Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-02-2015 Ran by Shirley at 2015-02-08 16:28:17 Running from C:\Users\Shirley\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Microsoft Security Essentials (Enabled - Up to date) {4F35CFC4-45A3-FC37-EF17-759A02E39AB1} AS: Microsoft Security Essentials (Enabled - Up to date) {F4542E20-6399-F3B9-D5A7-4EE87964D00C} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 16.0.0.245 - Adobe Systems Incorporated) Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated) Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated) Adobe Reader XI (11.0.06) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated) Advanced File Optimizer (HKLM-x32\...\Advanced File Optimizer_is1) (Version: 2.1.1000.10518 - Systweak Software) Alcor Micro USB Card Reader (HKLM-x32\...\InstallShield_{F4BF5F6B-F695-4762-AEB2-D095A4C34D89}) (Version: 1.5.17.25482 - Alcor Micro Corp.) Alcor Micro USB Card Reader (x32 Version: 1.5.17.25482 - Alcor Micro Corp.) Hidden Alice Greenfingers (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112920767}) (Version: - Oberon Media) Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Ashampoo Burning Studio 12 v.12.0.5 (HKLM-x32\...\{91B33C97-93EB-244C-F687-71D85E45A206}_is1) (Version: 12.0.5 - Ashampoo GmbH & Co. KG) ASUS AI Recovery (HKLM-x32\...\{06585B02-F20D-4AB2-9A64-86EF2AE0F8F0}) (Version: 1.0.6 - ASUS) ASUS AP Bank (HKLM-x32\...\ASUS AP Bank_is1) (Version: 1.0.0.0 - ASUSTEK) ASUS Data Security Manager (HKLM-x32\...\{FA2092C5-7979-412D-A962-6485274AE1EE}) (Version: 1.00.0013 - ASUS) ASUS FancyStart (HKLM-x32\...\{F0DF4513-3C4C-4EB8-8012-2C5F70AF3988}) (Version: 1.0.6 - ASUSTeK Computer Inc.) ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.0.20 - ASUS) ASUS Power4Gear Hybrid (HKLM\...\{91EFE3A1-585E-4F66-B5F6-F118F56C4C47}) (Version: 1.1.24 - ASUS) ASUS SmartLogon (HKLM-x32\...\{64452561-169F-4A36-A2FF-B5E118EC65F5}) (Version: 1.0.0007 - ASUS) ASUS Virtual Camera (HKLM-x32\...\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}) (Version: 1.0.17 - asus) Asus WebStorage (HKLM\...\Asus WebStorage) (Version: 2.0.31.477 - eCareme Technologies, Inc.) Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 7.0 - Atheros) Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.10 - Atheros Communications Inc.) AtHomeConnect version 1.0.1.0 (HKLM-x32\...\{631EFC00-5A7A-4A90-9578-039EDA92DE0F}_is1) (Version: 1.0.1.0 - HRBlock) ATK Generic Function Service (HKLM-x32\...\{D3D54F3E-C5C3-443D-978F-87A72E5616E8}) (Version: 1.00.0008 - ATK) ATK Hotkey (HKLM-x32\...\{7C05592D-424B-46CB-B505-E0013E8E75C9}) (Version: 1.0.0052 - ASUS) ATK Media (HKLM-x32\...\{D1E5870E-E3E5-4475-98A6-ADD614524ADF}) (Version: 2.0.0006 - ASUS) ATKOSD2 (HKLM-x32\...\{3B05F2FB-745B-4012-ADF2-439F36B2E70B}) (Version: 7.0.0006 - ASUS) Best Recipes Ever Vol.21,Num.9 (HKLM-x32\...\e4e39e920cd5048e4394e241c0a4a526) (Version: 1.0.2 - Nxtbook Media, LLC) Best Recipes Ever Vol.21,Num.9 (x32 Version: 1.0.2 - Nxtbook Media, LLC) Hidden Canon iP4200 (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_iP4200) (Version: - ) Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.1.0 - Canon Inc.) Canon Setup Utility 2.0 (HKLM-x32\...\Canon Setup Utility 2.0) (Version: - ) Carbonite (HKLM-x32\...\Carbonite Backup) (Version: 5.5.5 build 4151 (Jun-27-2014) - Carbonite) Carbonite Mirror Image (64-bit) (Version: 5.1.13813.2115 - x64) Hidden Chicken Invaders 2 (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110209593}) (Version: - Oberon Media) Choice Guard (x32 Version: 1.2.87.0 - Microsoft Corporation) Hidden Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) ControlDeck (HKLM-x32\...\{5B65EF64-1DFA-414A-8C94-7BB726158E21}) (Version: 1.0.4 - ASUS) ConvertHelper 2.2 (HKLM-x32\...\{27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1) (Version: - DownloadHelper) CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1720 - CyberLink Corp.) CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.2713 - CyberLink Corp.) Driver Booster 2.1 (HKLM-x32\...\Driver Booster_is1) (Version: 2.1 - IObit) DriverUpdate (HKLM-x32\...\{97C97FAC-9153-409E-A9C8-A19AFABE7547}) (Version: 2.2.38275 - SlimWare Utilities, Inc.) Dropbox (HKU\S-1-5-21-3187660000-4005643778-904162757-1000\...