Additional scan result of Farbar Recovery Scan Tool (x64) Version:28-06-2015 01 Ran by Claudio at 2015-07-01 17:55:42 Running from C:\Users\Claudio\Downloads Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-3735152785-4011115693-2359712052-500 - Administrator - Disabled) => C:\Users\Administrator Claudio (S-1-5-21-3735152785-4011115693-2359712052-1002 - Administrator - Enabled) => C:\Users\Claudio Guest (S-1-5-21-3735152785-4011115693-2359712052-501 - Limited - Disabled) UpdatusUser (S-1-5-21-3735152785-4011115693-2359712052-1005 - Limited - Enabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Avira Antivirus (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Avira Antivirus (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) ACE - Arena: Cyber Evolution (HKLM-x32\...\Steam App 285580) (Version: - Spearhead Games) Adobe After Effects CC 2014 (HKLM-x32\...\{2B22C750-5C3B-4738-B621-BA786AC7A494}) (Version: 13.2.0 - Adobe Systems Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 18.0.0.144 - Adobe Systems Incorporated) Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 3.0.0.74 - Adobe Systems Incorporated) Adobe Flash Professional CC 2014 (HKLM-x32\...\{AA704223-E11C-11E3-8A38-C09A633B72AF}) (Version: 14.2 - Adobe Systems Incorporated) Adobe Illustrator CC 2014 (HKLM-x32\...\{2B4B4082-8043-4646-8334-B0A29E641211}) (Version: 18.1.1 - Adobe Systems Incorporated) Adobe InDesign CC 2014 (HKLM-x32\...\{CCDCB9C4-72BA-1014-A3F8-D123F2F18BC2}) (Version: 10.2.0.069 - Adobe Systems Incorporated) Adobe Photoshop CC 2014 (HKLM-x32\...\{D7A4F897-B20A-42D0-862D-CB5F6DB7391D}) (Version: 15.2.2 - Adobe Systems Incorporated) Adobe Premiere Pro CC 2014 (HKLM-x32\...\{07BE616F-9E42-4C90-AF4F-0F32A5B088E7}) (Version: 8.2.0 - Adobe Systems Incorporated) Adobe® Content Viewer (HKLM-x32\...\com.adobe.dmp.contentviewer) (Version: 3.4.3 - Adobe Systems, Incorporated) Aggiornamenti NVIDIA 2.4.5.57 (Version: 2.4.5.57 - NVIDIA Corporation) Hidden AlienAutopsy (HKLM\...\PC-Doctor for Windows) (Version: 3.3.6261.27 - PC-Doctor, Inc.) AlienRespawn (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 1.8.1.70 - Alienware) Alienware Command Center (HKLM-x32\...\InstallShield_{DAED3587-0349-4BF8-8C6B-5DB7BB25CFB5}) (Version: 3.0.29.0 - Alienware Corp.) Alienware Command Center (Version: 3.0.29.0 - Alienware Corp.) Hidden Alienware Customer Surveys (HKLM-x32\...\{9AAA35D1-B21D-4610-BBAE-18FE2D00C3E0}) (Version: 1.11.4124 - Dell Inc.) Alienware Digital Delivery (HKLM-x32\...\{C0C47F85-F48F-4709-9150-3FA62FA2DEAF}) (Version: 2.6.1000.0 - Dell Products, LP) Alienware On-Screen Display (HKLM-x32\...\InstallShield_{0D69462F-99CC-4F8D-942E-666E21CE59F8}) (Version: 0.33.0.9C - ) Alienware On-Screen Display (x32 Version: 0.33.0.9C - ) Hidden Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Avira (HKLM-x32\...\{8467e01f-0496-42ce-b247-88ef205b4880}) (Version: 1.1.40.29239 - Avira Operations GmbH & Co. KG) Avira (x32 Version: 1.1.40.29239 - Avira Operations GmbH & Co. KG) Hidden Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.11.579 - Avira Operations GmbH & Co. KG) Avira System Speedup (HKLM-x32\...\Avira System Speedup_is1) (Version: 1.6.10.1246 - Avira Operations GmbH & Co. KG) Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) Borderlands 2 (HKLM-x32\...\Steam App 49520) (Version: - Gearbox Software) Broadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 6.30.95.48 - Broadcom Corporation) BYOND (HKLM-x32\...\BYOND) (Version: 506.1250 - BYOND) CINEMA 4D 15.037 (HKLM\...\MAXON12664043) (Version: 15.037 - MAXON Computer GmbH) <==== ATTENTION Curse (HKLM-x32\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 6.0.0.0 - Curse) CyberLink Media Suite Essentials (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0 - CyberLink Corp.) DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 5.0.1.0407 - Disc Soft Ltd) Dead Space 2 (HKLM-x32\...\Steam App 47780) (Version: - Visceral Games) Dell System Detect (HKU\S-1-5-21-3735152785-4011115693-2359712052-1002\...\73f463568823ebbe) (Version: 6.0.0.14 - Dell) Dolby Home Theater v4 (HKLM-x32\...\{B26438B4-BF51-49C3-9567-7F14A5E40CB9}) (Version: 7.2.8000.17 - Dolby Laboratories Inc) DSC/AA Factory Installer (Version: 3.3.6261.27 - PC-Doctor, Inc.) Hidden EMSC (x32 Version: 0.0.0.24C - Compal Electronics, Inc.) Hidden Fraps (HKLM-x32\...\Fraps) (Version: - ) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.130 - Google Inc.) Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden Happy Wars (HKLM-x32\...\Steam App 246280) (Version: - Toylogic inc.) Hatred (HKLM-x32\...\SGF0cmVk_is1) (Version: 1 - ) Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment) Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version: - Blizzard Entertainment) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.14.4156 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation) Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation) King Arthur's Gold (HKLM-x32\...\Steam App 219830) (Version: - ) Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation) Middle-earth: Shadow of Mordor (HKLM-x32\...\Steam App 241930) (Version: - Monolith Productions, Inc.) Mortal Kombat X (HKLM-x32\...\Steam App 307780) (Version: - NetherRealm Studios) MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com) music2pc 2.19 (HKLM-x32\...\music2pc_is1) (Version: - MP3 Download) Nidhogg (HKLM-x32\...\Steam App 94400) (Version: - Messhof) Nimble Quest (HKLM-x32\...\Steam App 259780) (Version: - ) NOT A HERO (HKLM-x32\...\Steam App 274270) (Version: - Roll7) NVIDIA Driver 3D Vision 353.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 353.06 - NVIDIA Corporation) NVIDIA Driver audio HD 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation) NVIDIA Driver grafico 353.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 353.06 - NVIDIA Corporation) NVIDIA GeForce Experience 2.4.5.57 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.5.57 - NVIDIA Corporation) NVIDIA PhysX System Software 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation) Origin (HKLM-x32\...\Origin) (Version: 9.4.5.195 - Electronic Arts, Inc.) Overwolf (HKLM-x32\...\Overwolf) (Version: 0.86.89.0 - Overwolf Ltd.) Panda Security Toolbar (HKLM-x32\...\pandasecuritytb) (Version: 4.3.0.3 - Panda Security and Visicom Media Inc.) Pannello di controllo NVIDIA 353.06 (Version: 353.06 - NVIDIA Corporation) Hidden Qualcomm Atheros Bandwidth Control Filter Driver (Version: 1.0.36.1067 - Qualcomm Atheros) Hidden Qualcomm Atheros Killer E220x Drivers (Version: 1.0.36.1067 - Qualcomm Atheros) Hidden Qualcomm Atheros Killer Network Manager Suite (HKLM-x32\...