MiniToolBox by Farbar Version: 02-11-2015 Ran by Lori (administrator) on 07-01-2016 at 19:45:26 Running from "C:\Users\Lori\Desktop" Microsoft Windows 7 Home Premium Service Pack 1 (X64) Model: K54C Manufacturer: ASUSTeK Computer Inc. Boot Mode: Normal *************************************************************************** ========================= Flush DNS: =================================== Windows IP Configuration Successfully flushed the DNS Resolver Cache. ========================= IE Proxy Settings: ============================== Proxy is not enabled. No Proxy Server is set. ========================= FF Proxy Settings: ============================== ========================= Hosts content: ================================= ========================= IP Configuration: ================================ 802.11n Wireless LAN Card = Wireless Network Connection (Connected) Atheros AR8151 PCI-E Gigabit Ethernet Controller (NDIS 6.20) = Local Area Connection (Media disconnected) Microsoft Virtual WiFi Miniport Adapter = Wireless Network Connection 2 (Media disconnected) # ---------------------------------- # IPv4 Configuration # ---------------------------------- pushd interface ipv4 reset set global defaultcurhoplimit=64 icmpredirects=enabled taskoffload=enabled set subinterface interface=?? subinterface=ethernet_9 mtu=1500 popd # End of IPv4 configuration Windows IP Configuration Host Name . . . . . . . . . . . . : Lori-PC Primary Dns Suffix . . . . . . . : Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No Wireless LAN adapter Wireless Network Connection 2: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Microsoft Virtual WiFi Miniport Adapter Physical Address. . . . . . . . . : 84-4B-F5-1C-3E-A9 DHCP Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : Yes Wireless LAN adapter Wireless Network Connection: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : 802.11n Wireless LAN Card Physical Address. . . . . . . . . : 84-4B-F5-1C-3E-A8 DHCP Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : Yes Link-local IPv6 Address . . . . . : fe80::d44d:66fc:4d5f:4e7d%12(Preferred) IPv4 Address. . . . . . . . . . . : 192.168.1.8(Preferred) Subnet Mask . . . . . . . . . . . : 255.255.255.0 Lease Obtained. . . . . . . . . . : Thursday, January 07, 2016 12:35:45 PM Lease Expires . . . . . . . . . . : Friday, January 08, 2016 12:35:49 PM Default Gateway . . . . . . . . . : 192.168.1.1 DHCP Server . . . . . . . . . . . : 192.168.1.1 DHCPv6 IAID . . . . . . . . . . . : 394546165 DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-17-7D-5C-61-30-85-A9-0C-45-F0 DNS Servers . . . . . . . . . . . : 192.168.1.1 NetBIOS over Tcpip. . . . . . . . : Enabled Ethernet adapter Local Area Connection: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Atheros AR8151 PCI-E Gigabit Ethernet Controller (NDIS 6.20) Physical Address. . . . . . . . . : 30-85-A9-0C-45-F0 DHCP Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : Yes Tunnel adapter isatap.{EE7F0A02-F0BD-448F-825C-F9055569A966}: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2 Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes Tunnel adapter Local Area Connection* 9: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes Tunnel adapter isatap.{F6F95F85-58FC-4CC7-A73E-871FFA3BB3C1}: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Microsoft ISATAP Adapter #4 Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes Tunnel adapter isatap.