Additional scan result of Farbar Recovery Scan Tool (x64) Version:20-07-2015 Ran by Mohamed Shahrir at 2015-07-24 01:56:00 Running from C:\Users\Mohamed Shahrir\Desktop\scan logs - 2 Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-2809493940-1832043367-3520061379-500 - Administrator - Disabled) Guest (S-1-5-21-2809493940-1832043367-3520061379-501 - Limited - Enabled) => C:\Users\Guest Mohamed Shahrir (S-1-5-21-2809493940-1832043367-3520061379-1001 - Administrator - Enabled) => C:\Users\Mohamed Shahrir no one (S-1-5-21-2809493940-1832043367-3520061379-1004 - Administrator - Enabled) => C:\Users\no one ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) µTorrent (HKU\S-1-5-21-2809493940-1832043367-3520061379-1001\...\uTorrent) (Version: 3.4.2.34944 - BitTorrent Inc.) 7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - ) Acer Backup Manager (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.100 - NTI Corporation) Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 6.00.3010 - Acer Incorporated) Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3507 - Acer Incorporated) Acer Instant Update Service (HKLM\...\{682EC6E8-A300-45FD-8F09-0F3A6EA334D6}) (Version: 1.00.3004 - Acer Incorporated) Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3506 - Acer Incorporated) Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 20.11.1107.1418 - Acer Incorporated) Acer USB Charge Manager (HKLM-x32\...\{F53A49E6-9FB1-4A5A-B1D9-82BA116196B7}) (Version: 1.00.3002 - Acer Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.6.0.19120 - Adobe Systems Incorporated) Adobe Anchor Service x64 CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe CMaps x64 CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe CSI CS4 x64 (Version: 1 - Adobe Systems Incorporated) Hidden Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.3 - Adobe Systems Incorporated) Adobe Drive CS4 x64 (Version: 1 - Adobe Systems Incorporated) Hidden Adobe Flash Player 11 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 11.3.300.268 - Adobe Systems Incorporated) Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.70 - Adobe Systems Incorporated) Adobe Fonts All x64 (Version: 2.0 - Adobe Systems Incorporated) Hidden Adobe Linguistics CS4 x64 (Version: 4.0.0 - Adobe Systems Incorporated) Hidden Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.1 - Adobe Systems Incorporated) Adobe PDF Library Files x64 CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden Adobe Photoshop CS4 (64 Bit) (Version: 11.0 - Adobe Systems Incorporated) Hidden Adobe Photoshop CS4 (HKLM-x32\...\Adobe_faf656ef605427ee2f42989c3ad31b8) (Version: 11.0 - Adobe Systems Incorporated) Adobe Reader X (10.1.9) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.9 - Adobe Systems Incorporated) Adobe Shockwave Player 11.6 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.6.7.637 - Adobe Systems, Inc.) Adobe Type Support x64 CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden Adobe WinSoft Linguistics Plugin x64 (Version: 1.1 - Adobe Systems Incorporated) Hidden Android SDK Tools (HKLM-x32\...\Android SDK Tools) (Version: 1.16 - Google Inc.) Apple Application Support (HKLM-x32\...\{F5266D28-E0B2-4130-BFC5-EE155AD514DC}) (Version: 2.3 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Atheros Driver Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Atheros) Avast Free Antivirus (HKLM-x32\...\avast) (Version: 10.2.2218 - AVAST Software) Backup Manager V3 (x32 Version: 3.0.0.100 - NTI Corporation) Hidden calibre 64bit (HKLM\...\{03CC8BD2-B994-4DBC-B10C-FDB2F6DEAAA0}) (Version: 1.35.0 - Kovid Goyal) Canon MG2200 series On-screen Manual (HKLM-x32\...\Canon MG2200 series On-screen Manual) (Version: 7.5.0 - Canon Inc.) CDisplayEx 1.10.29 (HKLM\...\CDisplayEx_is1) (Version: - Progdigy Software S.A.R.L.) clear.fi Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.00.3004 - Acer Incorporated) clear.fi Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.00.3004 - Acer Incorporated) clear.fi SDK - MVP 2 (x32 Version: 2.0.1505 - CyberLink Corp.) Hidden clear.fi SDK- Movie 2 (x32 Version: 2.0.1502 - CyberLink Corp.) Hidden Connect (x32 Version: 1.0.0.1 - Adobe Systems Incorporated) Hidden CyberLink MediaEspresso (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 6.5.1720_38230 - CyberLink Corp.) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DeadCore (HKLM-x32\...\RGVhZENvcmU=_is1) (Version: 1 - ) Deathtrap (HKLM-x32\...\Deathtrap_is1) (Version: - NeocoreGames) Diablo (HKLM-x32\...\Diablo) (Version: - ) DivX Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.1.9 - DivX, LLC) Dolby Home Theater v4 (HKLM-x32\...\{B26438B4-BF51-49C3-9567-7F14A5E40CB9}) (Version: 7.2.7000.7 - Dolby Laboratories Inc) Dota 2 (HKLM-x32\...\Steam App 570) (Version: - Valve) eBay Worldwide (HKLM-x32\...\{D3E5A972-9A15-427D-AE78-8181A5FD943C}) (Version: 2.2.0409 - OEM) Evernote v. 4.5.2 (HKLM-x32\...