Additional scan result of Farbar Recovery Scan Tool (x64) Version: 03.05.2018 Ran by [removed] (06-05-2018 15:50:22) Running from C:\Users\[removed]\Desktop Windows 10 Home Version 1709 16299.402 (X64) (2018-03-27 15:40:02) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-4192706455-1068272750-516750703-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-4192706455-1068272750-516750703-503 - Limited - Disabled) Guest (S-1-5-21-4192706455-1068272750-516750703-501 - Limited - Disabled) Me (S-1-5-21-4192706455-1068272750-516750703-1002 - Limited - Enabled) => C:\Users\Me Steven (S-1-5-21-4192706455-1068272750-516750703-1001 - Administrator - Enabled) => C:\Users\Steven WDAGUtilityAccount (S-1-5-21-4192706455-1068272750-516750703-504 - Limited - Disabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 7-Zip 18.01 (x64) (HKLM\...\7-Zip) (Version: 18.01 - Igor Pavlov) Advanced SystemCare 11 (HKLM-x32\...\Advanced SystemCare_is1) (Version: 11.3.0 - IObit) Agent Ransack x64 (HKLM\...\{F46C91EA-16DE-46D6-BE3B-C94BDF641567}) (Version: 8.0.867.1 - Mythicsoft Ltd) Android Studio (HKLM\...\Android Studio) (Version: 1.0 - Google Inc.) Application Verifier x64 External Package (HKLM\...\{D9908CED-5ABB-FEE9-FC84-743F4D38637C}) (Version: 10.1.16299.15 - Microsoft) Hidden ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 4.0.9 - ASUS) Click Install if prompted (HKLM-x32\...\{40830C8E-936E-4E08-AE37-240FF3343927}) (Version: 1.0.6.0 - ExpressVpn) Hidden DiagnosticsHub_CollectionService (HKLM\...\{5FC8BCBB-3408-48B0-BAF0-839490F7AE65}) (Version: 15.6.27309 - Microsoft Corporation) Hidden DisplayDriverAnalyzer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_DisplayDriverAnalyzer) (Version: 391.35 - NVIDIA Corporation) Hidden Driver Booster 5 (HKLM-x32\...\Driver Booster_is1) (Version: 5.3.0 - IObit) ExpressVPN (HKLM-x32\...\{B97E1AC2-1F11-43C0-90A7-22B158337D06}) (Version: 6.5.1.3605 - ExpressVPN) Hidden ExpressVPN (HKLM-x32\...\{e87d0eca-dc93-4f55-bf74-0d155d8c6f07}) (Version: 6.5.1.3605 - ExpressVPN) Git version 2.16.2 (HKU\S-1-5-21-4192706455-1068272750-516750703-1002\...\Git_is1) (Version: 2.16.2 - The Git Development Community) icecap_collection_neutral (HKLM-x32\...\{12C1EC05-F936-4A80-821E-7AAC64C4E6FF}) (Version: 15.6.27413 - Microsoft Corporation) Hidden icecap_collection_x64 (HKLM\...\{C8E22DF4-5498-4B61-93CF-3081BE95A1BA}) (Version: 15.6.27413 - Microsoft Corporation) Hidden icecap_collectionresources (HKLM-x32\...\{079302B9-1EF0-46D0-83FA-382C01ADF6E6}) (Version: 15.6.27406 - Microsoft Corporation) Hidden icecap_collectionresourcesx64 (HKLM-x32\...\{500E3263-4930-456B-AD78-E6D0ACC7ABB1}) (Version: 15.6.27406 - Microsoft Corporation) Hidden Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4549 - Intel Corporation) Java 8 Update 171 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180171F0}) (Version: 8.0.1710.11 - Oracle Corporation) Kits Configuration Installer (HKLM-x32\...\{86E59C8F-61D5-1782-A3CE-60AE7E4D7791}) (Version: 10.1.16299.15 - Microsoft) Hidden MetaTrader - AxiTrader (HKLM-x32\...\MetaTrader - AxiTrader) (Version: 4.00 - MetaQuotes Software Corp.) Microsoft System CLR Types for SQL Server 2017 (HKLM\...\{EE99006A-F227-41BA-884C-C3AF9642D95A}) (Version: 14.0.3006.16 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2017 (HKLM-x32\...\{FBD0D997-4E36-4B10-8471-BD7CF42ECE7F}) (Version: 14.0.3006.16 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2017 Redistributable (x64) - 14.13.26020 (HKLM-x32\...\{7474cd6e-76cc-4257-837e-5b9261e526af}) (Version: 14.13.26020.0 - Microsoft Corporation) Microsoft Visual C++ 2017 Redistributable (x86) - 14.13.26020 (HKLM-x32\...\{5c045b7f-e561-4794-91f8-c6cda0893107}) (Version: 14.13.26020.0 - Microsoft Corporation) Microsoft Visual Studio Installer (HKLM\...\{6F320B93-EE3C-4826-85E0-ADF79F8D4C61}) (Version: 1.15.3248.309 - Microsoft Corporation) Mozilla Firefox 59.0.2 (x64 en-US) (HKLM\...\Mozilla Firefox 59.0.2 (x64 en-US)) (Version: 59.0.2 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 59.0.2 - Mozilla) MSI Development Tools (HKLM-x32\...\{973CACA2-E018-065B-0580-F2784802E299}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 7.5.6 - Notepad++ Team) NVIDIA GeForce Experience 3.4.0.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.4.0.70 - NVIDIA Corporation) NVIDIA PhysX 系統軟體 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation) NVIDIA 圖形驅動程式 391.