Additional scan result of Farbar Recovery Scan Tool (x64) Version:05-12-2015 Ran by Stacey (2015-12-06 21:08:30) Running from E:\ Windows 7 Home Premium Service Pack 1 (X64) (2013-11-30 15:53:47) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-1310294010-980347545-3215090706-500 - Administrator - Disabled) Guest (S-1-5-21-1310294010-980347545-3215090706-501 - Limited - Disabled) Stacey (S-1-5-21-1310294010-980347545-3215090706-1000 - Administrator - Enabled) => C:\Users\Stacey ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A} AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7} AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.009.20079 - Adobe Systems Incorporated) Adobe Flash Player 19 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 19.0.0.245 - Adobe Systems Incorporated) Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.245 - Adobe Systems Incorporated) Atheros Driver Installation Program (HKLM-x32\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 9.0 - Atheros) Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 11.1.2245 - AVAST Software) BlackGold (HKLM-x32\...\{F7731C17-DA4F-440C-9802-00ED509B9F77}) (Version: 0.0.1.031 - Snail Games USA) BlueStacks App Player (HKLM-x32\...\{D7E3588F-25E6-4A93-8B1C-596F7951CA38}) (Version: 0.10.7.5601 - BlueStack Systems, Inc.) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Broadcom 802.11 Wireless LAN Adapter (HKLM\...\Broadcom 802.11 Wireless LAN Adapter) (Version: 5.60.350.6 - Broadcom Corporation) Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version: - ) Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.4.1.0 - Canon Inc.) Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: - ) Canon MG2100 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG2100_series) (Version: - ) Canon MG2100 series On-screen Manual (HKLM-x32\...\Canon MG2100 series On-screen Manual) (Version: - ) Canon MG2100 series User Registration (HKLM-x32\...\Canon MG2100 series User Registration) (Version: - ) Canon MP Navigator EX 5.0 (HKLM-x32\...\MP Navigator EX 5.0) (Version: - ) Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: - ) Canon Solution Menu EX (HKLM-x32\...\CanonSolutionMenuEX) (Version: - ) Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.) Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.) Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.) Elite Unzip (HKLM-x32\...\Mindspark Elite Unzip) (Version: 1.1.8161.280 - Mindspark Interactive Network) <==== ATTENTION Google Chrome (HKLM-x32\...\Google Chrome) (Version: 47.0.2526.73 - Google Inc.) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden Gyazo 3.1.6 (HKLM-x32\...\{6DB8C365-E719-4BA5-9594-10DFC244D3FD}_is1) (Version: - Nota Inc.) IMVU Avatar Chat Software (HKU\S-1-5-21-1310294010-980347545-3215090706-1000\...\IMVU Avatar chat client software BETA) (Version: - ) McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.226.1 - McAfee, Inc.) Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Mozilla Firefox 42.0 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 42.0 (x86 en-US)) (Version: 42.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 42.0.0.5780 - Mozilla) RealDownloader (x32 Version: 17.0.11 - RealNetworks, Inc.) Hidden RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0 - RealNetworks, Inc) Hidden RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) Hidden RealPlayer Cloud (HKLM-x32\...\RealPlayer 17.0) (Version: 17.0.10 - RealNetworks) REALTEK Wireless LAN Software (HKLM-x32\...\{901F0D4C-009D-1112-8DE4-03599E7B0C5C}) (Version: 1.00.10.0104 - REALTEK Semiconductor Corp.) RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden Sandboxie 5.06 (64-bit) (HKLM\...\Sandboxie) (Version: 5.06 - Sandboxie Holdings, LLC) Skype™ 7.15 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.15.102 - Skype Technologies S.A.) Spotify (HKU\S-1-5-21-1310294010-980347545-3215090706-1000\...\Spotify) (Version: 0.9.15.27.g87efe634 - Spotify AB) Spotify Packages (HKU\S-1-5-21-1310294010-980347545-3215090706-1000\...