2217 - Hewlett-Packard) HP MediaSmart SmartMenu (HKLM\...\{D2F7994F-661E-46D1-A1DF-67F2887AAA7E}) (Version: 2.0.8 - Hewlett-Packard) HP Officejet Pro 8600 Basic Device Software (HKLM\...\{791A06E2-340F-43B0-8FAB-62D151339362}) (Version: 28.0.1315.0 - Hewlett-Packard Co.) HP Officejet Pro 8600 Help (HKLM-x32\...\{46235FF7-2CBE-4A84-BEDA-87348D1F7850}) (Version: 28.0.0 - Hewlett Packard) HP Officejet Pro 8600 Product Improvement Study (HKLM\...\{2BF5E9CC-C55D-4B0F-ACAF-FFE77F333CD8}) (Version: 28.0.1315.0 - Hewlett-Packard Co.) HP Photosmart Cameras 9.0 (HKLM\...\{39E7D1A1-6E10-4378-A181-445676799838}) (Version: 9.0 - HP) HP Photosmart Essential 2.01 (HKLM\...\HP Photosmart Essential) (Version: 2.01 - HP) HP Product Detection (HKLM-x32\...\{8A9FC225-75F6-4B5D-911C-0ED230565643}) (Version: 11.15.0009 - HP) HP Solution Center 9.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 9.0 - HP) HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard) hpicamDrvQFolder (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden HPProductAssistant (x32 Version: 90.0.146.000 - Hewlett-Packard) Hidden I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP) iCloud (HKLM\...\{CE29BC77-C5AE-49D8-A8C0-FDAF6ACF74DF}) (Version: 6.0.1.41 - Apple Inc.) Image for Windows 2.68 (HKLM-x32\...\Image for Windows (V2)_is1) (Version: - TeraByte Unlimited) ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.6.0 - LIGHTNING UK!) InstantShareDevicesMFC (x32 Version: 90.0.146.000 - Hewlett-Packard) Hidden Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.15.10.1912 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.0.1014 - Intel Corporation) Internet TV for Windows Media Center (HKLM-x32\...\{9D318C86-AF4C-409F-A6AC-7183FF4CF424}) (Version: 4.2.2.0 - Microsoft Corporation) IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.28 - Irfan Skiljan) iTunes (HKLM\...\{9946A4F7-E0FD-4A33-82D1-06CBFFBBB9F9}) (Version: 12.5.1.21 - Apple Inc.) Java 8 Update 91 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218091F0}) (Version: 8.0.910.14 - Oracle Corporation) Junk Mail filter update (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.0904 - CyberLink Corp.) LabelPrint (x32 Version: 2.5.0904 - CyberLink Corp.) Hidden Lagarith Lossless Codec (1.3.27) (HKLM-x32\...\{F59AC46C-10C3-4023-882C-4212A92283B3}_is1) (Version: - ) LAME v3.98.3 for Audacity (HKLM-x32\...\LAME for Audacity_is1) (Version: - ) LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - ) LeapFrog Connect (HKLM-x32\...\UPCShell) (Version: 4.2.14.16426 - LeapFrog) LeapFrog Connect (x32 Version: 4.2.14.16426 - LeapFrog) Hidden LeapFrog My Pals Plugin (x32 Version: 4.2.9.15649 - LeapFrog) Hidden LightScribe System Software 1.14.25.1 (HKLM-x32\...\{DA9DAC64-C947-47BA-B411-8A1959B177CF}) (Version: 1.14.25.1 - LightScribe) LightScribe Template Labeler (HKLM-x32\...\{5BD0CB24-11AF-4BA8-A198-38D25257C656}) (Version: 1.14.25.1 - LightScribe) LogMeIn (HKLM-x32\...\{EE4CA5AF-4A55-418C-8CB8-74435814207B}) (Version: 4.1.2450 - LogMeIn, Inc.) Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes) Manager (x32 Version: 4.1.4.27792 - 2015 pdfforge GmbH. All rights reserved) Hidden Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation) Microsoft HealthVault Connection Center (HKLM-x32\...\HealthVault Connection Center) (Version: 4.1.3438.8024 - Microsoft Corporation) Microsoft Help Viewer 1.1 (HKLM\...\Microsoft Help Viewer 1.1) (Version: 1.1.40219 - Microsoft Corporation) Microsoft Office PowerPoint Viewer 2007 (English) (HKLM-x32\...\{95120000-00AF-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft SQL Server 2008 (HKLM-x32\...\Microsoft SQL Server 10 Release) (Version: - Microsoft Corporation) Microsoft SQL Server 2008 Browser (HKLM-x32\...\{C688457E-03FD-4941-923B-A27F4D42A7DD}) (Version: 10.1.2531.0 - Microsoft Corporation) Microsoft SQL Server 2008 Native Client (HKLM\...\{BBDE8A3D-64A2-43A6-95F3-C27B87DF7AC1}) (Version: 10.1.2531.0 - Microsoft Corporation) Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{77F1F8AD-51B8-4490-AEEC-BF480073E0FC}) (Version: 10.50.1750.9 - Microsoft Corporation) Microsoft SQL Server 2008 Setup Support Files (HKLM-x32\...\{BA4DA261-CB60-4690-B202-44998DFC6986}) (Version: 10.1.2531.0 - Microsoft Corporation) Microsoft SQL Server Compact 3.5 SP1 Design Tools English (HKLM-x32\...\{0C19D563-5F25-4621-BF10-01F741BD283F}) (Version: 3.5.5692.0 - Microsoft Corporation) Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation) Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation) Microsoft SQL Server VSS Writer (HKLM\...\{0826F9E4-787E-481D-83E0-BC6A57B056D5}) (Version: 10.1.2531.0 - Microsoft Corporation) Microsoft Sync Framework Runtime Native v1.0 (x86) (HKLM-x32\...\{8A74E887-8F0F-4017-AF53-CBA42211AAA5}) (Version: 1.0.1215.0 - Microsoft Corporation) Microsoft Sync Framework Services Native v1.0 (x86) (HKLM-x32\...\{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}) (Version: 1.0.1215.0 - Microsoft Corporation) Microsoft Visual Basic 2008 Express Edition with SP1 - ENU (HKLM-x32\...\Microsoft Visual Basic 2008 Express Edition with SP1 - ENU) (Version: - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{4FFA2088-8317-3B14-93CD-4C699DB37843}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM-x32\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Runtime - 10.0.40219 (HKLM\...\{1C7C8AAF-A16D-32E8-89E5-F6D165DE0BCE}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219 (HKLM-x32\...