\{F77EF646-19EB-11E1-9A9E-984BE15F174E}) (Version: 4.5.2.5866 - Evernote Corp.) GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden GIMP 2.8.8 (HKLM\...\GIMP-2_is1) (Version: 2.8.8 - The GIMP Team) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.134 - Google Inc.) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.28.1 - Google Inc.) Hidden Hand of Fate (HKLM-x32\...\1424100574_is1) (Version: 2.0.0.1 - GOG.com) IBM SPSS Statistics 20 (HKLM-x32\...\{2AF8017B-E503-408F-AACE-8A335452CAD2}) (Version: 20.0.0.0 - IBM Corp) Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated) Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.35342 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.2.1410 - Intel Corporation) Intel(R) OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2618 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.0.0.1032 - Intel Corporation) Intel(R) Turbo Boost Technology Monitor 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel) Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.3.214 - Intel Corporation) Intel® Trusted Connect Service Client (HKLM\...\{09536BA1-E498-4CC3-B834-D884A67D7E34}) (Version: 1.23.605.1 - Intel Corporation) Invisible, Inc. (HKLM-x32\...\1430744353_is1) (Version: 2.0.0.1 - GOG.com) IZArc 4.1.7 (HKLM-x32\...\{97C82B44-D408-4F14-9252-47FC1636D23E}_is1) (Version: 4.1.7 - Ivan Zahariev) Java 7 Update 55 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417055FF}) (Version: 7.0.550 - Oracle) Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle) Java Launcher 3.201 (Standard edition) (HKLM-x32\...\Java Launcher_is1) (Version: - ) Java SE Development Kit 7 Update 55 (HKLM-x32\...\{32A3A4F4-B792-11D6-A78A-00B0D0170550}) (Version: 1.7.0.550 - Oracle) Java SE Development Kit 8 Update 5 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180050}) (Version: 8.0.50 - Oracle Corporation) Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden kuler (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden Launch Manager (HKLM-x32\...\LManager) (Version: 5.1.13 - Acer Inc.) Malwarebytes Anti-Malware version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation) Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.4734.1000 - Microsoft Corporation) Microsoft Reader (HKLM-x32\...\{B6F7DBE7-2FE2-458F-A738-B10832746036}) (Version: - ) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Microsoft Windows Application Compatibility Database (HKLM\...\{deb7008b-681e-4a4a-8aae-cc833e8216ce}.sdb) (Version: - ) Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.) Mobile Partner (HKLM-x32\...\Mobile Partner) (Version: 11.302.09.01.539 - Huawei Technologies Co.,Ltd) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation) newsXpresso (HKLM-x32\...\InstallShield_{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}) (Version: 1.0.0.40 - esobi Inc.) newsXpresso (x32 Version: 1.0.0.40 - esobi Inc.) Hidden Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation) NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.9006 - NTI Corporation) NTI Media Maker 9 (x32 Version: 9.0.2.9006 - NTI Corporation) Hidden NVIDIA GeForce Experience 1.8 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8 - NVIDIA Corporation) NVIDIA Graphics Driver 331.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 331.82 - NVIDIA Corporation) NVIDIA PhysX (HKLM-x32\...\{80407BA7-7763-4395-AB98-5233F1B34E65}) (Version: 9.13.1220 - NVIDIA Corporation) NVIDIA Virtual Audio 1.2.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.12 - NVIDIA Corporation) Onis 2.5 Free Edition (HKLM-x32\...\{A718596D-B09C-4B59-BBDD-BC113012C6C9}) (Version: 2.5.1.6 - Digitalcore) OpenAL (HKLM-x32\...\OpenAL) (Version: - ) Out of the Park Baseball 15 (HKLM-x32\...\Out of the Park Baseball15) (Version: 15 - Out of the Park Developments) Overlord and Overlord - Raising Hell (HKLM-x32\...\GOGPACKOVERLORDPACK_is1) (Version: 2.0.0.9 - GOG.com) paint.net (HKLM\...\{19BD2C33-16A8-4ED1-B9EA-D9E35B21EC42}) (Version: 4.0.5 - dotPDN LLC) PDF Settings CS4 (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden Philips Input Assistant Software (HKLM-x32\...\{819AD80A-7FFF-40CF-8F0A-58682DEDD821}) (Version: 1.0.0.0 - Philips) Photoshop Camera Raw (x32 Version: 5.0 - Adobe Systems Incorporated) Hidden Photoshop Camera Raw_x64 (Version: 5.0 - Adobe Systems Incorporated) Hidden piaip AppLocale (HKLM-x32\...\{394BE3D9-7F57-4638-A8D1-1D88671913B7}) (Version: 1.0.0 - MS) PowerISO (HKLM-x32\...\PowerISO) (Version: 6.3 - Power Software Ltd) Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.210 - Qualcomm Atheros Communications) QuickTime (HKLM-x32\...\{AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}) (Version: 7.73.80.64 - Apple Inc.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.50.1123.2011 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6564 - Realtek Semiconductor Corp.) Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7601.27015 - Realtek Semiconductor Corp.) RGSS-RTP Standard (HKLM-x32\...