{7CFE7C39-4260-412C-B9CD-2B4FF7FCDC30}: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Microsoft ISATAP Adapter #6 Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes Tunnel adapter Local Area Connection* 13: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Microsoft ISATAP Adapter #7 Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes DNS request timed out. timeout was 2 seconds. Server: UnKnown Address: 192.168.1.1 DNS request timed out. timeout was 2 seconds. DNS request timed out. timeout was 2 seconds. DNS request timed out. timeout was 2 seconds. DNS request timed out. timeout was 2 seconds. Pinging google.com [216.58.217.142] with 32 bytes of data: Reply from 216.58.217.142: bytes=32 time=66ms TTL=48 Reply from 216.58.217.142: bytes=32 time=67ms TTL=48 Ping statistics for 216.58.217.142: Packets: Sent = 2, Received = 2, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 66ms, Maximum = 67ms, Average = 66ms DNS request timed out. timeout was 2 seconds. Server: UnKnown Address: 192.168.1.1 DNS request timed out. timeout was 2 seconds. DNS request timed out. timeout was 2 seconds. DNS request timed out. timeout was 2 seconds. DNS request timed out. timeout was 2 seconds. Pinging yahoo.com [98.139.183.24] with 32 bytes of data: Reply from 98.139.183.24: bytes=32 time=140ms TTL=43 Reply from 98.139.183.24: bytes=32 time=121ms TTL=43 Ping statistics for 98.139.183.24: Packets: Sent = 2, Received = 2, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 121ms, Maximum = 140ms, Average = 130ms Pinging 127.0.0.1 with 32 bytes of data: Reply from 127.0.0.1: bytes=32 time<1ms TTL=64 Reply from 127.0.0.1: bytes=32 time<1ms TTL=64 Ping statistics for 127.0.0.1: Packets: Sent = 2, Received = 2, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 0ms, Maximum = 0ms, Average = 0ms =========================================================================== Interface List 17...84 4b f5 1c 3e a9 ......Microsoft Virtual WiFi Miniport Adapter 12...84 4b f5 1c 3e a8 ......802.11n Wireless LAN Card 11...30 85 a9 0c 45 f0 ......Atheros AR8151 PCI-E Gigabit Ethernet Controller (NDIS 6.20) 1...........................Software Loopback Interface 1 18...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2 14...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface 20...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #4 30...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #6 34...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #7 =========================================================================== IPv4 Route Table =========================================================================== Active Routes: Network Destination Netmask Gateway Interface Metric 0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.8 40 127.0.0.0 255.0.0.0 On-link 127.0.0.1 306 127.0.0.1 255.255.255.255 On-link 127.0.0.1 306 127.255.255.255 255.255.255.255 On-link 127.0.0.1 306 192.168.1.0 255.255.255.0 On-link 192.168.1.8 296 192.168.1.8 255.255.255.255 On-link 192.168.1.8 296 192.168.1.255 255.255.255.255 On-link 192.168.1.8 296 224.0.0.0 240.0.0.0 On-link 127.0.0.1 306 224.0.0.0 240.0.0.0 On-link 192.168.1.8 296 255.255.255.255 255.255.255.255 On-link 127.0.0.1 306 255.255.255.255 255.255.255.255 On-link 192.168.1.8 296 =========================================================================== Persistent Routes: None IPv6 Route Table =========================================================================== Active Routes: If Metric Network Destination Gateway 1 306 ::1/128 On-link 12 296 fe80::/64 On-link 12 296 fe80::d44d:66fc:4d5f:4e7d/128 On-link 1 306 ff00::/8 On-link 12 296 ff00::/8 On-link =========================================================================== Persistent Routes: None ========================= Winsock entries ===================================== Catalog5 01 C:\windows\SysWOW64\NLAapi.dll [52224] (Microsoft Corporation) Catalog5 02 C:\windows\SysWOW64\napinsp.dll [52224] (Microsoft Corporation) Catalog5 03 C:\windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation) Catalog5 04 C:\windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation) Catalog5 05 C:\windows\SysWOW64\wshbth.dll [36352] (Microsoft Corporation) Catalog5 06 C:\windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation) Catalog5 07 C:\windows\SysWOW64\winrnr.dll [20992] (Microsoft Corporation) Catalog5 08 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145280] (Microsoft