\{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 Express - ENU (HKLM-x32\...\Microsoft Visual C++ 2010 Express - ENU) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2008 Remote Debugger Light (x64) - ENU (HKLM\...\Microsoft Visual Studio 2008 Remote Debugger Light (x64) - ENU) (Version: - Microsoft Corporation) Microsoft Visual Studio 2008 Remote Debugger Light (x64) - ENU Service Pack 1 (KB945140) (HKLM-x32\...\{90A80D89-A0E4-33C1-B13D-B93CB3496867}.KB945140) (Version: 1 - Microsoft Corporation) Microsoft Visual Studio 2010 Express Prerequisites x64 - ENU (HKLM\...\{BCA26999-EC22-3007-BB79-638913079C9A}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Service Pack 1 (HKLM-x32\...\Microsoft Visual Studio 2010 Service Pack 1) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Microsoft Windows SDK for Visual Studio 2008 SP1 Express Tools for .NET Framework - enu (HKLM\...\{DFB3AD2B-4EE2-3077-BF1D-3CA164BC5336}) (Version: 3.5.30729 - Microsoft Corporation) Microsoft Windows SDK for Visual Studio 2008 SP1 Express Tools for Win32 (HKLM\...\{F5C819A5-E068-4f7d-B91A-1BD18702AFFB}) (Version: 6.1.5295.17011 - Microsoft Corporation) Microsoft Works (HKLM-x32\...\{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}) (Version: 9.7.0621 - Microsoft Corporation) Mozilla Firefox 49.0.2 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 49.0.2 (x86 en-US)) (Version: 49.0.2 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 49.0.2.6136 - Mozilla) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation) muvee Reveal (HKLM-x32\...\{19506BDB-4EA7-491F-E8AB-E97109FDB296}) (Version: 7.0.35.7315 - muvee Technologies Pte Ltd) NETGEAR Genie (HKLM-x32\...\NETGEAR Genie) (Version: 2.4.15.07 - NETGEAR Inc.) NTI Backup Now EZ (HKLM-x32\...\InstallShield_{B9ECA41B-55CC-4654-B6B5-6731D009EC69}) (Version: 2.5.2.36 - NTI Corporation) NTI Backup Now EZ (x32 Version: 2.5.2.36 - NTI Corporation) Hidden OpenOffice.org 3.2 (HKLM-x32\...\{5A13987D-55F4-4271-A40E-76AC9B1B38FD}) (Version: 3.2.9502 - OpenOffice.org) OpenSource Flash Video Splitter 1.0.0.5 (HKLM-x32\...\OpenSource Flash Video Splitter) (Version: 1.0.0.5 - ) OverDrive Media Console (HKLM-x32\...\{D07205E7-F6D3-4333-AFCC-782A07685B72}) (Version: 3.2.20 - OverDrive, Inc.) PanoStandAlone (x32 Version: 90.0.146.000 - Hewlett-Packard) Hidden PDF Architect (HKLM-x32\...\{30B41B7A-3C9D-44DE-A7A1-949011F33CC3}) (Version: 1.0.41.8362 - pdfforge) PDF Architect 3 (HKLM-x32\...\PDF Architect 3) (Version: 3.0.45.22485 - pdfforge GmbH) PDF Architect 3 Create Module (x32 Version: 3.1.1.24851 - pdfforge GmbH) Hidden PDF Architect 3 Edit Module (x32 Version: 3.1.1.24851 - pdfforge GmbH) Hidden PDF Architect 3 View Module (x32 Version: 3.1.1.24851 - pdfforge GmbH) Hidden PDF Architect 4 (HKLM-x32\...\PDF Architect 4) (Version: 4.0.34.26215 - pdfforge GmbH) PDF Architect 4 Create Module (Version: 4.1.5.29097 - pdfforge GmbH) Hidden PDF Architect 4 Edit Module (Version: 4.1.5.29097 - pdfforge GmbH) Hidden PDF Architect 4 View Module (Version: 4.1.5.29097 - pdfforge GmbH) Hidden PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.3.2 - pdfforge GmbH) PictureMover (HKLM-x32\...\{1896E712-2B3D-45eb-BCE9-542742A51032}) (Version: 3.3.1.7 - Hewlett-Packard Company) Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.0.2112 - CyberLink Corp.) Power2Go (x32 Version: 6.0.2112 - CyberLink Corp.) Hidden PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 7.0.2202 - CyberLink Corp.) PowerDirector (x32 Version: 7.0.2202 - CyberLink Corp.) Hidden Pretty Good Solitaire version 12.2.0 (HKLM-x32\...\Pretty Good Solitaire_is1) (Version: 12.2.0 - Goodsol Development Inc.) PSSWCORE (x32 Version: 2.01.0000 - Hewlett-Packard) Hidden Python 2.5.2 (HKLM-x32\...\{6B976ADF-8AE8-434E-B282-A06C7F624D2F}) (Version: 2.5.2150 - Python Software Foundation) Python 2.7.1 (HKLM-x32\...\{32939827-d8e5-470a-b126-870db3c69fdf}) (Version: 2.7.1150 - Python Software Foundation) QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.) ReadySHARE Vault (HKLM-x32\...\ReadySHARE Vault) (Version: 3.0 - Genie9) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5910 - Realtek Semiconductor Corp.) Service Pack 1 for SQL Server 2008 (KB968369) (HKLM-x32\...\KB968369) (Version: 10.1.2531.0 - Microsoft Corporation) SolutionCenter (x32 Version: 90.0.146.000 - Hewlett-Packard) Hidden SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - ) SPORE Creature Creator Trial Edition (HKLM-x32\...\{ECEE0279-785F-4CB3-9F28-E69813234BF8}) (Version: 1.00.0000 - Electronic Arts) Sql Server Customer Experience Improvement Program (x32 Version: 10.1.2531.0 - Microsoft Corporation) Hidden SQL Server System CLR Types (HKLM-x32\...\{342D4AD7-EC4C-4EC8-AEA6-E70F5905A490}) (Version: 10.1.2531.0 - Microsoft Corporation) Status (x32 Version: 90.0.146.000 - Hewlett-Packard) Hidden Super Collapse 3 (remove only) (HKLM-x32\...\Super Collapse 3) (Version: 3.3.3.41 - ) Super Collapse 3 (x32 Version: 3.3.3.41 - Yahoo) Hidden swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden System Requirements Lab for Intel (HKLM-x32\...\{53C63F43-B827-42D9-8886-4698D91EA33B}) (Version: 4.5.15.0 - Husdawg, LLC) TBIView 4.26 - TBIMount 1.06 (HKLM-x32\...\TBIView_is1) (Version: - TeraByte Unlimited) TeraByte OS Deployment Tool Suite Professional version 1.34 (HKLM-x32\...\{F65A10A6-905E-497A-8D4F-2776802DF4C2}_is1) (Version: 1.34 - TeraByte, Inc.) TrayApp (x32 Version: 90.0.146.000 - Hewlett-Packard) Hidden TurboTax 2011 (HKLM-x32\...