\RGSS-RTP Standard) (Version: - ) RPG MAKER VX Ace RTP (HKLM-x32\...\RPGVXAce_RTP_is1) (Version: 1.00 - Enterbrain) SHIELD Streaming (Version: 1.6.75 - NVIDIA Corporation) Hidden Skype™ 7.6 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.6.105 - Skype Technologies S.A.) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Suite Shared Configuration CS4 (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.41.5 - Synaptics Incorporated) The Magic Circle (HKLM-x32\...\{79129A13-C52C-4C56-8A53-9728428E747A}_is1) (Version: 4.6.5 - Question) Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT) VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden VLC media player 2.0.1 (HKLM-x32\...\VLC media player) (Version: 2.0.1 - VideoLAN) Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3507 - Acer Incorporated) Windows Live 程式集 (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation) Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp) WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies) WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH) World of Guns: Gun Disassembly (HKLM-x32\...\Steam App 262410) (Version: - Noble Empire Corp.) XCOM - Enemy Within (HKLM-x32\...\XCOM - Enemy Within_is1) (Version: - ) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== Restore Points ========================= 03-07-2015 21:39:25 Windows Update 04-07-2015 20:01:41 Windows Update 05-07-2015 07:57:11 Windows Update 10-07-2015 18:30:59 Windows Update 14-07-2015 21:06:37 Windows Update 15-07-2015 23:11:58 Windows Update 17-07-2015 04:03:34 Windows Update 17-07-2015 10:50:08 Windows Update 18-07-2015 12:05:12 Windows Update 19-07-2015 08:11:08 Windows Update 20-07-2015 03:00:13 Windows Update 21-07-2015 19:18:31 Windows Update 21-07-2015 23:19:27 Windows Update 22-07-2015 23:48:42 JRT Pre-Junkware Removal 23-07-2015 06:26:32 JRT Pre-Junkware Removal 23-07-2015 06:43:19 Windows Update ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 10:34 - 2014-05-26 12:01 - 00002204 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 activate.adobe.com 127.0.0.1 practivate.adobe.com 127.0.0.1 ereg.adobe.com 127.0.0.1 activate.wip3.adobe.com 127.0.0.1 wip3.adobe.com 127.0.0.1 3dns-3.adobe.com 127.0.0.1 3dns-2.adobe.com 127.0.0.1 adobe-dns.adobe.com 127.0.0.1 adobe-dns-2.adobe.com 127.0.0.1 adobe-dns-3.adobe.com 127.0.0.1 ereg.wip3.adobe.com 127.0.0.1 activate-sea.adobe.com 127.0.0.1 wwis-dubc1-vip60.adobe.com 127.0.0.1 activate-sjc0.adobe.com 127.0.0.1 practivate.adobe.com 127.0.0.1 ereg.adobe.com 127.0.0.1 activate.wip3.adobe.com 127.0.0.1 wip3.adobe.com 127.0.0.1 3dns-3.adobe.com 127.0.0.1 3dns-2.adobe.com 127.0.0.1 adobe-dns.adobe.com 127.0.0.1 adobe-dns-2.adobe.com 127.0.0.1 adobe-dns-3.adobe.com 127.0.0.1 ereg.wip3.adobe.com 127.0.0.1 activate-sea.adobe.com 127.0.0.1 wwis-dubc1-vip60.adobe.com 127.0.0.1 activate-sjc0.adobe.com 127.0.0.1 practivate.adobe.com 127.0.0.1 ereg.adobe.com There are 10 more lines. ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {0F9ED8E3-47F4-4BD7-9369-CD9CF4A9B7F1} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-06-12] (Adobe Systems Incorporated) Task: {160AA992-4344-49E7-9D8D-F9896039DAFA} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2809493940-1832043367-3520061379-1003UA => C:\Users\Family\AppData\Local\Google\Update\GoogleUpdate.exe Task: {180B191F-0165-4538-9FB3-694234AEAAF7} - System32\Tasks\{A79BFC83-12DD-4D26-8929-4AC486F22683} => pcalua.exe -a "C:\Users\Mohamed Shahrir\Downloads\Adobe Photoshop CS4 Extended + Crack (2010) NLT-Release (PC)\ADBEPHSPCS4_LS1\Adobe CS4\payloads\AdobeAIR1.0\AdobeAIRInstaller.exe" -d "C:\Program Files (x86)\Common Files\Adobe\Installers\faf656ef605427ee2f42989c3ad31b8" -c -silent Task: {20764929-5FCD-40F4-B9B5-566FB82D3172} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-04] (Google Inc.) Task: {227F0068-664D-4C3A-A7A5-D915187CC17C} - System32\Tasks\{1ED9E1CF-E317-4790-B709-CDC731E92408} => pcalua.exe -a "C:\Users\Mohamed Shahrir\Downloads\New folder\[MCG]Virgin Roster\BLEEDUST.EXE" -d "C:\Users\Mohamed Shahrir\Downloads\New folder\[MCG]Virgin Roster" Task: {282A39CD-DFDF-44DA-A175-44FF5BA73BE7} - System32\Tasks\{EC70AB3A-DE35-4499-A5A7-FC33072FC868} => C:\Program Files (x86)\Borderlands 2\Binaries\Win32\Borderlands2.exe Task: {328D5500-3FF3-4575-AE86-C4896FEF91CC} - System32\Tasks\{D6580C12-AEDD-43BD-A70F-EBF1F2EE6009} => C:\Program Files (x86)\XCOM Enemy Unknown\Binaries\Win32\XComGame.exe Task: {3404C2E6-E537-4DCC-BD9A-7C93ADAB052E} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe Task: {3444FC7E-1A49-4268-A3C9-E1036F93CDCB} - System32\Tasks\{93F5EA9D-C2ED-4959-ABAD-BB8068508835} => pcalua.exe -a F:\Redist\vcredist_x86.exe -d F:\Redist Task: {4CCF52B1-DB5C-4F65-B78E-E3A39826A250} - System32\Tasks\{F75EB4F4-747E-410B-B7C5-6424D3418A80} => pcalua.exe -a F:\Redist\DirectX\dxsetup.exe -d F:\Redist\DirectX Task: {4DA1A087-8022-43CC-B76B-6BF40B449762} - System32\Tasks\{6CB3E51F-3420-47BE-A541-EAEE0D01B913} => C:\Program Files (x86)\Age of Empires III - Complete Collection\age3y.exe Task: {5896C01C-E566-470C-A4AB-F17C81430868} - System32\Tasks\{474E4D8C-FD2B-4E4E-93E6-D2DF051C8D40} => pcalua.exe -a "C:\Users\Mohamed Shahrir\Downloads\New folder\[MCG]Virgin Roster\New folder\BLEEDUST.EXE" -d "C:\Users\Mohamed Shahrir\Downloads\New folder\[MCG]Virgin Roster\New folder" Task: {6E098621-59F5-4FDF-A7D7-B21E85D39104} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2809493940-1832043367-3520061379-1003Core => C:\Users\Family\AppData\Local\Google\Update\GoogleUpdate.exe Task: {87218CB9-4EF5-4498-9C55-F4999A33E717} - System32\Tasks\{D128A3F0-0054-4130-8774-FFF549260097} => pcalua.exe -a "C:\Users\Mohamed Shahrir\Downloads\Camera_Cyberlink_1.5.2108.00_W7x64_A\Webcam_Cyberlink_1.5.2108.00_W7x64\Setup\RunTime\VC2008 SP1 Update\vcredist_x86.exe" -d "C:\Users\Mohamed Shahrir\Downloads\Camera_Cyberlink_1.5.2108.00_W7x64_A\Webcam_Cyberlink_1.5.2108.00_W7x64\Setup\RunTime\VC2008 SP1 Update" Task: {94670FC7-6E80-4BDF-9359-B9AC770C6CE8} - System32\Tasks\{537006B3-F9E6-4028-A605-E04BA8731B90} => C:\Program Files (x86)\XCOM Enemy Unknown\Binaries\Win32\XComGame.exe Task: {96B1CF1D-0D2F-41CD-95B2-63CC2FAFACFA} - System32\Tasks\{65F752FE-C3BA-45E0-8D4A-D491B7255CD8} => pcalua.exe -a "C:\Users\Mohamed Shahrir\AppData\Local\Temp\Temp1_huawei mobile connect.zip\Setup.exe" Task: {9ACAA3DA-BCBE-4627-8BA7-F898208098F3} - System32\Tasks\{EAA9E3B4-3708-4252-8C5E-C7F7F4B09CBE} => pcalua.exe -a "C:\Users\Mohamed Shahrir\Downloads\Arena106Setup\Arena106.exe" -d "C:\Users\Mohamed Shahrir\Downloads\Arena106Setup" Task: {9B0DC791-AEC1-4375-BC6D-7097FD13AAAD} - System32\Tasks\{5345C3A9-3A53-4317-8D2F-DCF2B9E48ED7} => C:\Program Files (x86)\Microsoft Game Studios\Fable - The Lost Chapters\Fable.exe Task: {A314F324-8419-47D8-ACB2-9DAE436887AB} - System32\Tasks\UALU notificatin => C:\Program Files\Acer\Acer Updater\UALU.exe [2012-02-07] (Acer Incorporated) Task: {A6F238C9-9140-413F-83A8-B3ED1257321A} - System32\Tasks\MODLED => C:\Windows\ModLEDKey.exe [2007-05-16] (Chicony) Task: {B6B5EADA-9E7E-423E-A3BE-B1F53BCA18B3} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-07-02] (Avast Software s.r.o.) Task: {B75FA0D4-C6F8-4B59-AD00-5E9DE7A8D6BF} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [2011-05-21] (CyberLink) Task: {BDD4D0BD-1ADE-46CD-B0A0-6C7382369C5E} - System32\Tasks\{A2425BF4-1A26-4B0D-9F8E-FDCFF49ECE4E} => C:\Program Files (x86)\XCOM Enemy Unknown\Binaries\Win32\XComGame.exe Task: {D5CFC8AB-7A7A-4565-B056-4557E57866BE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-04] (Google Inc.) Task: {F73AB25A-ED13-4E8B-800F-76CDFC1180A8} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2809493940-1832043367-3520061379-1003Core.job => C:\Users\Family\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2809493940-1832043367-3520061379-1003UA.job => C:\Users\Family\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe ==================== Loaded Modules (Whitelisted) ============== 2013-12-15 17:32 - 2013-11-11 23:02 - 00102176 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2012-05-22 16:23 - 2012-02-07 18:03 - 00128280 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe 2010-01-09 20:17 - 2010-01-09 20:17 - 04254560 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF 2010-01-21 01:40 - 2010-01-21 01:40 - 08794464 _____ () C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll 2012-04-11 02:45 - 2012-01-05 17:24 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2011-07-29 07:08 - 2011-07-29 07:08 - 01259376 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe 2012-04-07 11:29 - 2012-04-07 11:29 - 00040552 _____ () C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe 2012-04-07 11:29 - 2012-04-07 11:29 - 00022120 _____ () C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe 2015-07-02 18:33 - 2015-07-02 18:33 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll 2015-07-02 18:33 - 2015-07-02 18:33 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll 2015-07-23 03:43 - 2015-07-23 03:43 - 02957312 _____ () C:\Program Files\AVAST Software\Avast\defs\15072201\algo.dll 2015-07-23 22:24 - 2015-07-23 22:24 - 02957312 _____ () C:\Program Files\AVAST Software\Avast\defs\15072300\algo.dll 2012-01-06 05:22 - 2012-01-06 05:22 - 00465344 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll 2012-01-06 05:22 - 2012-01-06 05:22 - 01081368 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll 2012-01-06 05:22 - 2012-01-06 05:22 - 00125464 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll 2014-10-16 11:52 - 2014-10-16 11:52 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\a32af7d4063795ba02dd17d56f4502d8\IsdiInterop.ni.dll 2012-04-11 02:08 - 2011-11-30 11:00 - 00059392 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll 2012-05-22 16:22 - 2012-02-07 17:39 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll 2011-07-29 07:09 - 2011-07-29 07:09 - 00096112 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll 2015-07-02 18:33 - 2015-07-02 18:33 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2014-05-10 08:17 - 2007-05-15 18:30 - 00053248 _____ () C:\Windows\IASHIDLB.