Additional scan result of Farbar Recovery Scan Tool (x64) Version:06-05-2016 02 Ran by J. Albert Yanez (2016-05-06 11:07:10) Running from C:\Users\J. Albert Yanez\Desktop Windows 7 Home Premium Service Pack 1 (X64) (2011-09-29 06:22:16) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-3117627532-974020511-1547892993-500 - Administrator - Disabled) Guest (S-1-5-21-3117627532-974020511-1547892993-501 - Limited - Enabled) HomeGroupUser$ (S-1-5-21-3117627532-974020511-1547892993-1006 - Limited - Enabled) J. Albert Yanez (S-1-5-21-3117627532-974020511-1547892993-1000 - Administrator - Enabled) => C:\Users\J. Albert Yanez ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: AVG Internet Security (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413} AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: AVG Internet Security (Enabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE} FW: AVG Internet Security (Enabled) {757AB44A-78C2-7D1A-E37F-CA42A037B368} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 7-Zip 4.65 (HKLM-x32\...\7-Zip) (Version: - ) Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.010.20060 - Adobe Systems Incorporated) Adobe Flash Player 21 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 21.0.0.213 - Adobe Systems Incorporated) Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.213 - Adobe Systems Incorporated) AnswerWorks 5.0 English Runtime (HKLM-x32\...\{DBCC73BA-C69A-4BF5-B4BF-F07501EE7039}) (Version: 5.0.7 - Vantage Software Technologies) ANT Drivers Installer x64 (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden Apple Application Support (32-bit) (HKLM-x32\...\{7FE25256-B7C1-480D-B736-10A67A833AEA}) (Version: 3.2 - Apple Inc.) Apple Application Support (64-bit) (HKLM\...\{B255D495-4734-4E9B-B4F5-96702FD4A7B9}) (Version: 3.2 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{5D61F006-168C-4B8B-B7FD-F113C10AE0E4}) (Version: 8.2.1.3 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ATI Catalyst Install Manager (HKLM\...\{576A97E3-1A79-6215-49DE-AA358AF47420}) (Version: 3.0.769.0 - ATI Technologies, Inc.) Avery Wizard 5.0 (HKLM-x32\...\{FC3B3A5D-7058-4627-9F1E-F95CC38B6054}) (Version: 5.0.5 - Avery) AVG (Version: 16.71.7596 - AVG Technologies) Hidden AVG 2016 (Version: 16.0.4568 - AVG Technologies) Hidden AVG Protection (HKLM\...\AVG) (Version: 2016.71.7596 - AVG Technologies) AVG SafeGuard toolbar (HKLM-x32\...\AVG SafeGuard toolbar) (Version: 19.4.0.508 - AVG Technologies) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.6.0.0 - Canon Inc.) Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: - Canon Inc.) Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: 4.0.0 - Canon Inc.) Canon MX920 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX920_series) (Version: 1.00 - Canon Inc.) Canon MX920 series On-screen Manual (HKLM-x32\...\Canon MX920 series On-screen Manual) (Version: 7.6.0 - Canon Inc.) Canon MX920 series User Registration (HKLM-x32\...\Canon MX920 series User Registration) (Version: - ‭Canon Inc.) Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 1.1.2 - Canon Inc.) Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 1.0.1 - Canon Inc.) Canon My Printer (HKLM\...\CanonMyPrinter) (Version: - ) Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.1.0 - Canon Inc.) Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.1.0 - Canon Inc.) Canon Speed Dial Utility (HKLM-x32\...\Speed Dial Utility) (Version: 1.3.0 - Canon Inc.) Canon Utilities Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version: - ) ccc-core-static (x32 Version: 2010.0406.2133.36843 - ATI) Hidden CCleaner (HKLM\...\CCleaner) (Version: 3.04 - Piriform) CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.3.8.2523 - CDBurnerXP) Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.) Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.) Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.) Corel Applications (HKLM-x32\...\Corel Applications) (Version: - ) Coupon Printer for Windows (HKLM-x32\...\Coupon Printer for Windows5.0.1.6) (Version: 5.0.1.6 - Coupons.com Incorporated) Cyberduck 4.4.3 (14140) (HKLM-x32\...\Cyberduck) (Version: 4.4.3 (14140) - ) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Define Ext (HKU\S-1-5-21-3117627532-974020511-1547892993-1000\...\Define Ext) (Version: 8 - DefineExt.com) <==== ATTENTION Defraggler (HKLM\...\Defraggler) (Version: 2.15 - Piriform) Dropbox (HKU\S-1-5-21-3117627532-974020511-1547892993-1000\...\Dropbox) (Version: 3.18.1 - Dropbox, Inc.) DVD Shrink 3.2 (HKLM-x32\...\DVD Shrink_is1) (Version: - DVD Shrink) Elevated Installer (x32 Version: 4.1.19.0 - Garmin Ltd or its subsidiaries) Hidden ENTTEC DMX USB PRO- Utility 2.1 Beta (HKLM-x32\...\ENTTEC DMX USB PRO- Utility) (Version: 2.1 Beta - ENTTEC) EPSON Printer Software (HKLM\...\EPSON Printer and Utilities) (Version: - ) ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - ) ffdshow [rev 2527] [2008-12-19] (HKLM-x32\...\ffdshow_is1) (Version: 1.0 - ) FileZilla Client 3.9.0.5 (HKLM-x32\...\FileZilla Client) (Version: 3.9.0.5 - Tim Kosse) FMW 1 (Version: 1.73.2 - AVG Technologies) Hidden Garmin Communicator Plugin x64 (HKLM\...\{550331CC-C34B-494F-BCDA-37CE4EF6E924}) (Version: 4.0.3 - Garmin Ltd or its subsidiaries) Garmin Express (HKLM-x32\...\{2639b4f0-83b4-4f3d-942f-e4ba22a40b9b}) (Version: 4.1.19.0 - Garmin Ltd or its subsidiaries) Garmin Express (x32 Version: 4.1.19.0 - Garmin Ltd or its subsidiaries) Hidden Garmin Express Tray (x32 Version: 4.1.19.0 - Garmin Ltd or its subsidiaries) Hidden Google Chrome (HKLM-x32\...\Google Chrome) (Version: 50.0.2661.94 - Google Inc.) Google Drive (HKLM-x32\...