additional.txt
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 31-08-2016
Ran by Owner (01-09-2016 23:58:01)
Running from C:\Users\Owner\Downloads
Microsoft Windows 10 Home Version 1511 (X86) (2016-03-10 14:50:45)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-4030092792-1861841708-2368464224-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-4030092792-1861841708-2368464224-503 - Limited - Disabled)
Guest (S-1-5-21-4030092792-1861841708-2368464224-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-4030092792-1861841708-2368464224-1002 - Limited - Enabled)
Owner (S-1-5-21-4030092792-1861841708-2368464224-1000 - Administrator - Enabled) => C:\Users\Owner
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Bitdefender Antivirus Free Edition (Enabled - Up to date) {3FB17364-4FCC-0FA7-6BBF-973897395371}
AS: Bitdefender Antivirus Free Edition (Enabled - Up to date) {84D09280-69F6-0029-510F-AC4AECBE19CC}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Disabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Acrobat Reader DC (HKLM\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.017.20053 - Adobe Systems Incorporated)
Adobe Digital Editions 3.0 (HKLM\...\Adobe Digital Editions 3.0) (Version: 3.0.1 - Adobe Systems Incorporated)
Adobe Flash Player 22 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 22.0.0.209 - Adobe Systems Incorporated)
Amazon Music (HKU\S-1-5-21-4030092792-1861841708-2368464224-1000\...\Amazon Amazon Music) (Version: 3.7.0.693 - Amazon Services LLC)
Bitdefender Antivirus Free Edition (HKLM\...\BitDefender Gonzales) (Version: 1.0.21.1109 - Bitdefender)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.2.4291 - CDBurnerXP)
Citrix Online Launcher (HKLM\...\{09DA5EE2-7E46-4DC4-96F9-BFEE50D40659}) (Version: 1.0.408 - Citrix)
Google Chrome (HKLM\...\Google Chrome) (Version: 52.0.2743.116 - Google Inc.)
Google Drive (HKLM\...\{459CE109-4E46-4340-92BC-054642BC3BC2}) (Version: 1.31.2873.2758 - Google, Inc.)
Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.31.5 - Google Inc.) Hidden
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.15.10.1930 - Intel Corporation)
Java 8 Update 31 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50428.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
OpenOffice 4.1.2 (HKLM\...\{E6AD67BB-1C33-4AB3-A387-E0D48137AB70}) (Version: 4.12.9782 - Apache Software Foundation)
QuickTime (HKLM\...\QuickTime) (Version: - )
Scrivener Update (HKLM\...\Scrivener 1900) (Version: 1960 - Literature and Latte)
Spotify (HKU\S-1-5-21-4030092792-1861841708-2368464224-1000\...\Spotify) (Version: 1.0.36.124.g1cba1920 - Spotify AB)
Spybot - Search & Destroy (HKLM\...\{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1) (Version: 1.6.2 - Safer Networking Limited)
Spybot - Search & Destroy (HKLM\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Tweaking.com - Registry Backup (HKLM\...\Tweaking.com - Registry Backup) (Version: 3.5.0 - Tweaking.com)
WebEx Support Manager for Internet Explorer (HKLM\...\{C34FAEF3-4241-4C4E-9CFF-7BBD8BCEABE7}) (Version: 6.5.47 - WebEx Communications Inc.)