Corp.) Catalog5 09 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145280] (Microsoft Corp.) Catalog5 10 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704] (Apple Inc.) Catalog9 01 C:\windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation) Catalog9 02 C:\windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation) Catalog9 03 C:\windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation) Catalog9 04 C:\windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation) Catalog9 05 C:\windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation) Catalog9 06 C:\windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation) Catalog9 07 C:\windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation) Catalog9 08 C:\windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation) Catalog9 09 C:\windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation) Catalog9 10 C:\windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation) Catalog9 11 C:\windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation) x64-Catalog5 01 C:\Windows\System32\NLAapi.dll [70656] (Microsoft Corporation) x64-Catalog5 02 C:\Windows\System32\napinsp.dll [68096] (Microsoft Corporation) x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation) x64-Catalog5 04 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation) x64-Catalog5 05 C:\Windows\System32\wshbth.dll [47104] (Microsoft Corporation) x64-Catalog5 06 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation) x64-Catalog5 07 C:\Windows\System32\winrnr.dll [28672] (Microsoft Corporation) x64-Catalog5 08 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [171392] (Microsoft Corp.) x64-Catalog5 09 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [171392] (Microsoft Corp.) x64-Catalog5 10 C:\Program Files\Bonjour\mdnsNSP.dll [132968] (Apple Inc.) x64-Catalog9 01 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation) x64-Catalog9 02 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation) x64-Catalog9 03 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation) x64-Catalog9 04 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation) x64-Catalog9 05 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation) x64-Catalog9 06 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation) x64-Catalog9 07 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation) x64-Catalog9 08 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation) x64-Catalog9 09 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation) x64-Catalog9 10 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation) x64-Catalog9 11 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation) ========================= Event log errors: =============================== Application errors: ================== Error: (01/07/2016 11:40:50 AM) (Source: HeimdalSecureDNS) (User: ) Description: Service cannot be started. System.NullReferenceException: Object reference not set to an instance of an object. at ‍‫‌‬‏‏‪‮‍‬‍‌‬‭‮‎‬​‎‏‪‫‍‬‎‮.​‪‎‮‬​‌‏​‍‮‎‎‍‫‫‌‭‮‌‪‮‪‪‮‮(Int32 ) at ‍‫‌‬‏‏‪‮‍‬‍‌‬‭‮‎‬​‎‏‪‫‍‬‎‮.‍‫‪‮‎‍‬​‮‎‭‌‏‮‬‭‎‮‪‍​​‎‪​‏‮(String[] ) at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error: (01/07/2016 11:33:13 AM) (Source: VSS) (User: ) Description: Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005, Access is denied. . This is often caused by incorrect security settings in either the writer or requestor process. Operation: Gathering Writer Data Context: Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220} Writer Name: System Writer Writer Instance ID: {7270f761-9a07-4e55-b29b-dec753f1e6f1} Error: (01/07/2016 11:27:41 AM) (Source: HeimdalSecureDNS) (User: ) Description: Service cannot be started. System.NullReferenceException: Object reference not set to an instance of an object. at ‍‫‌‬‏‏‪‮‍‬‍‌‬‭‮‎‬​‎‏‪‫‍‬‎‮.​‪‎‮‬​‌‏​‍‮‎‎‍‫‫‌‭‮‌‪‮‪‪‮‮(Int32 ) at ‍‫‌‬‏‏‪‮‍‬‍‌‬‭‮‎‬​‎‏‪‫‍‬‎‮.