Additional scan result of Farbar Recovery Scan Tool (x64) Version:12-09-2015 Ran by erica (2015-09-12 13:27:51) Running from C:\Users\erica\Desktop Windows 7 Home Premium Service Pack 1 (X64) (2011-06-29 01:17:04) Boot Mode: Safe Mode (with Networking) ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-1343300749-3102139153-451857411-500 - Administrator - Disabled) erica (S-1-5-21-1343300749-3102139153-451857411-1001 - Administrator - Enabled) => C:\Users\erica Guest (S-1-5-21-1343300749-3102139153-451857411-501 - Limited - Enabled) => C:\Users\Guest HomeGroupUser$ (S-1-5-21-1343300749-3102139153-451857411-1002 - Limited - Enabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Norton Security Suite (Enabled - Up to date) {53C7D717-52E2-B95E-FA61-6F32ECC805DB} AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Norton Security Suite (Enabled - Up to date) {E8A636F3-74D8-B6D0-C0D1-5440974F4F66} FW: Norton Security Suite (Enabled) {6BFC5632-188D-B806-D13E-C607121B42A0} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.5.1.17730 - Adobe Systems Inc.) Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.44 - Adobe Systems Incorporated) Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.188 - Adobe Systems Incorporated) Adobe Photoshop Elements 2.0 (HKLM-x32\...\Adobe Photoshop Elements 2.0) (Version: 2.0 - Adobe Systems, Inc.) Adobe Reader X (10.1.13) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.13 - Adobe Systems Incorporated) Amazon Browser Bar (HKLM\...\Amazon Browser Bar) (Version: 3.0.2012.0802 - Amazon) <==== ATTENTION Amazon Browser Settings (HKLM-x32\...\Amazon Browser Settings) (Version: 3.0 - Amazon) <==== ATTENTION Amazon Links (HKLM-x32\...\{3135D885-9D9A-4B4D-8D45-9DB05DA115CA}) (Version: 2.02 - TOSHIBA Corporation) ANT Drivers Installer x64 (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden Apple Application Support (HKLM-x32\...\{21FC2093-6E43-460B-B9B0-5F5AA35BBB0F}) (Version: 3.0 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{FE86CB0C-FCB3-4358-B4B0-B0A41E33B3DD}) (Version: 7.1.0.32 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.36 - Atheros Communications Inc.) AVG SafeGuard toolbar (HKLM-x32\...\AVG SafeGuard toolbar) (Version: 18.8.0.179 - AVG Technologies) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Citrix Receiver (HKLM-x32\...\CitrixOnlinePluginPackWeb) (Version: 14.1.0.0 - Citrix Systems, Inc.) Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.51.1.0 - Conexant) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Elevated Installer (x32 Version: 4.0.16.0 - Garmin Ltd or its subsidiaries) Hidden Garmin Express (HKLM-x32\...\{01b90f4a-c495-47c4-a33b-1391f41398ce}) (Version: 4.0.16.0 - Garmin Ltd or its subsidiaries) Garmin Express (x32 Version: 4.0.16.0 - Garmin Ltd or its subsidiaries) Hidden Garmin Express Tray (x32 Version: 4.0.16.0 - Garmin Ltd or its subsidiaries) Hidden Google Chrome (HKLM-x32\...\Google Chrome) (Version: 45.0.2454.85 - Google Inc.) Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google) Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.28.13 - Google Inc.) Hidden Iminent (x32 Version: 6.20.11.0 - Iminent) Hidden <==== ATTENTION Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2353 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.2.1004 - Intel Corporation) Itibiti RTC (x32 Version: 0.0.1 - Itibiti Inc) Hidden Java(TM) 6 Update 20 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216020FF}) (Version: 6.0.200 - Sun Microsystems, Inc.) Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden LG United Mobile Drivers (HKLM-x32\...\{F193D8D7-3D5E-4DB5-A74C-F8CD5378EE7B}) (Version: 3.12.3.0 - LG Electronics) Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Norton Security Suite (HKLM-x32\...\N360) (Version: 22.5.2.15 - Symantec Corporation) Online Plug-in (x32 Version: 14.1.0.0 - Citrix Systems, Inc.) Hidden PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation) RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden RealPlayer (HKLM-x32\...\RealPlayer 15.0) (Version: - RealNetworks) Realtek USB 2.0 Reader Driver (HKLM-x32\...\{62BBB2F0-E220-4821-A564-730807D2C34D}) (Version: 1.0.0.12 - Realtek Semiconductor Corp.) Realtek WLAN Driver (HKLM-x32\...\{9D3D8C60-A55F-4fed-B2B9-173001290E16}) (Version: 2.00.0013 - REALTEK Semiconductor Corp.) RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group) SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.14.0 - SAMSUNG Electronics Co., Ltd.) SectionEdit (HKLM-x32\...\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{149e410d}) (Version: - Software Publisher) <==== ATTENTION Self-service Plug-in (x32 Version: 4.1.0.41738 - Citrix Systems, Inc.) Hidden Setup (HKLM-x32\...\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC}) (Version: - ) shopperz04082015 2.0.0.475 (HKLM\...\{0a0e29f6-0ab0-44e1-a98e-bd050ee692ec}_is1) (Version: 2.0.0.475 - shopperz) <==== ATTENTION Skype Launcher (HKLM-x32\...