Additional scan result of Farbar Recovery Scan Tool (x64) Version: 23-04-2017 01
Ran by [removed] (24-04-2017 13:53:28)
Running from C:\Users\[removed]\Desktop
Windows 10 Home Single Language Version 1607 (X64) (2016-12-15 10:36:01)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrador (S-1-5-21-3911236962-863353365-1618339010-500 - Administrator - Disabled)
andre (S-1-5-21-3911236962-863353365-1618339010-1002 - Administrator - Enabled) => C:\Users\andre
DefaultAccount (S-1-5-21-3911236962-863353365-1618339010-503 - Limited - Disabled)
Equipo (S-1-5-21-3911236962-863353365-1618339010-1001 - Administrator - Enabled) => C:\Users\Equipo
Invitado (S-1-5-21-3911236962-863353365-1618339010-501 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: ESET NOD32 Antivirus 10.0.390.0 (Enabled - Up to date) {EC1D6F37-E411-475A-DF50-12FF7FE4AC70}
AS: ESET NOD32 Antivirus 10.0.390.0 (Enabled - Up to date) {577C8ED3-C22B-48D4-E5E0-298D0463E6CD}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

adaware antivirus (HKLM\...\{BECD7155-DC57-4F89-B1A8-A90B033C6209}_AdAwareUpdater) (Version: 12.0.649.11190 - adaware)
AdAwareUpdater (Version: 12.0.649.11190 - adaware) Hidden
Adobe Acrobat Reader DC - Español (HKLM-x32\...\{AC76BA86-7AD7-1034-7B44-AC0F074E4100}) (Version: 17.009.20044 - Adobe Systems Incorporated)
Apple Application Support (32 bits) (HKLM-x32\...\{05E07D23-91E9-4E70-A4CC-EF505088F967}) (Version: 5.4.1 - Apple Inc.)
Apple Application Support (64 bits) (HKLM\...\{741291DA-2B34-4D44-8FB6-58EDE21261D8}) (Version: 5.4.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{DB18F1C0-846F-46F5-A074-5B97C8AF5C8E}) (Version: 10.3.1.2 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{52D87F32-70E4-4348-8148-C0B9F35B1314}) (Version: 2.3.0.177 - Apple Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Curse (HKLM-x32\...\{75080CC9-4C7A-45C4-B149-9C2790FA88F6}) (Version: 6.0.0.0 - Curse)
CutList Plus (HKLM-x32\...\{704BBDC0-54E3-43EB-9F82-D27A59BD3A05}) (Version: 6.0.5 - Bridgewood Design)
CutList Plus fx (HKLM-x32\...\{61EAFC10-157E-4407-AABE-DE3243A88B05}) (Version: 12.2.11.0 - Bridgewood Design)
Eines de correcció del Microsoft Office 2013: català (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Epson Connect Printer Setup (HKLM-x32\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.4.0 - Seiko Epson Corporation)
Epson Customer Research Participation (HKLM\...\{B26449A6-6007-4460-B4FE-C4776115BCEA}) (Version: 1.81.0000 - Seiko Epson Corporation)
Epson Easy Photo Print 2 (HKLM-x32\...\{922E2D91-9314-45AA-9AEF-E585F93B59A9}) (Version: 2.6.1.0 - Seiko Epson Corporation)
Epson Event Manager (HKLM-x32\...\{4B22C430-7EA8-4534-8358-376FD900B953}) (Version: 3.10.0042 - Seiko Epson Corporation)
EPSON L375 Series Printer Uninstall (HKLM\...\EPSON L375 Series) (Version:  - SEIKO EPSON Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EpsonNet Print (HKLM\...\{15A0F113-BF2C-4C12-8AA8-42AE0D9AE1C9}) (Version: 3.1.2.0 - SEIKO EPSON Corporation)
ESET NOD32 Antivirus (HKLM\...\{1ECE2323-0C41-412D-B7EF-1997F810C439}) (Version: 10.0.390.0 - ESET, spol. s r.o.)
Exodus Online (HKLM-x32\...\{552FD7D8-896C-4211-9460-886FB7E21158}) (Version: 1.0.0 - Exodus Online)
Ferramentas de verificación de Microsoft Office 2013 - Galego (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 57.0.2987.133 - Google Inc.)