\Spotify Packages) (Version: - ) <==== ATTENTION Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.29.0 - Synaptics Incorporated) Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) UpdateService (x32 Version: 1.0.0 - RealNetworks, Inc.) Hidden Uplay (HKLM-x32\...\Uplay) (Version: 13.0 - Ubisoft) Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies) Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== Restore Points ========================= 03-12-2015 21:36:40 Scheduled Checkpoint 05-12-2015 13:32:45 Windows Update 06-12-2015 09:58:10 Device Driver Package Install: TAP-Windows Provider V9 Network adapters 06-12-2015 10:12:07 Uniblue PC Mechanic installation ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-13 20:34 - 2015-11-13 16:13 - 00000856 ____A C:\Windows\system32\Drivers\etc\hosts 0.0.0.1 mssplus.mcafee.com ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {221E0093-A3C8-4E52-9E17-849298C66F2C} - System32\Tasks\GyazoUpdateTaskMachineDaily => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2015-08-19] () Task: {2695EBF6-4E41-4A95-977F-BE6E65DDF618} - System32\Tasks\{6829392E-B931-41D1-BB19-309CA683176A} => C:\Program Files\Andy\HandyAndy.exe Task: {2A5ADB46-42E3-420F-B3A6-E29BAAA0F495} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.) Task: {37B50F8D-3AE7-4893-B582-B8F4F9EE09BE} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-11-10] (Adobe Systems Incorporated) Task: {4582027F-CEF3-4203-A15B-493BD14C4216} - System32\Tasks\{097CD4A2-AA46-4B3D-8BCE-F9C3B4DF64B9} => C:\Program Files\Andy\HandyAndy.exe Task: {586B9B80-657A-4642-95BC-3820D94855CB} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1310294010-980347545-3215090706-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2014-06-10] (RealNetworks, Inc.) Task: {5F11E5F1-62CE-4F6E-ABE1-1503E225A2EE} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1310294010-980347545-3215090706-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2014-06-10] (RealNetworks, Inc.) Task: {61F604E5-4F6E-4852-84D9-E58BE65AD59F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.) Task: {76739FAF-877C-4171-87CF-D56BC04B034D} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2015-12-03] (AVAST Software) Task: {7B479540-24EE-4428-B63A-D7353B8948E5} - System32\Tasks\{E62A460D-0DC7-4B38-8D49-1EF687A3BEDA} => C:\program files (x86)\real\realplayer\realcleaner.exe [2014-07-08] (RealNetworks, Inc.) Task: {85D6102B-E7B1-4B60-8D11-0ED6667B8CEB} - System32\Tasks\WSE_Vosteran => C:\Users\Stacey\AppData\Roaming\WSE_VO~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION Task: {9B0463E6-6080-4752-B838-3C75E250A99E} - System32\Tasks\{9A25B950-8AA0-4F8C-8E3B-67516B08A3AC} => pcalua.exe -a "C:\Users\Stacey\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8L3P05MB\sp48482[1].exe" -d C:\Users\Stacey\Desktop Task: {A5FD1459-C2AF-484D-A05F-A8864749E284} - System32\Tasks\{E09671C0-576C-4C50-A537-423B38E74F28} => C:\Program Files\Andy\HandyAndy.exe Task: {A7874C0B-55F1-41B1-9957-4F198A87A748} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-12-03] (AVAST Software) Task: {A9908F9E-563A-41E1-85A2-2644C3050804} - System32\Tasks\{8C24B157-4FE4-4B19-8DE3-9B4D7E4EDCC1} => pcalua.exe -a "C:\Users\Stacey\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K9J4C19N\sp49522[1].exe" -d C:\Users\Stacey\Desktop Task: {A9C9D449-22FA-4BEA-9967-E6E15F4F4FBD} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1310294010-980347545-3215090706-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2014-06-10] (RealNetworks, Inc.) Task: {B13F382C-4400-4432-B1D5-DEF9EFF0A9FD} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1310294010-980347545-3215090706-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2014-06-10] (RealNetworks, Inc.) Task: {CC7654F4-6C2B-438A-A9DD-7CD12C298CCA} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-09-14] (Adobe Systems Incorporated) Task: {F7202791-79D2-4474-B913-FF26437BA818} - System32\Tasks\{925A2F31-EA7D-47BA-8E21-0CF7EF80C289} => C:\program files (x86)\real\realplayer\realcleaner.exe [2014-07-08] (RealNetworks, Inc.) Task: {F9EA5EB5-EE9C-4467-9C21-69B713E4BB45} - System32\Tasks\{3FB8BBDA-82BF-4FDF-A572-FF998EF07774} => pcalua.exe -a E:\sp49134.exe -d E:\ Task: {FC8E31E6-87F3-487D-82BB-50E1D0D1CA0A} - System32\Tasks\GyazoUpdateTaskMachine => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2015-08-19] () (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\WSE_Vosteran.job => C:\Users\Stacey\AppData\Roaming\WSE_VO~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION ==================== Shortcuts ============================= (The entries could be listed to be restored or removed.) ==================== Loaded Modules (Whitelisted) ============== 2015-12-04 15:59 - 2015-11-24 02:00 - 01583432 _____ () C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.73\libglesv2.dll 2015-12-04 15:59 - 2015-11-24 02:00 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.73\libegl.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-1310294010-980347545-3215090706-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Stacey\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 75.75.75.75 - 75.75.76.76 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) MSCONFIG\Services: AdobeARMservice => 2 MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3 MSCONFIG\Services: avast! Antivirus => 2 MSCONFIG\Services: Bonjour Service => 2 MSCONFIG\Services: BstHdAndroidSvc => 3 MSCONFIG\Services: BstHdLogRotatorSvc => 2 MSCONFIG\Services: BstHdUpdaterSvc => 2 MSCONFIG\Services: gupdate => 2 MSCONFIG\Services: gupdatem => 3 MSCONFIG\Services: IJPLMSVC => 2 MSCONFIG\Services: McComponentHostService => 3 MSCONFIG\Services: MozillaMaintenance => 2 MSCONFIG\Services: RealNetworks Downloader Resolver Service => 2 MSCONFIG\Services: RealPlayer Cloud Service => 2 MSCONFIG\Services: RealPlayerUpdateSvc => 2 MSCONFIG\Services: SbieSvc => 2 MSCONFIG\Services: SkypeUpdate => 2 MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk => C:\Windows\pss\McAfee Security Scan Plus.lnk.CommonStartup MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^RealPlayer Cloud Service UI.lnk => C:\Windows\pss\RealPlayer Cloud Service UI.lnk.CommonStartup MSCONFIG\startupfolder: C:^Users^Stacey^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^IMVU.lnk => C:\Windows\pss\IMVU.lnk.Startup MSCONFIG\startupreg: AvastUI.exe => "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui MSCONFIG\startupreg: AVG_UI => "C:\Program Files (x86)\AVG\AVG2015\avgui.exe" /TRAYONLY MSCONFIG\startupreg: BlueStacks Agent => C:\Program Files (x86)\BlueStacks\HD-Agent.exe MSCONFIG\startupreg: CanonMyPrinter => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon MSCONFIG\startupreg: CanonSolutionMenuEx => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon MSCONFIG\startupreg: Gyazo => C:\Program Files (x86)\Gyazo\GyStation.exe MSCONFIG\startupreg: InboxToolbar => "C:\Program Files (x86)\Inbox Toolbar\Inbox.exe" /STARTUP MSCONFIG\startupreg: SandboxieControl => "C:\Program Files\Sandboxie\SbieCtrl.exe" MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun MSCONFIG\startupreg: SynTPEnh => %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe MSCONFIG\startupreg: TkBellExe => "C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe" -osboot ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{F8EBD418-CCC3-465A-B8BA-9746BDBBC095}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgmfapx.exe FirewallRules: [{C919BA1F-F950-449F-B748-92596AA85799}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgmfapx.exe FirewallRules: [{3B9ED36D-A6F9-4C26-A1AB-2E12D6FDB18C}] => (Allow) c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe FirewallRules: [TCP Query User{95B0241B-9AAD-4B9D-902D-670E83D5DD7A}C:\program files (x86)\snail games usa\blackgold\bin\fxgame.exe] => (Allow) C:\program files (x86)\snail games usa\blackgold\bin\fxgame.exe FirewallRules: [UDP Query User{FF934BAB-57F0-4A97-847D-33E44001D26E}C:\program files (x86)\snail games