\{D7269C20-B3CE-4CD0-8E88-3D307D3BD41A}) (Version: 1.29.2074.1528 - Google, Inc.) Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google) Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.7619.1252 - Google Inc.) Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google) iCloud (HKLM\...\{709A2D23-C25E-47B5-9268-CB6FEE648504}) (Version: 4.1.1.53 - Apple Inc.) Image to PDF Converter Free 6.5 (HKLM-x32\...\Image to PDF Converter Free_is1) (Version: - PDFArea Software) Iminent (x32 Version: 6.27.21.0 - Iminent) Hidden <==== ATTENTION iSEEK AnswerWorks English Runtime (HKLM-x32\...\{18A8E78B-9EF2-496E-B310-BCD8E4C1DAB3}) (Version: 010.000.0101 - Vantage Linguistics) iTunes (HKLM\...\{BFEAB774-C7DC-4032-B05A-DA5F7CB7B365}) (Version: 12.2.2.25 - Apple Inc.) Java 8 Update 77 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418077F0}) (Version: 8.0.770.3 - Oracle Corporation) Java 8 Update 77 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218077F0}) (Version: 8.0.770.3 - Oracle Corporation) Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden K-Lite Codec Pack 7.0.0 (Basic) (HKLM-x32\...\KLiteCodecPack_is1) (Version: 7.0.0 - ) Magic ISO Maker v5.5 (build 0272) (HKLM-x32\...\Magic ISO Maker v5.5 (build 0272)) (Version: - ) magicJack (HKU\S-1-5-21-3117627532-974020511-1547892993-1000\...\magicJack) (Version: 2.0.6073.4413 - magicJack L.P.) Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes) Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation) Microsoft Office 2007 Primary Interop Assemblies (HKLM-x32\...\{50120000-1105-0000-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 16.0.6769.2040 - Microsoft Corporation) Microsoft Office 365 - zh-cn (HKLM\...\O365HomePremRetail - zh-cn) (Version: 16.0.6769.2040 - Microsoft Corporation) Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office FrontPage 2003 (HKLM-x32\...\{90170409-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation) Microsoft Office XP Professional with FrontPage (HKLM-x32\...\{90280409-6000-11D3-8CFE-0050048383C9}) (Version: 10.0.6626.0 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-3117627532-974020511-1547892993-1000\...\OneDriveSetup.exe) (Version: 17.3.6386.0412 - Microsoft Corporation) Microsoft Picture It! Photo Premium 7.0 (HKLM-x32\...\{369B36BE-3D64-4641-9AEA-808D436FE133}) (Version: 7.0.0.0000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual Studio 2005 Tools for Office Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version: - Microsoft Corporation) Mozilla Firefox 42.0 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 42.0 (x86 en-US)) (Version: 42.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 42.0.0.5780 - Mozilla) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation) Native Instruments Guitar Rig 3 (HKLM-x32\...\Native Instruments Guitar Rig 3) (Version: - ) Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.6729.1019 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (Version: 16.0.6729.1019 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (x32 Version: 16.0.6729.1019 - Microsoft Corporation) Hidden ON_OFF Charge B10.0427.1 (HKLM-x32\...\{3DECD372-76A1-4483-BF10-B547790A3261}) (Version: 1.00.0001 - GIGABYTE) OneTouch 4.0 (HKLM\...\{B2BB21FB-F0AF-4354-8FDC-7C9140A113C9}) (Version: 4.1.0 - Visioneer) OpenOffice.org 3.2 (HKLM-x32\...\{5A13987D-55F4-4271-A40E-76AC9B1B38FD}) (Version: 3.2.9502 - OpenOffice.org) PayPal Payment Request Wizard For QuickBooks US Edition (HKLM-x32\...\{F09E75B4-C3AE-4CE7-959E-B2E8769555E4}) (Version: 1.00.000 - ) PCmover Professional (HKLM-x32\...\{DC6AF3F4-E08B-4182-81E7-DC242C1E3F33}) (Version: 5.00.617.0 - Laplink Software, Inc.) PDF-Creator 1.0.0 (HKLM-x32\...\PDF-Creator_is1) (Version: - PDF-Creator) Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.) QuickBooks Pro 2008 (HKLM-x32\...\{8ECB8220-F422-4BEB-9596-97033C533702}) (Version: 18.0.4010.606 - Intuit Inc.) Quicken 2009 (HKLM-x32\...\{ED2A3C11-3EA8-4380-B59C-F2C1832731B0}) (Version: 18.1.1.29 - Intuit) Quicken 2011 (HKLM-x32\...\{5FE545A1-D215-4216-9189-E7B39C9D1CC1}) (Version: 20.1.8.6 - Intuit) Quicken 2014 (HKLM-x32\...\{0877F595-254F-45F4-991D-3F72E86B17CE}) (Version: 23.1.9.3 - Intuit) QuickTime 7 (HKLM-x32\...\{80CEEB1E-0A6C-45B9-A312-37A1D25FDEBC}) (Version: 7.78.80.95 - Apple Inc.) Realtek Ethernet Controller Driver For Windows 7 (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.18.322.2010 - Realtek) Realtek HDMI Audio Driver for ATI (HKLM-x32\...\{5449FB4F-1802-4D5B-A6D8-087DB1142147}) (Version: 6.0.1.6034 - Realtek Semiconductor Corp.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6083 - Realtek Semiconductor Corp.) REALTEK Wireless LAN Driver and Utility (HKLM-x32\...\{9C049499-055C-4a0c-A916-1D8CA1FF45EB}) (Version: 1.00.0142 - REALTEK Semiconductor Corp.) SAMSUNG Mobile Modem Driver Set (HKLM\...\SAMSUNG Mobile Modem) (Version: - ) Samsung Mobile phone USB driver Drive Software (HKLM\...\Samsung Mobile phone USB driver Drive) (Version: - ) SAMSUNG Mobile USB Modem 1.0 Software (HKLM\...\SAMSUNG Mobile USB Modem 1.0) (Version: - ) SAMSUNG Mobile USB Modem Software (HKLM\...\SAMSUNG Mobile USB Modem) (Version: - ) Samsung PC Studio 3 (HKLM-x32\...\{C4A4722E-79F9-417C-BD72-8D359A090C97}) (Version: 3.2.1.71206 - Samsung Electronics Co., Ltd.) Samsung PC Studio 3 (x32 Version: 3.0.0.71206 - Samsung Electronics Co., Ltd.) Hidden ScanSoft OmniPage SE 4 (HKLM-x32\...\{B2F3DBD9-A9D2-4838-B45D-C917DAB32BC3}) (Version: 15.2.0020 - Nuance Communications, Inc.) Soluto (HKLM\...