‍‫‪‮‎‍‬​‮‎‭‌‏‮‬‭‎‮‪‍​​‎‪​‏‮(String[] ) at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error: (01/07/2016 10:57:43 AM) (Source: HeimdalSecureDNS) (User: ) Description: Service cannot be started. System.NullReferenceException: Object reference not set to an instance of an object. at ‍‫‌‬‏‏‪‮‍‬‍‌‬‭‮‎‬​‎‏‪‫‍‬‎‮.​‪‎‮‬​‌‏​‍‮‎‎‍‫‫‌‭‮‌‪‮‪‪‮‮(Int32 ) at ‍‫‌‬‏‏‪‮‍‬‍‌‬‭‮‎‬​‎‏‪‫‍‬‎‮.‍‫‪‮‎‍‬​‮‎‭‌‏‮‬‭‎‮‪‍​​‎‪​‏‮(String[] ) at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error: (01/07/2016 10:45:14 AM) (Source: HeimdalSecureDNS) (User: ) Description: Service cannot be started. System.NullReferenceException: Object reference not set to an instance of an object. at ‍‫‌‬‏‏‪‮‍‬‍‌‬‭‮‎‬​‎‏‪‫‍‬‎‮.​‪‎‮‬​‌‏​‍‮‎‎‍‫‫‌‭‮‌‪‮‪‪‮‮(Int32 ) at ‍‫‌‬‏‏‪‮‍‬‍‌‬‭‮‎‬​‎‏‪‫‍‬‎‮.‍‫‪‮‎‍‬​‮‎‭‌‏‮‬‭‎‮‪‍​​‎‪​‏‮(String[] ) at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error: (01/07/2016 10:00:37 AM) (Source: VSS) (User: ) Description: Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005, Access is denied. . This is often caused by incorrect security settings in either the writer or requestor process. Operation: Gathering Writer Data Context: Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220} Writer Name: System Writer Writer Instance ID: {da7806ba-e42b-4bb3-9e2a-6f49b50a9c90} Error: (01/07/2016 09:58:46 AM) (Source: HeimdalSecureDNS) (User: ) Description: Service cannot be started. System.NullReferenceException: Object reference not set to an instance of an object. at ‍‫‌‬‏‏‪‮‍‬‍‌‬‭‮‎‬​‎‏‪‫‍‬‎‮.​‪‎‮‬​‌‏​‍‮‎‎‍‫‫‌‭‮‌‪‮‪‪‮‮(Int32 ) at ‍‫‌‬‏‏‪‮‍‬‍‌‬‭‮‎‬​‎‏‪‫‍‬‎‮.‍‫‪‮‎‍‬​‮‎‭‌‏‮‬‭‎‮‪‍​​‎‪​‏‮(String[] ) at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error: (01/07/2016 09:13:12 AM) (Source: HeimdalSecureDNS) (User: ) Description: Service cannot be started. System.NullReferenceException: Object reference not set to an instance of an object. at ‍‫‌‬‏‏‪‮‍‬‍‌‬‭‮‎‬​‎‏‪‫‍‬‎‮.​‪‎‮‬​‌‏​‍‮‎‎‍‫‫‌‭‮‌‪‮‪‪‮‮(Int32 ) at ‍‫‌‬‏‏‪‮‍‬‍‌‬‭‮‎‬​‎‏‪‫‍‬‎‮.‍‫‪‮‎‍‬​‮‎‭‌‏‮‬‭‎‮‪‍​​‎‪​‏‮(String[] ) at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error: (01/06/2016 09:34:42 PM) (Source: HeimdalSecureDNS) (User: ) Description: Service cannot be started. System.NullReferenceException: Object reference not set to an instance of an object. at ‍‫‌‬‏‏‪‮‍‬‍‌‬‭‮‎‬​‎‏‪‫‍‬‎‮.​‪‎‮‬​‌‏​‍‮‎‎‍‫‫‌‭‮‌‪‮‪‪‮‮(Int32 ) at ‍‫‌‬‏‏‪‮‍‬‍‌‬‭‮‎‬​‎‏‪‫‍‬‎‮.‍‫‪‮‎‍‬​‮‎‭‌‏‮‬‭‎‮‪‍​​‎‪​‏‮(String[] ) at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error: (01/06/2016 08:09:45 PM) (Source: HeimdalSecureDNS) (User: ) Description: Service cannot be started. System.NullReferenceException: Object reference not set to an instance of an object. at ‍‫‌‬‏‏‪‮‍‬‍‌‬‭‮‎‬​‎‏‪‫‍‬‎‮.​‪‎‮‬​‌‏​‍‮‎‎‍‫‫‌‭‮‌‪‮‪‪‮‮(Int32 ) at ‍‫‌‬‏‏‪‮‍‬‍‌‬‭‮‎‬​‎‏‪‫‍‬‎‮.‍‫‪‮‎‍‬​‮‎‭‌‏‮‬‭‎‮‪‍​​‎‪​‏‮(String[] ) at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) System errors: ============= Error: (01/07/2016 11:41:43 AM) (Source: DCOM) (User: NT AUTHORITY) Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC) Error: (01/07/2016 11:34:09 AM) (Source: Service Control Manager) (User: ) Description: The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Windows Search service, but this action failed with the following error: %%1056 Error: (01/07/2016 11:33:39 AM) (Source: Service Control Manager) (User: ) Description: The Software Protection service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service. Error: (01/07/2016 11:33:39 AM) (Source: Service Control Manager) (User: ) Description: The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service. Error: (01/07/2016 11:33:39 AM) (Source: Service Control Manager) (User: ) Description: The VIPRE Internet Security service terminated unexpectedly. It has done this 1 time(s). Error: (01/07/2016 11:33:39 AM) (Source: Service Control Manager) (User: ) Description: The WebProxy service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 200 milliseconds: Restart the service. Error: (01/07/2016 11:33:39 AM) (Source: Service Control