usa\blackgold\bin\fxgame.exe] => (Allow) C:\program files (x86)\snail games usa\blackgold\bin\fxgame.exe FirewallRules: [{EF9C69B8-FC4F-43E3-95EE-A7113C2BF0D5}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe FirewallRules: [{CF14D445-D45C-4121-A66A-A3DC12E9C55D}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe FirewallRules: [{F96A0683-DB1E-4F00-8FAD-C10057983323}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgdiagex.exe FirewallRules: [{A0AED06D-8BDE-455C-9760-1A49C9335ABE}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgdiagex.exe FirewallRules: [{A07CBA18-75C0-447C-AE61-86822F38B996}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe FirewallRules: [{7C1AE4CE-5B1C-49F6-9E95-49E4D4D9328D}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe FirewallRules: [{D216C28C-384A-4D25-827B-B6D3DC7F7535}] => (Allow) C:\Users\Stacey\AppData\Roaming\Spotify\spotify.exe FirewallRules: [{C945524E-E5B9-4B0C-99D4-603FB717C306}] => (Allow) C:\Users\Stacey\AppData\Roaming\Spotify\spotify.exe FirewallRules: [{90E96DE9-207A-40F3-8021-0F4F1CB3DE36}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgdiagex.exe FirewallRules: [{754022A2-8D30-4830-BE43-272F413222D3}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgdiagex.exe FirewallRules: [{3C0A6C8C-55A4-4E68-BEFE-08D827FACD77}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe FirewallRules: [{DDA4501F-A50D-4351-B0F6-E7F4E14FDD56}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe FirewallRules: [{A10B0BA2-CC42-4AEC-9FF3-1806B507B51F}] => (Allow) C:\Users\Stacey\AppData\Roaming\Spotify\spotify.exe FirewallRules: [{54D54652-C16E-427E-84D6-3402555DE7A0}] => (Allow) C:\Users\Stacey\AppData\Roaming\Spotify\spotify.exe FirewallRules: [{45C9BA51-EAF7-4624-B394-75503FBA7B65}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe FirewallRules: [{EB733257-9E9B-4105-B19C-281463288CF5}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe FirewallRules: [{94C4A835-310E-4A7D-A856-8418F0FFFB4F}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe FirewallRules: [{C308C111-B857-4B4D-8AC7-018CA5A7E4D2}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe FirewallRules: [{790D7136-1138-4F80-92C0-DD9DA16A1C4B}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgdiagex.exe FirewallRules: [{2EC35A2E-7E65-4130-B051-8D493D37198C}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgdiagex.exe FirewallRules: [{AFEA0AF9-98AB-44B4-99F1-2D019A7C81B0}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe FirewallRules: [{81CF02A9-B469-4E74-A235-91BCF45A8BCF}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe FirewallRules: [{5F5FF273-8D92-4DC8-B512-58B4B836E50C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{70F49B5F-E711-4B95-B4A2-91A95400CF6C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{89FB0FB0-75FB-431F-AC2E-28C15FF6CCF0}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{1527D104-548A-44E5-B3BB-B24CB40A38EC}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{BEAFE1EF-0200-47C3-B4AB-E4A65247CD56}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{0107834C-90BD-41D9-96DB-BA99D26D884E}] => (Allow) C:\Program Files\Andy\andy.exe FirewallRules: [{47BECB77-FCBE-4DA6-AB8C-649DB127B9E8}] => (Allow) C:\Program Files\Andy\andy.exe FirewallRules: [{BADB6C08-CC3D-44E6-969C-14E42DFBB355}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{18D69B66-1847-468D-9BF8-AF00393C1A66}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{A031388C-825B-4554-B7BF-646B234DF5F4}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{60687DF3-C1FD-40F7-8545-DD1693E8B115}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{E68E0B30-8D9B-4FF3-8159-BCE485FC9E18}] => (Allow) C:\Program Files\Andy\HandyAndy.exe FirewallRules: [{9BE2C364-5632-451A-8EFB-6A1AB695A304}] => (Allow) C:\Program Files\Andy\HandyAndy.exe FirewallRules: [{9C000084-1055-4A5E-89B7-E24115106D87}] => (Allow) C:\Users\Stacey\AppData\Roaming\Andy\Setup.exe FirewallRules: [{172CACAA-3E5A-45EB-ACD0-3EAC3FC1A385}] => (Allow) C:\Users\Stacey\AppData\Roaming\Andy\Setup.exe