Additional scan result of Farbar Recovery Scan Tool (x86) Version: 18-01-2020 Ran by [removed] (19-01-2020 20:57:00) Running from C:\Documents and Settings\[removed]\Desktop Microsoft Windows XP Professional Service Pack 3 (X86) (2017-11-29 23:59:28) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Admin (S-1-5-21-1085031214-1177238915-1644491937-1004 - Administrator - Enabled) => %SystemDrive%\Documents and Settings\Admin Administrator (S-1-5-21-1085031214-1177238915-1644491937-500 - Administrator - Enabled) Guest (S-1-5-21-1085031214-1177238915-1644491937-501 - Limited - Disabled) HelpAssistant (S-1-5-21-1085031214-1177238915-1644491937-1000 - Limited - Disabled) ROACH (S-1-5-21-1085031214-1177238915-1644491937-1003 - Administrator - Enabled) => %SystemDrive%\Documents and Settings\ROACH SUPPORT_388945a0 (S-1-5-21-1085031214-1177238915-1644491937-1002 - Limited - Disabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Avira Antivirus (Enabled - Up to date) {AD166499-45F9-482A-A743-FDD3350758C7} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 32 Bit HP CIO Components Installer (HKLM\...\{F1E63043-54FC-429B-AB2C-31AF9FBA4BC7}) (Version: 1.0.0 - Hewlett-Packard) Hidden Adobe Flash Player 32 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 32.0.0.314 - Adobe) Adobe Flash Player 32 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 32.0.0.314 - Adobe) Adobe Photoshop CS3 (HKLM\...\Adobe_2ac78060bc5856b0c1cf873bb919b58) (Version: 10.0 - Adobe Systems Incorporated) Adobe Reader XI (11.0.08) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated) AIO_Scan (HKLM\...\{AF7FC1CA-79DF-43c3-90A3-33EFEB9294CE}) (Version: 90.0.177.000 - Hewlett-Packard) Hidden AnyDVD (HKLM\...\AnyDVD) (Version: - SlySoft) Avast Update Helper (HKLM\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.4.154.333 - AVAST Software) Hidden Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.19.164 - Avira Operations GmbH & Co. KG) Avira Launcher (HKLM\...\{18C7265D-7754-457D-83A4-492A62F02591}) (Version: 1.1.68.2326 - Avira Operations GmbH & Co. KG) Hidden Avira Launcher (HKLM\...\{b7a1a821-b592-485a-886c-b744b4dbe004}) (Version: 1.1.68.2326 - Avira Operations GmbH & Co. KG) Blender (HKLM\...\{35AD7B4C-CB23-4B2E-9A40-9780B8ACC50D}) (Version: 2.76.0 - Blender Foundation) Blender (HKLM\...\Blender) (Version: 2.74 - Blender Foundation) Broadcom Gigabit Integrated Controller (HKLM\...\{B7F54262-AB66-44B3-88BF-9FC69941B643}) (Version: 8.10.07 - Broadcom Corporation) BufferChm (HKLM\...\{E2662C24-B31E-4349-A084-32EB76E8B760}) (Version: 90.0.146.000 - Hewlett-Packard) Hidden C5200 (HKLM\...\{C708333C-B1B9-43be-B797-49FEC7A8D15B}) (Version: 90.0.177.000 - Hewlett-Packard) Hidden C5200_doccd (HKLM\...\{D1E03284-66FD-4292-8239-504CEC5B0CC3}) (Version: 90.0.177.000 - Hewlett-Packard) Hidden c5200_Help (HKLM\...\{BAFFEF7F-08B3-45b3-B215-418175C4E9DD}) (Version: 90.0.177.000 - Hewlett-Packard) Hidden Canon MP520 series (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP520_series) (Version: - ) CCleaner (HKLM\...\CCleaner) (Version: 5.47 - Piriform) CloneDVD2 (HKLM\...\CloneDVD2) (Version: - Elaborate Bytes) ConvertXtoDVD 4.1.7.343 (HKLM\...\{DB6AB705-C9BD-40E3-8929-2EA57F36A4FF}_is1) (Version: 4.1.7.343 - ) Copy (HKLM\...\{1753255A-0AEB-4220-8C75-607B73F0C133}) (Version: 90.0.146.000 - Hewlett-Packard) Hidden CustomerResearchQFolder (HKLM\...\{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}) (Version: 1.00.0000 - Hewlett-Packard) Hidden Destination Component (HKLM\...\{D0E39A1D-0CEE-4D85-B4A2-E3BE990D075E}) (Version: 090.000.091.086 - Hewlett-Packard) Hidden DeviceDiscovery (HKLM\...\{93F54611-2701-454e-94AB-623F458D9E6B}) (Version: 90.0.146.000 - Hewlett-Packard) Hidden DeviceManagementQFolder (HKLM\...\{AB5D51AE-EBC3-438D-872C-705C7C2084B0}) (Version: 1.00.0000 - Hewlett-Packard) Hidden DivX Setup (HKLM\...\DivX Setup) (Version: 10.8.6.0 - DivX, LLC) DocProc (HKLM\...\{001E7FB6-BB6B-4ED0-BEDC-B5404ED96D4E}) (Version: 9.0.0.0 - Hewlett-Packard) Hidden DocProcQFolder (HKLM\...\{87E2B986-07E8-477a-93DC-AF0B6758B192}) (Version: 1.00.0000 - Hewlett-Packard) Hidden Doxillion Document Converter (HKLM\...\Doxillion) (Version: 3.19 - NCH Software) DreamPlan Home Design Software (HKLM\...\DreamPlan) (Version: 2.34 - NCH Software) EasyBCD 2.4 (HKLM\...\EasyBCD) (Version: 2.4 - NeoSmart Technologies) eSupportQFolder (HKLM\...\{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}) (Version: 1.00.0000 - Hewlett-Packard) Hidden Extended Asian Language font pack for Adobe Reader XI (HKLM\...\{AC76BA86-7AD7-2530-0000-A00000000049}) (Version: 11.0.09 - Adobe Systems Incorporated) Fax (HKLM\...\{44B2E182-DD85-45FC-9F51-326B81D7C7F1}) (Version: 90.0.146.000 - Hewlett-Packard) Hidden FileASSASSIN (HKLM\...\FileASSASSIN) (Version: 1.06 - Malwarebytes) FVD Downloader Module (HKLM\...\{A3F74A3C-6824-4878-AB46-21280389D09F}) (Version: 1.0.8 - Nimbus) Google Update Helper (HKLM\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.421 - Google LLC) Hidden HP Customer Participation Program 9.0 (HKLM\...\HPExtendedCapabilities) (Version: 9.0 - HP) HP Imaging Device Functions 9.0 (HKLM\...\HP Imaging Device Functions) (Version: 9.0 - HP) HP OCR Software 9.0 (HKLM\...\HPOCR) (Version: 9.0 - HP) HP Photosmart All-In-One Software 9.0 (HKLM\...\{034F8C89-C4F4-4731-A32B-F4294C04729F}) (Version: 9.0 - HP) HP Photosmart Essential 2.01 (HKLM\...\HP Photosmart Essential) (Version: 2.01 - HP) HP Solution Center 9.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 9.0 - HP) HP Update (HKLM\...\{8C6027FD-53DC-446D-BB75-CACD7028A134}) (Version: 4.000.006.002 - Hewlett-Packard) HPProductAssistant (HKLM\...\{AEA07F97-9088-497c-8821-0F36BD5DC251}) (Version: 90.0.146.000 - Hewlett-Packard) Hidden HPSSupply (HKLM\...\{487B0B9B-DCD4-440D-89A0-A6EDE1A545A3}) (Version: 2.2.0.0000 - Hewlett Packard Development Company L.P.) Java 8 Update 151 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F32180151F0}) (Version: 8.0.1510.12 - Oracle Corporation) K-Lite Codec Pack 13.8.0 Full (HKLM\...\KLiteCodecPack_is1) (Version: 13.8.0 - KLCP) KRISTAL Audio Engine (HKLM\...\KRISTAL Audio Engine) (Version: - ) LG Mobile Drivers (HKLM\...\{D8D0327A-72B4-4C79-9883-1B6B6C20ED2B}) (Version: 4.0.3 - LG Electronics) Logitech Vid (HKLM\...\{4FBCEA31-5D18-4212-9231-DE7CF1BE7DBB}) (Version: 1.10.1009 - Logitech Inc.) Logitech Webcam Software (HKLM\...\{C27BC2A2-30DD-4014-B22E-63EB0DB572F9}) (Version: 12.10.1113 - Logitech Inc.) Logitech Webcam Software Driver Package (HKLM\...\lvdrivers_12.10) (Version: 12.10.1110 - Logitech Inc.) MarketResearch (HKLM\...\{13F00518-807A-4B3A-83B0-A7CD90F3A398}) (Version: 90.0.146.000 - Hewlett-Packard) Hidden MediaInfo 17.12 (HKLM\...\MediaInfo) (Version: 17.12 - MediaArea.net) Microsoft .NET Framework 2.0 Service Pack 2 (HKLM\...\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}) (Version: 2.2.30729 - Microsoft Corporation) Microsoft .NET Framework 3.0 Service Pack 2 (HKLM\...\{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}) (Version: 3.2.30729 - Microsoft Corporation) Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation) Microsoft Compression Client Pack 1.0 for Windows XP (HKLM\...\MSCompPackV1) (Version: 1 - Microsoft Corporation) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft User-Mode Driver Framework Feature Pack 1.0 (HKLM\...\Wudf01000) (Version: - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation) Microsoft WinUsb 1.0 (HKLM\...\winusb0100) (Version: - Microsoft Corporation) Microsoft WinUsb 2.0 (HKLM\...