\{DA84ECBF-4B79-47F2-B34C-95C38484C058}) (Version: 2.01 - TOSHIBA Corporation) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.11.1 - Synaptics Incorporated) SystemUphold (HKLM-x32\...\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{a85bca4b}) (Version: - Software Publisher) <==== ATTENTION Toshiba App Place (HKLM-x32\...\{ED3CBA78-488F-4E8C-B33F-8E3BF4DDB4D2}) (Version: 1.0.6.3 - Toshiba) TOSHIBA Application Installer (HKLM-x32\...\{970472D0-F5F9-4158-A6E3-1AE49EFEF2D3}) (Version: 9.0.1.1 - TOSHIBA) TOSHIBA Assist (HKLM-x32\...\{C2A276E3-154E-44DC-AAF1-FFDD7FD30E35}) (Version: 4.02.02 - TOSHIBA CORPORATION) Toshiba Book Place (HKLM-x32\...\{92C7DC44-DAD3-49FE-B89B-F92C6BA9A331}) (Version: 2.2.6775 - K-NFB Reading Technology, Inc.) TOSHIBA Bulletin Board (HKLM-x32\...\InstallShield_{C14518AF-1A0F-4D39-8011-69BAA01CD380}) (Version: 1.6.08.64 - TOSHIBA Corporation) TOSHIBA Disc Creator (HKLM\...\{5DA0E02F-970B-424B-BF41-513A5018E4C0}) (Version: 2.1.0.6 for x64 - TOSHIBA Corporation) TOSHIBA eco Utility (HKLM\...\{B3FF1CD9-B2F0-4D71-BB55-5F580401C48E}) (Version: 1.2.25.64 - TOSHIBA Corporation) TOSHIBA Face Recognition (HKLM-x32\...\InstallShield_{F67FA545-D8E5-4209-86B1-AEE045D1003F}) (Version: 3.1.8.64 - TOSHIBA Corporation) TOSHIBA Hardware Setup (HKLM-x32\...\InstallShield_{C4FFA951-9678-4D51-84B4-AFD15D3C45AD}) (Version: 4.08.06.00 - ) TOSHIBA HDD/SSD Alert (HKLM-x32\...\InstallShield_{D4322448-B6AF-4316-B859-D8A0E84DCB38}) (Version: 3.1.64.7 - TOSHIBA Corporation) Toshiba Laptop Checkup (HKLM-x32\...\NortonPCCheckup) (Version: 2.0.10.26 - Symantec Corporation) TOSHIBA Media Controller (HKLM-x32\...\{C7A4F26F-F9B0-41B2-8659-99181108CDE3}) (Version: 1.0.86.2 - TOSHIBA CORPORATION) TOSHIBA Media Controller Plug-in (HKLM-x32\...\{F26FDF57-483E-42C8-A9C9-EEE1EDB256E0}) (Version: 1.0.6.1 - TOSHIBA CORPORATION) Toshiba Online Backup (HKLM-x32\...\{C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}) (Version: 2.0.0.25 - Toshiba) TOSHIBA PC Health Monitor (HKLM\...\{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}) (Version: 1.7.4.64 - TOSHIBA Corporation) TOSHIBA Quality Application (HKLM-x32\...\{E69992ED-A7F6-406C-9280-1C156417BC49}) (Version: 1.0.3 - TOSHIBA) TOSHIBA Recovery Media Creator (HKLM-x32\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 2.1.3.5109 - TOSHIBA CORPORATION) TOSHIBA ReelTime (HKLM-x32\...\InstallShield_{24811C12-F4A9-4D0F-8494-A7B8FE46123C}) (Version: 1.7.17.64 - TOSHIBA Corporation) TOSHIBA Resolution+ Plug-in for Windows Media Player (HKLM-x32\...\{6CB76C9D-80C2-4CB3-A4CD-D96B239E3F94}) (Version: 1.1.0 - TOSHIBA Corporation) TOSHIBA Service Station (HKLM-x32\...\{AC6569FA-6919-442A-8552-073BE69E247A}) (Version: 2.1.52 - TOSHIBA) TOSHIBA Sleep Utility (HKLM-x32\...\{654F7484-88C5-46DC-AB32-C66BCB0E2102}) (Version: 1.4.2.7 - TOSHIBA Corporation) TOSHIBA Supervisor Password (HKLM-x32\...\InstallShield_{CBD6B23D-41D5-4A46-8019-6208516C9712}) (Version: 4.08.06.00 - ) TOSHIBA Value Added Package (HKLM-x32\...\InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}) (Version: 1.5.4.64 - TOSHIBA Corporation) TOSHIBA Web Camera Application (HKLM-x32\...\InstallShield_{6F3C8901-EBD3-470D-87F8-AC210F6E5E02}) (Version: 2.0.0.19 - TOSHIBA Corporation) TOSHIBA Wireless LAN Indicator (HKLM-x32\...\{CDADE9BC-612C-42B8-B929-5C6A823E7FF9}) (Version: 1.0.3 - TOSHIBA CORPORATION) ToshibaRegistration (HKLM-x32\...\{5AF550B4-BB67-4E7E-82F1-2C4300279050}) (Version: 1.0.4 - Toshiba) UserZoom survey tool for IE (HKLM\...\{9348ABF0-3D67-11E2-4823-019A180A0029}) (Version: 5.2.1.1 - UserZoom) Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies) Web Bar 2.0.5659.26749 (HKLM\...\{0BCE8B0A-1E76-44E5-9909-3CF804D92E4D}_is1) (Version: 2.0.5659.26749 - Web Bar Media) <==== ATTENTION Windows Driver Package - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.) Windows Driver Package - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation) XFINITY Toolbar (HKLM-x32\...\xfin_portal) (Version: 4.1.0.14 - ) Yahoo! BrowserPlus 2.9.8 (HKU\S-1-5-21-1343300749-3102139153-451857411-1001\...\Yahoo! BrowserPlus) (Version: - Yahoo! Inc.) Yahoo! Messenger (HKLM-x32\...\Yahoo! Messenger) (Version: - Yahoo! Inc.) Yahoo! Software Update (HKLM-x32\...\Yahoo! Software Update) (Version: - ) Yahoo! Toolbar (HKLM-x32\...\Yahoo! Companion) (Version: - Yahoo! Inc.) Yontoo Layers Runtime 1.10.01 (HKLM\...\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}) (Version: 1.10.01 - Yontoo LLC) <==== ATTENTION Zune (HKLM\...