\{E70DB50B-10B4-46BC-9DE2-AB8B49E061EE}) (Version: 1.0.36.1067 - Qualcomm Atheros) Qualcomm Atheros Network Manager (Version: 1.0.36.1067 - Qualcomm Atheros) Hidden QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.) Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.28144 - Realtek Semiconductor Corp.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7404 - Realtek Semiconductor Corp.) Rogue Legacy (HKLM-x32\...\Steam App 241600) (Version: - Cellar Door Games) Screencheat (HKLM-x32\...\Steam App 301970) (Version: - Samurai Punk) SHIELD Streaming (Version: 4.1.2000 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 2.4.5.57 - NVIDIA Corporation) Hidden Spelunky (HKLM-x32\...\Steam App 239350) (Version: - ) Spotify (HKU\S-1-5-21-3735152785-4011115693-2359712052-1002\...\Spotify) (Version: 1.0.7.157.g2a6526f9 - Spotify AB) ST Microelectronics 3 Axis Digital Accelerometer Solution (HKLM-x32\...\{9C24F411-9CA7-4A8A-91F3-F08A4A38EB31}) (Version: 4.12.0040 - ST Microelectronics) Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation) Supporto applicazioni Apple (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.3.8.62 - Synaptics Incorporated) TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH) Unity Web Player (HKU\S-1-5-21-3735152785-4011115693-2359712052-1002\...\UnityWebPlayer) (Version: 5.0.3f2 - Unity Technologies ApS) Warlocks vs Shadows (HKLM-x32\...\Steam App 330270) (Version: - Frozen District) WIDCOMM Bluetooth Software (HKLM\...\{C6D9ED03-6FCF-4410-9CB7-45CA285F9E11}) (Version: 12.0.0.6300 - Broadcom Corporation) WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-3735152785-4011115693-2359712052-1002_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation) CustomCLSID: HKU\S-1-5-21-3735152785-4011115693-2359712052-1002_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems) ==================== Restore Points ========================= ATTENTION: System Restore is disabled ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {1F2D6C6F-A426-4149-AF3E-B01050EC8D17} - System32\Tasks\Synaptics TouchPad Enhancements => \Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-04-08] (Synaptics Incorporated) Task: {39CB0F17-7C0B-46FC-BD61-C92B9583931E} - System32\Tasks\AviraSpeedup => C:\Program Files (x86)\Avira\AviraSpeedup\avira_system_speedup.exe [2015-06-17] (Avira Operations GmbH & Co. KG) Task: {5E2E8E86-9C69-4896-A8FC-4B6A5CDE7817} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\AlienAutopsy\uaclauncher.exe [2013-06-06] (PC-Doctor, Inc.) Task: {801927C4-E463-428C-81FB-B87DC28909AF} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-06-14] (Microsoft Corporation) Task: {81AD42A1-78DE-43D7-80F4-C32E63CE1542} - System32\Tasks\CLVDLauncher => C:\Program Files (x86)\CyberLink\Power2Go8\CLVDLauncher.exe [2012-12-03] (CyberLink Corp.) Task: {86A71205-2E4A-4083-B163-1807926F40DC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-31] (Google Inc.) Task: {93E71CCC-5708-4695-B23D-254A551C1FA7} - \SystemToolsDailyTest No Task File <==== ATTENTION Task: {94165996-DBC5-4AF0-9B2F-9E89257EC94E} - System32\Tasks\CLMLSvc_P2G8 => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2012-12-03] (CyberLink) Task: {9951B170-AC34-4959-86D3-160B5062FDC1} - System32\Tasks\RtHDVBg_PushButton => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-12-11] (Realtek Semiconductor) Task: {CED6B943-1199-4F21-A5FD-7361F8BC0525} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-31] (Google Inc.) Task: {D36A9B02-CC1A-48BC-A512-72693339E6A8} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\AlienAutopsy\sessionchecker.exe [2013-06-06] (PC-Doctor, Inc.) Task: {E01D587C-61C1-409B-BE1F-DD7D8A2BE8C9} - System32\Tasks\Dolby Selector => C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe [2012-08-31] (Dolby Laboratories Inc.) Task: {EBD2F8DE-34BA-4F1C-9816-9414202D15BE} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-claudiogal92@gmail.com => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2015-03-30] (Adobe Systems Incorporated) Task: {EF0FC585-2FF5-4A6C-9A64-7A4D1557E046} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2015-06-21] (Overwolf LTD) Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (Whitelisted) ============== 2013-12-10 15:32 - 2015-05-28 09:04 - 00012104 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll 2013-10-12 00:45 - 2015-05-28 06:15 - 00116368 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2013-03-22 12:27 - 2013-03-22 12:27 - 00049368 _____ () c:\Program Files\WIDCOMM\Bluetooth Software\btwleapi.dll 2013-10-12 00:56 - 2012-04-25 04:43 - 00254512 _____ () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe 2015-04-16 17:42 - 2015-04-16 17:42 - 00997536 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll 2015-03-06 02:17 - 2015-03-06 02:17 - 00392592 _____ () C:\WINDOWS\system32\igfxTray.exe 2015-03-30 23:37 - 2015-06-24 13:37 - 00721552 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\gamecaster64.dll 2015-03-30 23:37 - 2015-06-24 13:37 - 00854160 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\twitchsdk64.dll 2013-07-18 18:41 - 2013-07-18 18:41 - 04434224 _____ () C:\Program Files (x86)\Alienware On-Screen Display\AlienwareOn-ScreenDisplay.exe 2015-03-30 23:37 - 2015-06-24 13:37 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll 2013-12-10 15:32 - 2015-05-28 09:04 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll 2015-06-23 01:34 - 2015-06-20 07:46 - 01281864 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.130\libglesv2.dll 2015-06-23 01:34 - 2015-06-20 07:46 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.130\libegl.dll 2009-12-18 11:07 - 2009-12-18 11:07 - 00577536 _____ () C:\Program Files (x86)\Alienware On-Screen Display\EMSC.dll 2013-10-12 00:54 - 2012-06-08 05:34 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll 2012-06-08 11:34 - 2012-06-08 11:34 - 00016400 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll 2013-06-25 15:18 - 2013-06-25 15:18 - 00110088 _____ () c:\Program Files (x86)\Dell Digital Delivery\ServiceTagPlusPlus.dll 2015-04-01 00:52 - 2013-09-18 15:33 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll 2015-02-26 18:05 - 2015-02-09 20:14 - 01905904 _____ () C:\Program Files (x86)\AlienRespawn\Components\Restore\STRestoreAPI.dll 2013-10-12 01:00 - 2012-11-25 23:19 - 01153384 _____ () C:\Program Files (x86)\AlienRespawn\Components\Restore\libxml2.dll 2015-02-26 18:05 - 2014-02-18 23:12 - 00117568 _____ () C:\Program Files (x86)\AlienRespawn\Components\Restore\zlib1.dll 2015-03-26 23:29 - 2015-04-16 19:40 - 00776192 _____ () F:\Steam\SDL2.dll 2015-03-26 23:29 - 2015-04-23 04:16 - 04962816 _____ () F:\Steam\v8.dll 2015-03-29 17:12 - 2015-06-30 04:55 - 02407104 _____ () F:\Steam\video.dll 2015-03-26 23:29 - 2015-04-23 04:16 - 01556992 _____ () F:\Steam\icui18n.dll 2015-03-26 23:29 - 2015-04-23 04:16 - 01187840 _____ () F:\Steam\icuuc.dll 2015-03-26 23:29 - 2014-12-01 23:31 - 02396672 _____ () F:\Steam\libavcodec-56.dll 2015-03-26 23:29 - 2014-12-01 23:31 - 00479744 _____ () F:\Steam\libavformat-56.dll 2015-03-26 23:29 - 2014-12-01 23:31 - 00332800 _____ () F:\Steam\libavresample-2.dll 2015-03-26 23:29 - 2014-12-01 23:31 - 00442880 _____ () F:\Steam\libavutil-54.dll 2015-03-26 23:29 - 2014-12-01 23:31 - 00485888 _____ () F:\Steam\libswscale-3.dll 2015-03-29 17:12 - 2015-06-30 04:55 - 00703168 _____ () F:\Steam\bin\chromehtml.DLL 2015-03-26 23:29 - 2015-05-11 21:01 - 36302728 _____ () F:\Steam\bin\libcef.dll 2015-04-24 01:13 - 2015-05-11 21:01 - 08958344 _____ () F:\Steam\bin\pdf.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\Users\Claudio\OneDrive:ms-properties AlternateDataStreams: C:\Users\Claudio\SkyDrive:ms-properties ==================== Safe Mode (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) IE trusted site: HKU\S-1-5-21-3735152785-4011115693-2359712052-1002\...\clonewarsadventures.com -> clonewarsadventures.com IE trusted site: HKU\S-1-5-21-3735152785-4011115693-2359712052-1002\...\dell.com -> dell.com IE trusted site: HKU\S-1-5-21-3735152785-4011115693-2359712052-1002\...\freerealms.com -> freerealms.com IE trusted site: HKU\S-1-5-21-3735152785-4011115693-2359712052-1002\...\soe.com -> soe.com IE trusted site: HKU\S-1-5-21-3735152785-4011115693-2359712052-1002\...\sony.com -> sony.com ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-3735152785-4011115693-2359712052-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Claudio\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper DNS Servers: 192.168.1.1 ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) HKLM\...\StartupApproved\StartupFolder: => "Bluetooth.lnk" HKLM\...\StartupApproved\StartupFolder: => "Killer Network Manager.lnk" HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0" HKLM\...\StartupApproved\Run32: => "Alienware Survey" HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud" HKLM\...\StartupApproved\Run32: => "APSDaemon" HKLM\...\StartupApproved\Run32: => "QuickTime Task" HKU\S-1-5-21-3735152785-4011115693-2359712052-1002\...\StartupApproved\StartupFolder: => "Curse.lnk" HKU\S-1-5-21-3735152785-4011115693-2359712052-1002\...\StartupApproved\Run: => "Spotify" HKU\S-1-5-21-3735152785-4011115693-2359712052-1002\...\StartupApproved\Run: => "Spotify Web Helper" HKU\S-1-5-21-3735152785-4011115693-2359712052-1002\...\StartupApproved\Run: => "DAEMON Tools Lite" HKU\S-1-5-21-3735152785-4011115693-2359712052-1002\...\StartupApproved\Run: => "Overwolf" ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [{02B77FD8-DF27-43C8-A07B-050CB83FEE15}] => (Allow) F:\Steam\SteamApps\common\H1Z1\LaunchPad.exe FirewallRules: [{507AE30D-C0C3-4186-AE36-ADC6105B72FC}] => (Allow) F:\Steam\SteamApps\common\H1Z1\LaunchPad.exe FirewallRules: [{53F59E13-AE43-43B3-9971-3BC9D65BFB71}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{E8BDDD9E-AEC7-4B54-9C89-6D1A41CE2225}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{1D87A6E5-2C90-47B2-A827-4ECB7A21D9FC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{933D3D0F-125A-4DC4-9B2E-5D53A478D69D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{DDCF5ADA-F277-4B13-BF4E-55147FF2E732}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{49131875-6BFB-4683-818C-F2F423714FA6}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [UDP Query User{E11B3B5B-CC31-432C-A255-A33E6E6B5AF1}C:\users\claudio\desktop\ts\ts3server_win64.exe] => (Allow) C:\users\claudio\desktop\ts\ts3server_win64.exe FirewallRules: [TCP Query User{EBD0448B-A184-4FB0-9F55-8EAF60943048}C:\users\claudio\desktop\ts\ts3server_win64.exe] => (Allow) C:\users\claudio\desktop\ts\ts3server_win64.exe FirewallRules: [{9AD4521B-DAE7-48D8-983F-7042A9387740}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{63F449B8-2F80-42D0-A8CA-B995081CB960}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{F52BE9F8-D456-4F27-A9A0-DA9EE0DD2F5A}] => (Allow) F:\Steam\bin\steamwebhelper.exe FirewallRules: [{D03CACE1-063E-45FD-8C85-D5872D396433}] => (Allow) F:\Steam\bin\steamwebhelper.exe FirewallRules: [{2BDDB9B4-12D4-4270-8800-1319F1910CDC}] => (Allow) F:\Steam\Steam.exe FirewallRules: [{55024E5D-0887-4344-9E5B-3B3986B4A118}] => (Allow) F:\Steam\Steam.exe FirewallRules: [{9D659AD2-6315-4F62-8EEA-E2D573497D27}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE FirewallRules: [{8EE9B690-F52C-49D6-9768-F013A0F60731}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe FirewallRules: [{78498911-9BCF-422A-A0AA-F6BADF898D80}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDirector10\PDR10.EXE FirewallRules: [{3882A33F-E087-42CB-91D7-609917C88DE7}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{762A2FC9-92B8-4C37-A54E-E74011DBF9ED}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{A47B8BCB-9009-4173-B26C-37F88E1ED9D0}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe FirewallRules: [{1D12D636-5DB9-474A-860F-97AF43F55D86}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe FirewallRules: [{AF1AFBF6-23CF-4D5F-8DDE-C075630BDC0E}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe FirewallRules: [{A434DB64-8666-44DF-9614-7C76A401F7C5}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe FirewallRules: [TCP Query User{6F084B56-2CBC-4548-BC2D-974501C1656F}C:\users\claudio\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\claudio\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{011B24B4-1A89-42E2-A0E2-69876C55B0B7}C:\users\claudio\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\claudio\appdata\roaming\spotify\spotify.exe FirewallRules: [{9C065F10-F7D0-4E65-BBE3-2EF1E9252048}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe FirewallRules: [{77D4C762-F848-4E1F-ABE6-ACEAB1D83D6C}] => (Allow) F:\Steam\SteamApps\common\SpeedRunners\SpeedRunners.exe FirewallRules: [{1ACE6A16-9385-4A22-A837-5D7202505201}] => (Allow) F:\Steam\SteamApps\common\SpeedRunners\SpeedRunners.exe