\Dropbox) (Version: 3.0.3 - Dropbox, Inc.) DupDetector (HKLM-x32\...\{9604876E-6DF3-11D9-9526-CC60569E6209}) (Version: 3.2.0.1 - Prismatic Software) ETDWare PS/2-x64 7.0.5.7_WHQL (HKLM\...\Elantech) (Version: - ) Express Gate (HKLM-x32\...\{B5A5627C-0173-4DB2-ADA8-740479370F67}) (Version: 1.2.13.23 - DeviceVM, Inc.) Fast Boot (HKLM\...\{13F4A7F3-EABC-4261-AF6B-1317777F0755}) (Version: 1.0.4 - ASUS) FlvPlayer (HKU\S-1-5-21-3187660000-4005643778-904162757-1000\...\FlvPlayer) (Version: ${VERSION} - ) <==== ATTENTION Foxit Cloud (HKLM-x32\...\{41914D8B-9D6E-4764-A1F9-BC43FB6782C1}_is1) (Version: 1.2.75.126 - Foxit Corporation) Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 6.1.4.217 - Foxit Corporation) Game Park Console (HKLM-x32\...\{6C3496DF-CC4C-4CDE-87A1-8657619EE2D6}_is1) (Version: 5.2.1.4 - Oberon Media, Inc.) GeekBuddy (HKLM-x32\...\{4F2B6546-276A-422D-ADA2-0E72775A48AB}) (Version: 4.5.48 - Comodo Security Solutions Inc) Google Drive (HKLM-x32\...\{65EACBB4-B0B8-4A5B-AE46-22DBE15C70B5}) (Version: 1.19.8406.6504 - Google, Inc.) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden H&R Block Deluxe + Efile + State 2012 (HKLM-x32\...\{89D20029-0578-4D8D-979A-695C8D868868}) (Version: 12.05.7803 - HRB Technology, LLC.) hp photosmart printer series (Remove only) (HKLM-x32\...\hp photosmart printer series) (Version: - ) HP Support Solutions Framework (HKLM-x32\...\{69FD2930-C361-47F6-822E-71B021526778}) (Version: 11.50.0015 - Hewlett-Packard Company) iCloud (HKLM\...\{309768A4-A2BB-4930-A5A2-8169678C9B4C}) (Version: 4.0.6.28 - Apple Inc.) Inkscape 0.48.5 (HKLM-x32\...\Inkscape) (Version: 0.48.5 - ) IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 4.1.5.24 - IObit) iolo technologies' System Mechanic (HKLM-x32\...\{55FD1D5A-7AEF-4DA3-8FAF-A71B2A52FFC7}_is1) (Version: 12.5.0 - iolo technologies, LLC) IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.36 - Irfan Skiljan) Island Wars 2 (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110304260}) (Version: - Oberon Media) iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.) Java 7 Update 15 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417015FF}) (Version: 7.0.150 - Oracle) LastPass(uninstall only) (HKLM-x32\...\LastPass) (Version: - LastPass) Malwarebytes Anti-Malware version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.6.305.0 - Microsoft Corporation) Microsoft Sync Framework Runtime Native v1.0 (x86) (HKLM-x32\...\{8A74E887-8F0F-4017-AF53-CBA42211AAA5}) (Version: 1.0.1215.0 - Microsoft Corporation) Microsoft Sync Framework Services Native v1.0 (x86) (HKLM-x32\...\{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}) (Version: 1.0.1215.0 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation) Microsoft Works 6-9 Converter (HKLM-x32\...\{95140000-0137-0409-0000-0000000FF1CE}) (Version: 14.0.6120.5002 - Microsoft Corporation) Mozilla Firefox 33.0.3 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 33.0.3 (x86 en-US)) (Version: 33.0.3 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) NVIDIA 3D Vision Driver 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 327.02 - NVIDIA Corporation) NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10 - NVIDIA Corporation) NVIDIA Graphics Driver 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.02 - NVIDIA Corporation) NVIDIA HD Audio Driver 1.3.26.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.26.4 - NVIDIA Corporation) NVIDIA Update 1.14.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.14.17 - NVIDIA Corporation) OpenOffice.org 3.2 (HKLM-x32\...\{5A13987D-55F4-4271-A40E-76AC9B1B38FD}) (Version: 3.2.9502 - OpenOffice.org) PC Connect (HKLM-x32\...\{A22B8513-EA8C-46A1-9735-F5BE971C368D}) (Version: 7.4.515 - LogMeIn, Inc.) Pin It (HKLM-x32\...\Pin It_is1) (Version: 0.0.4 - Pinterest) QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.) SeaTools for Windows (HKLM-x32\...\{98613C99-1399-416C-A07C-1EE1C585D872}) (Version: 1.2.0.7 - Seagate Technology) Smart Defrag 3 (HKLM-x32\...\Smart Defrag 3_is1) (Version: 3.3 - IObit) Smileyville (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110413757}) (Version: - Oberon Media) SRS Premium Sound Control Panel (HKLM\...