yWriter6 (HKLM\...\yWriter6_is1) (Version: - Spacejock Software)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-4030092792-1861841708-2368464224-1000_Classes\CLSID\{2D611968-B0FB-4B81-8AFA-D7486879D141}\InprocServer32 -> Rnvrcs.dll => No File
CustomCLSID: HKU\S-1-5-21-4030092792-1861841708-2368464224-1000_Classes\CLSID\{3A999A50-AB25-4A20-90A9-08F71FCE320F}\InprocServer32 -> C:\Windows\system32\spool\DRIVERS\W32X86\3\HPCDMC32.DLL (HP)
CustomCLSID: HKU\S-1-5-21-4030092792-1861841708-2368464224-1000_Classes\CLSID\{880804D3-6A76-4a39-8F95-641CFA984557}\InprocServer32 -> %LOCALAPPDATA%\HuluDesktop\instances\0.9.14.1\hdIEPlg.dll => No File
CustomCLSID: HKU\S-1-5-21-4030092792-1861841708-2368464224-1000_Classes\CLSID\{98087D89-B93F-4BCF-A998-AE4D9F607C14}\InprocServer32 -> C:\Windows\system32\spool\DRIVERS\W32X86\3\HPCDMC32.DLL (HP)
CustomCLSID: HKU\S-1-5-21-4030092792-1861841708-2368464224-1000_Classes\CLSID\{B286F068-5B17-4AE8-989B-8F9A199C47BA}\InprocServer32 -> C:\Windows\system32\spool\DRIVERS\W32X86\3\HPCDMC32.DLL (HP)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {03DFCD56-A98B-46D4-9D4B-E1972F8B80BC} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\Owner\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe [2016-08-18] (Microsoft Corporation)
Task: {06B1FDD1-9AAA-4504-AB52-89160A212A40} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {0CCCE18F-FFB9-40B6-9854-3ABF824B5AAB} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {121809E5-6D3A-4F5F-9F0F-51CD6C0F0B69} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {1DEB3732-27A5-4A6C-A536-4702F8B072A2} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {22BC150D-8B18-4C1F-8D42-8855880BBDAD} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {2A6D9D8D-6112-43C5-966B-85F3728313C9} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {2DAEA87C-86AC-40DE-A359-700FA9D5FE93} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {33ECED19-4E20-407E-9089-F83710CD100D} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {36BF9E44-DBA5-4D18-8A2F-B620B0534F8C} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {3B7116AB-E02A-4E27-8855-E1EA028999B4} - System32\Tasks\UpdaterEX => C:\Users\Owner\AppData\Roaming\UPDATE~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {425FD655-8FF9-439A-A65F-0BD8DCA4F3BA} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {433DB1B2-26E3-4B7B-BDBA-A510ADCF241A} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe [2016-03-21] (Safer-Networking Ltd.)
Task: {47026316-1942-4F3D-B426-1714D134D5CE} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {55AB25D1-C7F0-4FDF-B692-A4C29FB3FEF8} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {57B48964-77DA-47A5-B2BC-8313AF3627FD} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {5D812CED-0169-4B5C-8752-CFD4C37A2BE2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {603BF118-5B4D-40F5-A486-948329586DE8} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe
Task: {635385F1-8BBC-4478-A808-DAB2F3C8628E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-07-12] (Adobe Systems Incorporated)
Task: {63E19ABD-BEF6-4D88-A9F7-7A3C0E7626D7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {6B6C4B78-7A58-485F-A61D-9CFA6C04A657} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {70D086BF-8544-48FF-B7FF-5BF3113A0C76} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {70E5E7F1-670F-457F-BF52-8F1DB875008A} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {750DA92C-678B-43EC-9B33-456CD7EA2FD1} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {75884FC2-2FF7-4C75-A8CA-6488576414AB} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {829B21DA-7739-4C90-957C-98DC9C8F914A} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {94AEF91F-5F0D-42F3-B022-6716CA643AEB} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {9F876EBA-83FC-482E-89BF-81A18CA7C03D} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {B1BA70DD-79CF-4168-9861-9832ADD5188C} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {BD09BA61-FC8D-49B9-8B28-14D1EDB9E4FF} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\MpCmdRun.exe
Task: {BFE0BBD0-C3FE-4C7C-A368-4CCF17749168} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {D3F0C711-25A0-44B8-86B1-254CEB78D225} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {DB441ACD-FAE3-4A65-8F2C-69EF664F8857} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {E021BA1A-E6D3-430B-968F-7C23FC545559} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {E08DFD32-9247-4235-B633-11CC453AA832} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {E51A7559-C977-4911-9A6A-6B83CB8B0AF5} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {E5B3FB82-5D84-476C-83E9-42BDD523B259} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {E75A966F-429F-4C5E-A3C5-E08CD512616F} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {E826665B-C096-40EA-AB45-7FFD760C56E2} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {E87E36E7-DC72-41A8-A5B1-EB5CFB9C81F6} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {E896F520-6033-4687-8272-D3A4DE76E299} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {ECF432F5-B652-4545-8356-B715F32D5CE6} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-06-25] (Adobe Systems Incorporated)
Task: {EF2CA483-2301-4A8C-8315-929229013A61} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe [2016-03-21] (Safer-Networking Ltd.)