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 391.35 - NVIDIA Corporation) NvNodejs (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvNodejs) (Version: 3.4.0.70 - NVIDIA Corporation) Hidden NvTelemetry (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvTelemetry) (Version: 2.4.5.0 - NVIDIA Corporation) Hidden Oracle VM VirtualBox 5.2.8 (HKLM\...\{97034DBD-92F4-4C7A-8198-C21A729AA1C3}) (Version: 5.2.8 - Oracle Corporation) Python 3.6.4 (Anaconda3 5.1.0 64-bit) (HKU\S-1-5-21-4192706455-1068272750-516750703-1002\...\Python 3.6.4 (Anaconda3 5.1.0 64-bit)) (Version: 5.1.0 - Anaconda, Inc.) Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.14393.31233 - Realtek Semiconductor Corp.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7571 - Realtek Semiconductor Corp.) RogueKiller version 12.12.15.0 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 12.12.15.0 - Adlice Software) Sandboxie 5.24 (64-bit) (HKLM\...\Sandboxie) (Version: 5.24 - Sandboxie Holdings, LLC) SDK ARM Additions (HKLM-x32\...\{7922BB77-0B59-840A-AC80-D560A34D75C5}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden SDK ARM Redistributables (HKLM-x32\...\{C87DF65C-A672-7E08-A083-E7D48FE8DB70}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 7.1.0351 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController) (Version: 3.4.0.70 - NVIDIA Corporation) Hidden SIM Manager (HKLM-x32\...\{90A5E41B-072E-49F9-816E-87071211367F}) (Version: 3.3.0 - Dekart) Split Tunneling Driver (HKLM-x32\...\{F078B0B5-2F41-42C2-9162-B8C628D5E6FE}) (Version: 1.0.0.0 - ExpressVpn) Hidden Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Universal CRT Extension SDK (HKLM-x32\...\{A5FA2886-1925-133F-0D41-B9A8ECEA0A2D}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden Universal CRT Headers Libraries and Sources (HKLM-x32\...\{B739B4C5-EEEC-8E70-0276-38C4779AF398}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden Universal CRT Redistributable (HKLM-x32\...\{A9D6F52C-694E-3E41-7AB8-5BEB644742A5}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden Universal CRT Tools x64 (HKLM\...\{E053089E-7953-3219-814F-F485FC151C54}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden Universal CRT Tools x86 (HKLM-x32\...\{B9424F08-0617-C4F6-A798-5A9250C1A738}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden Universal General MIDI DLS Extension SDK (HKLM-x32\...\{D261CEA1-AB8D-9CFA-4407-BCEFC78661AC}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation) vcpp_crt.redist.clickonce (HKLM-x32\...\{B5789DA1-92FB-4760-BD23-44DDCAA94584}) (Version: 14.13.26020 - Microsoft Corporation) Hidden Visual Studio Community 2017 (HKLM-x32\...\1a86131d) (Version: 15.6.27428.2015 - Microsoft Corporation) VS Immersive Activate Helper (HKLM-x32\...\{8A2BDA07-3417-46C1-9058-CB32BC63E30E}) (Version: 16.0.76.0 - Microsoft Corporation) Hidden VS JIT Debugger (HKLM\...\{F8F52853-A1A7-42C7-A082-5A6D5853BB0B}) (Version: 16.0.76.0 - Microsoft Corporation) Hidden VS Script Debugging Common (HKLM\...\{0EE5749D-2DC0-460F-AB1C-06B3EDB42426}) (Version: 16.0.76.0 - Microsoft Corporation) Hidden vs_communitymsi (HKLM-x32\...\{C2749223-157E-48F0-9410-A510361D6803}) (Version: 15.6.27406 - Microsoft Corporation) Hidden vs_communitymsires (HKLM-x32\...\{40040E64-50EB-4FCF-B209-DA0B20821759}) (Version: 15.0.26621 - Microsoft Corporation) Hidden vs_devenvmsi (HKLM-x32\...\{BFFA2FFB-1095-4ADD-A352-368806D2412B}) (Version: 15.0.26621 - Microsoft Corporation) Hidden vs_filehandler_amd64 (HKLM-x32\...\{02DD895F-089F-4A63-81A9-78D00142AF20}) (Version: 15.6.27406 - Microsoft Corporation) Hidden vs_filehandler_x86 (HKLM-x32\...\{E6A92308-33DF-494B-A91A-3B80FBC97F2B}) (Version: 15.6.27406 - Microsoft Corporation) Hidden vs_FileTracker_Singleton (HKLM-x32\...\{8EB2C670-04C2-482D-BACD-B4095E27FD39}) (Version: 15.6.27309 - Microsoft Corporation) Hidden vs_Graphics_Singletonx64 (HKLM\...\{B11D79C6-332C-47B6-B58C-2F88A4911C7C}) (Version: 15.0.27005 - Microsoft Corporation) Hidden vs_Graphics_Singletonx86 (HKLM-x32\...\{2497054A-0269-4F45-98AE-F469F89CC45F}) (Version: 15.0.27005 - Microsoft Corporation) Hidden vs_minshellinteropmsi (HKLM-x32\...\{6B45EEA3-85F8-4B26-B952-6830A45F2688}) (Version: 15.6.27323 - Microsoft Corporation) Hidden vs_minshellmsi (HKLM-x32\...