\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}) (Version: 1.8.1200 - SRS Labs, Inc.) Strongvault Online Backup (x32 Version: 5.0.2.34 - Strongvault Online Backup) Hidden <==== ATTENTION Surfing Protection (HKLM-x32\...\IObit Surfing Protection_is1) (Version: 1.2 - IObit) System Checkup 3.5 (HKLM-x32\...\{4AC7B4E7-59B7-4E48-A60D-263C486FC33A}_is1) (Version: 3.5.0.23 - iolo technologies, LLC) USB 2.0 VGA UVC WebCam (HKLM\...\USB 2.0 VGA UVC WebCam) (Version: - ) VLC media player 2.1.0 (HKLM-x32\...\VLC media player) (Version: 2.1.0 - VideoLAN) WD Drive Utilities (HKLM-x32\...\{F9784E1D-4455-4BFF-A97A-1B1355A4FFDB}) (Version: 1.0.6.3 - Western Digital Technologies, Inc.) WD Quick View (HKLM-x32\...\{507B1304-194A-4204-A9D9-9BAAF51EF760}) (Version: 2.2.1.6 - Western Digital Technologies, Inc.) WD Security (HKLM-x32\...\{2B58AB2C-D980-47FD-8633-E360314BA662}) (Version: 1.0.6.3 - Western Digital Technologies, Inc.) WD SmartWare (HKLM\...\{232EB8E6-9B8C-4785-A994-B1E5E2376CDC}) (Version: 2.2.0.8 - Western Digital Technologies, Inc.) WD SmartWare (HKLM\...\{A7C403DA-B8D9-4CA0-93D9-6C7F00772240}) (Version: 2.2.1.6 - Western Digital Technologies, Inc.) WD SmartWare Installer (HKLM-x32\...\{ba99df5b-3e46-419e-81e2-544352772fda}) (Version: 2.2.1.6 - Western Digital Technologies, Inc.) WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.29.0 - ASUS) Wireless Console 3 (HKLM-x32\...\{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}) (Version: 3.0.11 - ASUS) Wise Registry Cleaner 7.66 (HKLM-x32\...\Wise Registry Cleaner_is1) (Version: - WiseCleaner.com, Inc.) Xmarks for IE (HKLM-x32\...\{D9933B87-F472-486A-BC56-9D04FD6838EF}) (Version: 127.0.162 - Xmarks) Xmarks for IE (HKLM-x32\...\{E590A51C-4303-4A28-99DB-799FE1E25E0D}) (Version: 127.0.143 - Xmarks) Xmarks Thumbnails for IE (HKLM-x32\...\{84513125-0BC7-46F8-BE1E-309263B79AE2}) (Version: 1.0.12 - Xmarks) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-3187660000-4005643778-904162757-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Shirley\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3187660000-4005643778-904162757-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Shirley\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3187660000-4005643778-904162757-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Shirley\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3187660000-4005643778-904162757-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Shirley\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3187660000-4005643778-904162757-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Shirley\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3187660000-4005643778-904162757-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Shirley\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3187660000-4005643778-904162757-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Shirley\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3187660000-4005643778-904162757-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Shirley\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3187660000-4005643778-904162757-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Shirley\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) ==================== Restore Points ========================= ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-13 21:34 - 2009-06-10 16:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {07BD625C-5320-41C5-91E2-B89122DA6272} - System32\Tasks\WC3 => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2009-09-04] () Task: {0B5DFD0F-03B3-4B59-A08C-BBA0E67B4811} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2009-05-18] (ASUS) Task: {0FE7ACE3-3ACE-462F-8412-8FD4CAFEF118} - System32\Tasks\iolo System Checkup => C:\ProgramData\iolo\scustask.lnk [2014-01-15] () Task: {152BBF1E-6646-48EC-80CF-19BB30D85C8A} - System32\Tasks\{0F9FCB81-BA6B-4A86-9DEB-57286AC31520} => msiexec.exe /package "C:\Users\Mimi\Downloads\xmarks-installer-for-ie-1.3.12.msi" Task: {1AFCAE2D-F61E-4147-A9BA-03FB952F5A18} - System32\Tasks\ASUSControlDeck => C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe [2009-09-24] () Task: {239865C2-6001-446E-8E0E-6B980D47BABB} - System32\Tasks\PinItAutoUpdate => C:\Program Files (x86)\Pinterest\Pin It\AutoUpdater.exe [2014-12-23] () Task: {33E4A022-CCB5-4E38-AF7F-6CD122C4BFF3} - System32\Tasks\Western Digital\SmartWare\____Volume_c4281298_5602_11e2_bcad_806e6f6e6963__dropbox_6f5781f6_dd3a_45ec_abfc_778ef5e37431_dropbox_ => C:\Program Files (x86)\Western Digital\WD SmartWare\BackupTask.exe [2013-08-14] (Western Digital Technologies, Inc.) Task: {368B73AA-6089-43A5-B1C9-04B722FD0B76} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {3D623994-369F-4420-B718-FDB283B59BAD} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-11] (Google Inc.) Task: {3E1D8C87-8F59-419E-900D-5D49504A82D4} - System32\Tasks\SmartDefrag3_Startup => C:\Program Files (x86)\IObit\Smart Defrag 3\SmartDefrag.exe [2014-10-20] (IObit) Task: {4503C02B-0739-45AF-BB03-47809515BA25} - System32\Tasks\SmartDefrag3_Update => C:\Program Files (x86)\IObit\Smart Defrag 3\AutoUpdate.exe [2014-07-23] (IObit) Task: {66A3EF72-B084-4984-8F0A-AF3D745C22AC} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-04] (Adobe Systems Incorporated) Task: {7A3C6D1C-D4E1-4DDC-9830-7AB5C590A168} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [2007-11-30] () Task: {7D5185F6-1C84-4546-9184-E42E7375DB85} - System32\Tasks\Driver Booster Scan => C:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe [2015-01-25] (IObit) Task: {905A9F66-7963-42C0-A5D8-8DF7558A1B0D} - System32\Tasks\Western Digital\SmartWare\____Volume_c4281299_5602_11e2_bcad_806e6f6e6963__dropbox_6f5781f6_dd3a_45ec_abfc_778ef5e37431_dropbox_ => C:\Program Files (x86)\Western Digital\WD SmartWare\BackupTask.exe [2013-08-14] (Western Digital Technologies, Inc.) Task: {979BAE03-D836-4B2D-A68F-62BBA64117C6} - System32\Tasks\Uninstaller_SkipUac_Shirley => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2014-11-04] (IObit) Task: {9B114BAD-30C6-4C39-92B2-187EC3795584} - System32\Tasks\CIS_{15198508-521A-4D69-8E5B-B94A6CCFF805} => C:\ProgramData\cis6D24.exe <==== ATTENTION Task: {AD6F9D0D-84FA-4A00-9C68-E25312D9999F} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2009-09-08] (ATK) Task: {B1B418C2-5D7D-478A-98EC-FB506B5C5910} - System32\Tasks\DriverUpdate Startup => C:\Program Files (x86)\DriverUpdate\DriverUpdate.exe [2014-05-14] (SlimWare Utilities, Inc.) Task: {B7FB3B8E-1D04-4465-AD78-6EA338F7264E} - System32\Tasks\Driver Booster SkipUAC (Shirley) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe [2015-01-25] (IObit) Task: {CB2F4538-B873-47EF-8691-BD889C0B4D5C} - System32\Tasks\iolo Process Governor => C:\Program Files (x86)\iolo\System Mechanic\iologovernor64.exe [2013-12-03] (iolo technologies, LLC) Task: {CBA1E023-DD86-4127-89E6-AA9C68347062} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-11] (Google Inc.) Task: {CC7D3003-EBE9-4422-81C0-9F1FF56572F0} - System32\Tasks\P4GIntlCtrl => C:\Program Files\P4G\IntlCtrl.exe [2009-08-11] (TODO: ) Task: {E5EC1144-9556-4223-B6BB-E304078A8301} - System32\Tasks\Driver Booster Update => C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe [2015-01-25] (IObit) Task: {FA2F8F21-104A-4651-9FAB-57426D3F34A8} - System32\Tasks\{5F6010C8-60E5-41f3-BF5B-C3AF5DBE12D4} => C:\ProgramData\Carbonite\Carbonite Backup\CarboniteUpgrade.exe Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\Driver Booster Scan.job => C:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe Task: C:\Windows\Tasks\Driver Booster Update.job => C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe Task: C:\Windows\Tasks\DriverUpdate Startup.job => C:\Program Files (x86)\DriverUpdate\DriverUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============== 2014-01-16 17:05 - 2013-08-29 17:43 - 00097568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2009-11-16 19:09 - 2007-08-08 03:08 - 00094208 _____ () C:\Program Files\ATKGFNEX\GFNEXSrv.exe 2009-09-24 16:50 - 2009-09-24 16:50 - 00053888 _____ () C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe 2009-09-04 18:24 - 2009-09-04 18:24 - 01600128 _____ () C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe 2009-09-10 19:42 - 2009-09-10 19:42 - 00041984 _____ () C:\Program Files\P4G\DevMng.dll 2009-09-11 