Google Update Helper (x32 Version: 1.3.21.169 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.33.3 - Google Inc.) Hidden
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Photosmart Plus B210 series Ayuda (HKLM-x32\...\{7F5FDEA1-D0AC-4D80-9D95-59775FCCFA40}) (Version: 140.0.54.54 - Hewlett Packard)
HP Photosmart Plus B210 series Software básico del dispositivo (HKLM\...\{68182FEC-6526-45F9-ABA9-642712B74D2E}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Support Solutions Framework (HKLM-x32\...\{7759F11B-DF54-4726-9A01-61701580D786}) (Version: 12.6.14.19 - HP Inc.)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP)
iTunes (HKLM\...\{6C01A0A7-7440-4D48-93C6-2927A1E93FE6}) (Version: 12.6.0.100 - Apple Inc.)
Java 8 Update 131 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180131F0}) (Version: 8.0.1310.11 - Oracle Corporation)
League of Legends (HKLM-x32\...\League of Legends 4.1.2) (Version: 4.1.2 - Riot Games)
League of Legends (x32 Version: 4.1.2 - Riot Games) Hidden
Malwarebytes versión 3.0.6.1469 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.6.1469 - Malwarebytes)
Manual Epson L375 versión 1.0 (HKLM-x32\...\UsersGuideManual Epson L375_is1) (Version: 1.0 - )
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3911236962-863353365-1618339010-1001\...\OneDriveSetup.exe) (Version: 17.3.6799.0327 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microtool version 1.1.0 (HKLM-x32\...\Microtool_is1) (Version: 1.1.0 - Microtool Technologies)
Outils de vérification linguistique 2013 de Microsoft Office - Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Paquete de idioma de Microsoft Visual Studio 2010 Tools para Office Runtime (x64) - ESN (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - ESN) (Version: 10.0.50903 - Microsoft Corporation)
PubHotspot versión 1.0 (HKLM-x32\...\PubHotspot_is1) (Version: 1.0 - Leading2Apps)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7340 - Realtek Semiconductor Corp.)
Revisores de Texto do Microsoft Office 2013 – Português do Brasil (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version:  - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (Version:  - Microsoft) Hidden
Software Updater (HKLM-x32\...\{8DBC5A0A-31C4-46C7-B252-6B593EA11A87}) (Version: 4.3.7 - SEIKO EPSON CORPORATION)
Sweet Home 3D version 5.4 (HKLM\...\Sweet Home 3D_is1) (Version: 5.4 - eTeks)
UC浏览器 (HKLM-x32\...\UCBrowser) (Version: 6.1.2107.204 - 广州市动景计算机科技有限公司) <==== ATTENTION
Update for Skype for Business 2015 (KB3172492) 64-Bit Edition (HKLM\...\{90150000-012B-0C0A-1000-0000000FF1CE}_Office15.PROPLUS_{B5E4B3F8-BBE7-4D65-BFAA-A6DF1143D7D5}) (Version:  - Microsoft)
Update for Skype for Business 2015 (KB3178731) 64-Bit Edition (HKLM\...\{90150000-012B-0C0A-1000-0000000FF1CE}_Office15.PROPLUS_{949C4091-F95D-418E-B215-27303F51F9AA}) (Version:  - Microsoft)
Update_msi (HKLM-x32\...\{59B5A9CD-253D-4C41-A073-B387D4C9672D}) (Version: 1.0.0 - Default Company Name)
WinRAR 5.40 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0A38E212-FE56-4274-BF2E-8120FDBB0FBD} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-12-21] (HP Inc.)
Task: {0E74046A-3131-4DD7-B6CB-0379E57A549A} - System32\Tasks\AutoKMS => C:\WINDOWS\AutoKMS\AutoKMS.exe [2017-01-11] ()