\Zune) (Version: 04.08.2345.00 - Microsoft Corporation) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== Restore Points ========================= 07-08-2015 13:19:49 Revo Uninstaller's restore point - Search Protect 07-08-2015 13:25:20 Revo Uninstaller's restore point - SmartWeb 07-08-2015 13:26:52 Revo Uninstaller's restore point - SnapDo 07-08-2015 13:28:12 Revo Uninstaller's restore point - Software Version Updater 07-08-2015 13:31:10 Revo Uninstaller's restore point - SSavErPro 07-08-2015 13:35:35 Revo Uninstaller's restore point - StatFoobar 07-08-2015 13:37:40 Revo Uninstaller's restore point - The Weather Channel Desktop 6 07-08-2015 13:41:55 Revo Uninstaller's restore point - vGrabber 07-08-2015 13:49:00 Revo Uninstaller's restore point - Visual Studio 2012 x86 Redistributables 07-08-2015 13:49:41 Revo Uninstaller's restore point - WeatherApp 07-08-2015 13:49:54 Removed WeatherApp 07-08-2015 13:50:56 Revo Uninstaller's restore point - Vuze Remote Toolbar 07-08-2015 13:56:49 Revo Uninstaller's restore point - Windows Live Mesh ActiveX Control for Remote Connections 07-08-2015 14:03:05 Revo Uninstaller's restore point - WildTangent Games 07-08-2015 14:06:08 Revo Uninstaller's restore point - Mobogenie 31-08-2015 20:09:13 Scheduled Checkpoint 08-09-2015 14:34:54 Scheduled Checkpoint ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-13 21:34 - 2009-06-10 16:00 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {0014022F-A75E-4641-95C3-D0014EC22FBA} - System32\Tasks\HDNINSTSCHD => C:\windows\PCBHDNW\hdnInstaller.exe <==== ATTENTION Task: {031F3FC8-583F-47C4-997C-716E9AA861E2} - System32\Tasks\3595562324 => \\.\globalroot\Device\HarddiskVolume2\Users\erica\AppData\Local\Temp\thpm7082909883505452935.tmp <==== ATTENTION Task: {05FEEDD6-1046-4249-B36F-E505F92BEBF1} - System32\Tasks\4697 => Wscript.exe C:\Users\erica\AppData\Local\Temp\launchie.vbs //B <==== ATTENTION Task: {0A6F337E-0F06-4605-A576-186E598CEAA7} - System32\Tasks\PC Optimizer Pro64 startups => C:\Program Files\PC Optimizer Pro\StartApps.exe <==== ATTENTION Task: {0EA5825B-5C2E-40D8-9D8C-0C793D61C4FB} - System32\Tasks\Crossbrowse => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\utility.exe <==== ATTENTION Task: {0F18558A-66F4-4CB2-88D6-9E1DB2D4BC78} - System32\Tasks\IFADZJC => C:\ProgramData\8d38ca20717a458aaa815e7a54207c0b\8d38ca20717a458aaa815e7a54207c0b.exe <==== ATTENTION Task: {20999964-887D-4B90-92BD-5E01C59F787A} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Security Suite\Upgrade.exe [2015-07-27] (Symantec Corporation) Task: {216A975D-7233-4AC2-8C89-F0AA6CA5D133} - \bde78538 -> No File <==== ATTENTION Task: {26F95923-069D-4F15-BEF0-4D9C2CE02D47} - \808183000 -> No File <==== ATTENTION Task: {2B3E7062-3464-48C6-AF6A-46865353A92F} - System32\Tasks\IEError => C:\Program Files (x86)\PCMATICPLUSSOL\virusIEFilter.exe Task: {2B5F6ADC-7D05-424B-ABF8-6D6F1F144D0D} - System32\Tasks\1A35 => \\?\globalroot\Device\HarddiskVolume2\Users\erica\AppData\Local\Temp\1A35.tmp <==== ATTENTION Task: {2F1E1EE1-72A2-4682-928E-3A184C457C89} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.) Task: {34B313AF-3F11-4077-8DB5-D4D316021710} - System32\Tasks\IE_ERR4WDR => C:\Program Files (x86)\Portable WeatherApp\IEError.exe <==== ATTENTION Task: {37599387-2623-4453-9556-11A029036665} - System32\Tasks\WebBarLaunchTask => C:\Program Files\WebBar\wbsvc.exe [2015-06-30] (Web Bar Media) <==== ATTENTION Task: {3A4AFBEA-C7AF-41C0-ADBA-2C069391FEC6} - \f1740384 -> No File <==== ATTENTION Task: {3BD09BC3-B543-4F05-A64A-09215CC186BA} - \364ebf48 -> No File <==== ATTENTION Task: {452A34D0-F7FC-4C4A-9136-4825A828ECBC} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files (x86)\Norton Security Suite\Engine\22.5.2.15\SymErr.exe [2015-05-19] (Symantec Corporation) Task: {48E4F107-BA57-46A0-8462-3FF099077F83} - \73191588 -> No File <==== ATTENTION Task: {48E626BE-1C4E-42C2-82BB-5804017FDD87} - \7bcbe4c8 -> No File <==== ATTENTION Task: {49F5D3E8-12CA-418A-8389-04BAEC1118AB} - System32\Tasks\snf => C:\ProgramData\Soltop\fzsepczh.exe Task: {4F6EA717-1C4A-4CEE-8051-7282D07142CA} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-16] () Task: {5ECF485F-4DD5-4F04-B38B-931CA52A2BC9} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1343300749-3102139153-451857411-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2011-11-29] (RealNetworks, Inc.) Task: {61A185F3-7F08-421C-BC38-B0E1E5D1A0A2} - System32\Tasks\ANHIX1 => C:\ProgramData\FlashBeat\FlashBeat.exe <==== ATTENTION Task: {64B961F6-0061-413C-BC9F-9B2C4C250976} - System32\Tasks\SmartWeb Upgrade Trigger Task => C:\Users\erica\AppData\Local\SmartWeb\SmartWebHelper.exe <==== ATTENTION Task: {68CE41E5-CB03-446E-97F8-B8B4009097DF} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Security Suite\Engine\22.5.2.15\WSCStub.exe [2015-07-16] (Symantec Corporation) Task: {69FDA0A9-46B9-4DD2-831E-CA836A6BF9BB} - System32\Tasks\GlobalUpdate-y2ziyzvxzgs5btd => C:\Users\erica\AppData\Roaming\y2ziyzvxzgs5btd\y2ziyzvxzgs5btd.exe <==== ATTENTION Task: {6A001706-AA54-4ACE-9574-C7B96FC0882E} - System32\Tasks\BitGuard => Sc.exe start BitGuard <==== ATTENTION Task: {6FF2BBDC-9C70-41DC-9F73-9A9670938BF5} - System32\Tasks\UPDTEXE4_WDR => C:\Program Files (x86)\Portable WeatherApp\updater.exe <==== ATTENTION Task: {75E8414B-897F-44CE-982B-01738E6E7D82} - System32\Tasks\APSnotifierPP3 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION Task: {7CEEBCD3-9EE4-4BF0-AB49-6DA0F3E40D93} - \770b9c8 -> No File <==== ATTENTION Task: {7E4C9C59-33DF-4D6C-9A39-853032F7C502} - \328f4e74 -> No File <==== ATTENTION Task: {85FC0B17-ADE8-4B25-B755-88C7BA37D7CA} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated) Task: {871E77F5-BC32-4EEB-9D18-E191ABE4CA48} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files (x86)\Norton Security Suite\Engine\22.5.2.15\SymErr.exe [2015-05-19] (Symantec Corporation) Task: {8755A8F2-1126-45DC-98D2-83C8CF49BCCB} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express Self Updater\ExpressSelfUpdater.exe Task: {8789618D-1ABB-41DE-8329-7D09E5A319F2} - System32\Tasks\ASP => C:\Program Files (x86)\RCP\systweakasp.exe Task: {8C94E84D-6256-4A65-BEFE-998D953E2CC3} - System32\Tasks\APSnotifierPP1 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION Task: {8E1AC0BC-A427-41FA-95CB-6D37CF92C5F3} - System32\Tasks\Media Center Extender Service32 => C:\windows\system32\config\systemprofile\AppData\Local\MediaCenter\elstrans.exe Task: {92A4AFD3-AD29-4B01-9B2B-83B421B075C7} - System32\Tasks\Glopbbiq => C:\Program Files\shopperz04082015\Qhgvel.bat [2015-08-04] () <==== ATTENTION Task: {933FC4E0-AAA2-4056-BA73-E66D96F0F653} - System32\Tasks\0 => Iexplore.exe <==== ATTENTION Task: {98507EBE-C0C5-4486-ACF6-715A324F13C3} - System32\Tasks\AI_Updater => C:\Program Files (x86)\PCMATICPLUSSOL\updater.exe Task: {A0756112-7FC3-4A0E-A647-C8BD64756221} - \a63eee94 -> No File <==== ATTENTION Task: {AA29354C-8CC5-41FC-BE26-C051B8AB6D10} - \5b3d5ba8 -> No File <==== ATTENTION Task: {ABA66E2E-37CE-487B-B643-BA75A646244B} - \7723d110 -> No File <==== ATTENTION Task: {AD5F157D-637B-4B11-8F40-9AFD22E720C0} - System32\Tasks\boosterpop => C:\Program Files (x86)\PCMATICPLUSSOL\Quarantine.exe Task: {B87A8943-C2A5-42C0-9DF1-CBDF6A29B90C} - \7ee62fd0 -> No File <==== ATTENTION Task: {BC6DDAF4-D556-427C-BE29-B998E004EB63} - System32\Tasks\APSnotifierPP2 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION Task: {BFDDFB80-4566-4DC5-B952-470971F55291} - System32\Tasks\snp => C:\ProgramData\Soltop\fzsepczh.exe Task: {C0F6F4F9-8C1D-4693-BABC-7920B97D61C6} - System32\Tasks\Default2Check => c:\Users\All Users\dtdata\R003.exe <==== ATTENTION Task: {CBDEE1E2-27E0-4BCA-9DA5-6E741F8D1C3B} - System32\Tasks\DTChk => C:\Users\Public\Util\DTChk.exe [2014-07-19] (Search Results, LLC) <==== ATTENTION Task: {D09F4681-B298-422D-BC71-289C3922D40E} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1343300749-3102139153-451857411-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2011-11-29] (RealNetworks, Inc.) Task: {D0A13D63-F405-4841-A63B-28374E69E56C} - System32\Tasks\winupd => C:\Users\erica\AppData\Local\Temp:winupd.exe <==== ATTENTION Task: {D16E6C4C-7409-4789-9F91-18152B976EB9} - System32\Tasks\Maintenance Service-y0ritzvtzei5ltd => C:\Users\erica\AppData\Local\y0ritzvtzei5ltd\y2jiczvvzgq5ljd.exe Task: {DC7EDE8E-B611-4723-A9FA-4AADD223E92D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {DDB4DAA1-A2C6-4DF7-8A8E-B6075C5A8103} - System32\Tasks\LaunchPreSignup => C:\Program Files (x86)\OLBPre\OLBPre.exe <==== ATTENTION Task: {E157FFDD-EB2F-46C1-BF92-5CF58B2A609C} - \1335d5fc -> No File <==== ATTENTION Task: {E6A686B6-4D08-4929-824A-9597DF40E68A} - System32\Tasks\WebBarUpdateTask => C:\Program Files\WebBar\wbsvc.exe [2015-06-30] (Web Bar Media) <==== ATTENTION Task: {FABD0DBD-9BA0-42E9-BEF2-FE1F1BC52F61} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.) Task: {FC210D71-D1E8-454C-910F-EFAF3E6A85D6} - \4291010832 -> No File <==== ATTENTION Task: {FC4235F2-B017-4011-B791-EA162B88069E} - System32\Tasks\DTReg => C:\Users\erica\AppData\Roaming\DefaultTab\DefaultTab\DTReg.exe <==== ATTENTION (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\windows\Tasks\ANHIX1.job => C:\ProgramData\FlashBeat\FlashBeat.exe <==== ATTENTION Task: C:\windows\Tasks\APSnotifierPP1.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION Task: C:\windows\Tasks\APSnotifierPP2.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION Task: C:\windows\Tasks\APSnotifierPP3.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION Task: C:\windows\Tasks\Crossbrowse.job => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\utility.exe <==== ATTENTION Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\windows\Tasks\PC Optimizer Pro64 startups.job => C:\Program Files\PC Optimizer Pro\StartApps.exe <==== ATTENTION ==================== Loaded Modules (Whitelisted) ============== 2015-09-02 18:27 - 2015-08-27 19:17 - 16393032 _____ () C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.85\PepperFlash\pepflashplayer.dll 2015-09-12 13:14 - 2014-02-10 13:44 - 04592128 _____ () C:\Users\erica\AppData\Local\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libglesv2.dll 2015-09-12 13:14 - 2014-02-10 13:44 - 00112128 _____ () C:\Users\erica\AppData\Local\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libegl.