FirewallRules: [{16FC9D70-6384-453E-96BA-87A00E66A095}] => (Allow) F:\Steam\SteamApps\common\Volgarr\Volgarr.exe FirewallRules: [{AAF7D5A0-401B-4871-A969-0241EDC7045C}] => (Allow) F:\Steam\SteamApps\common\Volgarr\Volgarr.exe FirewallRules: [{C58F3EA0-F54B-4E5A-8116-523447689106}] => (Allow) F:\Steam\SteamApps\common\Crypt of the NecroDancer\NecroDancer.exe FirewallRules: [{9BDC4573-1212-4D7C-95F7-211E00F6270F}] => (Allow) F:\Steam\SteamApps\common\Crypt of the NecroDancer\NecroDancer.exe FirewallRules: [{D9F4B4B0-BF02-499C-933C-497466FDABF0}] => (Allow) F:\Steam\SteamApps\common\Pixel Piracy\PixelPiracy.exe FirewallRules: [{5832F11D-4A59-402F-A635-F158DE1A4ED7}] => (Allow) F:\Steam\SteamApps\common\Pixel Piracy\PixelPiracy.exe FirewallRules: [{0677ECC8-4EE9-4ACD-BE2F-39402C340951}] => (Allow) F:\Steam\SteamApps\common\Warlocks\Warlocks.exe FirewallRules: [{5884EF70-4B39-4B43-82E9-8C08963B9AAE}] => (Allow) F:\Steam\SteamApps\common\Warlocks\Warlocks.exe FirewallRules: [{BCED257A-BCD3-4E49-8344-01EEF3494D70}] => (Allow) F:\Steam\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA_BE.exe FirewallRules: [{500355BD-9C1D-4F8E-AD67-161B0A0D714F}] => (Allow) F:\Steam\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA_BE.exe FirewallRules: [TCP Query User{A9D49B63-47CD-4939-BB30-A0A45CE33ABC}F:\steam\steamapps\common\h1z1\h1z1.exe] => (Allow) F:\steam\steamapps\common\h1z1\h1z1.exe FirewallRules: [UDP Query User{1D6D364B-4BB0-467D-AB08-B073AB2EF235}F:\steam\steamapps\common\h1z1\h1z1.exe] => (Allow) F:\steam\steamapps\common\h1z1\h1z1.exe FirewallRules: [TCP Query User{F0255F9C-BEAA-45AD-8B52-C0FA2CA8B514}F:\steam\steamapps\common\risk of rain\risk of rain.exe] => (Allow) F:\steam\steamapps\common\risk of rain\risk of rain.exe FirewallRules: [UDP Query User{74264F05-BBA0-426E-B975-B75ABC64AB0E}F:\steam\steamapps\common\risk of rain\risk of rain.exe] => (Allow) F:\steam\steamapps\common\risk of rain\risk of rain.exe FirewallRules: [{486A3950-7858-4F2F-8213-A89912EAB3B5}] => (Allow) F:\Steam\SteamApps\common\Broforce\Broforce_beta.exe FirewallRules: [{0C50C9ED-B782-4EDF-B436-7609931F3BB8}] => (Allow) F:\Steam\SteamApps\common\Broforce\Broforce_beta.exe FirewallRules: [TCP Query User{CBA6F584-74DC-46C7-86FB-EFDD9CFA997E}C:\program files (x86)\byond\bin\byond.exe] => (Allow) C:\program files (x86)\byond\bin\byond.exe FirewallRules: [UDP Query User{250830CD-ECB8-465E-92B6-038570B85C22}C:\program files (x86)\byond\bin\byond.exe] => (Allow) C:\program files (x86)\byond\bin\byond.exe FirewallRules: [{6E79A8A5-4018-473E-A531-B8CB272AF5CE}] => (Allow) F:\Steam\SteamApps\common\Hammerwatch\Hammerwatch.exe FirewallRules: [{ABB40138-3F8B-4AB7-AE26-3F976A0864F7}] => (Allow) F:\Steam\SteamApps\common\Hammerwatch\Hammerwatch.exe FirewallRules: [{D974F64E-559B-4DF2-BDB0-B43A98FFA6D2}] => (Allow) F:\Steam\SteamApps\common\Hammerwatch\editor\HammerEditor.exe FirewallRules: [{344FB897-7032-4DC8-8122-4FA970C5DE31}] => (Allow) F:\Steam\SteamApps\common\Hammerwatch\editor\HammerEditor.exe FirewallRules: [{27B5BEB8-1E16-4D82-96F3-4E45E2E06C3C}] => (Allow) F:\Steam\SteamApps\common\Dungeon of the Endless\DungeonoftheEndless.exe FirewallRules: [{E02F40CB-C5A0-4EC5-846A-3860CA93AD02}] => (Allow) F:\Steam\SteamApps\common\Dungeon of the Endless\DungeonoftheEndless.exe FirewallRules: [{DD8D76F0-A4BC-4FC2-9A40-2DEFF9042169}] => (Allow) F:\Steam\SteamApps\common\Oddworld New n Tasty\NNT.exe FirewallRules: [{41E21255-CF40-4B21-A8EF-46EEF6B72190}] => (Allow) F:\Steam\SteamApps\common\Oddworld New n Tasty\NNT.exe FirewallRules: [{7892AC57-28CF-4E92-8464-649D7B645A4C}] => (Allow) F:\Steam\SteamApps\common\MK10\Binaries\Retail\MK10.exe FirewallRules: [{F516B0B4-9ECD-4C40-9A4F-981E4104DC4F}] => (Allow) F:\Steam\SteamApps\common\MK10\Binaries\Retail\MK10.exe FirewallRules: [{ED962044-054B-4FA7-8DFC-99FDEC273E3C}] => (Allow) F:\Steam\SteamApps\common\MK10\Binaries\Retail\MKXLauncher.exe FirewallRules: [{EEA93737-C444-4184-B858-D76E802B4D90}] => (Allow) F:\Steam\SteamApps\common\MK10\Binaries\Retail\MKXLauncher.exe FirewallRules: [{B40F7FD4-853D-4D37-A627-75DF3F02AE92}] => (Allow) F:\Steam\SteamApps\common\DB Xenoverse\DBXV.exe FirewallRules: [{8B5334E4-5CC9-4C79-B4E6-6CC867950610}] => (Allow) F:\Steam\SteamApps\common\DB Xenoverse\DBXV.exe FirewallRules: [{C452F923-0DBA-464A-A50D-0D71A689CB03}] => (Allow) F:\Steam\SteamApps\common\ACE\Binaries\Win32\CyphGame.exe FirewallRules: [{E42282DD-A634-48B3-A693-C59763529D14}] => (Allow) F:\Steam\SteamApps\common\ACE\Binaries\Win32\CyphGame.exe FirewallRules: [{5D481B56-D9D3-4B19-891F-A1C1B37C7BE9}] => (Allow) F:\Steam\SteamApps\common\Spelunky\Spelunky.exe FirewallRules: [{2F603D0D-E66E-43F8-97DB-659E64B0AF80}] => (Allow) F:\Steam\SteamApps\common\Spelunky\Spelunky.exe FirewallRules: [{9A621503-1FFB-470E-9945-67025683D075}] => (Allow) F:\Steam\SteamApps\common\Rogue Legacy\RogueLegacy.exe FirewallRules: [{118AFD94-4C30-4296-B761-FEA9CECA831F}] => (Allow) F:\Steam\SteamApps\common\Rogue Legacy\RogueLegacy.exe FirewallRules: [{4EE0BF09-88A7-4641-AF5C-13DB02793FC3}] => (Allow) F:\Steam\SteamApps\common\dont_starve\bin\dontstarve_steam.exe FirewallRules: [{F6D65F2F-9006-423E-8514-D84CD03406DD}] => (Allow) F:\Steam\SteamApps\common\dont_starve\bin\dontstarve_steam.exe FirewallRules: [{3C9574F3-0D0B-4468-9549-FCBD1CB32C16}] => (Allow) F:\Steam\SteamApps\common\Game Dev Tycoon\nw.exe FirewallRules: [{E4064CD6-206B-47E6-A383-5208F53823A5}] => (Allow) F:\Steam\SteamApps\common\Game Dev Tycoon\nw.exe FirewallRules: [{FEF223DC-66FE-406C-9AD9-0E38627754F9}] => (Allow) F:\Steam\SteamApps\common\HeroSiege\bin\Hero_Siege.exe FirewallRules: [{FF2C275E-1559-4C52-9A79-46A65B5EE2B7}] => (Allow) F:\Steam\SteamApps\common\HeroSiege\bin\Hero_Siege.exe FirewallRules: [{4A010408-A7E5-4517-9EDD-1B1569ABD22B}] => (Allow) F:\Steam\SteamApps\common\Hotline Miami 2\HotlineMiami2.exe FirewallRules: [{ABBF8546-E892-4D20-97E1-C60BFD3D15A9}] => (Allow) F:\Steam\SteamApps\common\Hotline Miami 2\HotlineMiami2.exe FirewallRules: [{4F4250C7-5C86-484C-BA06-CC430C40BAB7}] => (Allow) F:\Steam\SteamApps\common\Brawlhalla\Brawlhalla.exe FirewallRules: [{8091F4B2-E5B1-4046-9878-41197732E02B}] => (Allow) F:\Steam\SteamApps\common\Brawlhalla\Brawlhalla.exe FirewallRules: [{44F5D2A3-D519-46AC-B307-76DCE95307FE}] => (Allow) F:\Steam\SteamApps\common\The Escapists\TheEscapists.exe FirewallRules: [{8CE9D4B0-95FE-4E55-8772-485DF64E1170}] => (Allow) F:\Steam\SteamApps\common\The Escapists\TheEscapists.exe