Task: {F28494F9-3ECC-4658-83B1-92DAD8FDAFB1} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)
Task: {F4958A23-8F04-4404-8D50-8B27BE36C4F7} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\UpdaterEX.job => C:\Users\Owner\AppData\Roaming\UPDATE~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Play Music.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=fahmaaghhglfmonjliepjlchgpgfmobi
==================== Loaded Modules (Whitelisted) ==============
2015-10-30 01:44 - 2015-10-30 01:44 - 00149504 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-04-01 10:33 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2016-04-01 10:33 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2016-04-01 10:33 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files\Spybot - Search & Destroy 2\DEC150.bpl
2016-07-12 21:10 - 2016-07-01 00:38 - 01862008 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-07-12 21:10 - 2016-07-01 00:38 - 01862008 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-08-18 17:33 - 2016-08-18 17:33 - 01383616 _____ () C:\Users\Owner\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\ClientTelemetry.dll
2016-03-10 13:15 - 2016-03-10 13:15 - 00070656 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-07-12 21:09 - 2016-06-30 23:31 - 00316416 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-09-01 19:31 - 2016-09-01 19:31 - 00098816 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\win32api.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 00110080 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\pywintypes27.dll
2016-09-01 19:31 - 2016-09-01 19:31 - 00364544 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\pythoncom27.dll
2016-09-01 19:31 - 2016-09-01 19:31 - 00320512 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\win32com.shell.shell.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 00776704 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\_hashlib.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 01176576 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\wx._core_.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 00806400 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\wx._gdi_.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 00816128 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\wx._windows_.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 01067008 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\wx._controls_.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 00733184 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\wx._misc_.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 00682496 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\pysqlite2._sqlite.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 00088064 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\_ctypes.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 00119808 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\win32file.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 00108544 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\win32security.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 00007168 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\hashobjs_ext.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 00017920 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\thumbnails_ext.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 00088064 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\usb_ext.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 00012800 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\common.time34.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 00018432 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\win32event.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 00167936 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\win32gui.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 00046080 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\_socket.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 01208320 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\_ssl.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 00128512 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\_elementtree.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 00127488 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\pyexpat.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 00038912 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\win32inet.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 00036864 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\_psutil_windows.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 00525208 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\windows._lib_cacheinvalidation.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 00011264 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\win32crypt.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 00077312 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\wx._html2.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 00027136 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\_multiprocessing.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 00020480 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\_yappi.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 00035840 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\win32process.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 00686080 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\unicodedata.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 00078848 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\wx._animate.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 00123392 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\wx._wizard.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 00024064 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\win32pipe.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 00010240 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\select.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 00025600 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\win32pdh.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 00017408 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\win32profile.pyd