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\windows\system32\Drivers\omtccgwk.sys:changelist AlternateDataStreams: C:\ProgramData\TEMP:373E1720 AlternateDataStreams: C:\ProgramData\TEMP:AD022376 ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Peakoar => ""="service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2" ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) HKU\S-1-5-21-1343300749-3102139153-451857411-1001\Software\Classes\.exe: exefile => <===== ATTENTION ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-1343300749-3102139153-451857411-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\erica\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 64.233.207.8 - 64.233.207.9 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{F0971B9B-6C0D-48DC-9395-6A433215CD4E}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{B52BD2BA-E574-4945-B387-47D4491A84CD}] => (Allow) LPort=2869 FirewallRules: [{778199AE-F46F-4BE0-97E3-EB208E775586}] => (Allow) LPort=1900 FirewallRules: [{A8EC1910-CF30-4EE4-A9A4-22F93B4903E3}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe FirewallRules: [{5ED5DD6E-4F49-4442-93C2-9FDB9AE71E8B}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe FirewallRules: [{1181995F-7651-48A4-9B0F-5B14E6E625BC}] => (Allow) LPort=10255 FirewallRules: [{ABB5C543-F7C3-4DA8-9A88-E08E8477039F}] => (Allow) C:\Program Files (x86)\PhotoJoy\Bin\PjImp.exe FirewallRules: [{32029DFE-0E55-4892-9858-9D07B9F64554}] => (Allow) C:\Program Files (x86)\PhotoJoy\Bin\PjImp.exe FirewallRules: [{214E5BF2-0402-4643-8DC9-7CCA7CE45F02}] => (Allow) %ProgramFiles%\Zune\Zune.exe FirewallRules: [{22B4DF3D-AFD9-42C2-B84E-8F662BA36538}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe FirewallRules: [{CEFE0541-B8D0-4EA8-972C-72B1A590F9B4}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe FirewallRules: [{C4E53F83-5AE1-4997-AFD3-CFCEA61E4D84}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe FirewallRules: [{FDBE0500-3102-40B6-A66F-8B414F167D5D}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe FirewallRules: [{49AEB3CA-EB85-4173-8431-64CB841E76A3}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe FirewallRules: [{0B58F97D-1E61-4828-821B-1FCE965AEC04}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe FirewallRules: [{228D78E7-A79A-4E8C-99BF-37CBD70ADAD7}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe FirewallRules: [{AF10C95E-F53D-4E90-94CE-58C057E32059}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe FirewallRules: [{0CF634AB-F130-44CB-B432-627E85E7AC44}] => (Allow) C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe FirewallRules: [{3CD3EB8E-6029-4B89-B85F-CADA8F599A3C}] => (Allow) C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe FirewallRules: [{0248D73C-8ED6-418A-BAC3-542D4CC8A6D0}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{47DAA130-6C6D-4055-A0DD-7D4233565CD7}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{1ABF4E49-62B1-4D27-A62B-0B65057DC1E7}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{1EF4E285-9C5F-4F65-ACED-F799D72AB717}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{BE0ADAE5-404D-4E8E-BC08-667905AD8598}] => (Allow) C:\Program Files (x86)\Vuze\Azureus.exe FirewallRules: [{763979DF-ABA6-4548-B806-058418769157}] => (Allow) C:\Program Files (x86)\Vuze\Azureus.exe FirewallRules: [TCP Query User{B5D8F1ED-723B-42F1-8B84-7F88E7B7CD14}C:\program files (x86)\vuze\azureus.exe] => (Block) C:\program files (x86)\vuze\azureus.exe FirewallRules: [UDP Query User{DFCD671A-4895-47CD-892C-6439E0D864E6}C:\program files (x86)\vuze\azureus.exe] => (Block) C:\program files (x86)\vuze\azureus.exe FirewallRules: [TCP Query User{7BFCB06B-5933-41F4-A0FD-0026E8D543C5}C:\program files (x86)\oovoo\oovoo.exe] => (Allow) C:\program files (x86)\oovoo\oovoo.exe FirewallRules: [UDP Query User{C1239D78-4685-4756-801C-9A3BE5356EDC}C:\program files (x86)\oovoo\oovoo.exe] => (Allow) C:\program files (x86)\oovoo\oovoo.exe FirewallRules: [{83389B90-9C3A-451D-B41E-08ADB9BF78B9}] => (Allow) LPort=443 FirewallRules: [{B29D77FB-5796-404B-BB00-24517A4B7473}] => (Allow) LPort=443 FirewallRules: [{A1A0A481-B2C3-4819-8C48-8BEB4BC6D1A8}] => (Allow) LPort=37674 FirewallRules: [{0F4B2508-6F1B-4A11-8ADB-0FFB408560C6}] => (Allow) LPort=37674 FirewallRules: [{2AD202F9-50C2-43CA-B857-0A3474A66D15}] => (Allow) LPort=37675 FirewallRules: [{5CE408BD-263F-450E-8A5C-3C6D5E30FE33}] => (Allow) C:\Program Files (x86)\BearShare Applications\BearShare\BearShare.exe FirewallRules: [{F40DE846-70D5-4087-B7E6-0DF95B5FEBE1}] => (Allow) C:\Program Files (x86)\BearShare Applications\BearShare\BearShare.exe FirewallRules: [{B102E4EB-B317-4FDC-A223-7CB3F029D4C1}] => (Allow) C:\Program Files (x86)\BearShare Applications\BearShare\BearShare.exe FirewallRules: [{49D6B160-AC42-407A-8AD1-F215B12B2A5A}] => (Allow) C:\Program Files (x86)\BearShare Applications\BearShare\BearShare.exe FirewallRules: [TCP Query User{597A572C-7854-4BDA-B3A6-593ECA6F1C87}C:\program files (x86)\oovoo\oovoo.exe] => (Block) C:\program files (x86)\oovoo\oovoo.exe FirewallRules: [UDP Query User{CFE446FD-C15A-46EF-868C-AD9E769EBC48}C:\program files (x86)\oovoo\oovoo.exe] => (Block) C:\program files (x86)\oovoo\oovoo.exe FirewallRules: [{AD04E0AA-7F00-40BF-A145-1903AFE25BF8}] => (Allow) C:\Program Files (x86)\PhotoJoy\Bin\PhotoJoy.exe FirewallRules: [{EE3C9E06-581C-4FAD-B6ED-CAA4C2BB8A7E}] => (Allow) C:\Program