\winusb0200) (Version: - Microsoft Corporation) MixPad Multitrack Recording Software (HKLM\...\MixPad) (Version: 4.40 - NCH Software) Mozilla Firefox 52.9.0 ESR (x86 en-US) (HKLM\...\Mozilla Firefox 52.9.0 ESR (x86 en-US)) (Version: 52.9.0 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 52.9.0.6746 - Mozilla) Nero 7 Ultra Edition (HKLM\...\{293C9DF5-7669-4826-BBB2-E1F182D71033}) (Version: 7.02.8631 - Nero AG) NVIDIA Graphics Driver 321.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 321.01 - NVIDIA Corporation) NVIDIA nView 140.75 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView) (Version: 140.75 - NVIDIA Corporation) NVIDIA PhysX (HKLM\...\{DEA314C4-0929-4250-BC92-98E4C105F28D}) (Version: 9.10.0129 - NVIDIA Corporation) PanoStandAlone (HKLM\...\{730837D4-FF5E-48DB-BA49-33E732DFF0B3}) (Version: 90.0.146.000 - Hewlett-Packard) Hidden PDF Settings (HKLM\...\{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}) (Version: 1.0 - Adobe Systems Incorporated) Hidden Popcorn Time (HKLM\...\Popcorn Time_is1) (Version: 5.4.0.0 - Popcorn Time) <==== ATTENTION Power Tab Editor 1.7 (HKLM\...\{6B3CA80E-6AC0-4725-BABF-9B0FEF880CB3}) (Version: 1.7.0 - Power Tab Software) PS_AIO_02_ProductContext (HKLM\...\{B7E5D642-E74E-40a4-B5C7-6AB6EE916814}) (Version: 90.0.177.000 - Hewlett-Packard) Hidden PS_AIO_02_Software (HKLM\...\{BC10649A-983B-494e-AD1F-DE0BF717D701}) (Version: 90.0.177.000 - Hewlett-Packard) Hidden PS_AIO_02_Software_min (HKLM\...\{B34E4B72-37C6-4f79-A5B3-008EEFC6EA8B}) (Version: 90.0.177.000 - Hewlett-Packard) Hidden PSSWCORE (HKLM\...\{F72E2DDC-3DB8-4190-A21D-63883D955FE7}) (Version: 2.01.0000 - Hewlett-Packard) Hidden Recuva (HKLM\...\Recuva) (Version: 1.53 - Piriform) Samsung Kies3 (HKLM\...\{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.16044.2 - Samsung Electronics Co., Ltd.) Hidden Samsung Kies3 (HKLM\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.16044.2 - Samsung Electronics Co., Ltd.) Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.59.0 - Samsung Electronics Co., Ltd.) Scan (HKLM\...\{2F28B3C9-2C89-4206-8B33-8ADC9577C49B}) (Version: 9.0.0.0 - Hewlett-Packard) Hidden Smart Switch (HKLM\...\{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.2.19114.7 - Samsung Electronics Co., Ltd.) Hidden Smart Switch (HKLM\...\InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.2.19114.7 - Samsung Electronics Co., Ltd.) SolutionCenter (HKLM\...\{BCD6CD1A-0DBE-412E-9F25-3B500D1E6BA1}) (Version: 90.0.146.000 - Hewlett-Packard) Hidden Sound Blaster Audigy Web 2K/XP (HKLM\...\{E2B71D23-52F0-49AD-AC56-6DAB4CF9443C}) (Version: - ) Sound Blaster Live! (HKLM\...\{3FCAADB8-EB1B-11D6-AB2D-0090271A23A2}) (Version: - ) Status (HKLM\...\{FD8D8B04-BEAD-4A55-AA1D-62D2373E7DEA}) (Version: 90.0.146.000 - Hewlett-Packard) Hidden Switch Sound File Converter (HKLM\...\Switch) (Version: 5.36 - NCH Software) TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - ) Toolbox (HKLM\...\{E9C18EBD-85BE-47D0-AA73-3FEDCC976B04}) (Version: 90.0.146.000 - Hewlett-Packard) Hidden TrayApp (HKLM\...\{10E1E87C-656C-4D08-86D6-5443D28583BE}) (Version: 90.0.146.000 - Hewlett-Packard) Hidden TuxGuitar (HKLM\...\TuxGuitar 1.5.2) (Version: 1.5.2 - TuxGuitar) UnloadSupport (HKLM\...\{543E938C-BDC4-4933-A612-01293996845F}) (Version: 9.0.0 - Hewlett-Packard) Hidden Unlocker 1.9.0 (HKLM\...\Unlocker) (Version: 1.9.0 - Cedrick Collomb) Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) VC80CRTRedist - 8.0.50727.6195 (HKLM\...\{933B4015-4618-4716-A828-5289FC03165F}) (Version: 1.2.0 - DivX, Inc) Hidden VideoToolkit01 (HKLM\...\{824D3839-DAA1-4315-A822-7AE3E620E528}) (Version: 90.0.146.000 - Hewlett-Packard) Hidden VirusTotal Uploader 2.2 (HKLM\...\VTUploader) (Version: - ) VLC media player (HKLM\...\VLC media player) (Version: 3.0.4 - VideoLAN) VPNetwork LLC - TorGuard - Online Privacy Protection Services (HKLM\...\VPNetwork LLC TorGuard) (Version: "3.96.1" - "VPNetwork LLC") WavePad Sound Editor (HKLM\...\WavePad) (Version: 7.14 - NCH Software) WebFldrs XP (HKLM\...\{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}) (Version: 9.50.7523 - Microsoft Corporation) Hidden WebReg (HKLM\...\{29FA38B4-0AE4-4D0D-8A51-6165BB990BB0}) (Version: 90.0.146.000 - Hewlett-Packard) Hidden Winamp (HKLM\...\Winamp) (Version: 5.666 - Nullsoft, Inc) Windows Management Framework Core (HKLM\...\KB968930) (Version: - Microsoft Corporation) Windows Media Format 11 runtime (HKLM\...\Windows Media Format Runtime) (Version: - ) Windows Media Player 11 (HKLM\...\Windows Media Player) (Version: - ) Windows PowerShell 2.0 Software Development Kit (SDK) (HKLM\...\{F0673FA3-F746-42E9-AC37-33337CA37B39}) (Version: 2.0.0.0 - Microsoft Corporation) WinPcap 4.1.3 (HKLM\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.) WinRAR 5.61 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.61.0 - win.rar GmbH) Wireless PCI Card Configuration Utility (HKLM\...\{5C6956F3-B586-4674-BCD0-CCF7EC1DF766}) (Version: - ) Wireless-G PCI Adapter (HKLM\...\{88742616-A6E9-4C7E-9665-B625799541FB}) (Version: - ) Wise Registry Cleaner Professional (HKLM\...\{A188075D-1BC3-4530-89F7-0669386C6C85}) (Version: 4.81 - Wise) ==================== Custom CLSID (Whitelisted): ============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\WINDOWS\system32\webcheck.dll (Microsoft Windows -> Microsoft Corporation) SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - C:\WINDOWS\system32\SHELL32.dll (Microsoft Windows Component Publisher -> Microsoft Corporation) SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - C:\WINDOWS\system32\SHELL32.dll (Microsoft Windows Component Publisher -> Microsoft Corporation) SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - C:\WINDOWS\system32\stobject.dll (Microsoft Windows Component Publisher -> Microsoft Corporation) SSODL: UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll (Microsoft Windows Component Publisher -> Microsoft Corporation) SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll (Microsoft Windows -> Microsoft Corporation) ShellExecuteHooks: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2217832 2009-02-26] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers1: [Cover Designer] -> [CC]{73FCA462-9BD5-4065-A73F-A8E5F6904EF7} => -> No File ContextMenuHandlers1: [InCDShellExt] -> [CC]{CAE3251E-9B15-4810-B268-852AD9792A59} => -> No File ContextMenuHandlers1: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files\Avira\Antivirus\shlext.dll [2016-08-18] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] ContextMenuHandlers1: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers2: [InCDShellExt] -> [CC]{CAE3251E-9B15-4810-B268-852AD9792A59} => -> No File ContextMenuHandlers3: [FAExt] -> [CC]{05672D66-9736-42F5-8BEB-FA1DD3CA51C4} => -> No File ContextMenuHandlers3: [UnlockerShellExtension] -> [CC]{DDE4BEEB-DDE6-48fd-8EB5-035C09923F83} => -> No File ContextMenuHandlers4: [InCDShellExt] -> [CC]{CAE3251E-9B15-4810-B268-852AD9792A59} => -> No File ContextMenuHandlers4: [RecuvaShellExt] -> [CC]{435E5DF5-2510-463C-B223-BDA47006D002} => -> No File ContextMenuHandlers4: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers5: [00nView] -> {1E9B04FB-F9E5-4718-997B-B8DA88302A48} => C:\Program Files\NVIDIA Corporation\nview\nvshell.dll [2013-11-23] (NVIDIA Corporation -> ) ContextMenuHandlers5: [NvCplDesktopContext] -> {A70C977A-BF00-412C-90B7-034C51DA2439} => C:\WINDOWS\system32\nvcpl.dll [2013-10-28] (NVIDIA Corporation -> NVIDIA Corporation) ContextMenuHandlers6: [InCDShellExt] -> {CAE3251E-9B15-4810-B268-852AD9792A59} => C:\Program Files\Nero\Nero 7\InCD\InCDshx.dll [2007-05-15] (Nero AG -> Nero AG) ContextMenuHandlers6: [NetWareUNCMenu] -> {e3f2bac0-099f-11cf-8daa-00aa004a5691} => C:\WINDOWS\system32\nwprovau.dll [2008-04-14] (Microsoft Windows Component Publisher -> Microsoft Corporation) ContextMenuHandlers6: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell.dll [2016-06-06] (Piriform Ltd -> Piriform Ltd) ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files\Avira\Antivirus\shlext.dll [2016-08-18] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] ContextMenuHandlers6: [UnlockerShellExtension] -> {DDE4BEEB-DDE6-48fd-8EB5-035C09923F83} => C:\Program Files\Unlocker\UnlockerCOM.dll [2010-07-04] () [File not signed] ContextMenuHandlers6: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal) ==================== Codecs (Whitelisted) ==================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Drivers32: [msacm.trspch] => C:\WINDOWS\system32\tssoft32.acm [8192 2008-04-14] (Microsoft Windows Component Publisher -> DSP GROUP, INC.) HKLM\...