2016-09-01 19:31 - 2016-09-01 19:31 - 00022528 ____R () C:\Users\Owner\AppData\Local\Temp\_MEI49322\win32ts.pyd
2016-04-18 16:59 - 2016-04-18 17:00 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2016-04-18 16:59 - 2016-04-18 17:00 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2016-04-18 16:59 - 2016-04-18 17:00 - 22284800 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll
2016-08-24 17:45 - 2016-08-24 17:46 - 00015872 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsPhone_10.1608.2211.0_x86__8wekyb3d8bbwe\CompanionApp.exe
2016-08-24 17:45 - 2016-08-24 17:46 - 03454464 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsPhone_10.1608.2211.0_x86__8wekyb3d8bbwe\CompanionApp.dll
2016-08-24 17:45 - 2016-08-24 17:46 - 00508928 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsPhone_10.1608.2211.0_x86__8wekyb3d8bbwe\CompanionAppDeviceManager.dll
2016-03-10 20:41 - 2016-03-10 20:41 - 00169984 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsPhone_10.1608.2211.0_x86__8wekyb3d8bbwe\StoreRatingPromotion.dll
2016-09-01 21:42 - 2016-09-01 21:43 - 10056744 _____ () C:\Users\Owner\Downloads\Antivirus_Free_Edition_x86.exe
2016-09-01 21:47 - 2013-03-19 11:07 - 00522136 _____ () C:\Program Files\Bitdefender\Antivirus Free Edition\sqlite3.dll
2016-09-01 21:47 - 2013-09-03 13:29 - 00105448 _____ () C:\Program Files\Bitdefender\Antivirus Free Edition\BDMetrics.dll
2016-08-15 17:41 - 2016-08-15 18:03 - 00017920 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.722.10060.0_x86__8wekyb3d8bbwe\Microsoft.Photos.exe
2016-08-15 17:41 - 2016-08-15 18:03 - 11393536 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.722.10060.0_x86__8wekyb3d8bbwe\Microsoft.Photos.dll
2016-06-05 15:17 - 2016-06-05 15:18 - 00541696 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.722.10060.0_x86__8wekyb3d8bbwe\Microsoft.DesignCore.dll
2016-03-10 20:56 - 2016-03-10 20:59 - 00180224 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.722.10060.0_x86__8wekyb3d8bbwe\StoreRatingPromotion.dll
2016-07-12 21:10 - 2016-06-30 23:13 - 05340160 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-07-12 21:10 - 2016-06-30 23:08 - 00471552 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-07-12 21:10 - 2016-06-30 23:08 - 02366976 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-07-12 21:10 - 2016-06-30 23:11 - 02656768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-08-08 17:24 - 2016-08-02 19:54 - 17602240 _____ () C:\Program Files\Google\Chrome\Application\52.0.2743.116\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com ->
www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com ->
www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com ->
www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com ->
www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com ->
www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com ->
www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com ->
www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com ->
www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com ->
www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info ->
www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com ->
www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com ->
www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com ->
www.123simsen.com
There are 7914 more sites.
IE restricted site: HKU\S-1-5-21-4030092792-1861841708-2368464224-1000\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-4030092792-1861841708-2368464224-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-4030092792-1861841708-2368464224-1000\...\008k.com ->
www.008k.com
IE restricted site: HKU\S-1-5-21-4030092792-1861841708-2368464224-1000\...\00hq.com ->
www.00hq.com
IE restricted site: HKU\S-1-5-21-4030092792-1861841708-2368464224-1000\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-4030092792-1861841708-2368464224-1000\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-4030092792-1861841708-2368464224-1000\...\0scan.com ->
www.0scan.com
IE restricted site: HKU\S-1-5-21-4030092792-1861841708-2368464224-1000\...\1-2005-search.com ->
www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-4030092792-1861841708-2368464224-1000\...\1-domains-registrations.com ->
www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-4030092792-1861841708-2368464224-1000\...\1000gratisproben.com ->
www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-4030092792-1861841708-2368464224-1000\...\1001namen.com ->
www.1001namen.com
IE restricted site: HKU\S-1-5-21-4030092792-1861841708-2368464224-1000\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-4030092792-1861841708-2368464224-1000\...\100sexlinks.com ->
www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-4030092792-1861841708-2368464224-1000\...\10sek.com ->
www.10sek.com
IE restricted site: HKU\S-1-5-21-4030092792-1861841708-2368464224-1000\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-4030092792-1861841708-2368464224-1000\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-4030092792-1861841708-2368464224-1000\...\123fporn.info ->
www.123fporn.info
IE restricted site: HKU\S-1-5-21-4030092792-1861841708-2368464224-1000\...\123haustiereundmehr.com ->
www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-4030092792-1861841708-2368464224-1000\...\123moviedownload.com ->
www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-4030092792-1861841708-2368464224-1000\...\123simsen.com ->
www.123simsen.com
There are 7915 more sites.