FirewallRules: [{C6E294E0-0E0E-4882-8DD9-C23383988D81}] => (Allow) F:\Steam\SteamApps\common\Besiege\Besiege.exe FirewallRules: [{4918492F-9525-41F8-B7F7-ECE76651FBAD}] => (Allow) F:\Steam\SteamApps\common\Besiege\Besiege.exe FirewallRules: [{DF087C29-C1E0-471B-9BCA-2370751820DF}] => (Allow) F:\Steam\SteamApps\common\The Binding Of Isaac\Isaac.exe FirewallRules: [{F692F378-9EAB-4BC7-A0D9-DACD60C64B44}] => (Allow) F:\Steam\SteamApps\common\The Binding Of Isaac\Isaac.exe FirewallRules: [{4BF34900-5434-40C7-84D9-D7277BD8AAD1}] => (Allow) F:\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win64\CMW.exe FirewallRules: [{DE6EE2A0-197A-4A1B-9B27-F4D60033724C}] => (Allow) F:\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win64\CMW.exe FirewallRules: [{B3EC6D9F-AB55-41A3-BDDD-B5D0CE232889}] => (Allow) F:\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win32\CMW.exe FirewallRules: [{E057585F-94E7-4BC8-9813-585BBF85D884}] => (Allow) F:\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win32\CMW.exe FirewallRules: [{13C461EE-A5CC-4A84-BF4B-C69D29CBA43C}] => (Allow) F:\Steam\SteamApps\common\chivalrymedievalwarfare\ChivLauncher.exe FirewallRules: [{69D6903E-C1E9-4C28-8639-CD5ED426683D}] => (Allow) F:\Steam\SteamApps\common\chivalrymedievalwarfare\ChivLauncher.exe FirewallRules: [{A5EDF2F9-A900-4955-BD69-2D32C055D459}] => (Allow) F:\Steam\SteamApps\common\ShadowOfMordor\x64\ShadowOfMordor.exe FirewallRules: [{DD3524BF-2FAC-4C26-9C84-A2EC6BE9274C}] => (Allow) F:\Steam\SteamApps\common\ShadowOfMordor\x64\ShadowOfMordor.exe FirewallRules: [{9C671EDB-AF3C-4934-81BF-F1FDA4C4DD00}] => (Allow) F:\Steam\SteamApps\common\Duke Nukem 3D\bin\duke3d.exe FirewallRules: [{E050A558-5050-479B-B96F-D5B88F88E461}] => (Allow) F:\Steam\SteamApps\common\Duke Nukem 3D\bin\duke3d.exe FirewallRules: [{98C66CC2-7CA9-4C62-BB74-4D4BD759516F}] => (Allow) F:\Steam\SteamApps\common\Duke Nukem 3D\bin\dosbox\dosbox.exe FirewallRules: [{0699E825-8570-43D0-BDCC-6671245DD9A3}] => (Allow) F:\Steam\SteamApps\common\Duke Nukem 3D\bin\dosbox\dosbox.exe FirewallRules: [{9B202A76-9CF8-4D79-A91C-538E4184CF86}] => (Allow) F:\Steam\SteamApps\common\Duke Nukem 3D\bin\build.exe FirewallRules: [{EF2308B0-4CBE-4CAB-B633-6BBA358F26F8}] => (Allow) F:\Steam\SteamApps\common\Duke Nukem 3D\bin\build.exe FirewallRules: [{7A3D224A-67A0-492E-B949-5C9512664C6B}] => (Allow) F:\Steam\SteamApps\common\Call of Duty Advanced Warfare\s1_mp64_ship.exe FirewallRules: [{BB95E902-A18E-45E8-98B2-F1E1B9AF7C14}] => (Allow) F:\Steam\SteamApps\common\Call of Duty Advanced Warfare\s1_mp64_ship.exe FirewallRules: [{7962DBC8-E4A5-4711-872A-105800207341}] => (Allow) F:\Steam\SteamApps\common\Call of Duty Advanced Warfare\s1_sp64_ship.exe FirewallRules: [{BC48B115-1EF7-422D-961A-2781111D279B}] => (Allow) F:\Steam\SteamApps\common\Call of Duty Advanced Warfare\s1_sp64_ship.exe FirewallRules: [{E4297309-2A41-4C9C-9745-098A025FDCA6}] => (Allow) F:\Steam\SteamApps\common\Planetary Annihilation\bin_x64\PA.exe FirewallRules: [{19E91B30-7FC3-4CA9-AC38-A6870C3D3B3D}] => (Allow) F:\Steam\SteamApps\common\Planetary Annihilation\bin_x64\PA.exe FirewallRules: [{9E5100CE-18D7-4C20-AE2F-B01F59724368}] => (Allow) F:\Steam\SteamApps\common\Crawl\Crawl.exe FirewallRules: [{1FE4E1D6-CBB9-43EE-9E5A-EA62B4D31FE0}] => (Allow) F:\Steam\SteamApps\common\Crawl\Crawl.exe FirewallRules: [{4632D664-8B86-4091-8B85-945E2016F395}] => (Allow) F:\Steam\SteamApps\common\Screencheat\screencheat.exe FirewallRules: [{6909AE82-2585-490D-B82E-A3349E6DFF40}] => (Allow) F:\Steam\SteamApps\common\Screencheat\screencheat.exe FirewallRules: [TCP Query User{C61705E7-E21E-462E-B084-D0163FE0F3CD}F:\steam\steamapps\common\insurgency2\insurgency.exe] => (Allow) F:\steam\steamapps\common\insurgency2\insurgency.exe FirewallRules: [UDP Query User{0A5A6DF5-CE83-4E10-BF88-7125EEA5182C}F:\steam\steamapps\common\insurgency2\insurgency.exe] => (Allow) F:\steam\steamapps\common\insurgency2\insurgency.exe FirewallRules: [{CC2BD521-A443-47DA-8A06-DEFF1215BC1F}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe FirewallRules: [{96DAD653-16F6-4D60-972A-EC459E15C437}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe FirewallRules: [TCP Query User{4DEE1E16-1495-4A12-99B0-20317E4DBBA2}C:\program files (x86)\heroes of the storm\versions\base35360\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35360\heroesofthestorm_x64.exe FirewallRules: [UDP Query User{7FC6773A-DD7C-438A-BF5F-EC2D0EEA2F05}C:\program files (x86)\heroes of the storm\versions\base35360\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35360\heroesofthestorm_x64.exe FirewallRules: [{28A9DD93-4108-447C-97B1-2D55B0E413A5}] => (Allow) F:\Steam\SteamApps\common\Not a Hero\NOT A HERO.exe FirewallRules: [{7CBCDEF5-CA62-4664-93DB-6CBA6022C3A8}] => (Allow) F:\Steam\SteamApps\common\Not a Hero\NOT A HERO.exe FirewallRules: [{37477CFB-423A-49E7-A5CD-18D7880B4574}] => (Allow) F:\Steam\SteamApps\common\ShadowOfMordor\x64\ShadowOfMordor.exe FirewallRules: [{C2715099-C67F-409C-A12E-C23805579FE9}] => (Allow) F:\Steam\SteamApps\common\ShadowOfMordor\x64\ShadowOfMordor.exe FirewallRules: [{0C2AC26E-15CD-4B9A-A05C-CA5BB4C09017}] => (Allow) F:\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{47571732-9AA0-472C-B981-BAA6BDA2539D}] => (Allow) F:\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{5AEAF13E-0EBE-474D-8602-C8E1CF276865}] => (Allow) F:\Steam\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe FirewallRules: [{3BDCDE88-2A63-492B-B480-1DE3066CFEC4}] => (Allow) F:\Steam\SteamApps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe FirewallRules: [{3FD23523-8626-4B3F-8FF1-56C497647C07}] => (Allow) F:\Steam\SteamApps\common\Gunpoint\Gunpoint.exe FirewallRules: [{F213D55C-F0ED-4696-AE8B-495FD868AA14}] => (Allow) F:\Steam\SteamApps\common\Gunpoint\Gunpoint.exe FirewallRules: [{8B7649F9-66F2-4233-89E5-F3C4C844A7D6}] => (Allow) F:\Steam\SteamApps\common\lethalleague\LethalLeague.exe FirewallRules: [{858C647E-04B1-4727-A589-C380FA73AA82}] => (Allow) F:\Steam\SteamApps\common\lethalleague\LethalLeague.exe FirewallRules: [TCP Query User{89BE6EA1-8FD9-4C15-B87B-F76EF452DFF0}C:\program files (x86)\heroes of the storm\versions\base35634\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35634\heroesofthestorm_x64.exe FirewallRules: [UDP Query User{46562D10-EC5A-4E15-AE8F-A14ACFAC4DED}C:\program files (x86)\heroes of the storm\versions\base35634\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35634\heroesofthestorm_x64.exe