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) ==================== Safe Mode (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-2809493940-1832043367-3520061379-1001\Control Panel\Desktop\\Wallpaper -> DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) MSCONFIG\Services: Wecsvc => 3 MSCONFIG\Services: WPCSvc => 3 ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{EE8648DF-8974-4AFF-BB6B-41F438508C42}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe FirewallRules: [{D4F952F9-980F-4EF2-8E13-6BEA728DA220}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe FirewallRules: [{891453C4-F4E7-427F-A2F1-8C9D552D85E0}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{384D0462-5F7F-41A1-9CDF-511E29F722B3}] => (Allow) LPort=2869 FirewallRules: [{8AEC8D1C-7EB2-48F5-8D07-C40A3F464205}] => (Allow) LPort=1900 FirewallRules: [{3FC758EE-A676-432B-B9B2-F713FBBC3758}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe FirewallRules: [{45C8E7E8-70FC-4AF0-9050-9AEEF5FDE5CB}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe FirewallRules: [{CF465DBE-CC11-455E-835F-BC6CAC3D97E8}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe FirewallRules: [{DF056CF0-E4C1-4C5C-B5EA-40EC8F146C92}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe FirewallRules: [{3E01BCFE-EFAF-435B-A06C-8B1C06C612F8}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\DMCDaemon.exe FirewallRules: [{094400FB-652B-4B93-B7C5-E593D7795E31}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\DMCDaemon.exe FirewallRules: [{D4FC6EEB-22A6-4BC0-96C9-9528AB5A009C}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\WindowsUpnpMV.exe FirewallRules: [{B1A80976-0FE9-4587-B86E-4C72F7CCB490}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\WindowsUpnpMV.exe FirewallRules: [{95A4BBE7-4463-4EFE-8DF1-1733F2D0CBF5}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\DMCDaemon.exe FirewallRules: [{6ACD1140-864A-47F0-8910-D200E42F0CC3}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\DMCDaemon.exe FirewallRules: [{44A25D9A-5C2F-4FA3-8CB7-C1C76C13BA9B}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\WindowsUpnp.exe FirewallRules: [{BC5552EB-04CB-4E17-8B0B-CBE3C63F2720}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\WindowsUpnp.exe FirewallRules: [{4D65A338-AEF6-4F6A-9773-8B66967A6AC8}] => (Allow) C:\Program Files (x86)\Acer\clear.fi SDK20\Movie\PlayMovie.exe FirewallRules: [{A592093A-7396-45C7-B872-28847AF04DAF}] => (Allow) C:\Program Files (x86)\Acer\clear.fi SDK20\MVP\VideoPlayer.exe FirewallRules: [{B4A0806F-29D1-4FAF-A4C8-C59FC2CC8F77}] => (Allow) C:\Program Files (x86)\Acer\clear.fi SDK20\MVP\MusicPlayer.exe FirewallRules: [{2ACBEB6F-C005-4D12-A641-0ABC5EB72A2D}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{1C24D9FD-D651-48B2-B86D-561BAE71AFF9}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{ABA9C165-0812-4108-9EBD-A4DF16646E0C}] => (Allow) C:\Program Files (x86)\YourFileDownloader\Downloader.exe FirewallRules: [{B24C2182-1081-4BD3-B587-4DD427B31B51}] => (Allow) C:\Program Files (x86)\YourFileDownloader\Downloader.exe FirewallRules: [{AF36F16C-E2E7-4D06-B7CC-D04BF79F0DD8}] => (Allow) C:\Program Files (x86)\YourFileDownloader\YourFile.exe FirewallRules: [{4BAD7F12-82F2-4743-8079-2599A750725C}] => (Allow) C:\Program Files (x86)\YourFileDownloader\YourFile.exe FirewallRules: [{C14E7F84-8644-48CA-9BB2-003FED24C8E7}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe FirewallRules: [{D4689EC8-80FE-4AC2-BE38-01BFCD313C75}] => (Allow) C:\Program Files (x86)\IBM\SPSS\Statistics\20\stats.com FirewallRules: [{7DF8B577-C46D-48AE-A2DB-C4DD31FEC919}] => (Allow) C:\Program Files (x86)\IBM\SPSS\Statistics\20\WinWrapIDE.exe FirewallRules: [{427F9ACE-A26D-4F03-AB15-C09CE9CB77F3}] => (Allow) C:\Program Files (x86)\IBM\SPSS\Statistics\20\stats.exe FirewallRules: [{1B610C7C-7244-444A-AB18-4EEC270A3C01}] => (Allow) C:\Program Files (x86)\IBM\SPSS\Statistics\20\stats.com FirewallRules: [{BCBDCBEC-644F-4EF1-B06E-26825CF06FD1}] => (Allow) C:\Program Files (x86)\IBM\SPSS\Statistics\20\WinWrapIDE.exe FirewallRules: [{444BB274-0CE4-41BD-AB98-3495A09C52E3}] => (Allow) C:\Program Files (x86)\IBM\SPSS\Statistics\20\stats.exe FirewallRules: [{54E72373-F184-4BFE-A912-53F7F63CD608}] => (Allow) C:\Users\Mohamed Shahrir\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{37578717-DFDB-44BF-B836-ABFFE4D50FEA}] => (Allow) C:\Users\Mohamed