15:27 - 2009-09-11 15:27 - 00029184 _____ () C:\Program Files\P4G\OvrClk.dll 2009-11-16 19:09 - 2007-03-09 21:58 - 00124416 _____ () C:\Program Files\ATKGFNEX\AGFNEX64.dll 2009-11-16 19:11 - 2007-11-30 14:20 - 00051768 _____ () C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe 2007-06-15 13:28 - 2007-06-15 13:28 - 00104960 _____ () C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x64\OverlayIconShlExt64.dll 2007-06-01 19:52 - 2007-06-01 19:52 - 00159744 _____ () C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x64\OverlayIconShlExt1_64.dll 2009-08-25 02:47 - 2009-08-25 02:47 - 00140560 _____ () C:\Program Files (x86)\ASUS\Asus WebStorage\EcaremeDLL.dll 2009-11-16 18:45 - 2009-11-16 18:45 - 00029968 _____ () C:\Windows\assembly\GAC_MSIL\SqliteShared\1.0.3524.15966__0d0f4b69e50e559b\SqliteShared.dll 2009-11-16 18:45 - 2009-11-16 18:45 - 00931840 _____ () C:\Windows\assembly\GAC_64\System.Data.SQLite\1.0.60.0__db937bc2d44ff139\System.Data.SQLite.dll 2009-08-25 02:47 - 2009-08-25 02:47 - 00095504 _____ () C:\Program Files (x86)\ASUS\Asus WebStorage\BSWorker.dll 2009-08-25 02:47 - 2009-08-25 02:47 - 00083216 _____ () C:\Program Files (x86)\ASUS\Asus WebStorage\BSBroker.dll 2014-02-12 19:58 - 2014-02-12 19:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2014-12-11 17:17 - 2014-06-04 15:17 - 00892288 _____ () C:\Program Files (x86)\IObit\Smart Defrag 3\webres.dll 2007-06-15 13:28 - 2007-06-15 13:28 - 00147456 _____ () C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt.dll 2007-06-01 20:08 - 2007-06-01 20:08 - 00143360 _____ () C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt1.dll 2014-12-11 17:19 - 2013-01-15 18:48 - 00348992 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madExcept_.bpl 2014-12-11 17:19 - 2013-01-15 18:48 - 00183616 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madBasic_.bpl 2014-12-11 17:19 - 2013-01-15 18:48 - 00051008 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madDisAsm_.bpl 2013-01-12 18:43 - 2013-01-12 18:43 - 00605768 _____ () C:\Program Files (x86)\LastPass\LPToolbar.dll 2013-01-12 18:43 - 2013-01-12 18:43 - 05715528 _____ () C:\Users\Shirley\AppData\LocalLow\LastPass\LPPlugin.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\Windows\system32\GEARAspi64.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\msvcp120.dll:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\FlashPlayerApp.exe:$CmdTcID AlternateDataStreams: C:\Windows\SysWOW64\GEARAspi.dll:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\mbam.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\mbamchameleon.sys:$CmdTcID AlternateDataStreams: C:\Windows\system32\Drivers\mwac.sys:$CmdTcID AlternateDataStreams: C:\Users\Mimi\Downloads\10-Gut-Cleansing-Foods-FB13PX.pdf:$CmdTcID AlternateDataStreams: C:\Users\Mimi\Downloads\10-Gut-Cleansing-Foods-FB13PX.pdf:$CmdZnID AlternateDataStreams: C:\Users\Mimi\Downloads\17-Cheat-Foods-That-Burn-Fat-M81441.pdf:$CmdTcID AlternateDataStreams: C:\Users\Mimi\Downloads\17-Cheat-Foods-That-Burn-Fat-M81441.pdf:$CmdZnID AlternateDataStreams: C:\Users\Mimi\Downloads\1DD-CheatSheets-r3p1231.pdf:$CmdTcID AlternateDataStreams: C:\Users\Mimi\Downloads\1DD-CheatSheets-r3p1231.pdf:$CmdZnID AlternateDataStreams: C:\Users\Mimi\Downloads\4-Sneaky-Tricks-to-Lower-Your-Blood-Sugar-G1981.pdf:$CmdTcID AlternateDataStreams: C:\Users\Mimi\Downloads\4-Sneaky-Tricks-to-Lower-Your-Blood-Sugar-G1981.pdf:$CmdZnID AlternateDataStreams: C:\Users\Mimi\Downloads\5-WorstCookingOils-for-A-FlatStomach-60-69-32561K58941.pdf:$CmdTcID AlternateDataStreams: C:\Users\Mimi\Downloads\5-WorstCookingOils-for-A-FlatStomach-60-69-32561K58941.pdf:$CmdZnID AlternateDataStreams: C:\Users\Mimi\Downloads\7-Fattening-Foods-That-Fight-Fat-ZBB233G6.pdf:$CmdTcID AlternateDataStreams: C:\Users\Mimi\Downloads\7-Fattening-Foods-That-Fight-Fat-ZBB233G6.pdf:$CmdZnID AlternateDataStreams: C:\Users\Mimi\Downloads\CyberLink_Power2Go_Downloader.exe:$CmdTcID AlternateDataStreams: C:\Users\Mimi\Downloads\CyberLink_Power2Go_Downloader.exe:$CmdZnID AlternateDataStreams: C:\Users\Mimi\Downloads\Fitbit_SupportedDevices_Android.pdf:$CmdTcID AlternateDataStreams: C:\Users\Mimi\Downloads\Fitbit_SupportedDevices_Android.pdf:$CmdZnID