\{13E08AD0-D6AC-44C4-9F5B-0AE2EB56B105}) (Version: 15.6.27421 - Microsoft Corporation) Hidden vs_minshellmsires (HKLM-x32\...\{6DFE6F8D-B61D-4348-AB70-4ABF1210DFD5}) (Version: 15.0.26621 - Microsoft Corporation) Hidden vs_tipsmsi (HKLM-x32\...\{1AC6CC3D-7724-4D84-9270-798A2191AB1C}) (Version: 15.0.27005 - Microsoft Corporation) Hidden Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden WinAppDeploy (HKLM-x32\...\{9690D51C-4435-1C20-7819-66CCAB0F03F9}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden Windows Driver Package - Dekart (DEKART38) SmartCardReader (08/08/2011 1.1.6.1) (HKLM\...\8D434570B215F4E7650A004193A770DC9BD6DB58) (Version: 08/08/2011 1.1.6.1 - Dekart) Windows SDK AddOn (HKLM-x32\...\{350F0ECD-0783-4529-8797-98F0AD33EAC0}) (Version: 10.1.0.0 - Microsoft Corporation) Windows Software Development Kit - Windows 10.0.16299.15 (HKLM-x32\...\{6195c203-b53c-4bb7-983a-6070a902e704}) (Version: 10.1.16299.15 - Microsoft Corporation) Windows 驅動程式封裝 - ASUS (ATP) Mouse (10/21/2015 1.0.0.262) (HKLM\...\F84E8769D448654402782673214DE63760BE04A7) (Version: 10/21/2015 1.0.0.262 - ASUS) WinRT Intellisense Desktop - en-us (HKLM-x32\...\{385A1387-A488-9E90-3635-086129610034}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden WinRT Intellisense Desktop - Other Languages (HKLM-x32\...\{D7DD3171-DA58-52A1-95B2-4769640855AF}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden WinRT Intellisense IoT - en-us (HKLM-x32\...\{7336279F-8F8F-5530-A543-3BE963846C0A}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden WinRT Intellisense IoT - Other Languages (HKLM-x32\...\{E414A474-0A87-4F66-C409-A4D9857CFD34}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden WinRT Intellisense Mobile - en-us (HKLM-x32\...\{CE760B86-975B-F514-5673-0ED4332B801B}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden WinRT Intellisense PPI - en-us (HKLM-x32\...\{5E67F8BE-D8D2-257F-CE19-419A2D5125C7}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden WinRT Intellisense PPI - Other Languages (HKLM-x32\...\{A2AA063E-AF50-A1F5-8925-A06EB1556644}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden WinRT Intellisense UAP - en-us (HKLM-x32\...\{7D4C7F4A-02A9-E434-6451-C8787DF28C1F}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden WinRT Intellisense UAP - Other Languages (HKLM-x32\...\{BC467065-9374-5345-DA3F-FCF073304A25}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-4192706455-1068272750-516750703-1002_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\Me\AppData\Local\Microsoft\OneDrive\18.025.0204.0009\amd64\FileSyncShell64.dll => No File CustomCLSID: HKU\S-1-5-21-4192706455-1068272750-516750703-1002_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\Me\AppData\Local\Microsoft\OneDrive\18.025.0204.0009\amd64\FileSyncShell64.dll => No File CustomCLSID: HKU\S-1-5-21-4192706455-1068272750-516750703-1002_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\Me\AppData\Local\Microsoft\OneDrive\18.025.0204.0009\amd64\FileSyncShell64.dll => No File ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-01-28] (Igor Pavlov) ContextMenuHandlers1: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll [2017-09-26] (IObit) ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files\Notepad++\NppShell_06.dll [2018-03-19] () ContextMenuHandlers2: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll [2017-09-26] (IObit) ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-01-28] (Igor Pavlov) ContextMenuHandlers4: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll [2017-09-26] (IObit) ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\Windows\system32\igfxDTCM.dll [2016-11-30] (Intel Corporation) ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2018-03-24] (NVIDIA Corporation) ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-01-28] (Igor Pavlov) ContextMenuHandlers2_.DEFAULT: [AgentRansack] -> {2AE9D6D8-E348-4853-B266-C78844D31B97} => C:\Program Files\Mythicsoft\Agent Ransack\ShellExt.dll [2017-03-02] (Mythicsoft Ltd) ContextMenuHandlers4_.DEFAULT: [AgentRansack] -> {2AE9D6D8-E348-4853-B266-C78844D31B97} => C:\Program Files\Mythicsoft\Agent Ransack\ShellExt.dll [2017-03-02] (Mythicsoft Ltd) ContextMenuHandlers5_.DEFAULT: [AgentRansack] -> {2AE9D6D8-E348-4853-B266-C78844D31B97} => C:\Program Files\Mythicsoft\Agent