Task: {2FAD172F-F54F-4DE5-B8CF-2F77F690568C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [2017-04-01] (HP Inc.)
Task: {31EA4EBE-1577-4A64-881A-6DF1FBBB7C69} - System32\Tasks\Drolocult Collector => C:\Program Files (x86)\Shoccult\vedther.exe 
Task: {391200CE-F44B-4874-ACB8-ED689567F376} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {3BD997F7-488B-408D-BA45-F7EB119B6622} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2017-04-07] (HP Inc.)
Task: {4F43BFC2-846B-4EE0-9403-796A60F22ADD} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-11-07] (HP Inc.)
Task: {52623778-0AA8-418D-876E-7278AE178D51} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {57AC557B-9737-4813-BB90-05E2EB6A9FB3} - \VEy6vn8JEK -> No File <==== ATTENTION
Task: {5DB96217-43C5-439F-B775-AE2E98B1B904} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-02-02] (Adobe Systems Incorporated)
Task: {5F6974DF-7329-4BBE-8782-7CB92413A767} - System32\Tasks\HPCeeScheduleForEquipo => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2016-05-12] (HP Development Company, L.P.)
Task: {64BBD5F1-9E88-4E80-85A9-AC432342B25A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-03-29] (Google Inc.)
Task: {676CEE22-153B-4E74-A6EF-BD22B52021C6} - \Vobale -> No File <==== ATTENTION
Task: {6E2185F6-D3EB-4C10-B675-B147B6979841} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2017-02-14] (Apple Inc.)
Task: {6F0D65F5-2485-4A20-9C98-C8D49F5D2EF1} - \Microsoft\Windows\Media Center\RegisterObject -> No File <==== ATTENTION
Task: {73E5FC29-5266-4FA3-831E-DCB47D427996} - System32\Tasks\EPSON L375 Series Update {82204FDB-299A-4AF4-97EF-3E85FE64DB2E} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSN8E.EXE [2013-11-21] (SEIKO EPSON CORPORATION)
Task: {7A280ADB-78BD-48B9-85F4-046C201464B1} - System32\Tasks\Arovish Monitor => C:\Program Files (x86)\Generseclidoge\xubergh.exe 
Task: {9168BB2A-0D56-4D37-8AFE-4CB07C9F1301} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-12-06] (HP Inc.)
Task: {992574F7-D1D6-4475-A7F1-0F195A81C5A5} - System32\Tasks\EPSON L375 Series Update {9648970E-787E-4699-BB51-43A8C295C9BC} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSN8E.EXE [2013-11-21] (SEIKO EPSON CORPORATION)
Task: {99C8364C-CE6C-47E2-B4FF-736A3514BD87} - \A21SIOU9zF -> No File <==== ATTENTION
Task: {A602C4EE-4C55-4506-A9F1-EEBED33BAE81} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {E2F896D8-EC8B-4180-87CD-CF2D4F327460} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2017-04-07] (HP Inc.)
Task: {ED2B5818-38BD-442E-B35E-60AF27CB9A63} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe 
Task: {F29E3987-E945-464A-8592-462E45E37F37} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-03-29] (Google Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\EPSON L375 Series Update {82204FDB-299A-4AF4-97EF-3E85FE64DB2E}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSN8E.EXE:/EXE:{82204FDB-299A-4AF4-97EF-3E85FE64DB2E} /F:UpdateWORKGROUP\DESKTOP-2UO53T0$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\EPSON L375 Series Update {9648970E-787E-4699-BB51-43A8C295C9BC}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSN8E.EXE:/EXE:{9648970E-787E-4699-BB51-43A8C295C9BC} /F:UpdateWORKGROUP\DESKTOP-2UO53T0$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\HPCeeScheduleForEquipo.