Manager) (User: ) Description: The Heimdal Client Host service terminated unexpectedly. It has done this 1 time(s). Error: (01/07/2016 11:33:39 AM) (Source: Service Control Manager) (User: ) Description: The Adobe Acrobat Update Service service terminated unexpectedly. It has done this 1 time(s). Error: (01/07/2016 11:33:39 AM) (Source: Service Control Manager) (User: ) Description: The Windows Media Player Network Sharing Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service. Error: (01/07/2016 11:33:39 AM) (Source: Service Control Manager) (User: ) Description: The Windows Modules Installer service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service. Microsoft Office Sessions: ========================= Error: (01/07/2016 11:40:50 AM) (Source: HeimdalSecureDNS)(User: ) Description: Service cannot be started. System.NullReferenceException: Object reference not set to an instance of an object. at ‍‫‌‬‏‏‪‮‍‬‍‌‬‭‮‎‬​‎‏‪‫‍‬‎‮.​‪‎‮‬​‌‏​‍‮‎‎‍‫‫‌‭‮‌‪‮‪‪‮‮(Int32 ) at ‍‫‌‬‏‏‪‮‍‬‍‌‬‭‮‎‬​‎‏‪‫‍‬‎‮.‍‫‪‮‎‍‬​‮‎‭‌‏‮‬‭‎‮‪‍​​‎‪​‏‮(String[] ) at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error: (01/07/2016 11:33:13 AM) (Source: VSS)(User: ) Description: 0x80070005, Access is denied. Operation: Gathering Writer Data Context: Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220} Writer Name: System Writer Writer Instance ID: {7270f761-9a07-4e55-b29b-dec753f1e6f1} Error: (01/07/2016 11:27:41 AM) (Source: HeimdalSecureDNS)(User: ) Description: Service cannot be started. System.NullReferenceException: Object reference not set to an instance of an object. at ‍‫‌‬‏‏‪‮‍‬‍‌‬‭‮‎‬​‎‏‪‫‍‬‎‮.​‪‎‮‬​‌‏​‍‮‎‎‍‫‫‌‭‮‌‪‮‪‪‮‮(Int32 ) at ‍‫‌‬‏‏‪‮‍‬‍‌‬‭‮‎‬​‎‏‪‫‍‬‎‮.‍‫‪‮‎‍‬​‮‎‭‌‏‮‬‭‎‮‪‍​​‎‪​‏‮(String[] ) at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error: (01/07/2016 10:57:43 AM) (Source: HeimdalSecureDNS)(User: ) Description: Service cannot be started. System.NullReferenceException: Object reference not set to an instance of an object. at ‍‫‌‬‏‏‪‮‍‬‍‌‬‭‮‎‬​‎‏‪‫‍‬‎‮.​‪‎‮‬​‌‏​‍‮‎‎‍‫‫‌‭‮‌‪‮‪‪‮‮(Int32 ) at ‍‫‌‬‏‏‪‮‍‬‍‌‬‭‮‎‬​‎‏‪‫‍‬‎‮.‍‫‪‮‎‍‬​‮‎‭‌‏‮‬‭‎‮‪‍​​‎‪​‏‮(String[] ) at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error: (01/07/2016 10:45:14 AM) (Source: HeimdalSecureDNS)(User: ) Description: Service cannot be started. System.NullReferenceException: Object reference not set to an instance of an object. at ‍‫‌‬‏‏‪‮‍‬‍‌‬‭‮‎‬​‎‏‪‫‍‬‎‮.​‪‎‮‬​‌‏​‍‮‎‎‍‫‫‌‭‮‌‪‮‪‪‮‮(Int32 ) at ‍‫‌‬‏‏‪‮‍‬‍‌‬‭‮‎‬​‎‏‪‫‍‬‎‮.‍‫‪‮‎‍‬​‮‎‭‌‏‮‬‭‎‮‪‍​​‎‪​‏‮(String[] ) at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error: (01/07/2016 10:00:37 AM) (Source: VSS)(User: ) Description: 0x80070005, Access is denied. Operation: Gathering Writer Data Context: Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220} Writer Name: System Writer Writer Instance ID: {da7806ba-e42b-4bb3-9e2a-6f49b50a9c90} Error: (01/07/2016 09:58:46 AM) (Source: HeimdalSecureDNS)(User: ) Description: Service cannot be started. System.NullReferenceException: Object reference not set to an instance of an object. at ‍‫‌‬‏‏‪‮‍‬‍‌‬‭‮‎‬​‎‏‪‫‍‬‎‮.​‪‎‮‬​‌‏​‍‮‎‎‍‫‫‌‭‮‌‪‮‪‪‮‮(Int32 ) at ‍‫‌‬‏‏‪‮‍‬‍‌‬‭‮‎‬​‎‏‪‫‍‬‎‮.‍‫‪‮‎‍‬​‮‎‭‌‏‮‬‭‎‮‪‍​​‎‪​‏‮(String[] ) at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error: (01/07/2016 09:13:12 AM) (Source: HeimdalSecureDNS)(User: ) Description: Service cannot be started. System.NullReferenceException: Object reference not set to an instance of an object. at ‍‫‌‬‏‏‪‮‍‬‍‌‬‭‮‎‬​‎‏‪‫‍‬‎‮.​‪‎‮‬​‌‏​‍‮‎‎‍‫‫‌‭‮‌‪‮‪‪‮‮(Int32 ) at ‍‫‌‬‏‏‪‮‍‬‍‌‬‭‮‎‬​‎‏‪‫‍‬‎‮.‍‫‪‮‎‍‬​‮‎‭‌‏‮‬‭‎‮‪‍​​‎‪​‏‮(String[] ) at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error: (01/06/2016 09:34:42 PM) (Source: HeimdalSecureDNS)(User: ) Description: Service cannot be started. System.NullReferenceException: Object reference not set to an instance of an object. at ‍‫‌‬‏‏‪‮‍‬‍‌‬‭‮‎‬​‎‏‪‫‍‬‎‮.​‪‎‮‬​‌‏​‍‮‎‎‍‫‫‌‭‮‌‪‮‪‪‮‮(Int32 ) at ‍‫‌‬‏‏‪‮‍‬‍‌‬‭‮‎‬​‎‏‪‫‍‬‎‮.