\{DCF00FE8-348E-43CF-96CB-6C8EBB0037C2}) (Version: 1.3.1095.0 - Soluto) SONAR 8.0 Producer Edition (HKLM-x32\...\SONAR8Producer_is1) (Version: 17.0 - Cakewalk Music Software) SpywareBlaster 4.6 (HKLM-x32\...\SpywareBlaster_is1) (Version: 4.6.0 - Javacool Software LLC) SupportSoft Assisted Service (HKLM-x32\...\{5A3F6A80-7913-475E-8B96-477A952CFA43}) (Version: 15 - SupportSoft) The Lord of the Rings FREE Trial (x32 Version: 1.00.0000 - ATI Technologies Inc.) Hidden TurboTax 2013 (HKLM-x32\...\TurboTax 2013) (Version: 2013.0 - Intuit, Inc) TurboTax 2014 (HKLM-x32\...\TurboTax 2014) (Version: 2014.0 - Intuit, Inc) Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) vanBasco's Karaoke Player (HKLM-x32\...\VMidi) (Version: - ) Visual Studio 2008 x64 Redistributables (HKLM-x32\...\{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}) (Version: 10.0.0.2 - AVG Technologies) Visual Studio 2010 x64 Redistributables (HKLM\...\{21B133D6-5979-47F0-BE1C-F6A6B304693F}) (Version: 13.0.0.1 - AVG Technologies) Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies) Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) Vivitar Experience Image Manager (HKLM-x32\...\Vivitar Experience Image Manager) (Version: - Sakar) Windows Driver Package - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.) Windows Driver Package - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation) Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation) WinRAR archiver (HKLM-x32\...\WinRAR archiver) (Version: - ) WinZip 20.5 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C24105}) (Version: 20.5.12118 - WinZip Computing, S.L. ) WOT for Internet Explorer (HKLM\...\{C0DA129B-1E45-494D-A362-5CD0109C306B}) (Version: 11.11.7.0 - WOT Services Oy) Yahoo! Toolbar (HKLM-x32\...\Yahoo! Companion) (Version: - ) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-3117627532-974020511-1547892993-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\J. Albert Yanez\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3117627532-974020511-1547892993-1000_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\J. Albert Yanez\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64\FileCoAuthLib64.dll () CustomCLSID: HKU\S-1-5-21-3117627532-974020511-1547892993-1000_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\J. Albert Yanez\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\FileCoAuth.exe (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-3117627532-974020511-1547892993-1000_Classes\CLSID\{CB2B673F-D441-4CD4-AFBE-DC4037CA4220}\InprocServer32 -> C:\Program Files\WinZip\adxloader64.dll () CustomCLSID: HKU\S-1-5-21-3117627532-974020511-1547892993-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\J. Albert Yanez\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3117627532-974020511-1547892993-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\J. Albert Yanez\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3117627532-974020511-1547892993-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\J. Albert Yanez\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3117627532-974020511-1547892993-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\J. Albert Yanez\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3117627532-974020511-1547892993-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\J. Albert Yanez\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3117627532-974020511-1547892993-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\J. Albert Yanez\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3117627532-974020511-1547892993-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\J. Albert Yanez\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3117627532-974020511-1547892993-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\J. Albert Yanez\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3117627532-974020511-1547892993-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\J. Albert Yanez\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-3117627532-974020511-1547892993-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\J. Albert Yanez\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.) ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {02E2B73C-F6F9-4490-9DFE-4CD76F1BB5F5} - System32\Tasks\{ECE0EEAE-09B8-4EF0-AD0B-4C8158D341F1} => C:\Program Files (x86)\Intuit\QuickBooks Premier\qbw32.exe Task: {0678345C-436F-44C2-AB13-3C084FE29515} - System32\Tasks\{433FF3EA-1B70-4989-BF70-F9722E6369DE} => C:\Program Files (x86)\PayPal Payment Request Wizard\QB US edition\OEHook.exe [2007-09-06] (A-1 Technology, Inc.) Task: {0748C09E-716B-4551-8EC1-49ADA49A8399} - System32\Tasks\LaunchApp => C:\Program Files (x86)\JustCloud\JustCloud.exe Task: {07EC93F2-3F5F-4714-A99D-C9EFD1DA9C42} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3117627532-974020511-1547892993-1000UA => C:\Users\J. Albert Yanez\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-29] (Dropbox, Inc.) Task: {0A4F52D4-2E8A-4076-8982-8412DFA7D197} - System32\Tasks\{90ECC23F-CF72-4DCC-BA0D-FD63C16B0478} => C:\Program Files (x86)\PayPal Payment Request Wizard\QB US edition\OEHook.exe [2007-09-06] (A-1 Technology, Inc.) Task: {0B78FD39-DA61-41E1-A872-6E8B2C35A7B3} - \ProgramUpdateCheck -> No File <==== ATTENTION Task: {1DD2C6D6-DC4E-40DE-9B67-3B1B12FEB7DE} - System32\Tasks\Quicken for Windows => C:\Program Files (x86)\Quicken\bagent.exe [2016-01-23] (Intuit Inc.) Task: {4A4C42DD-0281-45F3-A1EF-5B5EC355B822} - System32\Tasks\{4230B374-BC22-4937-816B-4E8F315AED16} => C:\Program Files (x86)\PayPal Payment Request Wizard\QB US edition\OEHook.exe [2007-09-06] (A-1 