\TurboTax 2011) (Version: - Intuit, Inc) TurboTax 2012 (HKLM-x32\...\TurboTax 2012) (Version: 2012.0 - Intuit, Inc) TurboTax 2013 (HKLM-x32\...\TurboTax 2013) (Version: 2013.0 - Intuit, Inc) TurboTax 2014 (HKLM-x32\...\TurboTax 2014) (Version: 2014.0 - Intuit, Inc) TurboTax 2015 (HKLM-x32\...\TurboTax 2015) (Version: 2015.0 - Intuit, Inc) Unity Web Player (HKU\S-1-5-21-2756045532-2145893136-351098000-1000\...\UnityWebPlayer) (Version: 2.6.1f3_31223 - Unity Technologies ApS) UnloadSupport (x32 Version: 9.0.0 - Hewlett-Packard) Hidden Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden Use the entry named LeapFrog Connect to uninstall (LeapFrog My Pals Plugin) (HKLM-x32\...\MyPalsPlugin) (Version: - LeapFrog) VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden VideoToolkit01 (x32 Version: 90.0.146.000 - Hewlett-Packard) Hidden Visual C++ 8.0 Runtime Setup Package (x64) (HKLM-x32\...\{2FDBBCEA-62DB-45F4-B6E5-0E1FB2A1F29D}) (Version: 9.0.0.623 - AVG Technologies CZ, s.r.o.) Visual Studio 2008 x64 Redistributables (HKLM-x32\...\{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}) (Version: 10.0.0.2 - AVG Technologies) Visual Studio 2010 x64 Redistributables (HKLM\...\{21B133D6-5979-47F0-BE1C-F6A6B304693F}) (Version: 13.0.0.1 - AVG Technologies) Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies) Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) WebReg (x32 Version: 90.0.146.000 - Hewlett-Packard) Hidden Webroot SecureAnywhere (HKLM-x32\...\WRUNINST) (Version: 9.0.13.62 - Webroot) WildTangent Games App (HP Games) (x32 Version: 4.0.5.32 - WildTangent) Hidden Windows Driver Package - Leapfrog (Leapfrog-USBLAN) Net (09/10/2009 02.03.05.012) (HKLM\...\8F14F2ECEDE68D26EA515B48DC25B39103C4FE8D) (Version: 09/10/2009 02.03.05.012 - Leapfrog) Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation) Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation) Windows Live Sync (HKLM-x32\...\{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}) (Version: 14.0.8089.726 - Microsoft Corporation) Windows Live Upload Tool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation) Wizard101 (HKLM-x32\...\{A9E27FF5-6294-46A8-B8FD-77B1DECA3021}) (Version: 1.0.0 - KingsIsle Entertainment, Inc.) Xvid Video Codec (HKLM-x32\...\Xvid Video Codec 1.3.2) (Version: 1.3.2 - Xvid Team) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-2756045532-2145893136-351098000-1000_Classes\CLSID\{3faa4380-a399-11cf-a466-00805fe418f6}\InprocServer32 -> C:\Program Files\Autodesk\DWG TrueView 2012\dwgviewrficn.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-2756045532-2145893136-351098000-1000_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32 -> C:\Program Files (x86)\Citrix\GoToMeeting\952\G2MOutlookAddin64.dll (Citrix Online, a division of Citrix Systems, Inc.) CustomCLSID: HKU\S-1-5-21-2756045532-2145893136-351098000-1000_Classes\CLSID\{D70E31AD-2614-49F2-B0FC-ACA781D81F3E}\localserver32 -> C:\Program Files\Autodesk\DWG TrueView 2012\dwgviewr.exe (Autodesk, Inc.) ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {0A545247-9763-410D-8D32-BFCB5834A140} - System32\Tasks\JavaUpdateDwight => C:\Windows\SysWOW64\jusched.exe Task: {1210A3ED-AD0A-44D0-A1E5-2D89363788E6} - System32\Tasks\CCleanerSkipUAC => C:\Program Files (x86)\CCleaner\CCleaner.exe [2016-09-28] (Piriform Ltd) Task: {18B24E07-47D1-4214-A355-FB7D9EB2F40F} - System32\Tasks\ScanToPCActivationApp.exe_{784D1A95-FE10-4F14-96B7-87927099F272} => C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe [2012-10-17] (Hewlett-Packard Co.) Task: {1D90C64E-E1C0-4F74-9D02-E3A191F96D9C} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.) Task: {1ECE9E88-CB1A-4D72-9E12-E0327951EC37} - System32\Tasks\HPCustParticipation HP Officejet Pro 8600 => C:\Program Files\HP\HP Officejet Pro 8600\Bin\HPCustPartic.exe [2012-10-17] (Hewlett-Packard Co.) Task: {3252751D-90F4-4534-81F6-75B0BD72A779} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.) Task: {3EBBAA71-37E4-423C-AD74-DF54365884F3} - System32\Tasks\{77619A91-E6CC-43DA-AB43-6E6EEBEE640A} => pcalua.exe -a C:\Users\Dwight\Downloads\COL20043.exe -d C:\Users\Dwight\Downloads Task: {62926CED-EE6F-4959-809A-0B7F7A4C85B0} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [2016-09-09] (Apple Inc.) Task: {658ECDF3-9024-47B8-9E31-8B91A3383F42} - System32\Tasks\DVDAgent => c:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe [2009-10-20] (CyberLink Corp.) Task: {6C2D9331-C099-4758-B00E-D36EF296383F} - System32\Tasks\{CF1EBCF6-443F-4E8A-89C9-48A77C092A90} => pcalua.exe -a "C:\Users\Dwight\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FRBD4WB5\yahoo_collapse3_tm6-3ne[1].exe" -d C:\Users\Dwight\Desktop Task: {712C6861-2B14-4E72-92BA-22B6921FE2B7} - System32\Tasks\Microsoft\Windows\Wired\GatherWiredInfo => C:\Windows\system32\gatherWiredInfo.vbs Task: {756FFABD-7929-42CA-8D2A-6859F4F337C2} - System32\Tasks\{498C6E7A-8BE2-4576-96D0-495BD0E08B13} => pcalua.exe -a "C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS\A5E82D02\16.0.0.125\InstStub.exe" -c /X Task: {84C92B5D-E904-4937-A7BF-0B309FC4C9D2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.) Task: {A0D02BE9-9FBA-45B0-A492-25819C93CA35} - System32\Tasks\ROC_REG_JAN_DELETE => C:\ProgramData\AVG January 2013 Campaign\ROC.exe [2013-01-16] () Task: {B8DBF5AF-F3E4-46C8-9FE2-5799C5CC9F01} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-10-26] (Adobe Systems Incorporated) Task: {BD46678E-3471-4275-BDC5-448F3AC04898} - System32\Tasks\{CA212190-120B-4B5A-84EF-1D4273E60C39} => pcalua.exe -a C:\Users\Dwight\Downloads\HPSupportSolutionsFramework-12.0.30.81.exe -d C:\Users\Dwight\Downloads Task: {BD7FF5D4-A1E3-423D-8C92-C31EEA9F7172} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-09-16] (Adobe Systems Incorporated) Task: {C88B493D-8B96-4341-875C-35B5CEB8E3DA} - System32\Tasks\{AA4F2B03-8791-43CB-93F7-ECA3B48523AB} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{B9ECA41B-55CC-4654-B6B5-6731D009EC69}\setup.exe" -c -runfromtemp -l0x0409 Task: {E91D6474-70CC-42BE-80FF-8BED8AF557ED} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs Task: {F3D2AB26-F75D-4407-A984-B7B098B4D857} - System32\Tasks\DSite => C:\Users\Dwight\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE <==== ATTENTION (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\DSite.job => C:\Users\Dwight\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE <==== ATTENTION Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\ROC_REG_JAN_DELETE.job => C:\ProgramData\AVG January 2013 Campaign\ROC.exe ==================== Shortcuts ============================= (The entries could be listed to be restored or removed.) ShortcutWithArgument: C:\Users\Dwight\Desktop\Yahoo & Google\Yahoo! Mail.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> C:\Program Files\YAHOO!\COMMON\YMMAPI~1.DLL,OpenURL hxxp://mail.yahoo.com/?.redir=ymmapi9 ==================== Loaded Modules (Whitelisted) ============== 2010-06-11 15:09 - 2010-06-11 15:09 - 00556544 _____ () C:\Windows\System32\drivers\UMDF\HoMedics\HoMedicsBpmWpdDriver.dll 2010-01-09 16:56 - 2009-05-14 07:24 - 00045568 _____ () C:\Windows\System32\LXDWPMON.DLL 2010-01-09 16:56 - 2009-10-26 14:21 - 00086016 _____ () C:\Windows\System32\LXDWOEM.DLL 2016-09-01 17:12 - 2016-09-01 17:12 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2016-09-01 17:12 - 2016-09-01 17:12 - 01353528 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2016-06-18 19:02 - 2013-08-29 01:08 - 00163328 _____ () C:\Program Files\NETGEAR\ReadySHARE Vault\GSTimelineIconOverlay.gtl 2016-06-18 19:02 - 2013-08-01 03:36 - 00045568 _____ () C:\Program Files\NETGEAR\ReadySHARE Vault\GSLogging.gtl 2016-06-18 19:02 - 2013-08-29 01:08 - 00209920 _____ () C:\Program Files\NETGEAR\ReadySHARE Vault\Settings.gtl 2016-06-18 19:02 - 2013-08-01 03:36 - 00089600 _____ () C:\Program Files\NETGEAR\ReadySHARE Vault\GSEncryption.gtl 2016-06-18 19:02 - 2013-08-29 01:08 - 00490496 _____ () C:\Program Files\NETGEAR\ReadySHARE Vault\GSIndexDB.gtl 2016-06-18 19:02 - 2012-02-02 03:16 - 00740864 _____ () C:\Program Files\NETGEAR\ReadySHARE Vault\sqlite3.gtl 2016-06-18 19:02 - 2013-02-03 05:40 - 00011264 _____ () C:\Program Files\NETGEAR\ReadySHARE Vault\RWLock.gtl 2014-06-18 02:46 - 2014-06-18 02:46 - 01358912 _____ () C:\Program Files\NETGEAR\ReadySHARE Vault\GenieTimelineAgent.exe 2013-08-29 01:08 - 2013-08-29 01:08 - 00063488 _____ () C:\Program Files\NETGEAR\ReadySHARE Vault\XBalloonMsgDll.dll 2013-08-29 01:08 - 2013-08-29 01:08 - 00087040 _____ () C:\Program Files\NETGEAR\ReadySHARE Vault\QueueManager.dll 2012-02-02 03:16 - 2012-02-02 03:16 - 00740864 _____ () C:\Program Files\NETGEAR\ReadySHARE Vault\sqlite3.dll 2013-08-01 03:36 - 2013-08-01 03:36 - 00045568 _____ () C:\Program Files\NETGEAR\ReadySHARE Vault\GSLogging.dll 2013-08-29 01:08 - 2013-08-29 01:08 - 00209920 _____ () C:\Program Files\NETGEAR\ReadySHARE Vault\Settings.dll 2013-08-01 03:36 - 2013-08-01 03:36 - 00089600 _____ () C:\Program Files\NETGEAR\ReadySHARE Vault\GSEncryption.dll 2013-08-29 01:08 - 2013-08-29 01:08 - 00490496 _____ () C:\Program Files\NETGEAR\ReadySHARE Vault\GSIndexDB.dll 2013-02-03 05:40 - 2013-02-03 05:40 - 00011264 _____ () C:\Program Files\NETGEAR\ReadySHARE Vault\RWLock.dll 2013-08-01 03:36 - 2013-08-01 03:36 - 00058368 _____ () C:\Program Files\NETGEAR\ReadySHARE Vault\GSLibrariesManager.dll 2013-08-01 03:36 - 2013-08-01 03:36 - 00093696 _____ () C:\Program Files\NETGEAR\ReadySHARE Vault\GSCurl.dll 2013-08-29 01:08 - 2013-08-29 01:08 - 00332800 _____ () C:\Program Files\NETGEAR\ReadySHARE Vault\OnlineHandler.dll 2016-03-09 03:39 - 2016-03-09 03:39 - 00080640 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\genie2_tray.exe 2013-08-29 01:08 - 2013-08-29 01:08 - 00710144 _____ () C:\Program Files\NETGEAR\ReadySHARE Vault\GSBackupManager.dll 2013-08-29 01:08 - 2013-08-29 01:08 - 00370688 _____ () C:\Program Files\NETGEAR\ReadySHARE Vault\GSWatcher4.dll 2013-02-03 03:21 - 2013-02-03 03:21 - 00045056 _____ () C:\Program Files\NETGEAR\ReadySHARE Vault\pcre.dll 2013-02-03 03:21 - 2013-02-03 03:21 - 00097792 _____ () C:\Program Files\NETGEAR\ReadySHARE Vault\pcrebase.dll 2013-08-29 01:08 - 2013-08-29 01:08 - 00054784 _____ () C:\Program Files\NETGEAR\ReadySHARE Vault\GSLogManager.dll 2013-02-03 05:40 - 2013-02-03 05:40 - 00010752 _____ () C:\Program Files\NETGEAR\ReadySHARE Vault\VSSEngine_Proxy.dll 2016-09-01 17:13 - 2016-09-01 17:13 - 01041720 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2016-09-01 17:13 - 2016-09-01 17:13 - 00080184 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2016-09-01 17:12 - 2016-09-01 17:12 - 00189752 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxslt.dll 2014-12-21 10:07 - 2014-12-21 10:07 - 00119822 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\libgcc_s_dw2-1.dll 2014-12-21 10:07 - 2014-12-21 10:07 - 01026062 