\Drivers32: [VIDC.I420] => C:\WINDOWS\system32\lvcodec2.dll [416280 2009-10-07] (Logitech Inc -> Logitech Inc.) HKLM\...\Drivers32: [vidc.iv31] => C:\WINDOWS\system32\ir32_32.dll [199168 2008-04-14] (Microsoft Windows Component Publisher -> ) HKLM\...\Drivers32: [vidc.iv32] => C:\WINDOWS\system32\ir32_32.dll [199168 2008-04-14] (Microsoft Windows Component Publisher -> ) HKLM\...\Drivers32: [vidc.iv41] => C:\WINDOWS\system32\ir41_32.ax [848384 2008-04-14] (Microsoft Windows Component Publisher -> Intel Corporation) HKLM\...\Drivers32: [msacm.msg723] => C:\WINDOWS\system32\msg723.acm [118784 2008-04-14] (Microsoft Windows Component Publisher -> Microsoft Corporation) HKLM\...\Drivers32: [vidc.M263] => C:\WINDOWS\system32\msh263.drv [294912 2008-04-14] (Microsoft Windows Component Publisher -> Microsoft Corporation) HKLM\...\Drivers32: [vidc.M261] => C:\WINDOWS\system32\msh261.drv [188416 2008-04-14] (Microsoft Windows Component Publisher -> Microsoft Corporation) HKLM\...\Drivers32: [msacm.msaudio1] => C:\WINDOWS\system32\msaud32.acm [282654 2009-09-01] (Microsoft Windows Component Publisher -> Microsoft Corporation) HKLM\...\Drivers32: [msacm.sl_anet] => C:\WINDOWS\system32\sl_anet.acm [86016 2008-04-14] (Microsoft Windows Component Publisher -> Sipro Lab Telecom Inc.) HKLM\...\Drivers32: [msacm.iac2] => C:\WINDOWS\system32\iac25_32.ax [199680 2008-04-14] (Microsoft Windows Component Publisher -> Intel Corporation) HKLM\...\Drivers32: [vidc.iv50] => C:\WINDOWS\system32\ir50_32.dll [755200 2008-04-14] (Microsoft Windows Component Publisher -> Intel Corporation) HKLM\...\Drivers32: [vidc.DIVX] => C:\WINDOWS\system32\DivX.dll [720384 2010-02-19] (DivX, Inc.) [File not signed] HKLM\...\Drivers32: [vidc.yv12] => C:\WINDOWS\system32\DivX.dll [720384 2010-02-19] (DivX, Inc.) [File not signed] HKLM\...\Drivers32: [vidc.XVID] => xvidvfw.dll ==================== Shortcuts & WMI ======================== (The entries could be listed to be restored or removed.) WMI:subscription\__FilterToConsumerBinding->\\.\root\subscription:MSFT_UCScenarioControl.Name=\"Microsoft WMI Updating Consumer Scenario Control\"",Filter="\\.\root\subscription:__EventFilter.Name=\"Microsoft WMI Updating Consumer Scenario Control\":: WMI:subscription\__EventFilter->Microsoft WMI Updating Consumer Scenario Control::[Query => SELECT * FROM __InstanceOperationEvent WHERE TargetInstance ISA 'MSFT_UCScenario'] Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\TAP-Windows\Utilities\Add a new TAP virtual ethernet adapter.lnk -> C:\Program Files\TAP-Windows\bin\addtap.bat (No File) Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\TAP-Windows\Utilities\Delete ALL TAP virtual ethernet adapters.lnk -> C:\Program Files\TAP-Windows\bin\deltapall.bat (No File) Shortcut: C:\Documents and Settings\All Users\Start Menu\Programs\NeoSmart Technologies\EasyBCD\Online Documentation.lnk -> hxxp://neosmart.net/wiki/easybcd ==================== Loaded Modules (Whitelisted) ============= 2018-09-02 03:00 - 2017-09-24 05:21 - 000335360 _____ () [File not signed] C:\Program Files\K-Lite Codec Pack\Icaros\32-bit\libunarr-ics.dll 2019-12-30 00:11 - 2014-09-30 18:53 - 000729088 _____ () [File not signed] C:\Program Files\Popcorn Time\cef_dll.dll 2019-12-30 00:11 - 2014-01-15 11:36 - 023544786 _____ () [File not signed] C:\Program Files\Popcorn Time\icudt52.dll 2019-12-30 00:12 - 2014-01-15 11:36 - 003347428 _____ () [File not signed] C:\Program Files\Popcorn Time\icuin52.dll 2019-12-30 00:12 - 2014-01-15 11:36 - 001992280 _____ () [File not signed] C:\Program Files\Popcorn Time\icuuc52.dll 2019-12-30 00:12 - 2014-05-15 21:55 - 000051200 _____ () [File not signed] C:\Program Files\Popcorn Time\imageformats\qdds.dll 2019-12-30 00:12 - 2014-05-15 21:40 - 000031232 _____ () [File not signed] C:\Program Files\Popcorn Time\imageformats\qgif.dll 2019-12-30 00:12 - 2014-05-15 21:55 - 000042496 _____ () [File not signed] C:\Program Files\Popcorn Time\imageformats\qicns.dll 2019-12-30 00:12 - 2014-05-15 21:40 - 000031744 _____ () [File not signed] C:\Program Files\Popcorn Time\imageformats\qico.dll 2019-12-30 00:12 - 2014-05-15 21:55 - 000509440 _____ () [File not signed] C:\Program Files\Popcorn Time\imageformats\qjp2.dll 2019-12-30 00:12 - 2014-05-15 21:39 - 000242176 _____ () [File not signed] C:\Program Files\Popcorn Time\imageformats\qjpeg.dll 2019-12-30 00:12 - 2014-05-15 21:55 - 000363008 _____ () [File not signed] C:\Program Files\Popcorn Time\imageformats\qmng.dll 2019-12-30 00:12 - 2014-05-15 21:55 - 000027136 _____ () [File not signed] C:\Program Files\Popcorn Time\imageformats\qtga.dll 2019-12-30 00:12 - 2014-05-15 21:56 - 000423936 _____ () [File not signed] C:\Program Files\Popcorn Time\imageformats\qtiff.dll 2019-12-30 00:12 - 2014-05-15 21:56 - 000026112 _____ () [File not signed] C:\Program Files\Popcorn Time\imageformats\qwbmp.dll 2019-12-30 00:12 - 2014-05-15 21:56 - 000341504 _____ () [File not signed] C:\Program Files\Popcorn Time\imageformats\qwebp.dll 2019-12-30 00:12 - 2014-06-11 21:51 - 040622592 _____ () [File not signed] C:\Program Files\Popcorn Time\libcef.dll 2019-12-30 00:12 - 2014-03-07 21:56 - 000117262 _____ () [File not signed] C:\Program Files\Popcorn Time\libgcc_s_dw2-1.dll 2019-12-30 00:12 - 2014-03-07 21:56 - 000970766 _____ () [File not signed] C:\Program Files\Popcorn Time\libstdc++-6.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000113664 _____ () [File not signed] C:\Program Files\Popcorn Time\libvlc.dll 2019-12-30 00:12 - 2013-09-23 01:19 - 002341888 _____ () [File not signed] C:\Program Files\Popcorn Time\libvlccore.dll 2019-12-30 00:12 - 2014-05-15 21:42 - 001273856 _____ () [File not signed] C:\Program Files\Popcorn Time\platforms\qwindows.