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2016-07-16 06:42 - 2016-07-16 06:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2017-04-18 23:57 - 2017-03-28 01:22 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-11-17 02:28 - 2016-11-17 02:28 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2017-03-16 17:08 - 2017-03-16 17:08 - 01354040 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2017-03-29 03:13 - 2017-04-18 23:55 - 02271520 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll
2017-04-18 23:57 - 2017-03-28 01:22 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-11-02 00:05 - 2016-11-02 00:05 - 00401896 _____ () C:\WINDOWS\system32\igfxTray.exe
2016-12-14 22:05 - 2016-12-14 22:05 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-03-15 01:21 - 2017-03-04 01:31 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-03-15 01:22 - 2017-03-04 01:12 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-03-15 01:22 - 2017-03-04 01:05 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-03-15 01:22 - 2017-03-04 01:05 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-04-18 23:57 - 2017-03-28 00:07 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2017-04-18 23:57 - 2017-03-28 00:08 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-04-18 23:57 - 2017-03-28 00:11 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2017-03-27 12:20 - 2017-03-27 12:20 - 00092472 _____ () C:\Program Files\iTunes\zlib1.dll
2017-03-27 12:20 - 2017-03-27 12:20 - 01354040 _____ () C:\Program Files\iTunes\libxml2.dll
2017-04-19 00:01 - 2017-04-19 00:02 - 00077312 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-04-19 00:01 - 2017-04-19 00:02 - 00189952 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-04-19 00:01 - 2017-04-19 00:02 - 42507264 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-04-19 00:01 - 2017-04-19 00:02 - 02334184 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x64__kzf8qxf38zg5c\skypert.dll
2017-03-30 01:52 - 2017-03-29 03:47 - 02885464 _____ () C:\Program Files (x86)\Google\Chrome\Application\57.0.2987.133\libglesv2.dll
2017-03-30 01:52 - 2017-03-29 03:47 - 00099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\57.0.2987.133\libegl.dll
2017-04-04 03:56 - 2017-04-04 03:56 - 00019456 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2017-04-04 03:56 - 2017-04-04 03:56 - 22723584 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2017-04-04 03:56 - 2017-04-04 03:56 - 00448512 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.AGM.Native.Windows.dll
2017-04-04 03:56 - 2017-04-04 03:56 - 05427200 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\MediaEngine.dll
2016-12-14 19:25 - 2016-12-14 19:26 - 00680448 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.DesignCore.dll
2017-04-04 03:56 - 2017-04-04 03:56 - 00435712 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.RichMedia.Ink.Controls.dll
2017-04-04 03:56 - 2017-04-04 03:56 - 01062400 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\Microsoft.Sharing.dll
2016-12-14 19:25 - 2016-12-14 19:26 - 00291328 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.313.10010.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxlctlfudivq`qsp`28hfm [0]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com