FirewallRules: [{F0204440-8BC3-4F2C-AC0E-C7DE7B0B7788}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Faulty Device Manager Devices ============= Name: avast! SecureLine TAP Adapter v3 Description: avast! SecureLine TAP Adapter v3 Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: TAP-Windows Provider V9 Service: aswTap Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (12/06/2015 08:15:27 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: plugin-container.exe, version: 42.0.0.5780, time stamp: 0x5632d0a4 Faulting module name: mozglue.dll, version: 42.0.0.5780, time stamp: 0x5632ba58 Exception code: 0x80000003 Fault offset: 0x0000ed50 Faulting process id: 0x1160 Faulting application start time: 0xplugin-container.exe0 Faulting application path: plugin-container.exe1 Faulting module path: plugin-container.exe2 Report Id: plugin-container.exe3 Error: (12/06/2015 01:46:35 PM) (Source: MsiInstaller) (EventID: 1024) (User: Stacey-PC) Description: Product: Adobe Acrobat Reader DC - Update '{AC76BA86-7AD7-0000-2550-AC0F094E6F00}' could not be installed. Error code 1625. Windows Installer can create logs to help troubleshoot issues with installing software packages. Use the following link for instructions on turning on logging support: http://go.microsoft.com/fwlink/?LinkId=23127 Error: (12/05/2015 01:20:58 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: GWXUX.exe, version: 6.3.9600.18064, time stamp: 0x56042d8f Faulting module name: ntdll.dll, version: 6.1.7601.19045, time stamp: 0x56259295 Exception code: 0xc0000005 Fault offset: 0x000000000004ac04 Faulting process id: 0x1314 Faulting application start time: 0xGWXUX.exe0 Faulting application path: GWXUX.exe1 Faulting module path: GWXUX.exe2 Report Id: GWXUX.exe3 Error: (12/05/2015 12:13:46 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: GWXUX.exe, version: 6.3.9600.18064, time stamp: 0x56042d8f Faulting module name: ntdll.dll, version: 6.1.7601.19045, time stamp: 0x56259295 Exception code: 0xc0000005 Fault offset: 0x000000000004ac04 Faulting process id: 0x9b0 Faulting application start time: 0xGWXUX.exe0 Faulting application path: GWXUX.exe1 Faulting module path: GWXUX.exe2 Report Id: GWXUX.exe3 Error: (12/04/2015 12:16:50 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: GWXUX.exe, version: 6.3.9600.18064, time stamp: 0x56042d8f Faulting module name: ntdll.dll, version: 6.1.7601.19045, time stamp: 0x56259295 Exception code: 0xc0000005 Fault offset: 0x000000000004ac04 Faulting process id: 0xa6c Faulting application start time: 0xGWXUX.exe0 Faulting application path: GWXUX.exe1 Faulting module path: GWXUX.exe2 Report Id: GWXUX.exe3 Error: (12/03/2015 09:26:43 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: GWXUX.exe, version: 6.3.9600.18064, time stamp: 0x56042d8f Faulting module name: ntdll.dll, version: 6.1.7601.19045, time stamp: 0x56259295 Exception code: 0xc0000005 Fault offset: 0x000000000004ac04 Faulting process id: 0xb94 Faulting application start time: 0xGWXUX.exe0 Faulting application path: GWXUX.exe1 Faulting module path: GWXUX.exe2 Report Id: GWXUX.exe3 Error: (12/02/2015 09:44:10 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: GWXUX.exe, version: 6.3.9600.18064, time stamp: 0x56042d8f Faulting module name: ntdll.dll, version: 6.1.7601.19045, time stamp: 0x56259295 Exception code: 0xc0000005 Fault offset: 0x000000000004ac04 Faulting process id: 0x7f8 Faulting application start time: 0xGWXUX.exe0 Faulting application path: GWXUX.exe1 Faulting module path: GWXUX.exe2 Report Id: GWXUX.exe3 Error: (12/02/2015 03:01:13 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object. Details: AddLegacyDriverFiles: Unable to back up image of binary VMware vmx86. System Error: The system cannot find the file specified. . Error: (12/01/2015 10:38:00 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: HD-Frontend.exe, version: 0.10.7.5601, time stamp: 0x56165df1 Faulting module name: ntdll.dll, version: 6.1.7601.19045, time stamp: 0x56258e62 Exception