Additional scan result of Farbar Recovery Scan Tool (x64) Version: 25-05-2014 02 Ran by EM at 2014-05-28 00:15:19 Running from C:\Users\EM\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Kaspersky Anti-Virus (Enabled - Up to date) {C3113FBF-4BCB-4461-D78D-6EDFEC9593E5} AS: Kaspersky Anti-Virus (Enabled - Up to date) {7870DE5B-6DF1-4BEF-ED3D-55AD9712D958} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== Acer Crystal Eye Webcam (HKLM-x32\...\InstallShield_{A0382E3C-7384-429A-9BFA-AF5888E5A193}) (Version: 1.5.2624.00 - CyberLink Corp.) Acer Crystal Eye Webcam (x32 Version: 1.5.2624.00 - CyberLink Corp.) Hidden Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 6.00.3010 - Acer Incorporated) Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3507 - Acer Incorporated) Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3506 - Acer Incorporated) Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 20.11.1107.1418 - Acer Incorporated) Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3501 - Acer Incorporated) Acer VCM (HKLM-x32\...\{047F790A-7A2A-4B6A-AD02-38092BA63DAC}) (Version: 4.05.3501 - Acer Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.6.0.19120 - Adobe Systems Incorporated) Adobe AIR (x32 Version: 2.6.0.19120 - Adobe Systems Incorporated) Hidden Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated) Adobe Reader X (10.1.9) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.9 - Adobe Systems Incorporated) Alcor Micro USB Card Reader (HKLM-x32\...\AmUStor) (Version: 1.5.42.69774 - Alcor Micro Corp.) Alcor Micro USB Card Reader (x32 Version: 1.5.42.69774 - Alcor Micro Corp.) Hidden AMD APP SDK Runtime (Version: 10.0.851.4 - Advanced Micro Devices Inc.) Hidden AMD Catalyst Install Manager (HKLM\...\{029CA27F-8D5C-AC3C-319B-FA50664CE9F9}) (Version: 3.0.859.0 - Advanced Micro Devices, Inc.) AMD Media Foundation Decoders (Version: 1.0.70127.0812 - Advanced Micro Devices, Inc.) Hidden AMD VISION Engine Control Center (x32 Version: 2012.0127.816.14645 - Advanced Micro Devices, Inc.) Hidden AUPEO! (HKLM-x32\...\AUPEO!) (Version: 1.08 - AUPEO Ltd.) Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Graphics Previews Common (x32 Version: 2012.0127.816.14645 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center InstallProxy (x32 Version: 2012.0127.816.14645 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Localization All (x32 Version: 2012.0127.816.14645 - Advanced Micro Devices, Inc.) Hidden CCC Help Chinese Standard (x32 Version: 2012.0127.0815.14645 - Advanced Micro Devices, Inc.) Hidden CCC Help Chinese Traditional (x32 Version: 2012.0127.0815.14645 - Advanced Micro Devices, Inc.) Hidden CCC Help Czech (x32 Version: 2012.0127.0815.14645 - Advanced Micro Devices, Inc.) Hidden CCC Help Danish (x32 Version: 2012.0127.0815.14645 - Advanced Micro Devices, Inc.) Hidden CCC Help Dutch (x32 Version: 2012.0127.0815.14645 - Advanced Micro Devices, Inc.) Hidden CCC Help English (x32 Version: 2012.0127.0815.14645 - Advanced Micro Devices, Inc.) Hidden CCC Help Finnish (x32 Version: 2012.0127.0815.14645 - Advanced Micro Devices, Inc.) Hidden CCC Help French (x32 Version: 2012.0127.0815.14645 - Advanced Micro Devices, Inc.) Hidden CCC Help German (x32 Version: 2012.0127.0815.14645 - Advanced Micro Devices, Inc.) Hidden CCC Help Greek (x32 Version: 2012.0127.0815.14645 - Advanced Micro Devices, Inc.) Hidden CCC Help Hungarian (x32 Version: 2012.0127.0815.14645 - Advanced Micro Devices, Inc.) Hidden CCC Help Italian (x32 Version: 2012.0127.0815.14645 - Advanced Micro Devices, Inc.) Hidden CCC Help Japanese (x32 Version: 2012.0127.0815.14645 - Advanced Micro Devices, Inc.) Hidden CCC Help Korean (x32 Version: 2012.0127.0815.14645 - Advanced Micro Devices, Inc.) Hidden CCC Help Norwegian (x32 Version: 2012.0127.0815.14645 - Advanced Micro Devices, Inc.) Hidden CCC Help Polish (x32 Version: 2012.0127.0815.14645 - Advanced Micro Devices, Inc.) Hidden CCC Help Portuguese (x32 Version: 2012.0127.0815.14645 - Advanced Micro Devices, Inc.) Hidden CCC Help Russian (x32 Version: 2012.0127.0815.14645 - Advanced Micro Devices, Inc.) Hidden CCC Help Spanish (x32 Version: 2012.0127.0815.14645 - Advanced Micro Devices, Inc.) Hidden CCC Help Swedish (x32 Version: 2012.0127.0815.14645 - Advanced Micro Devices, Inc.) Hidden CCC Help Thai (x32 Version: 2012.0127.0815.14645 - Advanced Micro Devices, Inc.) Hidden CCC Help Turkish (x32 Version: 2012.0127.0815.14645 - Advanced Micro Devices, Inc.) Hidden ccc-utility64 (Version: 2012.0127.816.14645 - Advanced Micro Devices, Inc.) Hidden D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden ETDWare PS/2-X64 10.6.8.1_WHQL (HKLM\...\Elantech) (Version: 10.6.8.1 - ELAN Microelectronic Corp.) Evernote v. 4.5.2 (HKLM-x32\...\{F77EF646-19EB-11E1-9A9E-984BE15F174E}) (Version: 4.5.2.5866 - Evernote Corp.) Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Google Chrome (HKCU\...