There are 7933 more sites.

IE restricted site: HKU\S-1-5-21-3911236962-863353365-1618339010-1001\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-3911236962-863353365-1618339010-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-3911236962-863353365-1618339010-1001\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-3911236962-863353365-1618339010-1001\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-3911236962-863353365-1618339010-1001\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-3911236962-863353365-1618339010-1001\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-3911236962-863353365-1618339010-1001\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-3911236962-863353365-1618339010-1001\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-3911236962-863353365-1618339010-1001\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-3911236962-863353365-1618339010-1001\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-3911236962-863353365-1618339010-1001\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-3911236962-863353365-1618339010-1001\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-3911236962-863353365-1618339010-1001\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-3911236962-863353365-1618339010-1001\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-3911236962-863353365-1618339010-1001\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-3911236962-863353365-1618339010-1001\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-3911236962-863353365-1618339010-1001\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-3911236962-863353365-1618339010-1001\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-3911236962-863353365-1618339010-1001\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-3911236962-863353365-1618339010-1001\...\123simsen.com -> www.123simsen.com

There are 7933 more sites.


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3911236962-863353365-1618339010-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.1.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{E8DE7117-6EB0-42A5-826F-2C3786655AA7}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{0DE80D11-D82A-476C-A4D9-690A36B35E85}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{62CB32C7-EE80-4989-A889-68056C15F626}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{D1712B63-56CF-49E3-9D66-7AC51C3F6E99}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{C1E08367-DE81-4DE6-9705-E03C3AE32DE8}] => (Allow) C:\Program Files\HP\HP Photosmart Plus B210 series\Bin\DeviceSetup.exe
FirewallRules: [{EB5B76ED-74E0-4148-AD30-B2F472738475}] => (Allow) C:\Program Files\HP\HP Photosmart Plus B210 series\Bin\HPNetworkCommunicator.exe
FirewallRules: [{EE3E38F6-61CE-4520-8AE2-DC0F4989B247}] => (Allow) C:\Program Files\HP\HP Photosmart Plus B210 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{5DD18B7B-13A0-49B8-AEE2-5624C00164A9}] => (Allow) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
FirewallRules: [{5CC1EC32-3E15-41D3-A61F-602BE2079AC7}] => (Allow) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
FirewallRules: [{D6F04764-96B0-4954-818B-A4E8451D1E2E}] => (Allow) E:\Network\EpsonNetSetup\ENEasyApp.exe
FirewallRules: [{50619CD3-A674-49A1-82A0-ECF6A29261DD}] => (Allow) E:\Network\EpsonNetSetup\ENEasyApp.exe
FirewallRules: [{FCB49427-AD77-4CB5-A933-E272637ECC2D}] => (Allow) C:\Program Files (x86)\EPSON Software\ECPrinterSetup\ENPApp.exe
FirewallRules: [{837B8103-0247-4948-BC6F-401D4F194203}] => (Allow) C:\Program Files (x86)\EPSON Software\ECPrinterSetup\ENPApp.exe
FirewallRules: [TCP Query User{185DF4D3-206C-468B-B906-C53F03630C8F}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [UDP Query User{570E600D-C82E-4827-B59C-65A0F268D1B8}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [{F7E5422E-5563-4D9F-A998-853666A1CB9C}] => (Allow) C:\Program Files (x86)\MIO\loader\st1000dm003-1er162_z4y72fefxxxxz4y72fef.dat
FirewallRules: [{D1D72F1A-6E6E-4982-A8D3-E5A495F22A0D}] => (Allow) C:\Program Files (x86)\MIO\loader\st1000dm003-1er162_z4y72fefxxxxz4y72fef.dat
FirewallRules: [{0E545389-A73E-4057-8BD4-0405D037C6FA}] => (Allow) C:\Program Files (x86)\Yeshat\Application\chrome.exe
FirewallRules: [{9594DBE7-5BE1-42FF-B84F-1630A8F0E800}] => (Allow) C:\Program Files (x86)\Firefox\bin\FirefoxUpdate.exe
FirewallRules: [{78F4E62E-5937-4504-9527-A596F245D18E}] => (Allow) C:\Program Files (x86)\Firefox\Firefox.exe
FirewallRules: [{8A73AF40-317D-444B-B9DE-A11B79158EC9}] => (Allow) C:\WINDOWS\SysWOW64\SurfShield.exe
FirewallRules: [{0A5F7295-3B8B-4BC1-8E23-3A409400CB5D}] => (Allow) C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe
FirewallRules: [{EF12D390-8769-4AD1-94A7-15B213CD6E1D}] => (Allow) C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe
FirewallRules: [{8E947F51-314D-4951-8B9F-A833A49782F4}] => (Allow) C:\Program Files (x86)\UCBrowser\Application\Downloader\download\MiniThunderPlatform.exe
FirewallRules: [{6B0439F5-BEDB-4C26-9D7C-63F3A393FC6C}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{4857C845-FC82-46F0-AF89-D536F4130449}] => (Allow) C:\Program Files\iTunes\iTunes.exe

==================== Restore Points =========================

05-04-2017 06:22:23 Punto de control programado
19-04-2017 00:09:14 Windows Update
22-04-2017 19:16:56 Windows Update
24-04-2017 03:39:57 SketchUp 2017 instalado(s)

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/24/2017 01:28:37 PM) (Source: MsiInstaller) (EventID: 11402) (User: DESKTOP-2UO53T0)
Description: Product: SketchUp 2017 -- Error 1402. Could not open key: HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION.  System error 5.  Verify that you have sufficient access to that key, or contact your support personnel.