Ransack\ShellExt.dll [2017-03-02] (Mythicsoft Ltd) ContextMenuHandlers6_.DEFAULT: [AgentRansack] -> {2AE9D6D8-E348-4853-B266-C78844D31B97} => C:\Program Files\Mythicsoft\Agent Ransack\ShellExt.dll [2017-03-02] (Mythicsoft Ltd) ContextMenuHandlers2_S-1-5-21-4192706455-1068272750-516750703-1001: [AgentRansack] -> {2AE9D6D8-E348-4853-B266-C78844D31B97} => C:\Program Files\Mythicsoft\Agent Ransack\ShellExt.dll [2017-03-02] (Mythicsoft Ltd) ContextMenuHandlers4_S-1-5-21-4192706455-1068272750-516750703-1001: [AgentRansack] -> {2AE9D6D8-E348-4853-B266-C78844D31B97} => C:\Program Files\Mythicsoft\Agent Ransack\ShellExt.dll [2017-03-02] (Mythicsoft Ltd) ContextMenuHandlers5_S-1-5-21-4192706455-1068272750-516750703-1001: [AgentRansack] -> {2AE9D6D8-E348-4853-B266-C78844D31B97} => C:\Program Files\Mythicsoft\Agent Ransack\ShellExt.dll [2017-03-02] (Mythicsoft Ltd) ContextMenuHandlers6_S-1-5-21-4192706455-1068272750-516750703-1001: [AgentRansack] -> {2AE9D6D8-E348-4853-B266-C78844D31B97} => C:\Program Files\Mythicsoft\Agent Ransack\ShellExt.dll [2017-03-02] (Mythicsoft Ltd) ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {02F6F896-A316-4116-96DF-587E6592FA15} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-04-01] (NVIDIA Corporation) Task: {1DA0B8CE-0604-4657-866F-404BEC318885} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.14.17639.18041-0\MpCmdRun.exe [2018-04-26] (Microsoft Corporation) Task: {28C754DE-A2AF-4928-AA8D-DBCA411F453F} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-04-01] (NVIDIA Corporation) Task: {29D476C2-06FD-483F-BB50-E0E95EA6D363} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-04-01] (NVIDIA Corporation) Task: {2AEC9379-A376-43AD-93A1-2E5F2E60A0DD} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-04-01] (NVIDIA Corporation) Task: {2DFF8236-8C0C-42B2-9FDF-A3CD5F7A1332} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-04-01] (NVIDIA Corporation) Task: {5FA999C4-78A6-4D7F-9D63-B813287D919B} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2015-12-14] (AsusTek) Task: {689D6ECC-5DEC-47EA-94F4-4038C089B00B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.14.17639.18041-0\MpCmdRun.exe [2018-04-26] (Microsoft Corporation) Task: {85D9DF3E-0836-4CEC-96AB-59728383AF6D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.14.17639.18041-0\MpCmdRun.exe [2018-04-26] (Microsoft Corporation) Task: {99D2CC74-F2BD-4DB7-9474-68F8E156C29D} - System32\Tasks\Driver Booster Scheduler => C:\Program Files (x86)\IObit\Driver Booster\5.3.0\Scheduler.exe [2018-01-26] (IObit) Task: {A859A2B3-AB4B-4265-AB77-399091517AB7} - System32\Tasks\Driver Booster SkipUAC (Steven) => C:\Program Files (x86)\IObit\Driver Booster\5.3.0\DriverBooster.exe [2018-03-22] (IObit) Task: {AC005052-D451-44DA-B034-1E6CE8849C9A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.14.17639.18041-0\MpCmdRun.exe [2018-04-26] (Microsoft Corporation) Task: {BC242B14-B3AC-4F4F-8CAE-77B222455DCC} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-04-01] (NVIDIA Corporation) Task: {BDCA99A2-C55A-4D4E-9203-D0651D9C34A3} - System32\Tasks\ASC11_SkipUac_Steven => C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe [2018-03-30] (IObit) Task: {CE43B296-73E6-4FE2-911A-1B551C999D79} - System32\Tasks\ASC11_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe [2018-03-29] (IObit) Task: {CFA72403-2C3E-408F-85FC-BC961789D7A2} - System32\Tasks\RtHDVBg_ListenToDevice => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-11-10] (Realtek Semiconductor) Task: {E4DC4042-FD66-4E4C-ABB4-8DA977A8E3FD} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-04-01] (NVIDIA Corporation) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) ==================== Shortcuts & WMI ======================== (The entries could be listed to be restored or removed.) ==================== Loaded Modules (Whitelisted) ============== 2017-09-29 21:41 - 2017-09-29 21:41 - 000184432 _____ () C:\Windows\SYSTEM32\inputhost.dll 2018-03-28 01:23 - 2018-03-24 09:19 - 000544192 _____ () C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem\DisplayDriverAnalyzer\_DisplayDriverCrashAnalyzer64.dll 2018-03-28 00:42 - 2018-03-24 07:02 - 000135136 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2018-03-28 01:05 - 2017-04-01 11:27 - 004490808 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\Poco.dll 