‍‫‪‮‎‍‬​‮‎‭‌‏‮‬‭‎‮‪‍​​‎‪​‏‮(String[] ) at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error: (01/06/2016 08:09:45 PM) (Source: HeimdalSecureDNS)(User: ) Description: Service cannot be started. System.NullReferenceException: Object reference not set to an instance of an object. at ‍‫‌‬‏‏‪‮‍‬‍‌‬‭‮‎‬​‎‏‪‫‍‬‎‮.​‪‎‮‬​‌‏​‍‮‎‎‍‫‫‌‭‮‌‪‮‪‪‮‮(Int32 ) at ‍‫‌‬‏‏‪‮‍‬‍‌‬‭‮‎‬​‎‏‪‫‍‬‎‮.‍‫‪‮‎‍‬​‮‎‭‌‏‮‬‭‎‮‪‍​​‎‪​‏‮(String[] ) at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) CodeIntegrity Errors: =================================== Date: 2015-10-06 08:02:11.772 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Users\Lori\recovered\appid_3.sys because the set of per-page image hashes could not be found on the system. Date: 2015-10-06 08:02:11.694 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Users\Lori\recovered\appid_3.sys because the set of per-page image hashes could not be found on the system. Date: 2015-10-06 08:02:11.616 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Users\Lori\recovered\appid_3.sys because the set of per-page image hashes could not be found on the system. Date: 2015-10-06 08:02:11.538 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Users\Lori\recovered\appid_3.sys because the set of per-page image hashes could not be found on the system. Date: 2015-10-06 08:01:55.470 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Users\Lori\recovered\appidapi_5.dll because the set of per-page image hashes could not be found on the system. Date: 2015-10-06 08:01:55.392 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Users\Lori\recovered\appidapi_5.dll because the set of per-page image hashes could not be found on the system. Date: 2015-10-06 08:01:55.282 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Users\Lori\recovered\appidapi_5.dll because the set of per-page image hashes could not be found on the system. Date: 2015-10-06 08:01:55.189 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Users\Lori\recovered\appidapi_5.dll because the set of per-page image hashes could not be found on the system. Date: 2015-10-06 08:01:54.830 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Users\Lori\recovered\appidapi_8.dll because the set of per-page image hashes could not be found on the system. Date: 2015-10-06 08:01:54.752 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Users\Lori\recovered\appidapi_8.dll because the set of per-page image hashes could not be found on the system. =========================== Installed Programs ============================ Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.009.20079 - Adobe Systems Incorporated) Adobe Flash Player 19 ActiveX (HKLM-x32\...\{70F0F88A-387B-40EB-93BD-9877DB9D668D}) (Version: 19.0.0.207 - Adobe Systems Incorporated) Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.235 - Adobe Systems Incorporated) Adobe Shockwave Player 12.2 (HKLM-x32\...\{E38C529D-DD73-4002-8489-E09CEBD9BF32}) (Version: 12.2.0.162 - Adobe Systems, Inc) Alcor Micro USB Card Reader (HKLM-x32\...\{4555BB9E-E715-4260-A178-E8EFD2B653E3}) (Version: 1.2.0117.08443 - Alcor Micro Corp.) Hidden Alcor Micro USB Card Reader (HKLM-x32\...\AmUStor) (Version: 1.2.0117.08443 - Alcor Micro Corp.) Apple Application Support (32-bit) (HKLM-x32\...\{AFA1153A-F547-409B-B837-3A0D6C5A3FEC}) (Version: 3.1.3 - Apple Inc.) Apple Application Support (64-bit) (HKLM\...\{D7B824DE-DA32-4772-9E5E-39C5158136A7}) (Version: 3.1.3 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{C4123106-B685-48E6-B9BD-E4F911841EB4}) (Version: 8.1.1.3 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.14.4.0 - Asmedia Technology) ASUS AI Recovery (HKLM-x32\...\{D39F0676-163E-4595-A917-E28F99BBD4D2}) (Version: 1.0.24 - ASUS) ASUS FancyStart (HKLM-x32\...\{C944B4C5-1C4D-4D95-8AC0-7CEF13914131}) (Version: 1.1.1 - ASUSTeK Computer Inc.) ASUS Instant Connect (HKLM-x32\...