AlternateDataStreams: C:\Users\Mimi\Downloads\Fitbit_SupportedDevices_iOS.pdf:$CmdZnID ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ioloSystemService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ioloSystemService => ""="Service" ==================== EXE Association (whitelisted) =============== (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== Other Registry Areas ===================== (Currently there is no automatic fix for this section.) HKU\S-1-5-21-3187660000-4005643778-904162757-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Shirley\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) MSCONFIG\Services: AdobeARMservice => 2 MSCONFIG\Services: BeFrugal.com Service => 2 MSCONFIG\Services: Bonjour Service => 2 MSCONFIG\Services: Fax => 3 MSCONFIG\startupfolder: C:^Users^Shirley^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: Adobe Reader Speed Launcher => MSCONFIG\startupreg: ADSMTray => C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe MSCONFIG\startupreg: Advanced SystemCare 8 => "C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe" /Auto MSCONFIG\startupreg: ASUS Screen Saver Protector => C:\Windows\AsScrPro.exe MSCONFIG\startupreg: BFHP => MSCONFIG\startupreg: CLMLServer => "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe" MSCONFIG\startupreg: ETDWare => C:\Program Files\Elantech\ETDCtrl.exe MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe" MSCONFIG\startupreg: RtHDVCpl => ==================== Accounts: ============================= Administrator (S-1-5-21-3187660000-4005643778-904162757-500 - Administrator - Disabled) Guest (S-1-5-21-3187660000-4005643778-904162757-501 - Limited - Enabled) HomeGroupUser$ (S-1-5-21-3187660000-4005643778-904162757-1004 - Limited - Enabled) Mimi (S-1-5-21-3187660000-4005643778-904162757-1001 - Limited - Enabled) => C:\Users\Mimi Shirley (S-1-5-21-3187660000-4005643778-904162757-1000 - Administrator - Enabled) => C:\Users\Shirley UpdatusUser (S-1-5-21-3187660000-4005643778-904162757-1005 - Limited - Enabled) => C:\Users\UpdatusUser.MIMI-LAPTOP.000 ==================== Faulty Device Manager Devices ============= Name: NVIDIA GeForce G210M Description: NVIDIA GeForce G210M Class Guid: {4d36e968-e325-11ce-bfc1-08002be10318} Manufacturer: NVIDIA Service: nvlddmkm Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31) Resolution: Update the driver Name: NVIDIA High Definition Audio Description: NVIDIA High Definition Audio Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318} Manufacturer: NVIDIA Service: NVHDA Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Microsoft PS/2 Mouse Description: Microsoft PS/2 Mouse Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: i8042prt Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: NVIDIA High Definition Audio Description: NVIDIA High Definition Audio Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318} Manufacturer: NVIDIA Service: NVHDA Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (02/07/2015 09:48:31 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: CarboniteMirrorImage.exe, version: 5.1.2115.13813, time stamp: 0x51703629 Faulting module name: CarboniteMirrorImage.exe, version: 5.1.2115.13813, time stamp: 0x51703629 Exception code: 0xc0000005 Fault offset: 0x00000000001d9a06 Faulting process id: 0x7a4 Faulting application start time: 0xCarboniteMirrorImage.exe0 Faulting application path: CarboniteMirrorImage.exe1 Faulting module path: CarboniteMirrorImage.exe2 Report Id: CarboniteMirrorImage.exe3 Error: (02/07/2015 09:40:34 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: CarboniteMirrorImage.exe, version: 5.1.2115.13813, time stamp: 0x51703629 Faulting module name: CarboniteMirrorImage.exe, version: 5.1.2115.13813, time stamp: 0x51703629 Exception code: 0xc0000005 Fault offset: 0x00000000001d9a06 Faulting process id: 0x7a0 Faulting application start time: 0xCarboniteMirrorImage.exe0 Faulting application path: CarboniteMirrorImage.exe1 Faulting module path: CarboniteMirrorImage.exe2 Report Id: CarboniteMirrorImage.exe3 Error: (02/07/2015 04:22:47 AM) (Source: Windows Search Service) (EventID: 7010) (User: ) Description: The index cannot be initialized. Details: The registry value cannot be read because the configuration is invalid. Recreate the content index configuration by removing the content index. (HRESULT : 0x80040d03) (0x80040d03) Error: (02/07/2015 04:22:47 AM) (Source: Windows Search Service) (EventID: 3058) (User: ) Description: The application cannot be initialized. Context: Windows Application Details: The registry value cannot be read because the configuration is invalid. Recreate the content index configuration by removing the content index. (HRESULT : 0x80040d03) (0x80040d03) Error: (02/07/2015 04:22:47 AM) (Source: Windows Search Service) (EventID: 3028) (User: ) Description: The gatherer object cannot be initialized. Context: Windows Application, SystemIndex Catalog Details: The registry value cannot be read because the configuration is invalid. Recreate the content index configuration by removing the content index. (HRESULT : 0x80040d03) (0x80040d03) Error: (02/07/2015 04:21:37 AM) (Source: Windows Search Service) (EventID: 7042) (User: ) Description: The Windows Search Service is being stopped because there is a problem with the indexer: The catalog is corrupt. Details: The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801) Error: (02/07/2015 04:21:37 AM) (Source: Windows Search Service) (EventID: 7040) (User: ) Description: The search service has detected corrupted data files in the index {id=431}. The service will attempt to automatically correct this problem by rebuilding the index. Details: The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801) Error: (02/07/2015 04:21:37 AM) (Source: Windows Search Service) (EventID: 3038) (User: ) Description: The gatherer is unable to read the registry URL. Context: Application, SystemIndex Catalog Details: (HRESULT : 0x0) (0x00000000) Error: (02/05/2015 03:34:38 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: IEXPLORE.EXE, version: 11.0.9600.17496, time stamp: 0x546fddcc Faulting module name: ntdll.dll, version: 6.1.7601.18247, time stamp: 0x521ea8e7 Exception code: 0xc0000374 Fault offset: 0x000ce753 Faulting process id: 0x1934 Faulting application start time: 0xIEXPLORE.EXE0 Faulting application path: IEXPLORE.EXE1 Faulting module path: IEXPLORE.EXE2 Report Id: IEXPLORE.EXE3 Error: (02/05/2015 11:05:57 AM) (Source: AdvancedSystemCareService8) (EventID: 0) (User: ) Description: The handle is invalid System errors: ============= Error: (02/08/2015 04:20:32 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: The HP Network Devices Support service terminated with the following error: %%126 Error: (02/08/2015 04:18:29 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The LiveUpdate service terminated unexpectedly. It has done this 1 time(s). Error: (02/08/2015 04:17:07 PM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: The following boot-start or system-start driver(s) failed to load: CFRMD Error: (02/08/2015 03:36:24 PM) (Source: volsnap) (EventID: 36) (User: ) Description: The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit. Error: (02/08/2015 02:50:40 PM) (Source: volsnap) (EventID: 14) (User: ) Description: The shadow copies of volume D: were aborted because of an IO failure on volume D:. Error: (02/08/2015 02:43:59 PM) (Source: volsnap) (EventID: 14) (User: ) Description: The shadow copies of volume D: were aborted because of an IO failure on volume D:. Error: (02/08/2015 02:30:36 PM) (Source: volsnap) (EventID: 14) (User: ) Description: The shadow copies of volume D: were aborted because of an IO failure on volume D:. Error: (02/08/2015 02:18:33 PM) (Source: volsnap) (EventID: 14) (User: ) Description: The shadow copies of volume D: were aborted because of an IO failure on volume D:. Error: (02/08/2015 01:14:28 PM) (Source: volsnap) (EventID: 14) (User: ) Description: The shadow copies of volume D: were aborted because of an IO failure on volume D:. Error: (02/08/2015 00:05:16 PM) (Source: Service Control Manager) (EventID: 7032) (User: ) Description: The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the CarboniteService service, but this action failed with the following error: %%1056 Microsoft Office Sessions: ========================= Error: (02/07/2015 09:48:31 