2018-03-28 01:05 - 2017-04-01 11:27 - 001148984 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll 2018-02-07 16:42 - 2018-02-07 16:42 - 000339168 _____ () C:\Program Files (x86)\ExpressVPN\bootstrap\AMD64\nssm.exe 2018-02-07 16:45 - 2018-02-07 16:45 - 008457344 _____ () C:\Program Files (x86)\ExpressVPN\xvpnd\xvpnd.exe 2018-03-28 00:51 - 2018-02-22 08:26 - 011044864 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2018-03-28 00:51 - 2018-02-22 08:21 - 001804288 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2018-02-07 16:42 - 2018-02-07 16:42 - 000225792 _____ () C:\Program Files (x86)\ExpressVPN\xvpnd\windows\liblzo2-2.dll 2018-02-07 16:42 - 2018-02-07 16:42 - 000096776 _____ () C:\Program Files (x86)\ExpressVPN\xvpnd\windows\libpkcs11-helper-1.dll 2016-11-30 21:57 - 2016-11-30 21:57 - 000401888 _____ () C:\Windows\system32\igfxTray.exe 2018-05-06 09:14 - 2018-05-06 09:15 - 000779776 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1804.1101.0_x64__8wekyb3d8bbwe\TimeBackground.dll 2018-05-03 09:29 - 2018-05-03 09:30 - 000062464 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11803.1001.11.0_x64__8wekyb3d8bbwe\WinStoreTasksWrapper.dll 2018-05-03 09:29 - 2018-05-03 09:30 - 000178688 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11803.1001.11.0_x64__8wekyb3d8bbwe\WinStore.Preview.dll 2018-02-07 16:45 - 2018-02-07 16:45 - 006164864 _____ () C:\Program Files (x86)\ExpressVPN\xvpnd\libxvclient.dll 2018-02-07 16:46 - 2018-02-07 16:46 - 000080512 _____ () C:\Program Files (x86)\ExpressVPN\xvpnd\windows\ExpressVPN.NetworkUtils.dll 2018-02-07 16:42 - 2018-02-07 16:42 - 000303104 _____ () C:\Program Files (x86)\ExpressVPN\xvpnd\windows\ExpressVPN.SplitTunnel.dll 2018-02-07 16:46 - 2018-02-07 16:46 - 000441472 _____ () C:\Program Files (x86)\ExpressVPN\xvpnd\windows\ExpressVPN.FilterManager.dll 2018-03-28 01:05 - 2017-04-01 11:27 - 000020536 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll 2018-03-28 01:05 - 2017-04-01 11:27 - 000901688 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll 2018-03-28 01:05 - 2017-04-01 11:27 - 003776056 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\Poco.dll 2018-03-28 01:05 - 2017-04-01 11:27 - 000338488 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVAccountAPINode.node 2018-03-28 01:05 - 2017-04-01 11:27 - 000252352 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\DriverInstall.node 2018-03-28 01:05 - 2017-04-01 11:27 - 002443320 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\Downloader.node 2018-03-28 01:05 - 2017-04-01 11:27 - 000385592 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameShareAPINode.node 2018-03-28 01:05 - 2017-04-01 11:27 - 000543288 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSpCapsAPINode.node 2018-03-28 01:05 - 2017-04-01 11:27 - 000468536 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGalleryAPINode.node 2018-04-29 23:10 - 2017-10-16 10:14 - 000442144 _____ () C:\Program Files (x86)\IObit\Driver Booster\5.3.0\madExcept_.bpl 2018-04-29 23:10 - 2017-10-16 10:14 - 000210720 _____ () C:\Program Files (x86)\IObit\Driver Booster\5.3.0\madBasic_.bpl 2018-04-29 23:10 - 2017-10-16 10:14 - 000059680 _____ () C:\Program Files (x86)\IObit\Driver Booster\5.3.0\madDisAsm_.bpl ==================== Alternate Data Streams (Whitelisted) ========= ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" ==================== Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2017-09-29 21:46 - 2017-09-29 21:44 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-4192706455-1068272750-516750703-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Steven\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper HKU\S-1-5-21-4192706455-1068272750-516750703-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Me\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper DNS Servers: 10.58.0.1 - 172.20.10.