FirewallRules: [TCP Query User{53B51C90-9F0C-4BD9-AE89-9B61BBE1B989}C:\program files (x86)\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe FirewallRules: [UDP Query User{E8E8DE93-0AD6-4B5C-85FD-74A3F84C7628}C:\program files (x86)\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe FirewallRules: [TCP Query User{777E426A-32E3-4107-B222-F464C5774D1D}C:\users\claudio\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\claudio\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{FCF46193-2AEF-4324-AE47-7D71DA254C45}C:\users\claudio\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\claudio\appdata\roaming\spotify\spotify.exe FirewallRules: [{6CE5F316-5D3B-4F6E-B56D-F26FA1007389}] => (Allow) F:\Steam\SteamApps\common\Nidhogg\Nidhogg.exe FirewallRules: [{73FDCDAE-6908-4BEA-9A0B-B06E5CFBCD64}] => (Allow) F:\Steam\SteamApps\common\Nidhogg\Nidhogg.exe FirewallRules: [{5ABADCF6-A079-4956-B15A-35B65DDB85D6}] => (Allow) F:\Steam\SteamApps\common\King Arthur's Gold\KAG.exe FirewallRules: [{B30387B2-2A95-44CE-9505-6C852BF5C35B}] => (Allow) F:\Steam\SteamApps\common\King Arthur's Gold\KAG.exe FirewallRules: [{4B1FE2D4-1599-4BAF-A191-FF9E629EF0CA}] => (Allow) F:\Steam\SteamApps\common\GarrysMod\hl2.exe FirewallRules: [{59FB93B2-EB8F-4871-85E0-B05F7AD1BB11}] => (Allow) F:\Steam\SteamApps\common\GarrysMod\hl2.exe FirewallRules: [{B9E8C35D-CEB1-4012-9EFC-2BC9C9ADA10B}] => (Allow) F:\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3.exe FirewallRules: [{1F6177FA-4DD1-4CFE-9218-88401AED31DA}] => (Allow) F:\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3.exe FirewallRules: [{41034479-7C93-4093-804E-D9325985386F}] => (Allow) F:\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3_Unrestricted.exe FirewallRules: [{2A0D5F92-15B4-4731-9E11-AA932A00A243}] => (Allow) F:\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3_Unrestricted.exe FirewallRules: [{DC31887F-5B27-4E00-A78F-6D3934C43AC3}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{4CC0CC10-6F78-45DF-9179-0E2E422FD26B}] => (Allow) F:\Steam\SteamApps\common\Gods Will Be Watching\gwbw.exe FirewallRules: [{D762B463-3553-4363-BCDB-37D37D12CB04}] => (Allow) F:\Steam\SteamApps\common\Gods Will Be Watching\gwbw.exe FirewallRules: [{225DA11B-364E-484B-B7FD-A60737255653}] => (Allow) F:\Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe FirewallRules: [{CB3519BA-5209-4B70-AA91-5580F15A9379}] => (Allow) F:\Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe FirewallRules: [{03FD9367-F58F-4133-B1BB-4A3292DE1D6A}] => (Allow) F:\Steam\SteamApps\common\HeroSiege\bin\Hero_Siege.exe FirewallRules: [{0CC61AC0-6D58-40B8-8528-E34036A058BC}] => (Allow) F:\Steam\SteamApps\common\HeroSiege\bin\Hero_Siege.exe FirewallRules: [TCP Query User{CBBAD75E-37ED-4BE5-A1A4-4FDF2042BDC1}F:\steam\steamapps\common\dead space 2\deadspace2.exe] => (Allow) F:\steam\steamapps\common\dead space 2\deadspace2.exe FirewallRules: [UDP Query User{56DECDEB-27C7-4D30-AAB2-F60CA814A3DD}F:\steam\steamapps\common\dead space 2\deadspace2.exe] => (Allow) F:\steam\steamapps\common\dead space 2\deadspace2.exe FirewallRules: [{46278A5C-72D0-4BEA-8256-9F5CC1175A4D}] => (Allow) F:\Steam\SteamApps\common\NimbleQuest\NimbleQuest.exe FirewallRules: [{39557A34-4917-4B3D-BB59-121CFAF6D267}] => (Allow) F:\Steam\SteamApps\common\NimbleQuest\NimbleQuest.exe FirewallRules: [{C33F4971-B098-4BE9-BAB5-481F7880C8E9}] => (Allow) C:\Program Files (x86)\pandasecuritytb\dtuser.exe FirewallRules: [{377CA4E9-1C50-4E3E-A6B4-D1498E025834}] => (Allow) C:\Program Files (x86)\pandasecuritytb\dtuser.exe FirewallRules: [{57AB3A47-DD8E-4681-9A11-B37DE59BE563}] => (Allow) C:\Program Files (x86)\pandasecuritytb\ToolbarCleaner.exe FirewallRules: [{2A3B7063-5011-4245-8A48-0BB08D4CF8CE}] => (Allow) C:\Program Files (x86)\pandasecuritytb\ToolbarCleaner.exe ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (07/01/2015 03:17:26 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Il programma Hearthstone.exe versione 2.7.0.9166 non interagisce più con Windows ed è stato chiuso. Per vedere se sono disponibili ulteriori informazioni sul problema, verificare la cronologia del problema in Centro operativo nel Pannello di controllo. ID processo: 1870 Ora di avvio: 01d0b4000b4c60ae Ora di chiusura: 103 Percorso applicazione: C:\Program Files (x86)\Hearthstone\Hearthstone.exe ID segnalazione: 670fc97f-1ff3-11e5-be93-f01faf47090c Nome completo pacchetto che ha generato l'errore: ID applicazione relativo al pacchetto che ha generato l'errore: Error: (07/01/2015 07:51:03 AM) (Source: Application Error) (EventID: 1005) (User: ) Description: Impossibile accedere al file per uno dei motivi seguenti: Si è verificato un problema relativo alla connessione di rete, al disco in cui è archiviato il file o ai driver di archiviazione installati nel computer oppure il disco è assente. Il programma Steam Client Bootstrapper è stato chiuso a causa dell'errore. Programma: Steam Client Bootstrapper File: Il valore dell'errore è indicato nella sezione Dati aggiuntivi. Azione utente 1. Aprire nuovamente il file. Potrebbe trattarsi di un problema temporaneo che si risolverà automaticamente rieseguendo il programma. 2. Se il file risulta comunque non accessibile e: - Si trova in rete, è necessario che l'amministratore della rete verifichi la presenza di eventuali problemi di rete e che sia possibile contattare il server. - Si trova in un disco rimovibile, ad esempio un disco floppy o un CD, verificare che il disco sia inserito correttamente nel computer. 3. Controllare e ripristinare il file system eseguendo CHKDSK. Per eseguire CHKDSK, fare clic sul pulsante Start, scegliere Esegui, digitare CMD, quindi scegliere OK. Al prompt dei comandi, digitare CHKDSK /F, quindi premere INVIO. 4. Se il problema persiste, ripristinare il file da una copia di backup. 