Error: (04/24/2017 11:06:59 AM) (Source: MsiInstaller) (EventID: 1024) (User: NT AUTHORITY)
Description: Producto: Microsoft Office Shared MUI (Spanish) 2013 - la actualización "Security Update for Microsoft Office 2013 (KB3178710) 64-Bit Edition" no se pudo instalar. Código de error 1603. Windows Installer no puede crear registros para ayudar a solucionar problemas de instalación de paquetes de software. Use el vínculo siguiente para obtener instrucciones sobre la activación de la compatibilidad de registro: http://go.microsoft.com/fwlink/?LinkId=23127

Error: (04/24/2017 11:06:59 AM) (Source: MsiInstaller) (EventID: 11402) (User: NT AUTHORITY)
Description: Producto: Microsoft Office Shared MUI (Spanish) 2013 -- Error 1402.El programa de instalación no puede abrir la clave del registro HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD.  Compruebe que dispone de permisos suficientes para tener acceso al Registro o póngase en contacto con el servicio de Soporte técnico de Microsoft (PSS). Para obtener información sobre cómo ponerse en contacto con este servicio, veaPSS10R.CHM.

Error: (04/24/2017 11:06:41 AM) (Source: MsiInstaller) (EventID: 1024) (User: NT AUTHORITY)
Description: Producto: Microsoft Office Professional Plus 2013 - la actualización "Security Update for Microsoft Outlook 2013 (KB3172519) 64-Bit Edition" no se pudo instalar. Código de error 1603. Windows Installer no puede crear registros para ayudar a solucionar problemas de instalación de paquetes de software. Use el vínculo siguiente para obtener instrucciones sobre la activación de la compatibilidad de registro: http://go.microsoft.com/fwlink/?LinkId=23127

Error: (04/24/2017 11:06:25 AM) (Source: MsiInstaller) (EventID: 11402) (User: NT AUTHORITY)
Description: Producto: Microsoft Office Professional Plus 2013 -- Error 1402.El programa de instalación no puede abrir la clave del registro HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD.  Compruebe que dispone de permisos suficientes para tener acceso al Registro o póngase en contacto con el servicio de Soporte técnico de Microsoft (PSS). Para obtener información sobre cómo ponerse en contacto con este servicio, veaPSS10R.CHM.

Error: (04/24/2017 11:05:36 AM) (Source: MsiInstaller) (EventID: 1024) (User: NT AUTHORITY)
Description: Producto: Microsoft Office Professional Plus 2013 - la actualización "Update for Microsoft PowerPoint 2013 (KB3162043) 64-Bit Edition" no se pudo instalar. Código de error 1603. Windows Installer no puede crear registros para ayudar a solucionar problemas de instalación de paquetes de software. Use el vínculo siguiente para obtener instrucciones sobre la activación de la compatibilidad de registro: http://go.microsoft.com/fwlink/?LinkId=23127

Error: (04/24/2017 11:05:21 AM) (Source: MsiInstaller) (EventID: 11402) (User: NT AUTHORITY)
Description: Producto: Microsoft Office Professional Plus 2013 -- Error 1402.El programa de instalación no puede abrir la clave del registro HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD.  Compruebe que dispone de permisos suficientes para tener acceso al Registro o póngase en contacto con el servicio de Soporte técnico de Microsoft (PSS). Para obtener información sobre cómo ponerse en contacto con este servicio, veaPSS10R.CHM.

Error: (04/24/2017 11:04:44 AM) (Source: MsiInstaller) (EventID: 1024) (User: NT AUTHORITY)
Description: Producto: Microsoft Office Professional Plus 2013 - la actualización "Update for Microsoft Office 2013 (KB3172523) 64-Bit Edition" no se pudo instalar. Código de error 1603. Windows Installer no puede crear registros para ayudar a solucionar problemas de instalación de paquetes de software. Use el vínculo siguiente para obtener instrucciones sobre la activación de la compatibilidad de registro: http://go.microsoft.com/fwlink/?LinkId=23127

Error: (04/24/2017 11:04:34 AM) (Source: MsiInstaller) (EventID: 11402) (User: NT AUTHORITY)
Description: Producto: Microsoft Office Professional Plus 2013 -- Error 1402.El programa de instalación no puede abrir la clave del registro HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD.  Compruebe que dispone de permisos suficientes para tener acceso al Registro o póngase en contacto con el servicio de Soporte técnico de Microsoft (PSS). Para obtener información sobre cómo ponerse en contacto con este servicio, veaPSS10R.CHM.