\Google Chrome) (Version: 34.0.1847.137 - Google Inc.) Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google) Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated) Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.550 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Kaspersky Anti-Virus 2013 (HKLM-x32\...\InstallWIX_{560985FB-4B76-4121-9189-7A2CDC7886D6}) (Version: 13.0.1.4190 - Kaspersky Lab) Kaspersky Anti-Virus 2013 (x32 Version: 13.0.1.4190 - Kaspersky Lab) Hidden Launch Manager (HKLM-x32\...\LManager) (Version: 5.1.15 - Acer Inc.) Malwarebytes Anti-Malware version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation) Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Office Click-to-Run 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.6122.5000 - Microsoft Corporation) Microsoft Office Click-to-Run 2010 (Version: 14.0.6122.5000 - Microsoft Corporation) Hidden Microsoft Office Starter 2010 - English (HKLM-x32\...\{90140011-0066-0409-0000-0000000FF1CE}) (Version: 14.0.6137.5006 - Microsoft Corporation) Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0409-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation) MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MyWinLocker (Version: 4.0.14.27 - Egis Technology Inc.) Hidden MyWinLocker 4 (x32 Version: 4.0.14.27 - Egis Technology Inc.) Hidden MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.19 - Egis Technology Inc.) MyWinLocker Suite (x32 Version: 4.0.14.19 - Egis Technology Inc.) Hidden newsXpresso (HKLM-x32\...\InstallShield_{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}) (Version: 1.0.0.40 - esobi Inc.) newsXpresso (x32 Version: 1.0.0.40 - esobi Inc.) Hidden NOOK for PC (HKLM-x32\...\BN_DesktopReader) (Version: 2.5.6.9575 - Barnesandnoble.com) Qualcomm Atheros WiFi Driver Installation (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 3.0 - Qualcomm Atheros) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.50.1123.2011 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6581 - Realtek Semiconductor Corp.) Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.) SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 5.6.1020 - SUPERAntiSpyware.com) VLC media player 2.0.5 (HKLM-x32\...\VLC media player) (Version: 2.0.5 - VideoLAN) Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3507 - Acer Incorporated) Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation) Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Galeria de Fotos (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden WiTopia (HKLM\...\{9F59FA4D-E431-45FA-889F-EC68D998C7D2}_is1) (Version: 2.1.7.175 - WiTopia) ==================== Restore Points ========================= 02-04-2014 12:18:33 Device Driver Package Install: SparkLabs VPN Network adapters 11-04-2014 06:04:07 Scheduled Checkpoint 21-04-2014 07:56:19 Windows Update 29-04-2014 04:32:58 Scheduled Checkpoint 06-05-2014 07:50:48 Scheduled Checkpoint 11-05-2014 11:38:14 Installed Java 7 Update 55 22-05-2014 11:44:49 Windows Update ==================== Hosts content: ========================== 2009-07-14 10:34 - 2009-06-11 05:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {24527B9F-A005-4193-940C-22D0EAAB997B} - System32\Tasks\UALU notificatin => C:\Program Files\Acer\Acer Updater\UALU.exe [2012-02-07] (Acer Incorporated) Task: {3108DC55-4507-4AED-B761-8532E182E804} - System32\Tasks\EgisUpdate => C:\Program Files\EgisTec IPS\EgisUpdate.exe [2011-03-29] (Egis Technology Inc.) Task: {572EE1D2-1687-4AD7-85DC-2E3D12845C60} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-31] (Google Inc.) Task: {7CD89ED0-887D-4D65-B4C5-3506B1C9C905} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-31] (Google Inc.) Task: {86BCD0B5-5BAB-40B3-A4EF-823BD92861AC} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1290860052-3282813244-3890975547-1000Core => C:\Users\EM\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-24] (Google Inc.) Task: {9560B555-D861-4CDF-970F-EE29353AF417} - System32\Tasks\PMMUpdate => C:\Program Files\EgisTec IPS\PMMUpdate.exe [2011-03-29] (Egis Technology Inc.) Task: {B050EC5D-19A8-4643-B0F7-3DCBFFE7C3A7} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-16] (Adobe Systems Incorporated) Task: {DEA7FE7A-351C-4CC5-A518-7D354D57A291} - System32\Tasks\{D3F755CD-9527-435C-89A8-641D2B1FB9E4} => Chrome.exe http://ui.skype.com/ui/0/6.14.0.104/en/abandoninstall?page=tsProgressBar Task: {E294BAB7-6DC9-451F-8C70-DCCB55AA8463} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1290860052-3282813244-3890975547-1000UA => C:\Users\EM\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-24] (Google Inc.