\{89ECB85A-D933-4CEA-9116-5CBC9C2ED95B}) (Version: 1.2.2 - ASUS) ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.0.29 - ASUS) ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.1.7 - ASUS) ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 1.2.1 - ASUS) ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 1.02.0041 - ASUS) ASUS Virtual Camera (HKLM-x32\...\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}) (Version: 1.0.25 - ASUS) ASUS WebStorage (HKLM-x32\...\ASUS WebStorage) (Version: 3.0.108.222 - eCareme Technologies, Inc.) AsusVibe2.0 (HKLM-x32\...\Asus Vibe2.0) (Version: 2.0.9.157 - ASUSTEK) ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0015 - ASUS) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) CCleaner (HKLM\...\CCleaner) (Version: 5.07 - Piriform) Control ActiveX de Windows Live Mesh para conexiones remotas (HKLM-x32\...\{04668DF2-D32F-4555-9C7E-35523DCD6544}) (Version: 15.4.5722.2 - Microsoft Corporation) Contrôle ActiveX Windows Live Mesh pour connexions à distance (HKLM-x32\...\{55D003F4-9599-44BF-BA9E-95D060730DD3}) (Version: 15.4.5722.2 - Microsoft Corporation) Controlo ActiveX do Windows Live Mesh para Ligações Remotas (HKLM-x32\...\{E54EEB5D-41ED-40FE-B4A8-8565DB81469B}) (Version: 15.4.5722.2 - Microsoft Corporation) CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.3624 - CyberLink Corp.) CyberLink Media Suite (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 8.0.2926 - CyberLink Corp.) CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 7.0.0.1126 - CyberLink Corp.) D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden DIRECTV Player (HKLM-x32\...\{43D1B973-3D12-42ba-9E6E-56A8FEFF5250}) (Version: 8.0 - DIRECTV) Epson Customer Participation (HKLM\...\{814FA673-A085-403C-9545-747FC1495069}) (Version: 1.0.0.0 - SEIKO EPSON CORPORATION) Epson Event Manager (HKLM-x32\...\{BECE9CCD-83F6-4BAA-9B26-227DF7D2E932}) (Version: 3.01.0000 - Seiko Epson Corporation) Epson E-Web Print (HKLM-x32\...\{896667C8-53F8-47B8-B6B0-B113B10F05BC}) (Version: 1.20.0000 - SEIKO EPSON CORPORATION) EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation) EPSON XP-400 Series Printer Uninstall (HKLM\...\EPSON XP-400 Series) (Version: - SEIKO EPSON Corporation) EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.5.00 - SEIKO EPSON CORPORATION) Fast Boot (HKLM\...\{13F4A7F3-EABC-4261-AF6B-1317777F0755}) (Version: 1.0.10 - ASUS) Free Mp3 Wma Converter V 2.2 (HKLM-x32\...\Free Mp3 Wma Converter_is1) (Version: 2.2.0.0 - Koyote Soft) Galeria de Fotografias do Windows Live (HKLM-x32\...\{0EC0B576-90F9-43C3-8FAD-A4902DF4B8F4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galería fotográfica de Windows Live (HKLM-x32\...\{E85A4EFC-82F2-4CEE-8A8E-62FDAD353A66}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galerie de photos Windows Live (HKLM-x32\...\{488F0347-C4A7-4374-91A7-30818BEDA710}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Google Chrome (HKLM-x32\...\{D325A4AE-0EAB-3726-912C-6D0A56A95505}) (Version: 47.0.2526.106 - Google, Inc.) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.29.1 - Google Inc.) Hidden Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.21.79 - Google Inc.) Hidden Heimdal Agent (HKLM-x32\...\{51BEF1D4-A3FA-4B18-829C-3876018F501A}) (Version: 2.0.29 - Heimdal Security) iCloud (HKLM\...\{6096C0CC-7E19-4355-87F0-627EC5AA146D}) (Version: 4.0.3.56 - Apple Inc.) InstantOn for NB (HKLM-x32\...\{749F674B-2674-47E8-879C-5626A06B2A91}) (Version: 2.2.0 - ASUS) Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2559 - Intel Corporation) iTunes (HKLM\...\{93F2A022-6C37-48B8-B241-FFABD9F60C30}) (Version: 12.1.2.27 - Apple Inc.) Java 8 Update 66 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218066F0}) (Version: 8.0.660.18 - Oracle Corporation) Junk Mail filter update (HKLM-x32\...\{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Mesh Runtime (HKLM-x32\...\{8C6D6116-B724-4810-8F2D-D047E6B7D68E}) (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation) Microsoft Mouse and Keyboard Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 1.1.500.