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\libstdc++-6.dll 2016-04-12 00:06 - 2016-04-12 00:06 - 00607232 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\Genie.dll 2016-04-12 20:58 - 2016-04-12 20:58 - 01648128 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\SvtNetworkTool.dll 2016-03-31 01:01 - 2016-03-31 01:01 - 00163840 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_Airprint.dll 2016-03-17 20:18 - 2016-03-17 20:18 - 00590848 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_Internet.dll 2016-04-14 00:24 - 2016-04-14 00:24 - 06815744 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_Map.dll 2016-02-26 04:07 - 2016-02-26 04:07 - 00049152 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\QRCode.dll 2016-01-14 20:08 - 2016-01-14 20:08 - 01125888 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\qwt.dll 2016-03-31 01:04 - 2016-03-31 01:04 - 02975232 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_MyMedia.dll 2012-06-27 16:23 - 2012-06-27 16:23 - 00111616 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\libvlc.dll 2012-06-27 16:23 - 2012-06-27 16:23 - 02285056 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\libvlccore.dll 2016-02-24 19:33 - 2016-02-24 19:33 - 00907776 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_NetworkProblem.dll 2016-02-22 02:25 - 2016-02-22 02:25 - 00116224 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\DragonNetTool.dll 2016-04-13 23:30 - 2016-04-13 23:30 - 01144832 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_ParentalControl.dll 2016-02-25 22:49 - 2016-02-25 22:49 - 11209216 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_Resource.dll 2016-04-13 23:30 - 2016-04-13 23:30 - 02519552 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_RouterConfiguration.dll 2016-02-29 04:01 - 2016-02-29 04:01 - 00242176 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_Statistics.dll 2016-04-13 23:30 - 2016-04-13 23:30 - 00842752 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_Ui.dll 2016-03-17 20:18 - 2016-03-17 20:18 - 00414720 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_Wireless.dll 2016-01-14 20:06 - 2016-01-14 20:06 - 00057344 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\DiagnosePlugin.dll 2016-03-02 22:17 - 2016-03-02 22:17 - 00146944 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\DiagnoseDll.dll 2015-08-24 02:41 - 2015-08-24 02:41 - 02360622 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\drivers\libntgr_api.dll 2016-03-02 22:17 - 2016-03-02 22:17 - 00072192 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\SVTUtils.dll 2016-03-02 22:17 - 2016-03-02 22:17 - 00074752 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\NetcardApi.dll 2016-03-02 22:17 - 2016-03-02 22:17 - 00136704 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\airprintdll.dll 2012-06-27 16:23 - 2012-06-27 16:23 - 00219648 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\plugins\access\libdshow_plugin.dll 2012-06-27 16:23 - 2012-06-27 16:23 - 00049664 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\plugins\audio_output\libaout_directx_plugin.dll 2012-06-27 16:23 - 2012-06-27 16:23 - 00051200 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\plugins\audio_output\libwaveout_plugin.dll 2012-06-27 16:23 - 2012-06-27 16:23 - 00070144 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\plugins\video_output\libdirectx_plugin.dll 2012-06-27 16:23 - 2012-06-27 16:23 - 00037376 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\plugins\mmxext\libmemcpymmxext_plugin.dll 2012-06-27 16:23 - 2012-06-27 16:23 - 00051200 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\plugins\control\libhotkeys_plugin.dll 2016-02-24 19:32 - 2016-02-24 19:32 - 00632832 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\InnerPlugin_Update.dll 2016-03-02 23:13 - 2016-03-02 23:13 - 00433664 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\InnerPlugin_WirelessExport.dll 2016-01-14 20:23 - 2016-01-14 20:23 - 00026112 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\WSetupApiPlugin.dll 2016-04-12 00:13 - 2016-04-12 00:13 - 00067072 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\WSetupDll.dll 2008-10-17 18:57 - 2008-10-17 18:57 - 00881960 _____ () C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMediaLibrary.dll 2008-11-12 06:32 - 2008-09-15 08:14 - 00028672 _____ () c:\Program Files (x86)\Cyberlink\Shared files\RichVideops.dll 2010-05-04 14:36 - 2010-05-04 14:36 - 00970752 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll 2010-10-19 07:35 - 2010-10-19 07:35 - 00034816 _____ () C:\Program Files (x86)\Google\Google Desktop Search\gzlib.dll 2011-09-23 20:54 - 2011-09-23 20:54 - 00465344 _____ () C:\Program Files (x86)\NTI\NTI Backup Now EZ\sqlite3.dll 2016-05-12 03:03 - 2016-05-12 03:03 - 00170496 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\5e0daeb618ec1050c6b7f95c5620e53f\IsdiInterop.ni.dll 2010-10-06 16:35 - 2010-03-03 19:08 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\Windows\SysWOW64\CN3A6EXJNN05KC:NW [0] AlternateDataStreams: C:\ProgramData\Temp:CF08C48A [115] ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRkrn => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRSVC => ""="Service" ==================== Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) HKU\.DEFAULT\Software\Classes\exefile: "%1" %* <===== ATTENTION HKU\.DEFAULT\Software\Classes\.exe: exefile => "%1" %* <===== ATTENTION HKU\S-1-5-21-2756045532-2145893136-351098000-1000\Software\Classes\exefile: "%1" %* <===== ATTENTION HKU\S-1-5-21-2756045532-2145893136-351098000-1000\Software\Classes\.exe: exefile => "%1" %* <===== ATTENTION HKU\S-1-5-21-2756045532-2145893136-351098000-1000\Software\Classes\.scr: DWGTrueViewScriptFile => C:\Windows\system32\notepad.exe "%1" ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) IE trusted site: HKU\S-1-5-21-2756045532-2145893136-351098000-1000\...