Files (x86)\PhotoJoy\Bin\PhotoJoy.exe FirewallRules: [{AA6C3DE9-4684-4415-B94F-A612D5C07A9C}] => (Allow) C:\Program Files (x86)\PhotoJoy\Bin\PjApp.exe FirewallRules: [{64BAA063-CF42-471D-85C3-15D4033481B3}] => (Allow) C:\Program Files (x86)\PhotoJoy\Bin\PjApp.exe FirewallRules: [{DF91A66F-CFE2-4B90-BA1A-7A1A42D9992C}] => (Allow) LPort=443 FirewallRules: [{7147C294-4930-4E61-8341-11AFAD11027C}] => (Allow) LPort=443 FirewallRules: [{1BA3E4F0-A902-4E1C-B14B-13F0A154EA99}] => (Allow) LPort=37674 FirewallRules: [{40C80D22-5AE6-4131-B647-DCE7C9D4351C}] => (Allow) LPort=37674 FirewallRules: [{3EFECC96-CA13-45CB-A775-90944B52E71F}] => (Allow) LPort=37675 FirewallRules: [{C552B762-CA39-4EE6-B305-6892EAD1ADE3}] => (Allow) C:\Program Files (x86)\Iminent\Iminent.exe FirewallRules: [{CC36D4C2-5BC2-439F-8678-468A8119D858}] => (Allow) C:\Program Files (x86)\Iminent\Iminent.Messengers.exe FirewallRules: [{C0435442-A7B9-4E37-B341-4D52B2F03532}] => (Allow) C:\Program Files (x86)\xfin_portal\dtuser.exe FirewallRules: [{FFFCE793-3F91-4203-BDA1-8535FBC23AF5}] => (Allow) C:\Program Files (x86)\xfin_portal\dtuser.exe FirewallRules: [{26B99009-FF29-4651-A226-3CCAD7AFA13E}] => (Allow) C:\Program Files (x86)\Constant Guard Protection Suite\IDVault.exe FirewallRules: [{F6FB00EB-485A-4266-BAF2-9698689D1E1C}] => (Allow) C:\Program Files (x86)\Constant Guard Protection Suite\IDVault.exe FirewallRules: [{E1ABF5A3-14F3-4B0A-97BF-194DC02634EA}] => (Allow) C:\Program Files (x86)\PhotoJoy\Bin\PhotoJoy.exe FirewallRules: [{B72D0BFB-8B3D-4DA0-A49E-5AEB9A608F1E}] => (Allow) C:\Program Files (x86)\PhotoJoy\Bin\PhotoJoy.exe FirewallRules: [{9EFDE370-BC51-437D-B1F8-4E3A37696CBF}] => (Allow) C:\Program Files (x86)\PhotoJoy\Bin\PjApp.exe FirewallRules: [{5020E03A-7E12-4302-BE52-1683D951B5AA}] => (Allow) C:\Program Files (x86)\PhotoJoy\Bin\PjApp.exe FirewallRules: [{BEC8F06A-8BE4-4FBF-9DBD-E3668718B8FA}] => (Allow) C:\Program Files\Perfect Uninstaller\PU.exe FirewallRules: [{BF492B99-7052-4D0B-95DD-2D35EEF6EA92}] => (Allow) C:\Program Files\Perfect Uninstaller\PU.exe FirewallRules: [{68F3AA86-2B7E-480D-83FC-8D1F36B28B5C}] => (Allow) C:\Program Files\Perfect Uninstaller\PU.exe FirewallRules: [{60DB291D-EEB6-433D-86A3-7DA75C76CDB5}] => (Allow) C:\Program Files\Perfect Uninstaller\PU.exe FirewallRules: [{FB24C1D0-9934-4040-A7F4-F054280D2207}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe FirewallRules: [{C1DC3728-2C90-43C1-B7B6-E41FC5318922}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe FirewallRules: [{8FA415B3-11F0-4357-AE35-2B38DA98F02F}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgdiagex.exe FirewallRules: [{ADA7C0F6-3543-486A-AD2A-249A3748C439}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgdiagex.exe FirewallRules: [{39A06FDE-6625-4E73-B245-09B90DE8B86E}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgmfapx.exe FirewallRules: [{0DE5F1A8-2583-429A-91FC-63EF134D0AAE}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgmfapx.exe FirewallRules: [{5605D442-6B3A-44C2-B8C7-E5E5E8033585}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe FirewallRules: [{83035695-7F45-4E8E-8077-80B5A7279BE4}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe FirewallRules: [{3F93B8BA-EDAA-41FA-A78D-E906F10437D5}] => (Allow) C:\Program Files (x86)\Music Toolbar\Datamngr\SRTOOL~1\IE\dtUser.exe FirewallRules: [{71BEC4B5-EBC0-412C-B3C9-9F27F8DD7252}] => (Allow) C:\Program Files (x86)\Music Toolbar\Datamngr\SRTOOL~1\IE\dtUser.exe FirewallRules: [{C3BDB51A-FBF1-4277-A4CC-2DD15C2AEE1D}] => (Allow) C:\Program Files (x86)\Music Toolbar\Datamngr\SRTOOL~2\IE\dtUser.exe FirewallRules: [{45BC91D4-E836-44A4-A81E-3851C37E400E}] => (Allow) C:\Program Files (x86)\Music Toolbar\Datamngr\SRTOOL~2\IE\dtUser.exe FirewallRules: [{FCF4058E-C349-4A48-B739-E17F159CB6E4}] => (Allow) C:\Program Files (x86)\Music Toolbar\Datamngr\SRTOOL~3\IE\dtUser.exe FirewallRules: [{41C30A9B-01BA-427A-8314-5F5919086C46}] => (Allow) C:\Program Files (x86)\Music Toolbar\Datamngr\SRTOOL~3\IE\dtUser.exe FirewallRules: [{7951B0CF-45BF-4349-AC54-7552FEE86842}] => (Allow) C:\Program Files (x86)\Music Toolbar\Datamngr\SRTOOL~4\IE\dtUser.exe FirewallRules: [{672D8FD5-00EB-41E3-B1D6-BC6E3756AC98}] => (Allow) C:\Program Files (x86)\Music Toolbar\Datamngr\SRTOOL~4\IE\dtUser.exe FirewallRules: [{6D63F51C-522F-4F9C-8959-0116CD0B4133}] => (Allow) C:\Program Files (x86)\Music Toolbar\Datamngr\SR0DE8~1\IE\dtUser.exe FirewallRules: [{BAF7299A-9D6B-4E48-9DC0-C2658A7A6EA3}] => (Allow) C:\Program Files (x86)\Music Toolbar\Datamngr\SR0DE8~1\IE\dtUser.exe FirewallRules: [{5C8EC1F2-F5B2-4E22-8766-6A61713CD38C}] => (Allow) C:\Program Files (x86)\Music Toolbar\Datamngr\SR0DE8~2\IE\dtUser.exe FirewallRules: [{EA848B4F-AF2C-4C05-9FD5-CC4A74E02FD1}] => (Allow) C:\Program Files (x86)\Music Toolbar\Datamngr\SR0DE8~2\IE\dtUser.exe FirewallRules: [{7542D319-B0D4-448D-BA86-88CDBF39308A}] => (Allow) C:\Users\erica\AppData\Roaming\BitTorrent\BitTorrent.exe FirewallRules: [{9D3652ED-BE0A-4FC1-8410-0E3EF57934F1}] => (Allow) C:\Users\erica\AppData\Roaming\BitTorrent\BitTorrent.exe