Technology, Inc.) Task: {52620A4A-F976-4D55-82F6-8805A716A845} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.) Task: {56DC17C9-F993-446E-80C8-D715CB2E42C1} - System32\Tasks\{52D70AB7-F10E-4307-BFC1-421145EB0B96} => C:\Program Files (x86)\PayPal Payment Request Wizard\QB US edition\OEHook.exe [2007-09-06] (A-1 Technology, Inc.) Task: {583D4B88-BFA8-425A-9460-485C409B61E8} - System32\Tasks\{0357A812-05C8-4986-9F12-7EA66609CA02} => pcalua.exe -a "C:\Windows\Temp\Sonar 8\Install\Setup.exe" -d "C:\Windows\Temp\Sonar 8\Install" Task: {5F8DFB87-5002-41B6-99A4-EAB2FDCB7E5B} - System32\Tasks\WinZipBackGroundToolsTask => C:\Program Files\WinZip\WzBGTools.exe [2016-05-01] (WinZip Computing, S.L.) Task: {6A6E3FC4-DC8D-4300-8669-C1CD5D925D13} - System32\Tasks\InstallShield Update Service => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [2005-02-17] (InstallShield Software Corporation) Task: {6FA57FAC-2D0D-42D8-8E57-6C70AA3B9FB0} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2016-04-25] (Microsoft Corporation) Task: {7133673C-DD02-4D7D-9365-0AFC8B2F8902} - System32\Tasks\{F5D75391-899D-4A64-B5EE-2E9E05FFD6EC} => C:\Program Files (x86)\PayPal Payment Request Wizard\QB US edition\OEHook.exe [2007-09-06] (A-1 Technology, Inc.) Task: {72501117-AE7D-4736-B245-0EDC7EAB77DD} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-14] (Adobe Systems Incorporated) Task: {761F9BAF-1F1C-434F-9272-A86AAF6B34E6} - System32\Tasks\{920CED7F-828E-4FD5-8AF7-6EC71EDBF5D6} => C:\Program Files (x86)\PayPal Payment Request Wizard\QB US edition\OEHook.exe [2007-09-06] (A-1 Technology, Inc.) Task: {85C0F8C0-83CF-45A0-BA95-2BD1087505DD} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3117627532-974020511-1547892993-1000Core => C:\Users\J. Albert Yanez\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-29] (Dropbox, Inc.) Task: {92927FFF-1F6A-4200-AFA4-DA75E519BEAE} - System32\Tasks\{CD2ED3FD-F036-467D-B475-5D97EC7F1CF7} => C:\Program Files (x86)\Intuit\QuickBooks 2008\QBW32Pro.exe [2009-09-16] (Intuit Inc.) Task: {93BCE990-D0B5-4AFE-A116-CB652B383AC5} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-04-24] (Microsoft Corporation) Task: {9DC52DA0-142D-456C-A6A6-97D564ECEE75} - System32\Tasks\{12BD6026-E7E1-4AF3-A193-CABDB33D94CC} => C:\Program Files (x86)\PayPal Payment Request Wizard\QB US edition\OEHook.exe [2007-09-06] (A-1 Technology, Inc.) Task: {9F844751-809B-4E29-A41B-71B9A94CFE88} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [2016-04-08] () Task: {A6EDE629-0EF6-4C03-B80D-F67FAF31F010} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-04-08] (Adobe Systems Incorporated) Task: {AD64628D-B08E-46C8-8E91-56FBF9E0F1F9} - System32\Tasks\Adobe online update program => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-14] (Adobe Systems Incorporated) Task: {B2B79FDF-696D-4461-B81C-9E2C07A6021E} - System32\Tasks\Soluto-Diagnostics => C:\ProgramData\Soluto\Diag\SolutoDiag.exe [2012-11-21] (Soluto) Task: {B8BB9D86-F435-4BB8-9FA0-4A1CC23D6175} - System32\Tasks\{CD9EB08B-F136-4074-957F-9EFD26E5176D} => C:\Program Files (x86)\PayPal Payment Request Wizard\QB US edition\OEHook.exe [2007-09-06] (A-1 Technology, Inc.) Task: {B9E60322-5F00-47D5-9E2D-8D105C4762C1} - System32\Tasks\{BBFE6BA5-B19A-4719-A9B0-DBDF75DCA6CB} => C:\Program Files (x86)\PayPal Payment Request Wizard\QB US edition\OEHook.exe [2007-09-06] (A-1 Technology, Inc.) Task: {C06EEC75-89FF-4A33-A077-2EB3073A1924} - System32\Tasks\{BE63932F-597D-4937-ACA8-F75F06D878A2} => C:\Program Files (x86)\PayPal Payment Request Wizard\QB US edition\OEHook.exe [2007-09-06] (A-1 Technology, Inc.) Task: {CC3F89CC-AD97-4FB2-8CC3-B72BB0BCFAE3} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.) Task: {D45A968E-7B44-4249-842C-6B527827E65A} - System32\Tasks\ScanSoft Background Update => C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [2006-10-25] (Nuance Communications, Inc.) Task: {D517FF1A-BEA9-4B7E-AD62-2A9A573473A7} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-03-20] (Oracle Corporation) Task: {D6BC649A-305F-4B04-8B4A-DFA4B7C6AA2A} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {D860574D-72E5-41C4-A466-3AEAADC06CA2} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-04-24] (Microsoft Corporation) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3117627532-974020511-1547892993-1000Core.job => C:\Users\J. Albert Yanez\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3117627532-974020511-1547892993-1000UA.job => C:\Users\J. Albert Yanez\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Shortcuts ============================= (The entries could be listed to be restored or removed.) ==================== Loaded Modules (Whitelisted) ============== 2016-02-10 21:44 - 2016-02-10 21:44 - 03676160 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_64\PCGPreCompiled\85c689400149f485fbcfb26f0301e66e\PCGPreCompiled.ni.dll 2016-03-12 11:17 - 2016-03-12 11:17 - 00267264 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_64\PCGAppControlPlugin#\bd0d62497a954a3f1633dba21e148c57\PCGAppControlPluginLoader.ni.dll 2012-11-21 12:43 - 2012-11-21 12:43 - 00091192 _____ () c:\program files\soluto\PCGDllExportInspector.dll 2014-05-01 15:29 - 2014-05-01 15:29 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll 2011-10-02 13:39 - 2008-06-20 01:41 - 00062464 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll 2015-01-20 23:35 - 2015-01-20 23:35 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2015-05-15 16:26 - 2015-05-15 16:26 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2016-04-24 11:10 - 2016-04-24 11:10 - 02662472 _____ () C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe 2009-11-24 16:36 - 2009-11-24 16:36 - 00016384 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll 2011-03-29 18:37 - 2011-03-29 18:37 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll 2015-12-06 17:34 - 2012-03-28 08:49 - 00140456 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE 2012-11-21 12:43 - 2012-11-21 12:43 - 00091192 _____ () C:\Program Files\Soluto\PCGDllExportInspector.dll 2015-11-12 16:06 - 2016-04-24 14:24 - 00172224 _____ () C:\Program Files\Common Files\Microsoft Shared\ClickToRun\ApiClient.dll 2015-05-15 16:27 - 2015-05-15 16:27 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2016-04-26 10:50 - 2016-04-26 10:50 - 00679624 _____ () C:\Users\J. Albert Yanez\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\ClientTelemetry.dll 2012-10-17 11:37 - 2007-09-04 22:48 - 00188416 _____ () C:\Program Files (x86)\PayPal Payment Request Wizard\QB US edition\OELogger.dll 2016-05-04 13:41 - 2016-05-04 13:41 - 00098816 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\win32api.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 00110080 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\pywintypes27.dll 2016-05-04 13:41 - 2016-05-04 13:41 - 00364544 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\pythoncom27.dll 2016-05-04 13:41 - 2016-05-04 13:41 - 00320512 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\win32com.shell.shell.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 00776704 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\_hashlib.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 01176576 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\wx._core_.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 00806400 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\wx._gdi_.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 00816128 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\wx._windows_.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 01067008 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\wx._controls_.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 00733184 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\wx._misc_.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 00682496 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\pysqlite2._sqlite.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 00088064 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\_ctypes.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 00119808 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\win32file.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 00108544 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\win32security.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 00007168 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\hashobjs_ext.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 00017920 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\thumbnails_ext.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 00088064 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\usb_ext.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 00167936 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\win32gui.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 00018432 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\win32event.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 00046080 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\_socket.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 01208320 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\_ssl.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 00128512 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\_elementtree.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 00127488 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\pyexpat.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 00012288 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\common.time34.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 00038912 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\win32inet.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 00036864 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\_psutil_windows.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 00525208 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\windows._lib_cacheinvalidation.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 00011264 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\win32crypt.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 00077312 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\wx._html2.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 00027136 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\_multiprocessing.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 00020480 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\_yappi.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 00035840 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\win32process.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 00686080 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\unicodedata.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 00078848 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\wx._animate.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 00123392 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\wx._wizard.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 00024064 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\win32pipe.