\geindustrial.com -> hxxp://elitenet.geindustrial.com IE trusted site: HKU\S-1-5-21-2756045532-2145893136-351098000-1000\...\microsoft.com -> hxxp://update.microsoft.com IE trusted site: HKU\S-1-5-21-2756045532-2145893136-351098000-1000\...\suddenlink.net -> hxxps://home.suddenlink.net IE restricted site: HKU\S-1-5-21-2756045532-2145893136-351098000-1000\...\.75tz.com -> .75tz.com IE restricted site: HKU\S-1-5-21-2756045532-2145893136-351098000-1000\...\.aavc.com -> .aavc.com IE restricted site: HKU\S-1-5-21-2756045532-2145893136-351098000-1000\...\.acjp.com -> .acjp.com IE restricted site: HKU\S-1-5-21-2756045532-2145893136-351098000-1000\...\.count.cc -> .count.cc IE restricted site: HKU\S-1-5-21-2756045532-2145893136-351098000-1000\...\.ebav.com -> .ebav.com IE restricted site: HKU\S-1-5-21-2756045532-2145893136-351098000-1000\...\.ebaw.com -> .ebaw.com IE restricted site: HKU\S-1-5-21-2756045532-2145893136-351098000-1000\...\.ebch.com -> .ebch.com IE restricted site: HKU\S-1-5-21-2756045532-2145893136-351098000-1000\...\.ebdv.com -> .ebdv.com IE restricted site: HKU\S-1-5-21-2756045532-2145893136-351098000-1000\...\.ebdw.com -> .ebdw.com IE restricted site: HKU\S-1-5-21-2756045532-2145893136-351098000-1000\...\.ebgo.com -> .ebgo.com IE restricted site: HKU\S-1-5-21-2756045532-2145893136-351098000-1000\...\.ebjp.com -> .ebjp.com IE restricted site: HKU\S-1-5-21-2756045532-2145893136-351098000-1000\...\.ebkb.com -> .ebkb.com IE restricted site: HKU\S-1-5-21-2756045532-2145893136-351098000-1000\...\.ebkn.com -> .ebkn.com IE restricted site: HKU\S-1-5-21-2756045532-2145893136-351098000-1000\...\.ebky.com -> .ebky.com IE restricted site: HKU\S-1-5-21-2756045532-2145893136-351098000-1000\...\.eblv.com -> .eblv.com IE restricted site: HKU\S-1-5-21-2756045532-2145893136-351098000-1000\...\.ebmu.com -> .ebmu.com IE restricted site: HKU\S-1-5-21-2756045532-2145893136-351098000-1000\...\.ebvr.com -> .ebvr.com IE restricted site: HKU\S-1-5-21-2756045532-2145893136-351098000-1000\...\.ecmh.com -> .ecmh.com IE restricted site: HKU\S-1-5-21-2756045532-2145893136-351098000-1000\...\.ecmp.com -> .ecmp.com IE restricted site: HKU\S-1-5-21-2756045532-2145893136-351098000-1000\...\.ecwz.com -> .ecwz.com There are 2861 more sites. ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2006-11-02 06:34 - 2006-09-18 15:37 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ::1 localhost ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-2756045532-2145893136-351098000-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Dwight\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: ) (ConsentPromptBehaviorUser: ) (EnableLUA: 0) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == MSCONFIG\startupfolder: C:^Users^Dwight^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Microsoft HealthVault Connection Center.lnk => C:\Windows\pss\Microsoft HealthVault Connection Center.lnk.Startup MSCONFIG\startupreg: 5FEEE6B59D8F4C9F30D9C1272753902EACF065C2._service_run => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=service MSCONFIG\startupreg: BackupNowEZtray => "C:\Program Files (x86)\NTI\NTI Backup Now EZ\BackupNowEZtray.exe" -k MSCONFIG\startupreg: DivXMediaServer => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe MSCONFIG\startupreg: DivXUpdate => "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW MSCONFIG\startupreg: LogMeIn GUI => "C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe" MSCONFIG\startupreg: Monitor => "C:\Program Files (x86)\LeapFrog\LeapFrog Connect\Monitor.exe" ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{12D473EC-21B2-4B00-9801-9F241AFDB0D8}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe FirewallRules: [{83372EB6-872D-4706-AB8D-686494C6942A}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe FirewallRules: [{2F72A97A-FFD0-4D42-96F2-55D659465345}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\HPTouchSmartVideo.exe FirewallRules: [{18E3A7A2-DC6C-452A-9547-E55C5A8CAC97}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\HPTouchSmartPhoto.exe FirewallRules: [{2B469AA2-0093-4D35-B165-DE30483D4244}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\HPTouchSmartMusic.exe FirewallRules: [{52950EA3-E5E6-4923-8854-46B568220FE9}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDirector\PDR.EXE FirewallRules: [{F9CB74E8-F356-4B88-A117-EB88E4C532C1}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe FirewallRules: [{276F4DF9-E983-425B-80D5-C4DC7E3E739B}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPDVDSmart.exe FirewallRules: [{C5A99191-B82F-474D-BBF0-E289B56A1D49}] => (Allow) C:\Users\Dwight\AppData\Local\Akamai\netsession_win.exe FirewallRules: [{46F2420C-C869-432A-AE3D-B6415B276CE9}] => (Allow) C:\Users\Dwight\AppData\Local\Akamai\netsession_win.exe FirewallRules: [TCP Query User{4B34E62E-7B04-408A-AD23-93829BF71E3D}C:\users\dwight\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\dwight\appdata\local\akamai\netsession_win.exe FirewallRules: [UDP Query