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41105.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Mozilla Firefox 43.0.4 (x64 en-US) (HKLM\...\Mozilla Firefox 43.0.4 (x64 en-US)) (Version: 43.0.4 - Mozilla) Mozilla Firefox 43.0.4 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 43.0.4 (x86 en-US)) (Version: 43.0.4 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.4 - Mozilla) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation) myBitCast 1.0.0.3 (HKLM\...\myBitCast) (Version: 1.0.0.3 - ASUS Cloud Corporation) NETGEAR Genie (HKLM-x32\...\NETGEAR Genie) (Version: 2.4.18.00 - NETGEAR Inc.) OpenOffice.org 3.4.1 (HKLM-x32\...\{9F1F2AEA-C72A-4DD6-991E-C5506A5625E4}) (Version: 3.41.9593 - Apache Software Foundation) P@H-Protocol (HKLM-x32\...\{14F936AB-5D31-410E-A4E2-70AE504712F2}) (Version: 3.0.8.6 - Valassis) Photobucket Backup (HKLM-x32\...\{06BA6321-B6FC-4A36-8571-B642404D22B6}) (Version: 1.0.5.2168 - Photobucket) QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.) Ralink RT2860 Wireless LAN Card (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309B0}) (Version: 1.2.0.40 - Ralink) ReadySHARE Vault (HKLM-x32\...\ReadySHARE Vault) (Version: 3.0 - Genie9) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6454 - Realtek Semiconductor Corp.) Sonic Focus (HKLM-x32\...\{09BCB9CE-964B-4BDA-AE46-B5A0ABEF1D3F}) (Version: 1.0.0.4 - Synopsys ) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.6.0 - Synaptics Incorporated) VIPRE Internet Security (HKLM-x32\...\{97085A46-8AB4-4F28-9CE8-6145C0E0F9E3}) (Version: 9.0.1.4 - ThreatTrack Security, Inc.) Hidden VIPRE Internet Security (HKLM-x32\...\{C1D1FC57-3EB9-4B21-BCA3-F1C927508200}) (Version: 9.0.1.4 - ThreatTrack Security Inc.) Windows Driver Package - OLYMPUS IMAGING CORP. Camera Communication Driver Package (09/09/2009 1.0.0.0) (HKLM\...\2C1C2F29FADF39F533CEEE67B90F07A5306A4BDB) (Version: 09/09/2009 1.0.0.0 - OLYMPUS IMAGING CORP.) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation) Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation) WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.41.0 - ASUS) Yahoo! Software Update (HKLM-x32\...\Yahoo! Software Update) (Version: - ) ========================= Devices: ================================ ========================= Memory info: =================================== Percentage of memory in use: 35% Total physical RAM: 4000.13 MB Available physical RAM: 2562.91 MB Total Virtual: 9998.33 MB Available Virtual: 8215.19 MB ========================= Partitions: ===================================== 1 Drive c: (OS) (Fixed) (Total:119.24 GB) (Free:67.98 GB) NTFS 2 Drive d: (DATA) (Fixed) (Total:153.76 GB) (Free:153.66 GB) NTFS 4 Drive f: (USB20FD) (Removable) (Total:14.89 GB) (Free:14.65 GB) FAT32 ========================= Users: ======================================== User accounts for \\LORI-PC Administrator Guest Kevin Lori ========================= Minidump Files ================================== C:\windows\Minidump\010616-43103-01.dmp C:\windows\Minidump\010716-25006-01.dmp C:\windows\Minidump\010716-32073-01.dmp C:\windows\Minidump\010716-33150-01.dmp ========================= Restore Points ================================== 26-12-2015 20:10:18 Windows Software Development Kit - Windows 10.0.10586.15 29-12-2015 17:06:58 Installed Software Updater 29-12-2015 20:23:18 Installed Heimdal Agent 29-12-2015 20:26:10 Installed Heimdal Agent 30-12-2015 01:59:14 Installed Heimdal Agent 30-12-2015 12:50:03 Removed RevTraxPrintMyCoupon 30-12-2015 18:46:31 Removed Software Updater 30-12-2015 18:56:34 Removed Software Updater 07-01-2016 02:08:34 Scheduled Checkpoint 07-01-2016 14:19:58 Removed Digital Coupon Printer 07-01-2016 14:46:24 Restore Point Created by FRST 07-01-2016 15:00:40 Restore Point Created by FRST 07-01-2016 15:55:19 Restore Point Created by FRST 07-01-2016 16:33:14 Restore Point Created by FRST 07-01-2016 16:54:45 Removed Itibiti RTC **** End of log ****