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 00010240 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\select.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 00025600 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\win32pdh.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 00017408 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\win32profile.pyd 2016-05-04 13:41 - 2016-05-04 13:41 - 00022528 ____R () C:\Users\JF918~1.ALB\AppData\Local\Temp\_MEI25522\win32ts.pyd 2016-04-17 21:22 - 2016-04-17 21:21 - 00527944 _____ () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\19.4.0\log4cplusU.dll 2015-11-02 08:04 - 2016-04-08 10:48 - 40500224 _____ () C:\Program Files (x86)\AVG\UiDll\2171\libcef.dll 2011-09-29 03:22 - 2009-12-09 21:20 - 00126976 _____ () C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\EnumDevLib.dll 1996-11-17 00:00 - 1996-11-17 00:00 - 00022016 _____ () C:\Windows\SysWow64\docobj.dll 1996-11-17 00:00 - 1996-11-17 00:00 - 00012288 _____ () C:\Windows\SysWow64\hlinkprx.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\ProgramData\TEMP:430C6D84 [127] AlternateDataStreams: C:\ProgramData\TEMP:DFC5A2B2 [109] AlternateDataStreams: C:\Users\J. Albert Yanez\Downloads:Shareaza.GUID [16] ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SolutoService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SolutoService => ""="Service" ==================== Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) IE trusted site: HKU\S-1-5-21-3117627532-974020511-1547892993-1000\...\ebay.com -> hxxp://my.ebay.com IE restricted site: HKU\S-1-5-21-3117627532-974020511-1547892993-1000\...\008i.com -> 008i.com IE restricted site: HKU\S-1-5-21-3117627532-974020511-1547892993-1000\...\008k.com -> 008k.com IE restricted site: HKU\S-1-5-21-3117627532-974020511-1547892993-1000\...\00hq.com -> 00hq.com IE restricted site: HKU\S-1-5-21-3117627532-974020511-1547892993-1000\...\0190-dialers.com -> 0190-dialers.com IE restricted site: HKU\S-1-5-21-3117627532-974020511-1547892993-1000\...\01i.info -> 01i.info IE restricted site: HKU\S-1-5-21-3117627532-974020511-1547892993-1000\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com IE restricted site: HKU\S-1-5-21-3117627532-974020511-1547892993-1000\...\05p.com -> 05p.com IE restricted site: HKU\S-1-5-21-3117627532-974020511-1547892993-1000\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com IE restricted site: HKU\S-1-5-21-3117627532-974020511-1547892993-1000\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com IE restricted site: HKU\S-1-5-21-3117627532-974020511-1547892993-1000\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com IE restricted site: HKU\S-1-5-21-3117627532-974020511-1547892993-1000\...\0calories.net -> 0calories.net IE restricted site: HKU\S-1-5-21-3117627532-974020511-1547892993-1000\...\0cj.net -> 0cj.net IE restricted site: HKU\S-1-5-21-3117627532-974020511-1547892993-1000\...\0scan.com -> 0scan.com IE restricted site: HKU\S-1-5-21-3117627532-974020511-1547892993-1000\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com IE restricted site: HKU\S-1-5-21-3117627532-974020511-1547892993-1000\...\1-domains-registrations.com -> 1-domains-registrations.com IE restricted site: HKU\S-1-5-21-3117627532-974020511-1547892993-1000\...\1-se.com -> 1-se.com IE restricted site: HKU\S-1-5-21-3117627532-974020511-1547892993-1000\...\1001movie.com -> 1001movie.com IE restricted site: HKU\S-1-5-21-3117627532-974020511-1547892993-1000\...\1001night.biz -> 1001night.biz IE restricted site: HKU\S-1-5-21-3117627532-974020511-1547892993-1000\...\100gal.net -> 100gal.net IE restricted site: HKU\S-1-5-21-3117627532-974020511-1547892993-1000\...\100sexlinks.com -> 100sexlinks.com There are 5108 more sites. ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-13 22:34 - 2013-08-16 20:34 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-3117627532-974020511-1547892993-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\J. Albert Yanez\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.1.254 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) MSCONFIG\startupfolder: C:^Users^J. Albert Yanez^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" MSCONFIG\startupreg: CanonQuickMenu => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE /logon MSCONFIG\startupreg: Dropbox Update => "C:\Users\J. Albert Yanez\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c MSCONFIG\startupreg: EPSON Stylus C62 Series => C:\Windows\system32\spool\DRIVERS\x64\3\E_S0BIC1.EXE /P23 "EPSON Stylus C62 Series" /O6 "USB001" /M "Stylus C62" MSCONFIG\startupreg: GarminExpressTrayApp => "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe" MSCONFIG\startupreg: ISUSPM Startup => C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup MSCONFIG\startupreg: ISUSScheduler => "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe" -start MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe" MSCONFIG\startupreg: OpwareSE4 => "C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpwareSE4.exe" MSCONFIG\startupreg: QuickenScheduledUpdates => C:\Program Files (x86)\Quicken\bagent.exe ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{B5821E5A-9B76-4A7F-8517-F0992132025B}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgmfapx.exe FirewallRules: [{5B236291-26B5-43A9-9A89-BD93B6117093}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgmfapx.exe FirewallRules: [TCP Query User{7C52E7E1-5280-4660-B95E-80AA205243EF}C:\program files (x86)\microsoft office\office12\excel.exe] => (Allow) C:\program files (x86)\microsoft office\office12\excel.exe FirewallRules: [UDP