User{1C3859BC-16B5-4E3C-837B-413690ECC699}C:\users\dwight\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\dwight\appdata\local\akamai\netsession_win.exe FirewallRules: [TCP Query User{9E07A8B0-E384-4A7D-AAAD-E5DAA59F317C}C:\program files (x86)\hp\common\hpdevicedetection3.exe] => (Allow) C:\program files (x86)\hp\common\hpdevicedetection3.exe FirewallRules: [UDP Query User{5EFD8ABD-4D73-41E7-9BEE-A937C0DDFA95}C:\program files (x86)\hp\common\hpdevicedetection3.exe] => (Allow) C:\program files (x86)\hp\common\hpdevicedetection3.exe FirewallRules: [{D58EFFEE-9B70-45C1-B5D7-52AC8898B8C6}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8600\bin\FaxApplications.exe FirewallRules: [{04FF603A-A5BC-474B-BE85-C8F8A0176144}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8600\bin\DigitalWizards.exe FirewallRules: [{D038E5B7-C507-403C-BAD0-1980FE90855D}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8600\bin\SendAFax.exe FirewallRules: [{69BA7CBF-EDD0-4795-9997-867278D05B3B}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8600\Bin\DeviceSetup.exe FirewallRules: [{AE04D3E2-8AB5-4A0D-B483-1B1F857E9A41}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8600\Bin\HPNetworkCommunicator.exe FirewallRules: [{7BA3BDB1-583E-47CE-8ED6-3C57ECC327D9}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8600\Bin\HPNetworkCommunicatorCom.exe FirewallRules: [{C59D251D-1D03-4FA6-97AA-89C58C16BDEF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{A5FBB941-5FA7-48F1-81A1-F966C59E4593}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [TCP Query User{8218DA8F-C588-43A9-A1C9-1327361E9193}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [UDP Query User{F7EB5C7E-A404-4A9A-B1F8-ADBAB4C808DB}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [{01646364-7C2B-45F1-88ED-7D444B0D8CDC}] => (Allow) C:\Program Files (x86)\LeapFrog\LeapFrog Connect\LeapfrogConnect.exe FirewallRules: [{26FCF00D-7FF4-4DF1-AD94-B906D8FFFBA3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{6575D8EF-B1D5-4326-B6E9-9730276B2810}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{2BB9ECCD-27EB-490D-AC77-43A6CC56297B}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{1179712B-C3AE-44BF-B714-E0C174BA55D3}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{883ED9AB-E8A7-4B67-B8D9-B55DDFFF788D}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{130957AF-017F-4CF0-9DBD-24925C4CDF9F}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [TCP Query User{6F145936-E69C-4037-BFF2-D84A50C153A5}C:\program files (x86)\netgear genie\bin\netgeargenie.exe] => (Allow) C:\program files (x86)\netgear genie\bin\netgeargenie.exe FirewallRules: [UDP Query User{3A65092B-5857-4570-B987-09CF1BC4BAF0}C:\program files (x86)\netgear genie\bin\netgeargenie.exe] => (Allow) C:\program files (x86)\netgear genie\bin\netgeargenie.exe FirewallRules: [{392C36BE-8CB6-4472-8E3F-28278852432C}] => (Block) C:\program files (x86)\netgear genie\bin\netgeargenie.exe FirewallRules: [{58D674DF-97F8-4030-A083-B99FFC90AE94}] => (Block) C:\program files (x86)\netgear genie\bin\netgeargenie.exe FirewallRules: [{CF549DFA-9CEA-45C7-A913-2DFDF1307FF7}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdater.exe FirewallRules: [{32540025-81DA-45EE-85BD-09103326DD48}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe FirewallRules: [{2077D1BC-8BD4-4EA8-8412-0EC7B832E83C}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe FirewallRules: [{365EB670-3A2B-4979-AF05-D6A6FD1702A5}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe FirewallRules: [{084DBCAB-75BE-4526-AB33-F40E5B47F0A3}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe FirewallRules: [{14D58B79-3C8F-45C4-AD2D-EDA49862C527}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe FirewallRules: [{36968627-96AC-4138-91E1-72D2A722C087}] => (Allow) C:\Program Files\iTunes\iTunes.exe FirewallRules: [{9CBAB6FD-AB4C-48C0-8179-B2F40BF923EA}] => (Allow) LPort=49174 FirewallRules: [{D28DE3AA-9483-48E4-9C88-CE75FB6E2DE8}] => (Allow) LPort=5000 ==================== Restore Points ========================= 12-10-2016 18:56:45 Windows Update 13-10-2016 02:00:43 Windows Update 23-10-2016 05:02:19 Scheduled Checkpoint 29-10-2016 12:37:53 Removed AVG 29-10-2016 12:39:58 Removed AVG 2016 29-10-2016 16:46:47 Windows Update 04-11-2016 13:46:25 Windows Update ==================== Faulty Device Manager Devices ============= Name: SRTSPX Description: SRTSPX Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: SRTSPX Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Event log errors: ========================= Application errors: ================== Error: (11/09/2016 08:36:27 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: mDNSCoreReceiveResponse: Unexpected conflict discarding 17 16.1.168.192.in-addr.arpa. PTR Dwight-PC.local. Error: (11/09/2016 08:36:27 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: mDNSCoreReceiveResponse: Received from 192.168.1.16:5353 19 16.1.168.192.in-addr.arpa. PTR Dwight-PC-2.local. Error: (11/09/2016 08:36:22 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: GenieTimelineService.exe, version: 4.0.3.300, time stamp: 0x521db6c9 Faulting module name: ntdll.dll, version: 6.1.7601.23543, time stamp: 0x57d2fde1 Exception code: 0xc0000005 Fault offset: 0x0000000000048d84 Faulting process id: 0xd90 Faulting application start time: 0x01d23adbb140d6da Faulting application path: C:\Program Files\NETGEAR\ReadySHARE Vault\GenieTimelineService.exe Faulting module path: C:\Windows\SYSTEM32\ntdll.dll