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000100352 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\access\libaccess_bd_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000076288 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\access\libaccess_vdr_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000246784 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\access\libdshow_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000258560 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\access\libdvdnav_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000046592 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\access\libfilesystem_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 002029568 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\access\liblibbluray_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000039936 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\access\libstream_filter_rar_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000114688 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\access\libzip_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 001518592 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\audio_filter\libsamplerate_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000040960 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\audio_filter\libscaletempo_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000034816 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\audio_mixer\libfloat_mixer_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:19 - 000047616 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\audio_output\libdirectsound_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:19 - 000050688 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\audio_output\libwaveout_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:19 - 000040448 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\codec\liba52_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:19 - 000037888 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\codec\libaes3_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000048640 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\codec\libaraw_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 009987584 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\codec\libavcodec_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:19 - 000040448 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\codec\libcdg_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:19 - 000041472 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\codec\libdts_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000359424 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\codec\libfaad_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000209408 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\codec\libflac_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:19 - 000049152 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\codec\libg711_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:19 - 001381376 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\codec\liblibass_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000044032 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\codec\liblpcm_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:19 - 000041472 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\codec\libmpeg_audio_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:19 - 000311296 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\codec\libopus_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:19 - 000292864 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\codec\libpng_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 001297920 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\codec\libschroedinger_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000144896 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\codec\libspeex_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000042496 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\codec\libspudec_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:19 - 000350720 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\codec\libtheora_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 001723904 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\codec\libvorbis_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 001167360 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\demux\libmkv_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 001409536 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\meta_engine\libtaglib_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000076800 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\mmx\libi420_rgb_mmx_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000044032 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\mmx\libi420_yuy2_mmx_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000043008 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\mmx\libi422_yuy2_mmx_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000137728 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\sse2\libi420_rgb_sse2_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000052224 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\sse2\libi420_yuy2_sse2_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000051712 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\sse2\libi422_yuy2_sse2_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000719872 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\stream_filter\libdash_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000465920 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\stream_filter\libhttplive_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000061440 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\stream_filter\libsmooth_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000731648 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\text_renderer\libfreetype_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000037376 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\video_chroma\libgrey_yuv_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000055808 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\video_chroma\libi420_rgb_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000041984 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\video_chroma\libi420_yuy2_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000037376 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\video_chroma\libi422_i420_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000040448 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\video_chroma\libi422_yuy2_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000043008 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\video_chroma\libyuy2_i420_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000038912 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\video_chroma\libyuy2_i422_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000036864 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\video_filter\libscale_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000541184 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\video_filter\libswscale_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000035840 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\video_filter\libyuvp_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000079872 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\video_output\libdirect3d_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000079360 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\video_output\libdirectdraw_plugin.dll 2019-12-30 00:12 - 2013-09-23 01:18 - 000036864 _____ () [File not signed] C:\Program Files\Popcorn Time\plugins\video_output\libdrawable_plugin.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000157624 _____ (Avira Operations GmbH & Co. KG -> Apache Software Foundation) [File not signed] C:\Program Files\Avira\Antivirus\libapr-1.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000034504 _____ (Avira Operations GmbH & Co. KG -> Apache Software Foundation) [File not signed] C:\Program Files\Avira\Antivirus\libapriconv-1.