Query User{5F9CC423-6ED7-4096-8D07-8379CD35E3B5}C:\program files (x86)\microsoft office\office12\excel.exe] => (Allow) C:\program files (x86)\microsoft office\office12\excel.exe FirewallRules: [{3E17B7B5-8F8D-4813-AD7E-DD24664223EE}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe FirewallRules: [{D660221C-06F1-43A0-A2A1-7984EBB0C83C}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe FirewallRules: [{2D852B80-E853-4139-8700-051FC0F21D66}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgdiagex.exe FirewallRules: [{7B6EB554-30DB-4292-B36B-158445C149E3}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgdiagex.exe FirewallRules: [{2E263D0C-6659-4E5F-AE12-4C54169462A1}] => (Allow) C:\Program Files (x86)\Shareaza\Shareaza.exe FirewallRules: [{556B7F86-B458-4EBB-9E4C-7174C58A3CE1}] => (Allow) C:\Program Files (x86)\Shareaza\Shareaza.exe FirewallRules: [TCP Query User{1A380C78-F46B-4F48-B5A0-E7DB20641B9D}C:\users\j. albert yanez\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\j. albert yanez\appdata\roaming\dropbox\bin\dropbox.exe FirewallRules: [UDP Query User{3EF9A9C8-3493-4E7D-85FD-0BC87573A060}C:\users\j. albert yanez\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\j. albert yanez\appdata\roaming\dropbox\bin\dropbox.exe FirewallRules: [{4CD7A51F-7EF4-47F7-83C5-4FACA4097D2C}] => (Block) C:\users\j. albert yanez\appdata\roaming\dropbox\bin\dropbox.exe FirewallRules: [{B89DDF4F-32B9-4F37-A5A6-422EAF35B476}] => (Block) C:\users\j. albert yanez\appdata\roaming\dropbox\bin\dropbox.exe FirewallRules: [{AF16518C-E585-4954-BFA5-29ADB3A5086B}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{34FBDC3E-432D-4E70-83F8-57AF65DFA527}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [TCP Query User{145A72A5-6A18-419A-9AF0-CB3A2FF42E89}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [UDP Query User{2A37593F-AEC9-453B-8F57-0A7FFF6B8EFC}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [{A084712A-2051-423A-959B-AD008501557E}] => (Allow) C:\Program Files\iTunes\iTunes.exe FirewallRules: [{2192C327-CA38-4300-BAC3-12DE3BE913A9}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdater.exe FirewallRules: [{9C606713-0D7D-49E4-AA2E-685555FBE900}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe FirewallRules: [{33A257F7-24E2-4C13-A54C-B4890769B9A7}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe FirewallRules: [{F14B8897-B9CA-4453-BDD4-5844661956A5}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe FirewallRules: [{536F3115-B820-4069-9187-FC3824770499}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe FirewallRules: [{AC40FDF8-A892-4301-8B01-D178703150AF}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe FirewallRules: [{31F613EB-D336-43A7-8C93-BF46C6F63FF4}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe FirewallRules: [{7819E2CF-7B02-4443-A796-07837A5DAD0C}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe FirewallRules: [{CE4BBB15-65B7-4EC0-B20D-EA370FD21630}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{C3C1E5F8-68DE-44B5-BE4B-154AC0CAA22F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{8B8143CA-31D9-4FBB-9837-6FE72B22D93E}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe FirewallRules: [{5314FC98-1D21-4281-AEA1-48C2C43B53F8}] => (Allow) C:\Program Files (x86)\AVG\Av\avgnsa.exe FirewallRules: [{81B48E8E-C375-44FD-AFA6-CE898DE3C0D2}] => (Allow) C:\Program Files (x86)\AVG\Av\avgnsa.exe FirewallRules: [{A6D30222-8D0B-42AF-BEF1-BC589081E0F5}] => (Allow) C:\Program Files (x86)\AVG\Av\avgdiagex.exe FirewallRules: [{5C923CAE-49ED-475D-97F5-739F81814639}] => (Allow) C:\Program Files (x86)\AVG\Av\avgdiagex.exe FirewallRules: [{2DCFA47F-F871-433D-B432-36EF45EA4DA6}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{08F6EC93-C590-4D7A-B151-450E5B159DF1}] => (Allow) C:\Program Files (x86)\AVG\Av\avgnsa.exe FirewallRules: [{A12C4CF9-83F0-45E2-BB70-6949BB21477C}] => (Allow) C:\Program Files (x86)\AVG\Av\avgnsa.exe FirewallRules: [{0571F33F-28D7-4FB0-8C4B-3731A523FCDC}] => (Allow) C:\Program Files (x86)\AVG\Av\avgdiagex.exe FirewallRules: [{744622E8-0A90-4A13-A716-7D0BE2FA01B3}] => (Allow) C:\Program Files (x86)\AVG\Av\avgdiagex.exe FirewallRules: [{C7952F7B-3ECE-42D2-9B4B-4E18BD51145E}] => (Allow) C:\Program Files (x86)\AVG\Av\avgemca.exe FirewallRules: [{9C224203-B617-4CC7-AF36-130B787972AB}] => (Allow) C:\Program Files (x86)\AVG\Av\avgemca.exe ==================== Restore Points ========================= 01-05-2016 21:00:07 Windows Backup 02-05-2016 21:00:06 Windows Backup 03-05-2016 21:00:10 Windows Backup 04-05-2016 21:00:04 Windows Backup 05-05-2016 21:00:03 Windows Backup ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (05/06/2016 08:52:22 AM) (Source: QuickBooks) (EventID: 4) (User: ) Description: QuickBooks Pro 2008DBConnPool::HandleConnectionError errorCode:-6069, dbCode:-103 from file:'.\.