Report Id: 7714adf5-a6ee-11e6-b7aa-00248c4aa115 Error: (11/09/2016 06:58:15 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 7706 Error: (11/09/2016 06:58:15 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 7706 Error: (11/09/2016 06:58:15 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (11/09/2016 06:58:12 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 3931 Error: (11/09/2016 06:58:12 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 3931 Error: (11/09/2016 06:58:12 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (11/09/2016 04:50:33 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: GenieTimelineService.exe, version: 4.0.3.300, time stamp: 0x521db6c9 Faulting module name: ntdll.dll, version: 6.1.7601.23543, time stamp: 0x57d2fde1 Exception code: 0xc0000005 Fault offset: 0x0000000000048d84 Faulting process id: 0x1864 Faulting application start time: 0x01d23a7fc28c31a4 Faulting application path: C:\Program Files\NETGEAR\ReadySHARE Vault\GenieTimelineService.exe Faulting module path: C:\Windows\SYSTEM32\ntdll.dll Report Id: eb6c3861-a6ce-11e6-b7aa-00248c4aa115 System errors: ============= Error: (11/09/2016 08:36:28 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: The Genie Timeline Service service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 5000 milliseconds: Restart the service. Error: (11/09/2016 08:36:19 PM) (Source: Service Control Manager) (EventID: 7011) (User: ) Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the IPBusEnum service. Error: (11/09/2016 04:50:34 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: The Genie Timeline Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 5000 milliseconds: Restart the service. Error: (11/09/2016 04:50:20 PM) (Source: Service Control Manager) (EventID: 7011) (User: ) Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the IPBusEnum service. Error: (11/09/2016 04:50:20 PM) (Source: Service Control Manager) (EventID: 7011) (User: ) Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the lmhosts service. Error: (11/09/2016 05:52:29 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: The Genie Timeline Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 5000 milliseconds: Restart the service. Error: (11/09/2016 05:52:15 AM) (Source: Service Control Manager) (EventID: 7011) (User: ) Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the IPBusEnum service. Error: (11/07/2016 05:54:23 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: The Genie Timeline Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 5000 milliseconds: Restart the service. Error: (11/07/2016 05:54:11 PM) (Source: Service Control Manager) (EventID: 7011) (User: ) Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the IPBusEnum service. Error: (11/07/2016 10:51:51 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: The Genie Timeline Service service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 5000 milliseconds: Restart the service. CodeIntegrity: =================================== Date: 2009-12-09 18:55:55.263 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys because the set of per-page image hashes could not be found on the system. Date: 2009-12-09 18:55:55.253 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys because the set of per-page image hashes could not be found on the system. Date: 2009-12-09 18:55:55.244 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys because the set of per-page image hashes could not be found on the system. Date: 2009-12-09 18:55:55.234 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys because the set of per-page image hashes could not be found on the system. Date: 2009-12-09 18:55:55.225 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys because the set of per-page image hashes could not be found on the system. Date: 2009-12-09 18:55:09.122 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys because the set of per-page image hashes could not be found on the system. Date: 2009-12-09 18:55:09.111 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys because the set of per-page image hashes could not be found on the system. Date: 2009-12-09 18:55:09.102 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys because the set of per-page image hashes could not be found on the system. Date: 2009-12-09 18:55:09.092 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys because the set of per-page image hashes could not be found on the system. Date: 2009-12-09 18:55:09.081 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys because the set of per-page image hashes could not be found on the system. ==================== Memory info =========================== Processor: Pentium(R) Dual-Core CPU E5300 @ 2.60GHz Percentage of memory in use: 32% Total physical RAM: 6134.23 MB Available physical RAM: 4149.78 MB Total Virtual: 12266.64 MB Available Virtual: 9065.15 MB ==================== Drives ================================ Drive c: (HP) (Fixed) (Total:452.72 GB) (Free:339.59 GB) NTFS ==>[drive with boot components (obtained from BCD)] Drive d: (FACTORY_IMAGE) (Fixed) (Total:13.04 GB) (Free:1.77 GB) NTFS ==>[system with boot components (obtained from drive)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 1549F232) Partition 1: (Active) - (Size=452.7 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=13 GB) - (Type=07 NTFS) ==================== End of Addition.txt ============================