Shahrir\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{C357469A-C068-460D-91B8-D2D11127255F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{52CFB8CE-02A3-4922-9C50-D6721664B955}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{C5190E0E-38B4-40F0-B6C7-A8756DE4C1F1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{80CFC227-50FF-4220-A337-D005A45D645E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{BF1733CE-FF26-4250-B295-626E1AD51B1F}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{2B3D6512-0540-4EDE-8E04-F7B16848C66C}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{E6A5BB44-A3A1-49E2-9605-09F6DD497594}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{50E4CC46-D9B7-48ED-BD93-D03322B62F9A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{3660BC68-355C-41E1-BB97-0311B4853B8F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{84818263-F5D3-4A89-9C70-AF168F2D18AD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{109FC752-0200-4939-9F15-3AE264A9FEE6}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{634DD0C7-DD29-4D1F-BC6B-0468DEFDFDB8}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{0C7C76CE-491D-4BBD-8E25-4BF71739DAE2}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{72BFDE83-3BF8-4ECA-9977-C3FD1CBB9BD8}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{D9A675BB-4A6B-4099-AC19-692DDC0F89CE}] => (Allow) C:\Program Files (x86)\iMesh Applications\iMesh\iMesh.exe FirewallRules: [{F2690934-6DCA-419D-B015-7B93D90A1C1E}] => (Allow) C:\Program Files (x86)\iMesh Applications\iMesh\iMesh.exe FirewallRules: [{1957544F-B3FA-4D9B-A361-7ED3E9F76A94}] => (Allow) C:\Program Files (x86)\iMesh Applications\iMesh\iMesh.exe FirewallRules: [{18F19C3C-E942-4CCF-BD6F-7ED03A213F23}] => (Allow) C:\Program Files (x86)\iMesh Applications\iMesh\iMesh.exe FirewallRules: [{83068B05-E7ED-4D9C-B254-AA3F5D81AEBB}] => (Allow) C:\Program Files (x86)\iMesh Applications\iMesh\iMesh.exe FirewallRules: [{6D6F226B-B4F1-4DFE-8F6C-89248141FCCF}] => (Allow) C:\Users\Mohamed Shahrir\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{3600B8BE-4CEE-45E6-B5BA-871C42212522}] => (Allow) C:\Users\Mohamed Shahrir\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{D20C1777-5800-4A72-9E89-39982A2BE0B3}] => (Allow) LPort=5353 FirewallRules: [{67BBCA1C-B683-4646-8712-12E2313CDAAF}] => (Allow) C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe FirewallRules: [{C31FE0FB-06C8-46C5-B896-0E5F17CD3A8E}] => (Allow) C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe FirewallRules: [{DE7A029A-6746-4875-8A33-4A5CC22E0E7C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\WOG\disasm.exe FirewallRules: [{5D26BCD0-BCB2-44E2-9400-81B415ED3C7B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\WOG\disasm.exe FirewallRules: [TCP Query User{4F0EEE7B-6353-4E2B-AC8F-CBF801BAA5B6}C:\program files (x86)\blood bowl chaos edition\bb_chaos.exe] => (Allow) C:\program files (x86)\blood bowl chaos edition\bb_chaos.exe FirewallRules: [UDP Query User{C8CF3172-2E60-49B9-85CF-48750BC24F1A}C:\program files (x86)\blood bowl chaos edition\bb_chaos.exe] => (Allow) C:\program files (x86)\blood bowl chaos edition\bb_chaos.exe FirewallRules: [{9669E17E-FC13-4CEA-97BD-ABC50F67B1DD}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{5FCC75CB-0181-4C42-AC8C-D76AE9A34582}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{075595FD-790A-44BC-81D4-6E06BC338FDA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe FirewallRules: [{A739567B-6E19-49ED-9490-123ECC46B576}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe FirewallRules: [TCP Query User{03F91976-11F1-4EFA-B868-A02763DF8121}C:\program files (x86)\ibm\spss\statistics\20\stats.exe] => (Block) C:\program files (x86)\ibm\spss\statistics\20\stats.exe FirewallRules: [UDP Query User{970E5739-45C2-46F4-992E-E4D3CC2134D6}C:\program files (x86)\ibm\spss\statistics\20\stats.exe] => (Block) C:\program files (x86)\ibm\spss\statistics\20\stats.exe FirewallRules: [TCP Query User{B752BBA0-FBE9-4C3C-B6F8-F943D1CC8956}C:\program files (x86)\ibm\spss\statistics\20\jre\bin\javaw.exe] => (Block) C:\program files (x86)\ibm\spss\statistics\20\jre\bin\javaw.exe FirewallRules: [UDP Query User{81222C8A-F16B-4C0E-B5F0-92F0F7AE7A37}C:\program files (x86)\ibm\spss\statistics\20\jre\bin\javaw.exe] => (Block) C:\program files (x86)\ibm\spss\statistics\20\jre\bin\javaw.exe FirewallRules: [{00C634F2-F9D7-4FF6-94C7-B2F8EA7A842E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Mighty Quest For Epic Loot\Launcher\PublicLauncher.exe FirewallRules: [{248577FD-11BE-4C2E-9E35-D285876614E2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Mighty Quest For Epic Loot\Launcher\PublicLauncher.exe FirewallRules: [{4F489927-ACE2-4A5D-A344-5DBB2F6D4420}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Mighty Quest For Epic Loot\Launcher\MQELDiagnostics.exe FirewallRules: [{D12B75CA-D920-4676-A118-87075E05FDA5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Mighty Quest For Epic Loot\Launcher\MQELDiagnostics.exe FirewallRules: [TCP Query User{94456E20-2A1D-4BB3-8C10-AA2BDE58B8F6}C:\program files (x86)\ibm\spss\statistics\20\jre\bin\javaw.exe] => (Allow) C:\program files (x86)\ibm\spss\statistics\20\jre\bin\javaw.exe FirewallRules: [UDP Query User{8838BD63-3435-4597-9EB1-32B9BCC3B6C9}C:\program files (x86)\ibm\spss\statistics\20\jre\bin\javaw.exe] => (Allow) C:\program files (x86)\ibm\spss\statistics\20\jre\bin\javaw.exe FirewallRules: [{48AD7833-841F-4CC9-B4FE-D372367F9D25}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe FirewallRules: [{7A3912EE-C095-485A-B662-A7EDA6F2641B}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe FirewallRules: [{3097801E-E0AE-4D9D-A9DF-7ED446D33AFC}] => (Allow) C:\Program Files (x86)\Deathtrap\DeathTrap.exe FirewallRules: [{8C937011-5B67-4D96-8998-C0F023C9869F}] => (Allow) C:\Program Files (x86)\Deathtrap\DeathTrap.exe FirewallRules: [{197DBFE7-8676-4F37-AF0C-199E91621BDC}] => (Allow) C:\Program Files (x86)\Deathtrap\DeathTrap.exe FirewallRules: [{AF45DF75-B5B3-43F0-BA5F-F104D7C4564B}] => (Allow) C:\Program Files (x86)\Deathtrap\DeathTrap.exe FirewallRules: [TCP Query User{9DBB9A57-8789-46AC-B0CF-EBA1BB23E09B}C:\program files (x86)\2k games\xcom - enemy within\xew\binaries\win32\xcomew.exe] => (Block) C:\program files (x86)\2k games\xcom - enemy within\xew\binaries\win32\xcomew.exe FirewallRules: [UDP Query User{0A7AA4F9-99FD-481B-B3E4-C784EAC270C9}C:\program files (x86)\2k games\xcom - enemy within\xew\binaries\win32\xcomew.exe] => (Block) C:\program files (x86)\2k games\xcom - enemy within\xew\binaries\win32\xcomew.exe FirewallRules: [{C2D30DCB-7E7A-4B56-BF0B-912E751CB333}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\game\bin\win32\dota2.exe FirewallRules: [{CA2E502D-259C-483B-8CAF-385D377E1544}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\game\bin\win32\dota2.exe FirewallRules: [{D10EFB2C-84A7-48E4-894F-051E7C3099BB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\game\bin\win64\dota2cfg.exe FirewallRules: [{EC743620-16BD-41F4-BB55-82F83041ECB5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\game\bin\win64\dota2cfg.exe FirewallRules: [{8538A462-38F6-4E44-A395-DCD0DE57E9DA}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe FirewallRules: [{F347930E-357C-48DB-B61F-0F54ECA4E150}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe FirewallRules: [{8255A620-8D34-4898-BAD8-E68220965E3F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{1167025F-6499-444A-B13F-E8C625BFAF46}] => (Allow) C:\Program Files\Steam\Steam.exe FirewallRules: [{F0887417-0AF0-4F89-8AA3-DD2C9322A910}] => (Allow) C:\Program Files\Steam\Steam.exe FirewallRules: [{5DBD47F9-838D-4797-9FF8-08D23177B365}] => (Allow) C:\Program Files\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{FC5FFFBD-B90D-4A84-B4FE-4C6E366A89D9}] => (Allow) C:\Program Files\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{A045DCD7-0F48-4A3C-BD4C-330B2B25C4E1}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [TCP Query User{97AA41A1-3FEB-462D-8511-7D0674958657}C:\program files (x86)\contagion\contagion.exe] => (Block) C:\program files (x86)\contagion\contagion.exe FirewallRules: [UDP Query User{BF51F6BD-B934-48F1-8133-CC002A03B3B1}C:\program files (x86)\contagion\contagion.exe] => (Block) C:\program files (x86)\contagion\contagion.exe ==================== Faulty Device Manager Devices ============= Name: Microsoft Virtual WiFi Miniport Adapter Description: Microsoft Virtual WiFi Miniport Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: vwifimp Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (07/23/2015 10:23:30 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/23/2015 06:44:19 AM) (Source: MsiInstaller) (EventID: 1024) (User: NT AUTHORITY) Description: Product: Microsoft Office Professional Plus 2010 - Update 'Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition' could not be installed. Error code 1603. Windows Installer can create logs to help troubleshoot issues with installing software packages. Use the following link for instructions on turning on logging support: http://go.microsoft.com/fwlink/?LinkId=23127 Error: (07/23/2015 06:44:11 AM) (Source: MsiInstaller) (EventID: 10005) (User: NT AUTHORITY) Description: Product: Microsoft Office Professional Plus 2010 -- Error 25531. Failed to open XML file C:\Program Files (x86)\Microsoft Office\Office14\BCSEvents.man, system error: -2147024786 Error: (07/23/2015 06:14:44 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/22/2015 11:43:37 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/22/2015 11:23:45 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/22/2015 09:18:37 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: chrome.exe, version: 43.0.2357.134, time stamp: 0x55a4072f Faulting module name: chrome.dll, version: 43.0.2357.134, time stamp: 0x55a4037a Exception code: 0xc0000005 Fault offset: 0x0089a520 Faulting process id: 0x1244 Faulting application start time: 0xchrome.exe0 Faulting application path: chrome.exe1 Faulting module path: chrome.exe2 Report Id: chrome.exe3 Error: (07/22/2015 09:15:10 