\src\ConnPool.cpp' at line 863 from function:'DBMgr::DBConnPool::init' Error: (05/06/2016 08:52:22 AM) (Source: QuickBooks) (EventID: 4) (User: ) Description: QuickBooks Pro 2008Connection String:CON=QBConnectionPool-Probe-QB_data_engine_18; ;DBF=C:\Users\Public\Documents\Intuit\QuickBooks\Company Files\LIGHTINGELSTORE 5-10.QBW;ENG=QB_data_engine_18;DBN=c4a5559e72044c68a56c030c7fd0a4b3 Error: (05/06/2016 08:52:22 AM) (Source: QuickBooks) (EventID: 4) (User: ) Description: QuickBooks Pro 2008Connection Error:Invalid user ID or password Error: (05/06/2016 08:52:04 AM) (Source: QuickBooks) (EventID: 4) (User: ) Description: QuickBooksReturning NULL QBWinInstance Handle Error: (05/06/2016 08:52:04 AM) (Source: QuickBooks) (EventID: 4) (User: ) Description: QuickBooksReturning NULL QBWinInstance Handle Error: (05/06/2016 08:52:04 AM) (Source: QuickBooks) (EventID: 4) (User: ) Description: QuickBooksReturning NULL QBWinInstance Handle Error: (05/06/2016 08:29:34 AM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: ) Description: Subscription licensing service failed: -1073418220 Error: (05/05/2016 09:05:31 PM) (Source: Windows Backup) (EventID: 4104) (User: ) Description: The backup was not successful. The error is: There is not enough space on this drive to save the backup. Free up space by deleting older backups and unnecessary data or change your backup settings. (0x81000005). Error: (05/05/2016 08:29:34 AM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: ) Description: Subscription licensing service failed: -1073418220 Error: (05/04/2016 09:05:24 PM) (Source: Windows Backup) (EventID: 4104) (User: ) Description: The backup was not successful. The error is: There is not enough space on this drive to save the backup. Free up space by deleting older backups and unnecessary data or change your backup settings. (0x81000005). System errors: ============= Error: (05/04/2016 01:43:39 PM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: The following boot-start or system-start driver(s) failed to load: StarOpen Error: (05/04/2016 01:42:27 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The Garmin Device Interaction Service service failed to start due to the following error: %%1053 Error: (05/04/2016 01:42:27 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: A timeout was reached (30000 milliseconds) while waiting for the Garmin Device Interaction Service service to connect. Error: (05/04/2016 01:40:27 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: \SystemRoot\SysWow64\Drivers\StarOpen.SYS has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver. Error: (05/04/2016 01:37:51 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} Error: (05/04/2016 12:09:06 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: The AVGIDSAgent service terminated with service-specific error %%-536753635. Error: (05/04/2016 10:08:05 AM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: The AVGIDSAgent service terminated with service-specific error %%-536753635. Error: (05/04/2016 04:07:54 AM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: The AVGIDSAgent service terminated with service-specific error %%-536753635. Error: (05/04/2016 03:24:22 AM) (Source: Disk) (EventID: 7) (User: ) Description: The device, \Device\Harddisk0\DR0, has a bad block. Error: (05/04/2016 03:24:17 AM) (Source: Disk) (EventID: 7) (User: ) Description: The device, \Device\Harddisk0\DR0, has a bad block. CodeIntegrity: =================================== Date: 2015-08-24 06:37:05.712 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe because the set of per-page image hashes could not be found on the system. Date: 2015-08-24 06:37:05.696 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpa.exe because the set of per-page image hashes could not be found on the system. Date: 2015-08-24 06:37:05.618 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe because the set of per-page image hashes could not be found on the system. Date: 2015-08-24 06:37:05.603 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpa.exe because the set of per-page image hashes could not be found on the system. Date: 2015-08-24 06:37:05.509 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpa.exe because the set of per-page image hashes could not be found on the system. Date: 2015-08-24 06:37:05.431 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe because the set of per-page image hashes could not be found on the system. Date: 2015-08-24 06:37:05.400 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpa.exe because the set of per-page image hashes could not be found on the system. Date: 2015-08-24 06:37:05.322 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe because the set of per-page image hashes could not be found on the system. Date: 2015-07-16 04:01:54.311 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpa.exe because the set of per-page image hashes could not be found on the system. Date: 2015-07-16 04:01:54.194 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe because the set of per-page image hashes could not be found on the system. ==================== Memory info =========================== Processor: AMD Phenom(tm) II X4 840 Processor Percentage of memory in use: 48% Total physical RAM: 7677.55 MB Available physical RAM: 3952.79 MB Total Virtual: 15353.3 MB Available Virtual: 11681.8 MB ==================== Drives ================================ Drive c: (System) (Fixed) (Total:931.32 GB) (Free:764.61 GB) NTFS Drive f: (SEA_DISC) (Fixed) (Total:55.88 GB) (Free:19.23 GB) NTFS Drive l: () (Removable) (Total:3.72 GB) (Free:1.47 GB) FAT32 Drive p: (KINGSTON) (Removable) (Total:14.53 GB) (Free:3.81 GB) FAT32 ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 092FF4E0) Partition 1: (Active) - (Size=200 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=931.3 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows XP) (Size: 14.5 GB) (Disk ID: C3072E18) Partition 1: (Active) - (Size=14.5 GB) - (Type=0C) ======================================================== Disk: 2 (Size: 55.9 GB) (Disk ID: 8A18FE75) Partition 1: (Not Active) - (Size=55.9 GB) - (Type=OF Extended) ======================================================== Disk: 3 (Size: 3.7 GB) (Disk ID: 00000000) Partition: GPT. ==================== End of Addition.txt ============================