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000209600 _____ (Avira Operations GmbH & Co. KG -> Apache Software Foundation) [File not signed] C:\Program Files\Avira\Antivirus\libaprutil-1.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000086368 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] c:\program files\avira\antivirus\57\ProductImageRc.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000016296 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] c:\program files\avira\antivirus\57\ProductTextRc.dll 2017-12-01 21:59 - 2016-08-18 15:51 - 000169040 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] C:\Program Files\Avira\Antivirus\apcfile.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000214624 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] c:\program files\avira\antivirus\avesvc.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000016808 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] c:\program files\avira\antivirus\avesvcr.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000070400 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] C:\Program Files\Avira\Antivirus\avgio.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000088416 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] C:\Program Files\Avira\Antivirus\avipc.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000735304 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] c:\program files\avira\antivirus\avlode.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000055456 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] C:\Program Files\Avira\Antivirus\avpref.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000354168 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] c:\program files\avira\antivirus\avreg.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000507984 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] C:\Program Files\Avira\Antivirus\avsda.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000029200 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] C:\Program Files\Avira\Antivirus\avwinll.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000337176 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] c:\program files\avira\antivirus\ccfwmgt.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000017832 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] c:\program files\avira\antivirus\ccfwmgtrc.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 001161224 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] c:\program files\avira\antivirus\ccgen.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000050288 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] c:\program files\avira\antivirus\ccgenrc.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000025560 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] c:\program files\avira\antivirus\ccmainrc.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000375792 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] c:\program files\avira\antivirus\ccmsg.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000012192 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] c:\program files\avira\antivirus\ccmsgrc.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000794984 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] C:\Program Files\Avira\Antivirus\ccwkrlib.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000108480 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] c:\program files\avira\antivirus\cfglib.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 004307808 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] c:\program files\avira\antivirus\CommonImageRc.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000069376 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] c:\program files\avira\antivirus\CommonTextRc.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000031272 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] c:\program files\avira\antivirus\firewall.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000206920 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] c:\program files\avira\antivirus\gavidb.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000388200 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] c:\program files\avira\antivirus\gpavgio.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000208992 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] c:\program files\avira\antivirus\gpgen.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000058576 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] c:\program files\avira\antivirus\gpgenrep.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000110088 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] c:\program files\avira\antivirus\gpgrd.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000069888 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] c:\program files\avira\antivirus\gpgui.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000240880 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] c:\program files\avira\antivirus\gpipc.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000035928 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] c:\program files\avira\antivirus\gplegacy.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000383008 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] c:\program files\avira\antivirus\gpscan.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000356216 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] c:\program files\avira\antivirus\gpschd.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000528720 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] C:\Program Files\Avira\Antivirus\grdcore.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000046680 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] C:\Program Files\Avira\Antivirus\guardmsg.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000138928 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] C:\Program Files\Avira\Antivirus\msgclient.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000037976 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] c:\program files\avira\antivirus\onlcfg.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 001386728 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] C:\Program Files\Avira\Antivirus\ProductUtilities.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000678624 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] C:\Program Files\Avira\Antivirus\Repair.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000094608 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] C:\Program Files\Avira\Antivirus\shlext.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000461264 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] C:\Program Files\Avira\Antivirus\sqlite3.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000801712 _____ (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) [File not signed] c:\program files\avira\antivirus\SystemUtilities.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000297200 _____ (Avira Operations GmbH & Co. KG -> The cURL library, hxxp://curl.haxx.se/) [File not signed] C:\Program Files\Avira\Antivirus\libcurl.