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: CarboniteMirrorImage.exe5.1.2115.1381351703629CarboniteMirrorImage.exe5.1.2115.1381351703629c000000500000000001d9a067a401d04349aa4f31deC:\Program Files\Carbonite\Carbonite Mirror Image\CarboniteMirrorImage.exeC:\Program Files\Carbonite\Carbonite Mirror Image\CarboniteMirrorImage.exef6fe1eea-af3c-11e4-9026-e0cb4effeff8 Error: (02/07/2015 09:40:34 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: CarboniteMirrorImage.exe5.1.2115.1381351703629CarboniteMirrorImage.exe5.1.2115.1381351703629c000000500000000001d9a067a001d0434890e2a446C:\Program Files\Carbonite\Carbonite Mirror Image\CarboniteMirrorImage.exeC:\Program Files\Carbonite\Carbonite Mirror Image\CarboniteMirrorImage.exedabdc7ee-af3b-11e4-90f8-e0cb4effeff8 Error: (02/07/2015 04:22:47 AM) (Source: Windows Search Service) (EventID: 7010) (User: ) Description: Details: The registry value cannot be read because the configuration is invalid. Recreate the content index configuration by removing the content index. (HRESULT : 0x80040d03) (0x80040d03) Error: (02/07/2015 04:22:47 AM) (Source: Windows Search Service) (EventID: 3058) (User: ) Description: Context: Windows Application Details: The registry value cannot be read because the configuration is invalid. Recreate the content index configuration by removing the content index. (HRESULT : 0x80040d03) (0x80040d03) Error: (02/07/2015 04:22:47 AM) (Source: Windows Search Service) (EventID: 3028) (User: ) Description: Context: Windows Application, SystemIndex Catalog Details: The registry value cannot be read because the configuration is invalid. Recreate the content index configuration by removing the content index. (HRESULT : 0x80040d03) (0x80040d03) Error: (02/07/2015 04:21:37 AM) (Source: Windows Search Service) (EventID: 7042) (User: ) Description: Details: The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801) The catalog is corrupt Error: (02/07/2015 04:21:37 AM) (Source: Windows Search Service) (EventID: 7040) (User: ) Description: Details: The content index catalog is corrupt. (HRESULT : 0xc0041801) (0xc0041801) 431 Error: (02/07/2015 04:21:37 AM) (Source: Windows Search Service) (EventID: 3038) (User: ) Description: Context: Application, SystemIndex Catalog Details: (HRESULT : 0x0) (0x00000000) URL Error: (02/05/2015 03:34:38 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: IEXPLORE.EXE11.0.9600.17496546fddccntdll.dll6.1.7601.18247521ea8e7c0000374000ce753193401d04182395f7a03C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\SysWOW64\ntdll.dll6754000f-ad76-11e4-aa99-e0cb4effeff8 Error: (02/05/2015 11:05:57 AM) (Source: AdvancedSystemCareService8) (EventID: 0) (User: ) Description: The handle is invalid CodeIntegrity Errors: =================================== Date: 2013-01-21 04:14:26.906 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\PROCEXP100.SYS because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2013-01-21 04:14:26.500 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\PROCEXP100.SYS because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2013-01-18 20:04:59.876 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\PROCEXP100.SYS because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2013-01-18 20:04:59.445 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\PROCEXP100.SYS because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. ==================== Memory info =========================== Processor: Genuine Intel(R) CPU U7300 @ 1.30GHz Percentage of memory in use: 63% Total physical RAM: 4061.02 MB Available physical RAM: 1498.38 MB Total Pagefile: 8120.23 MB Available Pagefile: 5557.63 MB Total Virtual: 8192 MB Available Virtual: 8191.86 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:74.52 GB) (Free:19.38 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: (DATA) (Fixed) (Total:208.93 GB) (Free:44.76 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 298.1 GB) (Disk ID: 76692CA8) Partition 1: (Not Active) - (Size=14.6 GB) - (Type=1C) Partition 2: (Active) - (Size=74.5 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=208.9 GB) - (Type=OF Extended) ==================== End Of Log ============================