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-13 22:04 - 2016-08-30 17:30 - 00453443 ____R C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1
www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1
www.008k.com
127.0.0.1 008k.com
127.0.0.1
www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1
www.032439.com
127.0.0.1 032439.com
127.0.0.1
www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1
www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1
www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1
www.100888290cs.com
127.0.0.1
www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1
www.10sek.com
127.0.0.1
www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1
www.123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1
www.123haustiereundmehr.com
127.0.0.1 123moviedownload.com
127.0.0.1
www.123moviedownload.com
There are 15555 more lines.
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-4030092792-1861841708-2368464224-1000\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 209.18.47.62 - 209.18.47.61
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
HKLM\...\StartupApproved\Run: => "APSDaemon"
HKLM\...\StartupApproved\Run: => "HotKeysCmds"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKU\S-1-5-21-4030092792-1861841708-2368464224-1000\...\StartupApproved\Run: => "Amazon Music"
HKU\S-1-5-21-4030092792-1861841708-2368464224-1000\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-4030092792-1861841708-2368464224-1000\...\StartupApproved\Run: => "Spotify"
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-32bit] => (Allow) LPort=808
FirewallRules: [UDP Query User{46FBA79F-4171-4C78-B49E-38C7AB43B17C}C:\users\owner\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\owner\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{E002756B-88F0-47D8-8968-4E261AFE5D91}C:\users\owner\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\owner\appdata\roaming\spotify\spotify.exe
FirewallRules: [{6BC93BFA-F55B-4E72-8FD0-81BB8556F067}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{AE1D72ED-5F4E-4008-BED1-6F9768C10B7C}] => (Allow) LPort=67
FirewallRules: [{E8EBA4B5-CB43-45C5-BAB3-3D456F6A05DF}] => (Allow) C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe
FirewallRules: [{8434326C-2785-4961-8382-8CE81BF55204}] => (Allow) C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe
FirewallRules: [UDP Query User{1BEA4507-3FF4-4700-9FC8-BECA77B7DA0E}C:\program files\kodak\kodak software updater\7288971\program\backweb-7288971.exe] => (Block) C:\program files\kodak\kodak software updater\7288971\program\backweb-7288971.exe
FirewallRules: [TCP Query User{93A43657-9057-4953-9C7A-E78B99C1E0B7}C:\program files\kodak\kodak software updater\7288971\program\backweb-7288971.exe] => (Block) C:\program files\kodak\kodak software updater\7288971\program\backweb-7288971.exe
FirewallRules: [UDP Query User{52F84905-7038-430A-B35D-30812B924A0F}C:\program files\kodak\kodak software updater\7288971\program\backweb-7288971.exe] => (Block) C:\program files\kodak\kodak software updater\7288971\program\backweb-7288971.exe
FirewallRules: [TCP Query User{0C1B73AC-73A2-4940-8208-1209CAA92417}C:\program files\kodak\kodak software updater\7288971\program\backweb-7288971.exe] => (Block) C:\program files\kodak\kodak software updater\7288971\program\backweb-7288971.exe
FirewallRules: [UDP Query User{0A03A2C7-F418-4011-ACFE-3F83095F1248}C:\users\owner\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\owner\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{8F06D330-8C00-4E92-9A4D-E656010F08FA}C:\users\owner\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\owner\appdata\roaming\spotify\spotify.exe
FirewallRules: [{B603E256-9F4E-4AF4-86B5-200C31517A89}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{B44E9551-FA60-4D38-B622-358D4C320D58}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
==================== Restore Points =========================
15-08-2016 19:14:49 Scheduled Checkpoint
24-08-2016 21:23:04 Scheduled Checkpoint
01-09-2016 19:50:12 Windows Update
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (09/01/2016 08:18:11 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: OWNER-PC)
Description: Activation of app Microsoft.WindowsMaps_8wekyb3d8bbwe!App failed with error: -2144927148 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (09/01/2016 08:12:14 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: OWNER-PC)
Description: Activation of app Microsoft.WindowsMaps_8wekyb3d8bbwe!App failed with error: -2144927148 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (09/01/2016 08:07:15 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: OWNER-PC)
Description: Activation of app Microsoft.WindowsMaps_8wekyb3d8bbwe!App failed with error: -2144927148 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (09/01/2016 08:01:03 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: OWNER-PC)
Description: Activation of app Microsoft.WindowsMaps_8wekyb3d8bbwe!App failed with error: -2144927148 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (09/01/2016 07:54:11 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: OWNER-PC)
Description: Activation of app Microsoft.WindowsMaps_8wekyb3d8bbwe!App failed with error: -2144927148 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (09/01/2016 07:51:20 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.