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: ) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{EBF794C0-060E-4A58-A54C-6354ECEFD6B0}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{B05216DF-7A7F-45D6-AD2E-68AEF30F2575}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{E362D3CB-6C29-4D1C-A007-0C780806BDB5}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{6B8DACF2-19E4-4D8F-8D8C-84CF208BD2D4}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{C48C7CC6-1983-4C44-BA31-FA5874450FD2}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{50740140-5DC1-4F8E-B293-18A2EF785BCB}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [TCP Query User{D3F300BF-A673-4216-AC64-59DCAA29815B}C:\program files\android\android studio\jre\bin\java.exe] => (Block) C:\program files\android\android studio\jre\bin\java.exe FirewallRules: [UDP Query User{70EE9379-4C52-4743-BAF9-B9420F152A76}C:\program files\android\android studio\jre\bin\java.exe] => (Block) C:\program files\android\android studio\jre\bin\java.exe FirewallRules: [{D538B58D-197E-4559-B61D-60AC809BA3C8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Car Mechanic Simulator 2018\cms2018.exe FirewallRules: [{F9FE9EA3-DCC5-4380-9B01-A5626D72F0EE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Car Mechanic Simulator 2018\cms2018.exe FirewallRules: [{A655C6E1-7C6B-4191-B5F4-D3DE15F1B5EF}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\5.3.0\DriverBooster.exe FirewallRules: [{3AF1C71F-07AE-4775-BD88-4ADFC058A4B5}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\5.3.0\DriverBooster.exe FirewallRules: [{B28508C9-F56C-44F2-90CC-FA385AF2483D}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\5.3.0\DBDownloader.exe FirewallRules: [{FB7F2C5E-B5E1-42D4-B1C0-D1DCB3B46427}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\5.3.0\DBDownloader.exe FirewallRules: [{9395CAFF-F0CC-4E94-AC99-1CBF3ED06203}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\5.3.0\AutoUpdate.exe FirewallRules: [{98334938-8894-4D10-AFE2-4A6FB2D7B6A9}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\5.3.0\AutoUpdate.exe ==================== Restore Points ========================= 05-05-2018 22:23:47 Scheduled Checkpoint ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (05/06/2018 03:24:30 PM) (Source: DPTF) (EventID: 256) (User: ) Description: Intel(R) Dynamic Platform and Thermal Framework : ESIF(8.3.10205.5196) TYPE: ERROR MODULE: DPTF TIME 23191417 ms DPTF Build Version: 8.3.10205.5196 DPTF Build Date: Sep 1 2017 18:49:36 Source File: ..\..\..\..\Sources\Policies\ConfigTdpPolicy\ConfigTdpPolicy.cpp @ line 194 Executing Function: ConfigTdpPolicy::onDomainPowerControlCapabilityChanged Message: DPTF Build Version: 8.3.10205.5196 DPTF Build Date: Sep 1 2017 18:49:36 Source File: ..\..\..\Sources\Manager\EsifServices.cpp @ line 540 Executing Function: EsifServices::primitiveExecuteSetAsTimeInMilliseconds Message: Error returned from ESIF services interface function call Participant: TCPU [0] Domain: PKG [0] ESIF Primitive: SET_RAPL_POWER_LIMIT_TIME_WINDOW [340] ESIF Instance: 0 ESIF Return Code: ESIF_E_PRIMITIVE_NOT_FOUND_IN_DSP [2404] Participant: TCPU [0] Domain: PKG [0] Policy: ConfigTDP Policy [0] Error: (05/06/2018 03:24:30 PM) (Source: DPTF) (EventID: 256) (User: ) Description: Intel(R) Dynamic Platform and Thermal Framework : ESIF(8.3.10205.5196) TYPE: ERROR MODULE: DPTF TIME 23191414 ms DPTF Build Version: 8.3.10205.5196 DPTF Build Date: Sep 1 2017 18:49:36 Source File: ..\..\..\..\Sources\Policies\ConfigTdpPolicy\ConfigTdpPolicy.cpp @ line 194 Executing Function: ConfigTdpPolicy::onDomainPowerControlCapabilityChanged Message: DPTF Build Version: 8.3.10205.5196 DPTF Build Date: Sep 1 2017 18:49:36 Source File: ..\..\..\Sources\Manager\EsifServices.cpp @ line 540 Executing Function: EsifServices::primitiveExecuteSetAsTimeInMilliseconds Message: Error returned from ESIF services interface function call Participant: TCPU [0] Domain: PKG [0] ESIF Primitive: SET_RAPL_POWER_LIMIT_TIME_WINDOW [340] ESIF Instance: 0 ESIF Return Code: ESIF_E_PRIMITIVE_NOT_FOUND_IN_DSP [2404] Participant: TCPU [0] Domain: PKG [0] Policy: ConfigTDP Policy [0] Error: (05/06/2018 03:24:30 PM) (Source: DPTF) (EventID: 256) (User: ) Description: Intel(R) Dynamic Platform and Thermal Framework : ESIF(8.3.10205.5196) TYPE: ERROR MODULE: DPTF TIME 23191412 ms DPTF Build Version: 8.3.10205.5196 DPTF Build Date: Sep 1 2017 18:49:36 Source File: ..\..\..\..\Sources\Policies\ConfigTdpPolicy\ConfigTdpPolicy.cpp @ line 194 Executing Function: ConfigTdpPolicy::onDomainPowerControlCapabilityChanged Message: DPTF Build Version: 8.3.10205.5196 DPTF Build Date: Sep 1 2017 18:49:36 Source File: ..\..\..