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1290860052-3282813244-3890975547-1000Core.job => C:\Users\EM\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1290860052-3282813244-3890975547-1000UA.job => C:\Users\EM\AppData\Local\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2009-01-22 07:45 - 2009-01-22 07:45 - 01401856 _____ () C:\Program Files (x86)\EgisTec MyWinLocker\x64\LIBEAY32.dll 2012-01-27 23:11 - 2012-01-27 23:11 - 00369152 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll 2011-11-10 00:55 - 2011-11-10 00:55 - 00016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll 2012-02-07 20:54 - 2012-02-07 20:54 - 00078624 _____ () C:\Program Files (x86)\Common Files\microsoft shared\virtualization handler\OfficeVirt.exe 2012-08-17 21:39 - 2013-03-15 13:26 - 01310136 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\kpcengine.2.2.dll 2012-08-17 21:38 - 2012-08-17 21:38 - 00479160 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\dblite.dll 2014-05-18 23:59 - 2014-05-08 07:29 - 00065352 _____ () C:\Users\EM\AppData\Local\Google\Chrome\Application\34.0.1847.137\chrome_elf.dll 2014-05-18 23:59 - 2014-05-08 07:29 - 00674632 _____ () C:\Users\EM\AppData\Local\Google\Chrome\Application\34.0.1847.137\libglesv2.dll 2014-05-18 23:59 - 2014-05-08 07:29 - 00093000 _____ () C:\Users\EM\AppData\Local\Google\Chrome\Application\34.0.1847.137\libegl.dll 2014-05-18 23:59 - 2014-05-08 07:29 - 04081480 _____ () C:\Users\EM\AppData\Local\Google\Chrome\Application\34.0.1847.137\pdf.dll 2014-05-18 23:59 - 2014-05-08 07:29 - 00390472 _____ () C:\Users\EM\AppData\Local\Google\Chrome\Application\34.0.1847.137\ppGoogleNaClPluginChrome.dll 2014-05-18 23:59 - 2014-05-08 07:29 - 01647432 _____ () C:\Users\EM\AppData\Local\Google\Chrome\Application\34.0.1847.137\ffmpegsumo.dll 2012-12-13 08:12 - 2012-12-13 08:12 - 00111104 _____ () C:\Program Files (x86)\VideoLAN\VLC\libvlc.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 02286592 _____ () C:\Program Files (x86)\VideoLAN\VLC\libvlccore.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00219648 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdshow_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00049664 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libaout_directx_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00051200 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_output\libwaveout_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00070144 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libdirectx_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00037376 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\mmxext\libmemcpymmxext_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00157696 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00093696 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_bd_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00258560 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00047616 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_vdr_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00043520 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll 2012-12-13 08:12 - 2012-12-13 08:12 - 00440320 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_httplive_plugin.dll 2012-12-13 08:12 - 2012-12-13 08:12 - 00724992 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_dash_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00038912 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libstream_filter_rar_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00083968 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libzip_plugin.dll 2012-12-13 08:12 - 2012-12-13 08:12 - 00035840 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\libstream_filter_record_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00106496 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libplaylist_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 01544192 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\meta_engine\libtaglib_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00310784 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\lua\liblua_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 01238016 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libxml_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00051200 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\control\libhotkeys_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00037888 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\control\libglobalhotkeys_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 11998720 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\gui\libqt4_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00091648 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_http_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00079360 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_mms_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00288768 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\services_discovery\libupnp_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00085504 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\services_discovery\libsap_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00041984 