System Error:
Access is denied.
.
Error: (09/01/2016 07:47:14 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: OWNER-PC)
Description: Activation of app Microsoft.WindowsMaps_8wekyb3d8bbwe!App failed with error: -2144927148 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (08/31/2016 08:16:46 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program SDScan.exe version 2.6.44.181 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
Process ID: 1988
Start Time: 01d203dbdf238a23
Termination Time: 4294967295
Application Path: C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe
Report Id: 11bb00fe-6fd9-11e6-a535-001aa0ae0fd9
Faulting package full name:
Faulting package-relative application ID:
Error: (08/31/2016 08:15:33 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program Spotify.exe version 1.0.36.124 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
Process ID: cf4
Start Time: 01d203da80ebaa6d
Termination Time: 4294967295
Application Path: C:\Users\Owner\AppData\Roaming\Spotify\Spotify.exe
Report Id: 181f3405-6fd9-11e6-a535-001aa0ae0fd9
Faulting package full name:
Faulting package-relative application ID:
Error: (08/31/2016 08:15:18 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program SDWelcome.exe version 2.4.40.130 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
Process ID: 1124
Start Time: 01d203dbcbf452be
Termination Time: 4294967295
Application Path: C:\Program Files\Spybot - Search & Destroy 2\SDWelcome.exe
Report Id: 1b3af2f7-6fd9-11e6-a535-001aa0ae0fd9
Faulting package full name:
Faulting package-relative application ID:
System errors:
=============
Error: (09/01/2016 09:48:03 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The bdfwfpf service failed to start due to the following error:
Incorrect function.
Error: (09/01/2016 09:48:02 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The bdfwfpf service failed to start due to the following error:
Incorrect function.
Error: (09/01/2016 09:47:58 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The bdfwfpf service failed to start due to the following error:
The system cannot find the file specified.
Error: (09/01/2016 07:29:55 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The NetPipeActivator service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.
Error: (09/01/2016 07:29:55 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the NetPipeActivator service to connect.
Error: (09/01/2016 07:29:47 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The SDScannerService service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.
Error: (09/01/2016 07:29:47 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the SDScannerService service to connect.
Error: (09/01/2016 07:29:16 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The NetTcpActivator service depends on the NetTcpPortSharing service which failed to start because of the following error:
The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
Error: (09/01/2016 07:29:27 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: The computer has rebooted from a bugcheck. The bugcheck was: 0x00000080 (0x004f4454, 0x00000000, 0x00000000, 0x00000000). A dump was saved in: C:\WINDOWS\MEMORY.DMP. Report Id: 3c22c186-b838-4127-8f8c-c147ea7cbec0.
Error: (09/01/2016 07:29:04 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 9:08:56 PM on 8/31/2016 was unexpected.
CodeIntegrity:
===================================
Date: 2016-09-01 21:41:27.115
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-09-01 21:41:27.098
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-09-01 21:41:27.078
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-09-01 21:41:24.826
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-09-01 21:41:24.794
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-09-01 21:33:26.978
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-09-01 21:33:26.962
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-09-01 21:33:26.938
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-09-01 21:33:26.333
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-09-01 21:33:26.251
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Memory info ===========================
Processor: Intel(R) Pentium(R) D CPU 3.40GHz
Percentage of memory in use: 73%
Total physical RAM: 2037.61 MB
Available physical RAM: 532.13 MB
Total Virtual: 4085.61 MB
Available Virtual: 1748.59 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:148.47 GB) (Free:108 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149 GB) (Disk ID: 2BD2C32A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=148.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)
==================== End of Addition.txt ============================