\Sources\Manager\EsifServices.cpp @ line 540 Executing Function: EsifServices::primitiveExecuteSetAsTimeInMilliseconds Message: Error returned from ESIF services interface function call Participant: TCPU [0] Domain: PKG [0] ESIF Primitive: SET_RAPL_POWER_LIMIT_TIME_WINDOW [340] ESIF Instance: 0 ESIF Return Code: ESIF_E_PRIMITIVE_NOT_FOUND_IN_DSP [2404] Participant: TCPU [0] Domain: PKG [0] Policy: ConfigTDP Policy [0] Error: (05/06/2018 08:58:45 AM) (Source: nssm) (EventID: 1018) (User: ) Description: Failed to read registry value AppDirectory: The operation completed successfully. Error: (05/06/2018 08:56:13 AM) (Source: DPTF) (EventID: 256) (User: ) Description: Intel(R) Dynamic Platform and Thermal Framework : ESIF(8.3.10205.5196) TYPE: ERROR MODULE: DPTF TIME 248820009 ms DPTF Build Version: 8.3.10205.5196 DPTF Build Date: Sep 1 2017 18:49:36 Source File: ..\..\..\..\Sources\Policies\ConfigTdpPolicy\ConfigTdpPolicy.cpp @ line 194 Executing Function: ConfigTdpPolicy::onDomainPowerControlCapabilityChanged Message: DPTF Build Version: 8.3.10205.5196 DPTF Build Date: Sep 1 2017 18:49:36 Source File: ..\..\..\Sources\Manager\EsifServices.cpp @ line 540 Executing Function: EsifServices::primitiveExecuteSetAsTimeInMilliseconds Message: Error returned from ESIF services interface function call Participant: TCPU [1] Domain: PKG [0] ESIF Primitive: SET_RAPL_POWER_LIMIT_TIME_WINDOW [340] ESIF Instance: 0 ESIF Return Code: ESIF_E_PRIMITIVE_NOT_FOUND_IN_DSP [2404] Participant: TCPU [1] Domain: PKG [0] Policy: ConfigTDP Policy [0] Error: (05/06/2018 08:56:13 AM) (Source: DPTF) (EventID: 256) (User: ) Description: Intel(R) Dynamic Platform and Thermal Framework : ESIF(8.3.10205.5196) TYPE: ERROR MODULE: DPTF TIME 248820007 ms DPTF Build Version: 8.3.10205.5196 DPTF Build Date: Sep 1 2017 18:49:36 Source File: ..\..\..\..\Sources\Policies\ConfigTdpPolicy\ConfigTdpPolicy.cpp @ line 194 Executing Function: ConfigTdpPolicy::onDomainPowerControlCapabilityChanged Message: DPTF Build Version: 8.3.10205.5196 DPTF Build Date: Sep 1 2017 18:49:36 Source File: ..\..\..\Sources\Manager\EsifServices.cpp @ line 540 Executing Function: EsifServices::primitiveExecuteSetAsTimeInMilliseconds Message: Error returned from ESIF services interface function call Participant: TCPU [1] Domain: PKG [0] ESIF Primitive: SET_RAPL_POWER_LIMIT_TIME_WINDOW [340] ESIF Instance: 0 ESIF Return Code: ESIF_E_PRIMITIVE_NOT_FOUND_IN_DSP [2404] Participant: TCPU [1] Domain: PKG [0] Policy: ConfigTDP Policy [0] Error: (05/06/2018 08:56:13 AM) (Source: DPTF) (EventID: 256) (User: ) Description: Intel(R) Dynamic Platform and Thermal Framework : ESIF(8.3.10205.5196) TYPE: ERROR MODULE: DPTF TIME 248820005 ms DPTF Build Version: 8.3.10205.5196 DPTF Build Date: Sep 1 2017 18:49:36 Source File: ..\..\..\..\Sources\Policies\ConfigTdpPolicy\ConfigTdpPolicy.cpp @ line 194 Executing Function: ConfigTdpPolicy::onDomainPowerControlCapabilityChanged Message: DPTF Build Version: 8.3.10205.5196 DPTF Build Date: Sep 1 2017 18:49:36 Source File: ..\..\..\Sources\Manager\EsifServices.cpp @ line 540 Executing Function: EsifServices::primitiveExecuteSetAsTimeInMilliseconds Message: Error returned from ESIF services interface function call Participant: TCPU [1] Domain: PKG [0] ESIF Primitive: SET_RAPL_POWER_LIMIT_TIME_WINDOW [340] ESIF Instance: 0 ESIF Return Code: ESIF_E_PRIMITIVE_NOT_FOUND_IN_DSP [2404] Participant: TCPU [1] Domain: PKG [0] Policy: ConfigTDP Policy [0] Error: (05/05/2018 04:57:13 PM) (Source: DPTF) (EventID: 256) (User: ) Description: Intel(R) Dynamic Platform and Thermal Framework : ESIF(8.3.10205.5196) TYPE: ERROR MODULE: DPTF TIME 191264078 ms DPTF Build Version: 8.3.10205.5196 DPTF Build Date: Sep 1 2017 18:49:36 Source File: ..\..\..\..\Sources\Policies\ConfigTdpPolicy\ConfigTdpPolicy.cpp @ line 194 Executing Function: ConfigTdpPolicy::onDomainPowerControlCapabilityChanged Message: DPTF Build Version: 8.3.10205.5196 DPTF Build Date: Sep 1 2017 18:49:36 Source File: ..\..\..