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\services_discovery\libpodcast_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00038400 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\services_discovery\libmediadirs_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00036352 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\services_discovery\libwindrive_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00044544 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libes_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00386560 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libtheora_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00037376 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\librawvideo_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00154624 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libspeex_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 01719296 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libvorbis_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00037376 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libaes3_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00043008 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\liblpcm_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00044032 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_flac_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00051712 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_dirac_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00042496 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mlp_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00057344 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4audio_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00046592 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_vc1_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00038912 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libsvcdsub_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00042496 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libspudec_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00043008 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4video_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00045568 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpegvideo_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00040960 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libcvdsub_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00087040 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_h264_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00041472 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libmpeg_audio_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00198656 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libmp4_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00092160 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libavi_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00073728 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libasf_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00045568 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libflacsys_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00185856 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libpng_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00038400 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libcdg_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 01318912 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libschroedinger_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00051200 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libaraw_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00043008 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libdts_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00372224 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libfaad_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00265216 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libflac_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 01888256 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\liblibass_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00310784 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libopus_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00182272 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstofloat32_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00068608 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tofloat32_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00135168 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libmpgatofixed32_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 01518080 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libsamplerate_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00036864 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libconverter_fixed_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00034816 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\liba52tospdif_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00038400 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libsimple_channel_mixer_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00036864 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libdtstospdif_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00036352 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libdolby_surround_decoder_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00035328 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libugly_resampler_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00045568 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libaudio_format_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00033792 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_mixer\libfloat32_mixer_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00040960 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libscaletempo_plugin.dll 2012-12-13 08:13 - 2012-12-13 08:13 - 00046592 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libequalizer_plugin.dll 2013-12-19 02:42 - 2013-12-19 02:42 - 00305520 _____ () C:\Program Files (x86)\Adobe\Reader 10.0\Reader\sqlite.dll 2012-07-28 04:51 - 2012-07-28 04:51 - 06549432 _____ () C:\Program Files (x86)\Adobe\Reader 10.0\Reader\authplay.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== EXE Association (whitelisted) ============= ==================== Disabled items from MSCONFIG ============== ==================== Faulty Device Manager Devices ============= Name: Viscosity Virtual Adapter V9.1 Description: Viscosity Virtual Adapter V9.1 Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: SparkLabs VPN Service: visctap0901 Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: PassGuard Description: PassGuard Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: PassGuard Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Event log errors: ========================= Application errors: ================== Error: (05/27/2014 10:30:22 AM) (Source: RasClient) (EventID: 20227) (User: ) Description: CoId={4FE48725-610F-4F6C-A956-B4E6F324B485}: The user EM-PC\EM dialed a connection named Toronto which has failed. The error code returned on failure is 807. Error: (05/27/2014 10:28:46 AM) (Source: RasClient) (EventID: 20227) (User: ) Description: CoId={A136529E-D56A-4787-AECC-2B74B3BA5038}: The user EM-PC\EM dialed a connection named Toronto which has failed. The error code returned on failure is 807. Error: (05/26/2014 10:36:42 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: GoogleUpdate.exe, version: 1.3.21.103, time stamp: 0x4f3c6d6c Faulting module name: ntdll.dll, version: 6.1.7601.18247, time stamp: 0x521ea8e7 Exception code: 0xc0000005 Fault offset: 0x000223e0 Faulting process id: 0xe38 Faulting application start time: 0xGoogleUpdate.exe0 Faulting application path: GoogleUpdate.exe1 Faulting module path: GoogleUpdate.exe2 Report Id: GoogleUpdate.exe3 Error: (05/25/2014 09:37:32 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/22/2014 08:17:56 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/22/2014 03:54:22 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: PMMUpdate.exe, version: 1.1.41.0, time stamp: 0x4d907542 Faulting module name: ole32.dll, version: 6.1.7601.17514, time stamp: 0x4ce7c92c Exception code: 0xc0000005 Fault offset: 0x00000000001a7990 Faulting process id: 0x6ac Faulting application start time: 0xPMMUpdate.exe0 Faulting application path: PMMUpdate.exe1 Faulting module path: PMMUpdate.exe2 Report Id: PMMUpdate.exe3 Error: (05/21/2014 11:28:03 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: GoogleUpdate.exe, version: 1.3.21.103, time stamp: 0x4f3c6d6c Faulting module name: ntdll.dll, version: 6.1.7601.18247, time stamp: 0x521ea8e7 Exception code: 0xc0000005 Fault offset: 0x000223e0 Faulting process id: 0x1154 Faulting application start time: 0xGoogleUpdate.exe0 Faulting application path: GoogleUpdate.exe1 Faulting module path: GoogleUpdate.exe2 Report Id: GoogleUpdate.exe3 Error: (05/20/2014 03:49:35 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/20/2014 03:23:58 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: The program Explorer.EXE version 6.1.7601.17567 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 6c4 Start Time: 01cf73eebc7cee60 Termination Time: 154 Application Path: C:\Windows\Explorer.EXE Report Id: a0a65927-dfef-11e3-a979-047d7b9c6d95 Error: (05/20/2014 01:46:01 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 System errors: ============= Error: (05/27/2014 10:17:04 PM) (Source: Server) (EventID: 2505) (User: ) Description: The server could not bind to