Error: (04/24/2017 11:03:54 AM) (Source: MsiInstaller) (EventID: 1024) (User: NT AUTHORITY)
Description: Producto: Microsoft Office Professional Plus 2013 - la actualización "Update for Skype for Business 2015 (KB3178731) 64-Bit Edition" no se pudo instalar. Código de error 1603. Windows Installer no puede crear registros para ayudar a solucionar problemas de instalación de paquetes de software. Use el vínculo siguiente para obtener instrucciones sobre la activación de la compatibilidad de registro: http://go.microsoft.com/fwlink/?LinkId=23127


System errors:
=============
Error: (04/24/2017 11:07:04 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Error de instalación: error de Windows al instalar la siguiente actualización, error 0x80070643: Actualización de seguridad para Microsoft Office 2013 (KB3178710) Edición de 64 bits.

Error: (04/24/2017 11:06:46 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Error de instalación: error de Windows al instalar la siguiente actualización, error 0x80070643: Actualización de seguridad para Microsoft Outlook 2013 (KB3172519) Edición de 64 bits.

Error: (04/24/2017 11:05:42 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Error de instalación: error de Windows al instalar la siguiente actualización, error 0x80070643: Actualización para Microsoft PowerPoint 2013 (KB3162043) Edición de 64 bits.

Error: (04/24/2017 11:04:50 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Error de instalación: error de Windows al instalar la siguiente actualización, error 0x80070643: Actualización para Microsoft Office 2013 (KB3172523) Edición de 64 bits.

Error: (04/24/2017 11:04:00 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Error de instalación: error de Windows al instalar la siguiente actualización, error 0x80070643: Actualización para Skype for Business 2015 (KB3178731) Edición de 64 bits.

Error: (04/24/2017 11:03:02 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Error de instalación: error de Windows al instalar la siguiente actualización, error 0x80070643: Actualización para Microsoft Excel 2013 (KB3191823) Edición de 64 bits.

Error: (04/24/2017 10:53:40 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: El servicio VC IDE Base Service se cerró con el siguiente error: 
No se puede encontrar el módulo especificado.

Error: (04/24/2017 10:51:48 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: La configuración de permisos específico de la aplicación no concede el permiso Activación Local para la aplicación de servidor COM con CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 y APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 al usuario NT AUTHORITY\SERVICIO LOCAL con SID (S-1-5-19) en la dirección LocalHost (con LRPC) que se ejecuta en el contenedor de aplicaciones con SID No disponible (No disponible). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes.

Error: (04/24/2017 10:51:48 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: La configuración de permisos específico de la aplicación no concede el permiso Activación Local para la aplicación de servidor COM con CLSID 
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 y APPID 
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 al usuario NT AUTHORITY\SERVICIO LOCAL con SID (S-1-5-19) en la dirección LocalHost (con LRPC) que se ejecuta en el contenedor de aplicaciones con SID No disponible (No disponible). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes.

Error: (04/24/2017 10:51:46 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: La configuración de permisos específico de la aplicación no concede el permiso Activación Local para la aplicación de servidor COM con CLSID 
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 y APPID 
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 al usuario NT AUTHORITY\SYSTEM con SID (S-1-5-18) en la dirección LocalHost (con LRPC) que se ejecuta en el contenedor de aplicaciones con SID No disponible (No disponible). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes.


CodeIntegrity:
===================================
  Date: 2017-04-24 13:52:16.098
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-04-24 13:52:16.093
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-04-24 13:52:05.124
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-04-24 13:52:05.122
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-04-24 13:52:04.777
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-04-24 13:52:04.775
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-04-24 13:52:04.460
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-04-24 13:52:04.458
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-04-24 13:52:04.096
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2017-04-24 13:52:04.093
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info =========================== 

Processor: Intel(R) Pentium(R) 3558U @ 1.70GHz
Percentage of memory in use: 61%
Total physical RAM: 6054.54 MB
Available physical RAM: 2352.37 MB
Total Virtual: 12198.54 MB
Available Virtual: 8066.42 MB

==================== Drives ================================

Drive c: (Windows8_OS) (Fixed) (Total:905.25 GB) (Free:777.17 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 0E549942)

Partition: GPT.

==================== End of Addition.txt ============================