\Sources\Manager\EsifServices.cpp @ line 540 Executing Function: EsifServices::primitiveExecuteSetAsTimeInMilliseconds Message: Error returned from ESIF services interface function call Participant: TCPU [1] Domain: PKG [0] ESIF Primitive: SET_RAPL_POWER_LIMIT_TIME_WINDOW [340] ESIF Instance: 0 ESIF Return Code: ESIF_E_PRIMITIVE_NOT_FOUND_IN_DSP [2404] Participant: TCPU [1] Domain: PKG [0] Policy: ConfigTDP Policy [0] System errors: ============= Error: (05/06/2018 03:24:29 PM) (Source: TPM) (EventID: 15) (User: ) Description: The device driver for the Trusted Platform Module (TPM) encountered a non-recoverable error in the TPM hardware, which prevents TPM services (such as data encryption) from being used. For further help, please contact the computer manufacturer. Error: (05/06/2018 09:20:03 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-PB8OBQF) Description: The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error: (05/06/2018 09:14:03 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. Error: (05/06/2018 09:01:49 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. Error: (05/06/2018 08:59:02 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. Error: (05/06/2018 08:59:02 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. Error: (05/06/2018 08:58:22 AM) (Source: TPM) (EventID: 15) (User: NT AUTHORITY) Description: The device driver for the Trusted Platform Module (TPM) encountered a non-recoverable error in the TPM hardware, which prevents TPM services (such as data encryption) from being used. For further help, please contact the computer manufacturer. Error: (05/06/2018 08:57:04 AM) (Source: Service Control Manager) (EventID: 7011) (User: ) Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the InstallService service. Windows Defender: =================================== Date: 2018-05-03 12:38:18.546 Description: Windows Defender 防毒軟體 掃描未完成即停止。 掃描識別碼: {A7AEAD07-075D-4F9C-892D-08EAAFEC77BA} 掃描類型: 反惡意程式碼 掃描參數: 快速掃描 使用者: NT AUTHORITY\SYSTEM Date: 2018-05-03 12:25:54.390 Description: Windows Defender 防毒軟體 掃描未完成即停止。 掃描識別碼: {2690B5E4-F130-4E24-B135-07A8EFE45C40} 掃描類型: 反惡意程式碼 掃描參數: 快速掃描 使用者: NT AUTHORITY\SYSTEM Date: 2018-05-03 12:19:32.223 Description: Windows Defender 防毒軟體 掃描未完成即停止。 掃描識別碼: {ADDFA8A7-1CF6-4370-A216-DFCE902A81FA} 掃描類型: 反惡意程式碼 掃描參數: 快速掃描 使用者: NT AUTHORITY\SYSTEM Date: 2018-04-30 01:18:35.857 Description: Windows Defender 防毒軟體 掃描未完成即停止。 掃描識別碼: {5CEE0B18-E68A-4818-BA4A-9F4C29F8F3D5} 掃描類型: 反惡意程式碼 掃描參數: 自訂掃描 使用者: DESKTOP-PB8OBQF\Steven Date: 2018-04-29 23:53:28.963 Description: Windows Defender 防毒軟體 掃描未完成即停止。 掃描識別碼: {C047386F-09EF-4BD8-8DD8-D7AA58F76AC3} 掃描類型: 反惡意程式碼 掃描參數: 快速掃描 使用者: NT AUTHORITY\SYSTEM Date: 2018-05-05 14:06:00.547 Description: Windows Defender 防毒軟體 嘗試更新簽章時發生錯誤。 新簽章版本: 舊簽章版本: 1.267.804.0 更新來源: Microsoft Update 伺服器 簽章類型: 防毒軟體 更新類型: 完整型 使用者: NT AUTHORITY\SYSTEM 目前的引擎版本: 舊的引擎版本: 1.1.14800.3 錯誤碼: 0x800704cf 錯誤描述: The network location cannot be reached. For information about network troubleshooting, see Windows Help. Date: 2018-04-29 13:40:33.562 Description: Windows Defender 防毒軟體 即時保護功能發生錯誤而失敗。 功能: 存取 錯誤碼: 0x8007043c 錯誤描述: This service cannot be started in Safe Mode 原因: 反惡意程式碼保護因不明原因而停止運作。在某些情況下，重新啟動服務可能可以解決問題。 Date: 2018-04-29 13:29:02.219 Description: Windows Defender 防毒軟體 即時保護功能發生錯誤而失敗。 功能: 存取 錯誤碼: 0x8007043c 錯誤描述: This service cannot be started in Safe Mode 原因: 反惡意程式碼保護因不明原因而停止運作。在某些情況下，重新啟動服務可能可以解決問題。 Date: 2018-04-29 13:08:07.810 Description: Windows Defender 防毒軟體 嘗試更新簽章時發生錯誤。 新簽章版本: 舊簽章版本: 1.267.536.0 更新來源: Microsoft Update 伺服器 簽章類型: 防毒軟體 更新類型: 完整型 使用者: NT AUTHORITY\SYSTEM 目前的引擎版本: 舊的引擎版本: 1.1.14800.3 錯誤碼: 0x800704cf 錯誤描述: The network location cannot be reached. For information about network troubleshooting, see Windows Help. Date: 2018-04-29 12:51:18.550 Description: Windows Defender 防毒軟體 嘗試更新簽章時發生錯誤。 新簽章版本: 舊簽章版本: 1.267.536.0 更新來源: Microsoft Update 伺服器 簽章類型: 防毒軟體 更新類型: 完整型 使用者: NT AUTHORITY\SYSTEM 目前的引擎版本: 舊的引擎版本: 1.1.14800.3 錯誤碼: 0x80240438 錯誤描述: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i5-5200U CPU @ 2.20GHz Percentage of memory in use: 29% Total physical RAM: 12187.38 MB Available physical RAM: 8613.2 MB Total Virtual: 14043.38 MB Available Virtual: 10141.35 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:234.75 GB) (Free:114.44 GB) NTFS Drive d: () (Fixed) (Total:487.74 GB) (Free:487.04 GB) NTFS \\?\Volume{8b3783ca-0000-0000-0000-100000000000}\ (系統保留) (Fixed) (Total:0.54 GB) (Free:0.1 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 8B3783CA) Partition 1: (Active) - (Size=549 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=487.7 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=234.7 GB) - (Type=07 NTFS) ==================== End of Addition.txt ============================