the transport \Device\NetBT_Tcpip_{374909A6-F95E-43E8-A77F-E887AD1D3F7A} because another computer on the network has the same name. The server could not start. Error: (05/27/2014 10:16:46 PM) (Source: Service Control Manager) (EventID: 7011) (User: ) Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Wlansvc service. Error: (05/25/2014 09:37:35 PM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: The following boot-start or system-start driver(s) failed to load: cdrom Error: (05/25/2014 09:37:16 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The PassGuard service failed to start due to the following error: %%2 Error: (05/25/2014 09:37:02 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: The previous system shutdown at 10:12:51 PM on ‎5/‎23/‎2014 was unexpected. Error: (05/22/2014 09:06:23 PM) (Source: Service Control Manager) (EventID: 7011) (User: ) Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Wlansvc service. Error: (05/22/2014 08:17:44 PM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: The following boot-start or system-start driver(s) failed to load: cdrom Error: (05/22/2014 08:17:33 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The PassGuard service failed to start due to the following error: %%2 Error: (05/22/2014 08:13:57 PM) (Source: Service Control Manager) (EventID: 7043) (User: ) Description: The Windows Update service did not shut down properly after receiving a preshutdown control. Error: (05/22/2014 01:00:25 AM) (Source: BROWSER) (EventID: 8032) (User: ) Description: The browser service has failed to retrieve the backup list too many times on transport \Device\NetBT_Tcpip_{374909A6-F95E-43E8-A77F-E887AD1D3F7A}. The backup browser is stopping. Microsoft Office Sessions: ========================= Error: (05/27/2014 10:30:22 AM) (Source: RasClient) (EventID: 20227) (User: ) Description: {4FE48725-610F-4F6C-A956-B4E6F324B485}EM-PC\EMToronto807 Error: (05/27/2014 10:28:46 AM) (Source: RasClient) (EventID: 20227) (User: ) Description: {A136529E-D56A-4787-AECC-2B74B3BA5038}EM-PC\EMToronto807 Error: (05/26/2014 10:36:42 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: GoogleUpdate.exe1.3.21.1034f3c6d6cntdll.dll6.1.7601.18247521ea8e7c0000005000223e0e3801cf78eddbed0e2eC:\Program Files (x86)\Google\Update\GoogleUpdate.exeC:\Windows\SysWOW64\ntdll.dll27420e2d-e4e3-11e3-b042-047d7b9c6d95 Error: (05/25/2014 09:37:32 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/22/2014 08:17:56 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/22/2014 03:54:22 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: PMMUpdate.exe1.1.41.04d907542ole32.dll6.1.7601.175144ce7c92cc000000500000000001a79906ac01cf74016932cbd1C:\Program Files\EgisTec IPS\PMMUpdate.exeC:\Windows\system32\ole32.dll488eb183-e186-11e3-a078-047d7b9c6d95 Error: (05/21/2014 11:28:03 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: GoogleUpdate.exe1.3.21.1034f3c6d6cntdll.dll6.1.7601.18247521ea8e7c0000005000223e0115401cf7508256c17d0C:\Users\EM\AppData\Local\Google\Update\GoogleUpdate.exeC:\Windows\SysWOW64\ntdll.dll7fabb21f-e0fc-11e3-a078-047d7b9c6d95 Error: (05/20/2014 03:49:35 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/20/2014 03:23:58 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Explorer.EXE6.1.7601.175676c401cf73eebc7cee60154C:\Windows\Explorer.EXEa0a65927-dfef-11e3-a979-047d7b9c6d95 Error: (05/20/2014 01:46:01 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 CodeIntegrity Errors: =================================== Date: 2014-05-15 21:29:33.424 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2014-05-15 21:29:33.419 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2014-05-15 21:29:33.413 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2014-05-15 21:29:33.367 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2014-05-15 21:29:33.362 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2014-05-15 21:29:33.354 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2014-05-07 17:16:47.257 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2014-05-07 17:16:47.252 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2014-05-07 17:16:47.244 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2014-05-07 17:16:47.194 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system. ==================== Memory info =========================== Percentage of memory in use: 80% Total physical RAM: 1769.37 MB Available physical RAM: 341.2 MB Total Pagefile: 3592.73 MB Available Pagefile: 920.29 MB Total Virtual: 8192 MB Available Virtual: 8191.81 MB ==================== Drives ================================ Drive c: (Acer) (Fixed) (Total:284.99 GB) (Free:42.63 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 8261D61D) Partition 1: (Not Active) - (Size=13 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=285 GB) - (Type=07 NTFS) ==================== End Of Log ============================