FirewallRules: [{464C8BF6-22D6-41AF-B677-4334758BDC22}] => (Allow) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe FirewallRules: [TCP Query User{13B0ED94-53E8-4F15-B88E-2A05F9B84AFA}C:\program files\droidpad\droidpad.exe] => (Allow) C:\program files\droidpad\droidpad.exe FirewallRules: [UDP Query User{CA95455E-0E33-43E5-9762-72CE0D0A2E14}C:\program files\droidpad\droidpad.exe] => (Allow) C:\program files\droidpad\droidpad.exe FirewallRules: [{CADD2179-C728-4E59-A1B2-7E4444954404}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Faulty Device Manager Devices ============= Name: Security Processor Loader Driver Description: Security Processor Loader Driver Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: spldr Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: innfd_1_10_0_14 Description: innfd_1_10_0_14 Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: innfd_1_10_0_14 Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: y2jimzv2zhm5bdd Description: y2jimzv2zhm5bdd Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: y2jimzv2zhm5bdd Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: Teredo Tunneling Pseudo-Interface Description: Microsoft Teredo Tunneling Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (09/12/2015 01:08:10 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/12/2015 12:41:25 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: The program IEXPLORE.EXE version 11.0.9600.17840 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 8c0 Start Time: 01d0ed822b144b80 Termination Time: 25 Application Path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Report Id: Error: (09/12/2015 12:40:51 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: The program IEXPLORE.EXE version 11.0.9600.17840 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 2570 Start Time: 01d0ed821d31503b Termination Time: 30 Application Path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Report Id: Error: (09/12/2015 12:40:28 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: The program IEXPLORE.EXE version 11.0.9600.17840 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 2120 Start Time: 01d0ed8209ae434c Termination Time: 38 Application Path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Report Id: Error: (09/12/2015 12:39:55 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: The program IEXPLORE.EXE version 11.0.9600.17840 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 20e0 Start Time: 01d0ed81f4f96569 Termination Time: 28 Application Path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Report Id: Error: (09/12/2015 12:39:21 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: The program IEXPLORE.EXE version 11.0.9600.17840 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 3514 Start Time: 01d0ed81df7a1588 Termination Time: 23 Application Path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Report Id: Error: (09/12/2015 12:38:44 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: The program IEXPLORE.EXE version 11.0.9600.17840 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 28b4 Start Time: 01d0ed81cc6d2f59 Termination Time: 35 Application Path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Report Id: Error: (09/12/2015 12:38:13 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: The program IEXPLORE.EXE version 11.0.9600.17840 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 1c84 Start Time: 01d0ed81a59cb5b8 Termination Time: 35 Application Path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Report Id: Error: (09/12/2015 12:33:00 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: The program iexplore.exe version 11.0.9600.17840 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 310c Start Time: 01d0ed7e76c628b4 Termination Time: 0 Application Path: C:\Program Files\Internet Explorer\iexplore.exe Report Id: Error: (09/11/2015 06:33:29 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 7691 System errors: ============= Error: (09/12/2015 01:26:51 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Computer Browser service depends on the Server service which failed to start because of the following error: %%1068 Error: (09/12/2015 01:26:51 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Computer Browser service depends on the Server service which failed to start because of the following error: %%1068 Error: (09/12/2015 01:26:51 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Computer Browser service depends on the Server service which failed to start because of the following error: %%1068 Error: (09/12/2015 01:23:33 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Computer Browser service depends on the Server service which failed to start because of the following error: %%1068 Error: (09/12/2015 01:23:33 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Computer Browser service depends on the Server service which failed to start because of the following error: %%1068 Error: (09/12/2015 