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/22/2015 07:40:02 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/22/2015 07:29:27 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: chrome.exe, version: 43.0.2357.134, time stamp: 0x55a4072f Faulting module name: chrome.dll, version: 43.0.2357.134, time stamp: 0x55a4037a Exception code: 0xc0000005 Fault offset: 0x0089a520 Faulting process id: 0x1240 Faulting application start time: 0xchrome.exe0 Faulting application path: chrome.exe1 Faulting module path: chrome.exe2 Report Id: chrome.exe3 System errors: ============= Error: (07/23/2015 06:44:41 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY) Description: WLAN Extensibility Module has stopped unexpectedly. Module Path: C:\Windows\system32\athihvs.dll Error: (07/23/2015 06:44:41 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY) Description: WLAN Extensibility Module has stopped unexpectedly. Module Path: C:\Windows\system32\athihvs.dll Error: (07/23/2015 06:44:20 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY) Description: Installation Failure: Windows failed to install the following update with error 0x80070643: Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition. Error: (07/23/2015 06:43:17 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY) Description: WLAN Extensibility Module has stopped unexpectedly. Module Path: C:\Windows\system32\athihvs.dll Error: (07/23/2015 06:27:45 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The Intel(R) Management and Security Application User Notification Service service terminated unexpectedly. It has done this 1 time(s). Error: (07/23/2015 06:27:45 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The Intel(R) Rapid Storage Technology service terminated unexpectedly. It has done this 1 time(s). Error: (07/23/2015 06:27:45 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: The Windows Media Player Network Sharing Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service. Error: (07/23/2015 06:27:42 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The ZAtheros Wlan Agent service terminated unexpectedly. It has done this 1 time(s). Error: (07/23/2015 06:27:42 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The NVIDIA Streamer Service service terminated unexpectedly. It has done this 1 time(s). Error: (07/23/2015 06:27:42 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The NVIDIA Network Service service terminated unexpectedly. It has done this 1 time(s). Microsoft Office: ========================= Error: (07/23/2015 10:23:30 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/23/2015 06:44:19 AM) (Source: MsiInstaller) (EventID: 1024) (User: NT AUTHORITY) Description: Microsoft Office Professional Plus 2010Update for Microsoft Office 2010 (KB2553347) 32-Bit Edition1603(NULL)(NULL)(NULL) Error: (07/23/2015 06:44:11 AM) (Source: MsiInstaller) (EventID: 10005) (User: NT AUTHORITY) Description: Product: Microsoft Office Professional Plus 2010 -- Error 25531. Failed to open XML file C:\Program Files (x86)\Microsoft Office\Office14\BCSEvents.man, system error: -2147024786(NULL)(NULL)(NULL)(NULL)(NULL) Error: (07/23/2015 06:14:44 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/22/2015 11:43:37 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/22/2015 11:23:45 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/22/2015 09:18:37 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: chrome.exe43.0.2357.13455a4072fchrome.dll43.0.2357.13455a4037ac00000050089a520124401d0c4807dde5e4fC:\Program Files (x86)\Google\Chrome\Application\chrome.exeC:\Program Files (x86)\Google\Chrome\Application\43.0.2357.134\chrome.dll28c8f917-3074-11e5-94a9-047d7b942d4b Error: (07/22/2015 09:15:10 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/22/2015 07:40:02 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/22/2015 07:29:27 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: chrome.exe43.0.2357.13455a4072fchrome.dll43.0.2357.13455a4037ac00000050089a520124001d0c4713da5fa99C:\Program Files (x86)\Google\Chrome\Application\chrome.exeC:\Program Files (x86)\Google\Chrome\Application\43.0.2357.134\chrome.dlle8d357ac-3064-11e5-920d-047d7b942d4b ==================== Memory info =========================== Processor: Intel(R) Core(TM) i7-3612QM CPU @ 2.10GHz Percentage of memory in use: 31% Total physical RAM: 8030.36 MB Available physical RAM: 5534.07 MB Total Virtual: 16058.92 MB Available Virtual: 13441.1 MB ==================== Drives ================================ Drive c: (Acer) (Fixed) (Total:337.5 GB) (Free:152.13 GB) NTFS Drive d: (DATA) (Fixed) (Total:348.04 GB) (Free:337.15 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: 6124137E) Partition 1: (Not Active) - (Size=13 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=337.5 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=348 GB) - (Type=07 NTFS) ==================== End of log ============================