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 001220080 _____ (Avira Operations GmbH & Co. KG -> The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files\Avira\Antivirus\LIBEAY32.dll 2017-12-01 21:59 - 2016-08-18 15:52 - 000281720 _____ (Avira Operations GmbH & Co. KG -> The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files\Avira\Antivirus\SSLEAY32.dll 2019-12-30 00:12 - 2014-06-19 12:31 - 004785664 _____ (Digia Plc and/or its subsidiary(-ies)) [File not signed] C:\Program Files\Popcorn Time\Qt5Core.dll 2019-12-30 00:12 - 2014-05-15 21:24 - 004584448 _____ (Digia Plc and/or its subsidiary(-ies)) [File not signed] C:\Program Files\Popcorn Time\Qt5Gui.dll 2019-12-30 00:12 - 2014-05-15 21:20 - 001411584 _____ (Digia Plc and/or its subsidiary(-ies)) [File not signed] C:\Program Files\Popcorn Time\Qt5Network.dll 2019-12-30 00:12 - 2014-05-15 21:32 - 005881856 _____ (Digia Plc and/or its subsidiary(-ies)) [File not signed] C:\Program Files\Popcorn Time\Qt5Widgets.dll 2018-09-02 03:00 - 2017-09-24 05:21 - 007907328 _____ (FFmpeg Project) [File not signed] C:\Program Files\K-Lite Codec Pack\Icaros\32-bit\avcodec-ics-57.dll 2018-09-02 03:00 - 2017-09-24 05:21 - 001247744 _____ (FFmpeg Project) [File not signed] C:\Program Files\K-Lite Codec Pack\Icaros\32-bit\avformat-ics-57.dll 2018-09-02 03:00 - 2017-09-24 05:21 - 000591872 _____ (FFmpeg Project) [File not signed] C:\Program Files\K-Lite Codec Pack\Icaros\32-bit\avutil-ics-55.dll 2018-09-02 03:00 - 2017-09-24 05:21 - 000534528 _____ (FFmpeg Project) [File not signed] C:\Program Files\K-Lite Codec Pack\Icaros\32-bit\swscale-ics-4.dll 2019-12-30 00:11 - 2006-05-03 21:57 - 000888832 _____ (Free Software Foundation) [File not signed] C:\Program Files\Popcorn Time\iconv.dll 2019-12-30 00:11 - 2015-06-12 18:12 - 001926656 _____ (Library) [File not signed] C:\Program Files\Popcorn Time\lib.dll 2003-03-19 07:20 - 2003-03-19 07:20 - 001060864 _____ (Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Ahead\Lib\MFC71.DLL 2003-03-18 21:12 - 2003-03-18 21:12 - 001047552 _____ (Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Ahead\Lib\MFC71U.DLL 2003-03-19 07:14 - 2003-03-19 07:14 - 000499712 _____ (Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Ahead\Lib\MSVCP71.dll 2003-02-21 15:42 - 2003-02-21 15:42 - 000348160 _____ (Microsoft Corporation) [File not signed] C:\Program Files\Common Files\Ahead\Lib\MSVCR71.dll 2018-06-23 03:11 - 2018-06-23 10:08 - 000109568 _____ (Microsoft Corporation) [File not signed] C:\WINDOWS\Microsoft.Net\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll 2011-01-12 10:25 - 2011-01-12 10:25 - 000057344 ____N (Microsoft Corporation) [File not signed] C:\WINDOWS\system32\MFC71ENU.DLL 2011-05-13 17:37 - 2011-05-13 17:37 - 000097280 _____ (Microsoft Corporation) [File not signed] C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_a4c618fa\ATL80.DLL 2019-12-30 00:12 - 2014-03-07 21:56 - 000048640 _____ (MingW-W64 Project. All rights reserved.) [File not signed] C:\Program Files\Popcorn Time\libwinpthread-1.dll 2018-09-02 03:00 - 2017-10-01 09:42 - 000272896 _____ (Tabibito Technology) [File not signed] C:\Program Files\K-Lite Codec Pack\Icaros\32-bit\IcarosCache.dll 2018-09-02 03:00 - 2017-10-01 09:42 - 000379904 _____ (Tabibito Technology) [File not signed] C:\Program Files\K-Lite Codec Pack\Icaros\32-bit\IcarosThumbnailProvider.dll 2019-12-30 00:12 - 2014-07-30 17:56 - 000371214 _____ (Tadej Novak) [File not signed] C:\Program Files\Popcorn Time\libvlc-qt.dll 2019-12-30 00:12 - 2014-07-30 17:56 - 000185856 _____ (Tadej Novak) [File not signed] C:\Program Files\Popcorn Time\libvlc-qt-widgets.dll 2019-12-30 00:11 - 2014-06-11 21:51 - 009994752 _____ (The ICU Project) [File not signed] C:\Program Files\Popcorn Time\icudt.dll 2019-12-30 00:12 - 2014-03-07 22:06 - 002054656 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files\Popcorn Time\LIBEAY32.dll 2019-12-30 00:12 - 2014-03-07 22:06 - 000426496 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files\Popcorn Time\ssleay32.dll 2017-11-30 21:31 - 2016-12-31 13:03 - 002803200 ____C (wxWidgets development team) [File not signed] C:\Program Files\Audacity\wxbase30u_vc_custom.dll 2017-11-30 21:31 - 2016-12-31 13:35 - 000209408 ____C (wxWidgets development team) [File not signed] C:\Program Files\Audacity\wxbase30u_xml_vc_custom.dll 2017-11-30 21:31 - 2016-12-31 13:05 - 001698304 ____C (wxWidgets development team) [File not signed] C:\Program Files\Audacity\wxmsw30u_adv_vc_custom.dll 2017-11-30 21:31 - 2016-12-31 13:05 - 006319104 ____C (wxWidgets development team) [File not signed] C:\Program Files\Audacity\wxmsw30u_core_vc_custom.dll 2017-11-30 21:31 - 2016-12-31 13:05 - 000812032 ____C (wxWidgets development team) [File not signed] C:\Program Files\Audacity\wxmsw30u_html_vc_custom.dll 2017-11-30 21:31 - 2016-12-31 13:35 - 000197120 ____C (wxWidgets development team) [File not signed] C:\Program Files\Audacity\wxmsw30u_qa_vc_custom.dll ==================== Alternate Data Streams (Whitelisted) ======== (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\WINDOWS\system32\I:SummaryInformation [43] AlternateDataStreams: C:\WINDOWS\system32\I:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Documents and Settings\All Users\Application Data\Temp:59846E5E [96] ==================== Safe Mode (Whitelisted) ================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\nm => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\nm.sys => ""="Driver" ==================== Association (Whitelisted) ================= (If an entry is included in the fixlist, the registry item will be restored to default or removed.) HKLM\...\batfile\DefaultIcon: %SystemRoot%\System32\shell32.dll,-153 <==== ATTENTION ==================== Internet Explorer trusted/restricted ========== ==================== Hosts content: ========================= (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2008-04-14 03:00 - 2018-06-19 16:00 - 000000841 ____R C:\WINDOWS\system32\drivers\etc\hosts 127.0.0.1 localhost 127.0.0.1 www.mefeedia.com 127.0.0.1 delivery.anchorfree.us/land.php ==================== Other Areas =========================== (Currently there is no automatic fix for this section.) HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Documents and Settings\All Users\Application Data\Oracle\Java\javapath;c:\Program Files\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Smart Projects\IsoBuster;C:\WINDOWS\system32\WindowsPowerShell\v1.0 HKU\S-1-5-21-1085031214-1177238915-1644491937-1003\Control Panel\Desktop\\Wallpaper -> DNS Servers: 75.75.75.75 - 75.75.76.76 HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName3 -> C:\WINDOWS\system32\ipconf.tsp (Microsoft Windows Component Publisher -> Microsoft Corporation) HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName4 -> C:\WINDOWS\system32\h323.tsp (Microsoft Windows Component Publisher -> Microsoft Corporation) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == (If an entry is included in the fixlist, it will be removed.) MSCONFIG\startupfolder: C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\WINDOWS\pss\HP Digital Imaging Monitor.lnkCommon Startup MSCONFIG\startupfolder: C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Wireless PCI Card Configuration Utility.lnk => C:\WINDOWS\pss\Wireless PCI Card Configuration Utility.lnkCommon Startup MSCONFIG\startupfolder: C:^Documents and Settings^ROACH^Start Menu^Programs^Startup^desktop.ini.lnk => C:\WINDOWS\pss\desktop.ini.lnkStartup MSCONFIG\startupreg: GrooveMonitor => "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" MSCONFIG\startupreg: HP Software Update => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe MSCONFIG\startupreg: InCD => C:\Program Files\Nero\Nero 7\InCD\InCD.exe MSCONFIG\startupreg: Logitech Vid => "C:\Program Files\Logitech\Logitech Vid\vid.exe" -bootmode MSCONFIG\startupreg: LogitechQuickCamRibbon => "C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" /hide MSCONFIG\startupreg: NeroFilterCheck => C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe MSCONFIG\startupreg: NvCplDaemon => RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe" MSCONFIG\startupreg: UnlockerAssistant => "C:\Program Files\Unlocker\UnlockerAssistant.exe" MSCONFIG\startupreg: UpdReg => C:\WINDOWS\UpdReg.EXE ==================== FirewallRules (Whitelisted) ================ (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) DomainProfile\AuthorizedApplications: [C:\Program Files\CyberLink\PowerDVD11\PowerDVD11.exe] => Enabled:CyberLink PowerDVD 11.0 DomainProfile\AuthorizedApplications: [C:\Program Files\CyberLink\PowerDVD11\PDVD11Serv.exe] => Enabled:CyberLink PowerDVD 11.0 RC Service DomainProfile\AuthorizedApplications: [C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSServerForPDVD11.exe] => Enabled:CyberLink Media Server DomainProfile\AuthorizedApplications: [C:\Program Files\Winamp\winamp.exe] => Enabled:Winamp StandardProfile\AuthorizedApplications: [C:\WINDOWS\system32\dpvsetup.exe] => Enabled:Microsoft DirectPlay Voice Test StandardProfile\AuthorizedApplications: [C:\WINDOWS\system32\rundll32.exe] => Enabled:Run a DLL as an App StandardProfile\AuthorizedApplications: [C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE] => Enabled:Microsoft Office Outlook StandardProfile\AuthorizedApplications: [C:\Program Files\Microsoft Office\Office12\GROOVE.EXE] => Enabled:Microsoft Office Groove StandardProfile\AuthorizedApplications: [C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE] => Enabled:Microsoft Office OneNote StandardProfile\AuthorizedApplications: [C:\Program Files\Creative\SBLive\AudioHQ\AudioHQU.exe] => Enabled:Creative AudioHQ StandardProfile\AuthorizedApplications: [C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe] => Enabled:Adobe Photoshop CS3 StandardProfile\AuthorizedApplications: [C:\Program Files\VideoLAN\VLC\vlc.exe] => Enabled:VLC media player StandardProfile\AuthorizedApplications: [C:\WINDOWS\system32\sessmgr.exe] => Disabled:@xpsp2res.dll,-22019 StandardProfile\AuthorizedApplications: [C:\WINDOWS\Network Diagnostic\xpnetdiag.exe] => Disabled:@xpsp3res.dll,-20000 StandardProfile\AuthorizedApplications: [C:\Program Files\Avira\Antivirus\avcenter.exe] => Enabled:Start Avira Antivirus StandardProfile\AuthorizedApplications: [C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSServerForPDVD11.exe] => Disabled:CyberLink Media Server StandardProfile\AuthorizedApplications: [C:\Program Files\CyberLink\PowerDVD11\PowerDVD11.exe] => Disabled:CyberLink PowerDVD 11.0 StandardProfile\AuthorizedApplications: [C:\Program Files\CyberLink\PowerDVD11\PDVD11Serv.exe] => Disabled:CyberLink PowerDVD 11.0 RC Service StandardProfile\AuthorizedApplications: [C:\Program Files\Avira\Antivirus\fact.exe] => Disabled:fact StandardProfile\AuthorizedApplications: [C:\Program Files\Winamp\winamp.exe] => Enabled:Winamp StandardProfile\AuthorizedApplications: [C:\Program Files\Mozilla Firefox\firefox.exe] => Enabled:Firefox (C:\Program Files\Mozilla Firefox) StandardProfile\AuthorizedApplications: [C:\Program Files\CCleaner\CCUpdate.exe] => Enabled:CCleaner Update StandardProfile\AuthorizedApplications: [C:\Temp\Progs&Stuff\BitComet\BitComet.exe] => Enabled:BitComet StandardProfile\AuthorizedApplications: [C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe] => Disabled:hpoews01.exe StandardProfile\AuthorizedApplications: [C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe] => Disabled:hpofxm08.exe StandardProfile\AuthorizedApplications: [C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe] => Disabled:hposfx08.exe StandardProfile\AuthorizedApplications: [C:\Program Files\HP\Digital Imaging\bin\hposid01.exe] => Disabled:hposid01.exe StandardProfile\AuthorizedApplications: [C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe] => Disabled:hpqkygrp.exe StandardProfile\AuthorizedApplications: [C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe] => Disabled:hpqnrs08.exe StandardProfile\AuthorizedApplications: [C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe] => Disabled:hpqscnvw.exe StandardProfile\AuthorizedApplications: [C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe] => Disabled:hpqste08.exe StandardProfile\AuthorizedApplications: [C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe] => Disabled:hpqtra08.exe StandardProfile\AuthorizedApplications: [C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe] => Disabled:hpzwiz01.exe StandardProfile\AuthorizedApplications: [C:\Program Files\Logitech\Logitech Vid\Vid.exe] => Enabled:Logitech Vid StandardProfile\AuthorizedApplications: [C:\Program Files\Popcorn Time\Updater.exe] => Enabled:Updater.exe StandardProfile\AuthorizedApplications: [C:\Program Files\Popcorn Time\PopcornTimeDesktop.exe] => Enabled:Popcorn Time StandardProfile\AuthorizedApplications: [C:\Program Files\Popcorn Time\chromecast\node.exe] => Enabled:node.exe DomainProfile\GloballyOpenPorts: [1900:UDP] => :LocalSubNet:Enabled:@xpsp2res.dll,-22007 DomainProfile\GloballyOpenPorts: [2869:TCP] => :LocalSubNet:Enabled:@xpsp2res.dll,-22008 StandardProfile\GloballyOpenPorts: [1900:UDP] => :LocalSubNet:Enabled:@xpsp2res.dll,-22007 StandardProfile\GloballyOpenPorts: [2869:TCP] => :LocalSubNet:Enabled:@xpsp2res.dll,-22008 StandardProfile\GloballyOpenPorts: [15248:TCP] => Enabled:BitComet 15248 TCP StandardProfile\GloballyOpenPorts: [15248:UDP] => Enabled:BitComet 15248 UDP StandardProfile\GloballyOpenPorts: [8923:TCP] => Enabled:BitComet 8923 TCP(ED2K) StandardProfile\GloballyOpenPorts: [139:TCP] => :LocalSubNet:Disabled:@xpsp2res.dll,-22004 StandardProfile\GloballyOpenPorts: [445:TCP] => :LocalSubNet:Disabled:@xpsp2res.dll,-22005 StandardProfile\GloballyOpenPorts: [137:UDP] => :LocalSubNet:Disabled:@xpsp2res.dll,-22001 StandardProfile\GloballyOpenPorts: [138:UDP] => :LocalSubNet:Disabled:@xpsp2res.dll,-22002 StandardProfile\GloballyOpenPorts: [8689:TCP] => Enabled:BitComet 8689 TCP StandardProfile\GloballyOpenPorts: [5985:TCP] => Disabled:Windows Remote Management StandardProfile\GloballyOpenPorts: [80:TCP] => Disabled:Windows Remote Management - Compatibility Mode (HTTP-In) StandardProfile\GloballyOpenPorts: [8689:UDP] => Enabled:BitComet 8689 UDP StandardProfile\GloballyOpenPorts: [18680:TCP] => Enabled:BitComet 18680 TCP(ED2K) StandardProfile\GloballyOpenPorts: [18680:UDP] => Enabled:BitComet 18680 UDP(ED2K) ==================== Restore Points ========================= 21-10-2019 20:53:43 System Checkpoint 22-10-2019 22:09:26 System Checkpoint 24-10-2019 06:38:38 System Checkpoint 25-10-2019 22:29:43 System Checkpoint 27-10-2019 11:29:40 System Checkpoint 28-10-2019 14:22:05 System Checkpoint 29-10-2019 22:08:26 System Checkpoint 31-10-2019 18:56:52 System Checkpoint 01-11-2019 22:09:23 Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 01-11-2019 22:10:38 Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24123 01-11-2019 23:44:46 Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24123 01-11-2019 23:45:31 Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 03-11-2019 19:18:22 System Checkpoint 04-11-2019 23:49:02 System Checkpoint 05-11-2019 00:01:04 Removed Apple Application Support (32-bit) 05-11-2019 00:03:22 Removed Apple Mobile Device Support 05-11-2019 00:05:45 Removed Apple Software Update 05-11-2019 00:06:08 Removed Bonjour 05-11-2019 00:09:08 Removed iTunes 06-11-2019 01:06:30 System Checkpoint 07-11-2019 10:48:32 System Checkpoint 08-11-2019 23:25:37 System Checkpoint 