01:23:33 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Computer Browser service depends on the Server service which failed to start because of the following error: %%1068 Error: (09/12/2015 01:23:33 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Computer Browser service depends on the Server service which failed to start because of the following error: %%1068 Error: (09/12/2015 01:23:33 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Computer Browser service depends on the Server service which failed to start because of the following error: %%1068 Error: (09/12/2015 01:23:33 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Computer Browser service depends on the Server service which failed to start because of the following error: %%1068 Error: (09/12/2015 01:22:20 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Computer Browser service depends on the Server service which failed to start because of the following error: %%1068 Microsoft Office: ========================= Error: (09/12/2015 01:08:10 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/12/2015 12:41:25 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: IEXPLORE.EXE11.0.9600.178408c001d0ed822b144b8025C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Error: (09/12/2015 12:40:51 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: IEXPLORE.EXE11.0.9600.17840257001d0ed821d31503b30C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Error: (09/12/2015 12:40:28 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: IEXPLORE.EXE11.0.9600.17840212001d0ed8209ae434c38C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Error: (09/12/2015 12:39:55 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: IEXPLORE.EXE11.0.9600.1784020e001d0ed81f4f9656928C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Error: (09/12/2015 12:39:21 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: IEXPLORE.EXE11.0.9600.17840351401d0ed81df7a158823C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Error: (09/12/2015 12:38:44 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: IEXPLORE.EXE11.0.9600.1784028b401d0ed81cc6d2f5935C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Error: (09/12/2015 12:38:13 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: IEXPLORE.EXE11.0.9600.178401c8401d0ed81a59cb5b835C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Error: (09/12/2015 12:33:00 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: iexplore.exe11.0.9600.17840310c01d0ed7e76c628b40C:\Program Files\Internet Explorer\iexplore.exe Error: (09/11/2015 06:33:29 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 7691 CodeIntegrity: =================================== Date: 2013-12-29 16:40:35.726 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Perfect Uninstaller\FKFAP.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2013-12-29 16:40:35.524 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Perfect Uninstaller\FKFAP.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2013-12-29 16:40:35.258 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Perfect Uninstaller\FKFAP.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2013-12-29 16:40:35.056 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Perfect Uninstaller\FKFAP.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2013-12-29 16:40:34.744 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Perfect Uninstaller\FKFAP.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2013-12-29 16:40:34.556 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Perfect Uninstaller\FKFAP.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2013-12-29 16:40:34.338 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Perfect Uninstaller\FKFAP.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2013-12-29 16:40:34.151 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Perfect Uninstaller\FKFAP.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2013-12-29 16:40:33.839 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Perfect Uninstaller\FKFAP.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2013-12-29 16:40:33.652 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Perfect Uninstaller\FKFAP.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. ==================== Memory info =========================== Processor: Intel(R) Pentium(R) CPU B940 @ 2.00GHz Percentage of memory in use: 34% Total physical RAM: 4043.86 MB Available physical RAM: 2647.51 MB Total Virtual: 4242.07 MB Available Virtual: 2883.91 MB ==================== Drives ================================ Drive c: (TI106139W0E) (Fixed) (Total:450.57 GB) (Free:312.05 GB) NTFS ==>[system with boot components (obtained from reading drive)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 465.8 GB) (Disk ID: 4E59E2AF) Partition 1: (Active) - (Size=1.5 GB) - (Type=27) Partition 2: (Not Active) - (Size=450.6 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=13.7 GB) - (Type=17) ==================== End of Addition.txt ============================