code: 0xc0000005 Fault offset: 0x00051365 Faulting process id: 0x1188 Faulting application start time: 0xHD-Frontend.exe0 Faulting application path: HD-Frontend.exe1 Faulting module path: HD-Frontend.exe2 Report Id: HD-Frontend.exe3 Error: (12/01/2015 10:37:55 PM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Application: HD-Frontend.exe Framework Version: v4.0.30319 Description: The process was terminated due to an unhandled exception. Exception Info: exception code c0000005, exception address 775E1365 Stack: System errors: ============= Error: (12/06/2015 09:01:29 PM) (Source: NETLOGON) (EventID: 3095) (User: ) Description: This computer is configured as a member of a workgroup, not as a member of a domain. The Netlogon service does not need to run in this configuration. Error: (12/06/2015 08:58:54 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: ) Description: %NT AUTHORITY60 has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 0.0.0.0 Update Source: %NT AUTHORITY51 Update Stage: 4.8.0204.00 Source Path: 4.8.0204.01 Signature Type: %NT AUTHORITY602 Update Type: %NT AUTHORITY604 User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: %NT AUTHORITY605 Previous Engine Version: %NT AUTHORITY606 Error code: %NT AUTHORITY607 Error description: %NT AUTHORITY608 Error: (12/06/2015 08:58:54 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: ) Description: %NT AUTHORITY60 has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.211.1944.0 Update Source: %NT AUTHORITY51 Update Stage: 4.8.0204.00 Source Path: 4.8.0204.01 Signature Type: %NT AUTHORITY602 Update Type: %NT AUTHORITY604 User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: %NT AUTHORITY605 Previous Engine Version: %NT AUTHORITY606 Error code: %NT AUTHORITY607 Error description: %NT AUTHORITY608 Error: (12/06/2015 08:58:54 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: ) Description: %NT AUTHORITY60 has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.211.1944.0 Update Source: %NT AUTHORITY51 Update Stage: 4.8.0204.00 Source Path: 4.8.0204.01 Signature Type: %NT AUTHORITY602 Update Type: %NT AUTHORITY604 User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: %NT AUTHORITY605 Previous Engine Version: %NT AUTHORITY606 Error code: %NT AUTHORITY607 Error description: %NT AUTHORITY608 Error: (12/06/2015 08:58:54 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: ) Description: %NT AUTHORITY60 has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.211.1944.0 Update Source: %NT AUTHORITY59 Update Stage: 4.8.0204.00 Source Path: 4.8.0204.01 Signature Type: %NT AUTHORITY602 Update Type: %NT AUTHORITY604 User: NT AUTHORITY\SYSTEM Current Engine Version: %NT AUTHORITY605 Previous Engine Version: %NT AUTHORITY606 Error code: %NT AUTHORITY607 Error description: %NT AUTHORITY608 Error: (12/06/2015 08:58:54 PM) (Source: DCOM) (EventID: 10005) (User: ) Description: 1084wuauserv{E60687F7-01A1-40AA-86AC-DB1CBF673334} Error: (12/06/2015 08:49:04 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: %%1068 Error: (12/06/2015 08:49:04 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: %%1068 Error: (12/06/2015 08:49:04 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: %%1068 Error: (12/06/2015 08:49:04 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: %%1068 ==================== Memory info =========================== Processor: Pentium(R) Dual-Core CPU T4500 @ 2.30GHz Percentage of memory in use: 42% Total physical RAM: 3002.92 MB Available physical RAM: 1719.8 MB Total Virtual: 6004.05 MB Available Virtual: 4642.5 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:465.66 GB) (Free:366.76 GB) NTFS Drive e: () (Removable) (Total:3.73 GB) (Free:3.49 GB) FAT32 ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 113CD2BF) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS) ======================================================== Disk: 2 (Size: 3.7 GB) (Disk ID: 00000000) Partition: GPT. ==================== End of Addition.txt ============================