10-11-2019 22:46:35 System Checkpoint 14-11-2019 15:37:10 System Checkpoint 15-11-2019 21:52:02 System Checkpoint 16-11-2019 22:10:26 System Checkpoint 18-11-2019 02:56:53 System Checkpoint 19-11-2019 08:11:45 System Checkpoint 21-11-2019 10:33:19 System Checkpoint 22-11-2019 18:38:27 System Checkpoint 28-11-2019 14:07:26 System Checkpoint 01-12-2019 18:26:03 System Checkpoint 02-12-2019 23:08:37 System Checkpoint 04-12-2019 02:41:30 System Checkpoint 05-12-2019 14:40:44 System Checkpoint 06-12-2019 18:10:34 System Checkpoint 07-12-2019 20:09:22 System Checkpoint 09-12-2019 11:08:23 System Checkpoint 10-12-2019 16:47:19 System Checkpoint 12-12-2019 11:21:38 System Checkpoint 14-12-2019 02:04:44 System Checkpoint 15-12-2019 15:53:27 System Checkpoint 16-12-2019 16:28:07 System Checkpoint 18-12-2019 11:33:10 System Checkpoint 20-12-2019 09:25:52 System Checkpoint 21-12-2019 17:05:56 System Checkpoint 22-12-2019 19:33:39 System Checkpoint 24-12-2019 10:46:11 System Checkpoint 25-12-2019 04:25:01 Installed Samsung Kies3 27-12-2019 01:53:46 System Checkpoint 30-12-2019 00:04:20 Removed Samsung Kies3 31-12-2019 21:22:38 System Checkpoint 01-01-2020 23:44:36 System Checkpoint 02-01-2020 13:09:12 Installed Windows XP winusb0100. 02-01-2020 13:29:35 Installed Samsung Kies3 02-01-2020 14:14:12 Installed Smart Switch 03-01-2020 14:17:26 System Checkpoint 04-01-2020 19:19:20 System Checkpoint 05-01-2020 20:12:27 System Checkpoint 07-01-2020 14:12:04 System Checkpoint 09-01-2020 22:02:23 System Checkpoint 11-01-2020 12:02:21 System Checkpoint 12-01-2020 19:40:28 Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 13-01-2020 10:40:00 Installed Extended Asian Language font pack for Adobe Reader XI. 15-01-2020 12:03:07 System Checkpoint 16-01-2020 15:45:24 System Checkpoint 17-01-2020 21:51:59 System Checkpoint 18-01-2020 22:34:46 System Checkpoint ==================== Faulty Device Manager Devices ============ Name: Multimedia Audio Controller Description: Multimedia Audio Controller Class Guid: {4D36E97E-E325-11CE-BFC1-08002BE10318} Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Floppy disk drive Description: Floppy disk drive Class Guid: {4D36E980-E325-11CE-BFC1-08002BE10318} Manufacturer: (Standard floppy disk drives) Service: flpydisk Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: SM Bus Controller Description: SM Bus Controller Class Guid: {4D36E97E-E325-11CE-BFC1-08002BE10318} Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Sound Blaster 16 or AWE32 or compatible (WDM) Description: Sound Blaster 16 or AWE32 or compatible (WDM) Class Guid: {4D36E96C-E325-11CE-BFC1-08002BE10318} Manufacturer: Creative Technology Ltd. Service: ctlsb16 Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ======================== Application errors: ================== Error: (01/19/2020 08:50:24 PM) (Source: crypt32) (EventID: 8) (User: ) Description: Failed auto update retrieval of third-party root list sequence number from: with error: The specified server cannot perform the requested operation. Error: (01/19/2020 08:50:24 PM) (Source: crypt32) (EventID: 8) (User: ) Description: Failed auto update retrieval of third-party root list sequence number from: with error: The specified server cannot perform the requested operation. Error: (01/19/2020 08:50:23 PM) (Source: crypt32) (EventID: 8) (User: ) Description: Failed auto update retrieval of third-party root list sequence number from: with error: The specified server cannot perform the requested operation. Error: (01/19/2020 08:50:23 PM) (Source: crypt32) (EventID: 8) (User: ) Description: Failed auto update retrieval of third-party root list sequence number from: with error: The specified server cannot perform the requested operation. Error: (01/19/2020 08:50:23 PM) (Source: crypt32) (EventID: 8) (User: ) Description: Failed auto update retrieval of third-party root list sequence number from: with error: The specified server cannot perform the requested operation. Error: (01/19/2020 08:50:23 PM) (Source: crypt32) (EventID: 8) (User: ) Description: Failed auto update retrieval of third-party root list sequence number from: with error: The specified server cannot perform the requested operation. Error: (01/19/2020 08:50:23 PM) (Source: crypt32) (EventID: 8) (User: ) Description: Failed auto update retrieval of third-party root list sequence number from: with error: The specified server cannot perform the requested operation. Error: (01/19/2020 08:50:22 PM) (Source: crypt32) (EventID: 8) (User: ) Description: Failed auto update retrieval of third-party root list sequence number from: with error: The specified server cannot perform the requested operation. System errors: ============= Error: (01/13/2020 08:50:14 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: The Net.Tcp Port Sharing Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service. Error: (01/12/2020 07:29:07 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: The Net.Tcp Port Sharing Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service. Error: (01/08/2020 05:09:30 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: The Net.Tcp Port Sharing Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service. Error: (01/06/2020 11:03:22 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: The Net.Tcp Port Sharing Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service. Error: (01/02/2020 07:56:58 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: The Net.Tcp Port Sharing Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service. Error: (12/31/2019 08:27:28 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The NMIndexingService service terminated unexpectedly. It has done this 1 time(s). Error: (12/31/2019 08:27:16 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: The Net.Tcp Port Sharing Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service. Error: (12/31/2019 08:27:06 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The Process Monitor service terminated unexpectedly. It has done this 1 time(s). ==================== Memory info =========================== BIOS: Dell Inc. DELL - 7 03/31/2006 Motherboard: Dell Inc. 0HH807 Processor: Intel(R) Pentium(R) 4 CPU 2.80GHz Percentage of memory in use: 58% Total physical RAM: 3582.07 MB Available physical RAM: 1491.95 MB Total Virtual: 5464.38 MB Available Virtual: 3157.76 MB ==================== Drives ================================ Drive c: (MYTERRABYTE 1400) (Fixed) (Total:1397.26 GB) (Free:945.58 GB) NTFS ==>[drive with boot components (Windows XP)] Drive d: (STORAGE1) (Fixed) (Total:139.7 GB) (Free:139.26 GB) NTFS Drive e: (STORAGE2) (Fixed) (Total:232.88 GB) (Free:232.66 GB) NTFS Drive f: (FlashSAM) (CDROM) (Total:2.76 GB) (Free:0 GB) CDFS ==================== MBR & Partition Table ==================== ========================================================== Disk: 0 (Size: 111.8 GB) (Disk ID: 894CE31A) Partition 1: (Not Active) - (Size=102.4 GB) - (Type=83) Partition 2: (Not Active) - (Size=9.3 GB) - (Type=05) ========================================================== Disk: 1 (Size: 1397.3 GB) (Disk ID: A33CFB42) Partition 1: (Active) - (Size=1397.3 GB) - (Type=07 NTFS) ========================================================== Disk: 2 (Size: 149 GB) (Disk ID: 50FE1050) Partition 1: (Active) - (Size=139.7 GB) - (Type=07 NTFS) ========================================================== Disk: 3 (Size: 232.9 GB) (Disk ID: BF36BF36) Partition 1: (Active) - (Size=232.9 GB) - (Type=07 NTFS) ==================== End of Addition.txt =======================