5. Determinare se è possibile aprire altri file nello stesso disco. Se non è possibile, il disco potrebbe essere danneggiato. Se si tratta di un disco rigido, contattare l'amministratore o il fornitore dell'hardware del computer per ottenere assistenza. Dati aggiuntivi Valore errore: C000026E Tipo disco: 0 Error: (07/01/2015 07:51:03 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome dell'applicazione che ha generato l'errore: Steam.exe, versione: 2.85.51.45, timestamp: 0x5591f08a Nome del modulo che ha generato l'errore: ntdll.dll, versione: 6.3.9600.17736, timestamp: 0x550f42c2 Codice eccezione: 0xc0000006 Offset errore 0x0006d2d7 ID processo che ha generato l'errore: 0x71c Ora di avvio dell'applicazione che ha generato l'errore: 0xSteam.exe0 Percorso dell'applicazione che ha generato l'errore: Steam.exe1 Percorso del modulo che ha generato l'errore: Steam.exe2 ID segnalazione: Steam.exe3 Nome completo pacchetto che ha generato l'errore: Steam.exe4 ID applicazione relativo al pacchetto che ha generato l'errore: Steam.exe5 Error: (07/01/2015 01:28:54 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Il programma Hearthstone.exe versione 2.7.0.9166 non interagisce più con Windows ed è stato chiuso. Per vedere se sono disponibili ulteriori informazioni sul problema, verificare la cronologia del problema in Centro operativo nel Pannello di controllo. ID processo: 7c Ora di avvio: 01d0b38c5010ebbe Ora di chiusura: 102 Percorso applicazione: C:\Program Files (x86)\Hearthstone\Hearthstone.exe ID segnalazione: 9fa90236-1f7f-11e5-be91-f01faf47090c Nome completo pacchetto che ha generato l'errore: ID applicazione relativo al pacchetto che ha generato l'errore: Error: (06/29/2015 07:45:18 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Il programma Broforce_beta.exe versione 5.0.1.7160 non interagisce più con Windows ed è stato chiuso. Per vedere se sono disponibili ulteriori informazioni sul problema, verificare la cronologia del problema in Centro operativo nel Pannello di controllo. ID processo: 17a8 Ora di avvio: 01d0b29347dd4169 Ora di chiusura: 111 Percorso applicazione: F:\Steam\steamapps\common\Broforce\Broforce_beta.exe ID segnalazione: 993a613e-1e86-11e5-be90-f01faf47090c Nome completo pacchetto che ha generato l'errore: ID applicazione relativo al pacchetto che ha generato l'errore: Error: (06/29/2015 07:44:40 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Il programma Broforce_beta.exe versione 5.0.1.7160 non interagisce più con Windows ed è stato chiuso. Per vedere se sono disponibili ulteriori informazioni sul problema, verificare la cronologia del problema in Centro operativo nel Pannello di controllo. ID processo: fec Ora di avvio: 01d0b29321948f53 Ora di chiusura: 113 Percorso applicazione: F:\Steam\steamapps\common\Broforce\Broforce_beta.exe ID segnalazione: 82326bd2-1e86-11e5-be90-f01faf47090c Nome completo pacchetto che ha generato l'errore: ID applicazione relativo al pacchetto che ha generato l'errore: Error: (06/29/2015 03:25:48 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome dell'applicazione che ha generato l'errore: SuperMeatBoy.exe, versione: 0.0.0.0, timestamp: 0x4ee3490b Nome del modulo che ha generato l'errore: ntdll.dll, versione: 6.3.9600.17736, timestamp: 0x550f42c2 Codice eccezione: 0xc0000005 Offset errore 0x0001df63 ID processo che ha generato l'errore: 0x17fc Ora di avvio dell'applicazione che ha generato l'errore: 0xSuperMeatBoy.exe0 Percorso dell'applicazione che ha generato l'errore: SuperMeatBoy.exe1 Percorso del modulo che ha generato l'errore: SuperMeatBoy.exe2 ID segnalazione: SuperMeatBoy.exe3 Nome completo pacchetto che ha generato l'errore: SuperMeatBoy.exe4 ID applicazione relativo al pacchetto che ha generato l'errore: SuperMeatBoy.exe5 Error: (06/29/2015 01:32:45 AM) (Source: Application Error) (EventID: 1005) (User: ) Description: Impossibile accedere al file per uno dei motivi seguenti: Si è verificato un problema relativo alla connessione di rete, al disco in cui è archiviato il file o ai driver di archiviazione installati nel computer oppure il disco è assente. Il programma Steam Client WebHelper è stato chiuso a causa dell'errore. Programma: Steam Client WebHelper File: Il valore dell'errore è indicato nella sezione Dati aggiuntivi. Azione utente 1. Aprire nuovamente il file. Potrebbe trattarsi di un problema temporaneo che si risolverà automaticamente rieseguendo il programma. 2. Se il file risulta comunque non accessibile e: - Si trova in rete, è necessario che l'amministratore della rete verifichi la presenza di eventuali problemi di rete e che sia possibile contattare il server. - Si trova in un disco rimovibile, ad esempio un disco floppy o un CD, verificare che il disco sia inserito correttamente nel computer. 3. Controllare e ripristinare il file system eseguendo CHKDSK. Per eseguire CHKDSK, fare clic sul pulsante Start, scegliere Esegui, digitare CMD, quindi scegliere OK. Al prompt dei comandi, digitare CHKDSK /F, quindi premere INVIO. 4. Se il problema persiste, ripristinare il file da una copia di backup. 5. Determinare se è possibile aprire altri file nello stesso disco. Se non è possibile, il disco potrebbe essere danneggiato. Se si tratta di un disco rigido, contattare l'amministratore o il fornitore dell'hardware del computer per ottenere assistenza. Dati aggiuntivi Valore errore: C000026E Tipo disco: 0 Error: (06/29/2015 01:32:45 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome dell'applicazione che ha generato l'errore: steamwebhelper.exe, versione: 2.84.18.22, timestamp: 0x55848d6a Nome del modulo che ha generato l'errore: libcef.dll, versione: 3.2272.30.0, timestamp: 0x55507fe0 Codice eccezione: 0xc0000006 Offset errore 0x00b6f0c0 ID processo che ha generato l'errore: 0x16f8 Ora di avvio dell'applicazione che ha generato l'errore: 0xsteamwebhelper.exe0 Percorso dell'applicazione che ha generato l'errore: steamwebhelper.exe1 Percorso del modulo che ha generato l'errore: steamwebhelper.exe2 ID segnalazione: steamwebhelper.exe3 Nome completo pacchetto che ha generato l'errore: steamwebhelper.exe4 ID applicazione relativo al pacchetto che ha generato l'errore: steamwebhelper.exe5 Error: (06/29/2015 01:29:45 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome dell'applicazione che ha generato l'errore: SteamService.exe, versione: 2.84.18.22, timestamp: 0x55848d3b Nome del modulo che ha generato l'errore: Wpc.dll_unloaded, versione: 6.3.9600.17415, timestamp: 0x54503e7c Codice eccezione: 0xc00001a5 Offset errore 0x000775a0 ID processo che ha generato l'errore: 0xae4 Ora di avvio dell'applicazione che ha generato l'errore: 0xSteamService.exe0 Percorso dell'applicazione che ha generato l'errore: SteamService.exe1 Percorso del modulo che ha generato l'errore: SteamService.exe2 ID segnalazione: SteamService.exe3 Nome completo pacchetto che ha generato l'errore: SteamService.exe4 ID applicazione relativo al pacchetto che ha generato l'errore: SteamService.exe5 System errors: ============= Error: (07/01/2015 05:21:17 PM) (Source: Service Control Manager) (EventID: 7032) (User: ) Description: Tentativo di eseguire un'azione di correzione (Riavvia il servizio) dopo l'arresto imprevista del servizio Avira Real-Time Protection. Tentativo non riuscito per l'errore: %%1058 Error: (07/01/2015 05:21:17 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Il servizio Avira Real-Time Protection è stato arrestato in modo imprevisto. Questo problema si è verificato 1 volta/e. Le seguenti azioni di correzione saranno eseguite tra 0 millisecondi: Riavvia il servizio. Error: (07/01/2015 05:21:17 PM) (Source: Service Control Manager) (EventID: 7032) (User: ) Description: Tentativo di eseguire un'azione di correzione (Riavvia il servizio) dopo l'arresto imprevista del servizio Avira Scheduler. Tentativo non riuscito per l'errore: %%1058 Error: (07/01/2015 05:21:17 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Il servizio Avira Scheduler è stato arrestato in modo imprevisto. Questo problema si è verificato 1 volta/e. Le seguenti azioni di correzione saranno eseguite tra 0 millisecondi: Riavvia il servizio. Error: (07/01/2015 04:48:04 PM) (Source: NetBT) (EventID: 4321) (User: ) Description: Impossibile registrare il nome "WORKGROUP :1d" sull'interfaccia con indirizzo IP 192.168.1.7. Il computer con indirizzo IP 192.168.1.1 non ha consentito a questo computer di richiedere il nome. Error: (07/01/2015 04:47:59 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Il servizio Servizio Windows Defender è stato arrestato in modo imprevisto. Questo problema si è verificato 2 volta/e. Le seguenti azioni di correzione saranno eseguite tra 100 millisecondi: Esegui il programma di ripristino configurato. Error: (07/01/2015 04:47:55 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Il servizio Servizio Windows Defender è stato arrestato in modo imprevisto. Questo problema si è verificato 1 volta/e. Le seguenti azioni di correzione saranno eseguite tra 100 millisecondi: Riavvia il servizio. Error: (07/01/2015 03:06:27 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY) Description: Errore di installazione. Non è stato possibile installare il seguente aggiornamento, errore 0x80070643: Aggiornamento delle definizioni Windows Defender – KB2267602 (definizione 1.201.595.0). Error: (07/01/2015 00:49:32 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Il servizio Servizio Windows Defender non è stato avviato per il seguente errore: %%1053 Error: (07/01/2015 00:49:32 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Timeout (30000 millisecondi) durante l'attesa della connessione del servizio Servizio Windows Defender. Microsoft Office: ========================= Error: (07/01/2015 03:17:26 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Hearthstone.exe2.7.0.9166187001d0b4000b4c60ae103C:\Program Files (x86)\Hearthstone\Hearthstone.exe670fc97f-1ff3-11e5-be93-f01faf47090c Error: (07/01/2015 07:51:03 AM) (Source: Application Error) (EventID: 1005) (User: ) Description: Steam Client BootstrapperC000026E0 Error: (07/01/2015 07:51:03 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Steam.exe2.85.51.455591f08antdll.dll6.3.9600.17736550f42c2c00000060006d2d771c01d0b3707e4c14e7F:\Steam\Steam.exeC:\WINDOWS\SYSTEM32\ntdll.dll27b861e8-1fb5-11e5-be91-f01faf47090c Error: (07/01/2015 01:28:54 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Hearthstone.exe2.7.0.91667c01d0b38c5010ebbe102C:\Program Files (x86)\Hearthstone\Hearthstone.exe9fa90236-1f7f-11e5-be91-f01faf47090c Error: (06/29/2015 07:45:18 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Broforce_beta.exe5.0.1.716017a801d0b29347dd4169111F:\Steam\steamapps\common\Broforce\Broforce_beta.exe993a613e-1e86-11e5-be90-f01faf47090c Error: (06/29/2015 07:44:40 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Broforce_beta.exe5.0.1.7160fec01d0b29321948f53113F:\Steam\steamapps\common\Broforce\Broforce_beta.exe82326bd2-1e86-11e5-be90-f01faf47090c Error: (06/29/2015 03:25:48 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: SuperMeatBoy.exe0.0.0.04ee3490bntdll.dll6.3.9600.17736550f42c2c00000050001df6317fc01d0b26f16e6722dF:\Steam\steamapps\common\Super Meat Boy\SuperMeatBoy.exeC:\WINDOWS\SYSTEM32\ntdll.dll5a8b033f-1e62-11e5-be90-f01faf47090c Error: (06/29/2015 01:32:45 AM) (Source: Application Error) (EventID: 1005) (User: ) Description: Steam Client WebHelperC000026E0 Error: (06/29/2015 01:32:45 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: steamwebhelper.exe2.84.18.2255848d6alibcef.dll3.2272.30.055507fe0c000000600b6f0c016f801d0b1e129f37a48F:\Steam\bin\steamwebhelper.exeF:\Steam\bin\libcef.dllfa1ce7e8-1ded-11e5-be90-f01faf47090c Error: (06/29/2015 01:29:45 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: SteamService.exe2.84.18.2255848d3bWpc.dll_unloaded6.3.9600.1741554503e7cc00001a5000775a0ae401d0b1adb0046737C:\Program Files (x86)\Common Files\Steam\SteamService.exeWpc.dll8e83c347-1ded-11e5-be90-f01faf47090c CodeIntegrity Errors: =================================== Date: 2015-06-09 20:31:08.633 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-06-09 20:31:08.555 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-06-09 20:31:08.477 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-06-09 20:31:08.290 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-06-09 20:31:08.212 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-06-09 20:31:08.072 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-06-09 20:31:07.978 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-06-06 13:55:40.106 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-06-06 13:55:40.020 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-06-06 13:55:39.834 Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i7-4700MQ CPU @ 2.40GHz Percentage of memory in use: 16% Total physical RAM: 16265.02 MB Available physical RAM: 13504.75 MB Total Pagefile: 18697.02 MB Available Pagefile: 15251.79 MB Total Virtual: 131072 MB Available Virtual: 131071.79 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:688.57 GB) (Free:480.38 GB) NTFS Drive e: (ESP) (Fixed) (Total:0.48 GB) (Free:0.43 GB) FAT32 Drive f: (TOSHIBA EXT) (Fixed) (Total:931.51 GB) (Free:118.87 GB) NTFS Drive x: (WINRETOOLS) (Fixed) (Total:0.48 GB) (Free:0.21 GB) NTFS Drive y: (PBR Image) (Fixed) (Total:8.15 GB) (Free:0.73 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 698.6 GB) (Disk ID: 24CB93F0) Partition: GPT Partition Type. ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 739B6844) Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS) ==================== End of log ============================