My system sometimes just freezes - or maybe blue screen crash- or black screen crash ... we've tried several different things with assistance from phillpower2 in the 'windows 7' forum have been advised to post here and so hope you can help sort this problem once and for all it is really so inconvenient, annoying and frustrating (poor me)
Could it be a deep rooted virus/Trojan? - though I've scanned with different virus and malware programs it hasn't revealed anything - I'm completely flummoxed and would appreciate any help that you can give
Ricky
Here are the Farbar scans as I believe are needed:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 24-06-2015
Ran by Owner (administrator) on OWNER-PC on 26-06-2015 20:04:42
Running from C:\Users\Owner\Desktop
Loaded Profiles: Owner (Available Profiles: Owner)
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
() C:\Program Files\CyberLink\Shared Files\RichVideo.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Siber Systems) C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [4915200 2008-02-13] (Realtek Semiconductor)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [981688 2015-04-30] (Microsoft Corporation)
Winlogon\Notify\!SASWinLogon: C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL [X]
HKLM\...\Policies\Explorer: [NoFind] 0
HKLM\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-21-754179056-1382982999-2036298953-1000\...\Run: [RoboForm] => C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [110160 2015-06-26] (Siber Systems)
BootExecute: dfboottime \??\C:\Windows\System32\dfboottime.cfgautocheck autochk *
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-754179056-1382982999-2036298953-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com.au/
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-754179056-1382982999-2036298953-1000 -> ToolbarSearchProviderProgress {96bd48dd-741b-41ae-ac4a-aff96ba00f7e}
SearchScopes: HKU\S-1-5-21-754179056-1382982999-2036298953-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.co...?q={searchTerms}
SearchScopes: HKU\S-1-5-21-754179056-1382982999-2036298953-1000 -> {203A9549-7B06-4E7C-AE56-E4CA0D24AD4C} URL =
SearchScopes: HKU\S-1-5-21-754179056-1382982999-2036298953-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = https://www.google.c...?q={searchTerms}
SearchScopes: HKU\S-1-5-21-754179056-1382982999-2036298953-1000 -> {A10DB92A-868F-465D-A02D-318698A6C189} URL = https://www.google.c...?q={searchTerms}
SearchScopes: HKU\S-1-5-21-754179056-1382982999-2036298953-1000 -> {B157E6A5-6063-4608-85AB-AA683985F058} URL = https://www.google.c...?q={searchTerms}
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2013-11-28] (CANON INC.)
BHO: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files\Siber Systems\AI RoboForm\roboform.dll [2015-06-26] (Siber Systems Inc.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
Toolbar: HKLM - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll [2015-06-26] (Siber Systems Inc.)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2013-11-28] (CANON INC.)
Toolbar: HKU\S-1-5-21-754179056-1382982999-2036298953-1000 -> &RoboForm Toolbar - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll [2015-06-26] (Siber Systems Inc.)
Toolbar: HKU\S-1-5-21-754179056-1382982999-2036298953-1000 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2013-11-28] (CANON INC.)
Toolbar: HKU\S-1-5-21-754179056-1382982999-2036298953-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset...lineScanner.cab
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
FireFox:
========
FF Plugin: @canon.com/EPPEX -> C:\Program Files\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=6.0.11.2571 -> C:\Program Files\MpcStar\Codecs\Real\browser\plugins\nppl3260.dll No File
FF Plugin: @real.com/nprpjplug;version=6.0.12.1739 -> C:\Program Files\MpcStar\Codecs\Real\browser\plugins\nprpjplug.dll No File
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-31] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-31] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2010-02-01]
Chrome:
=======
CHR Profile: C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-05-11]
CHR Extension: (Google Docs) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-05-11]
CHR Extension: (Google Drive) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-05-11]
CHR Extension: (YouTube) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-05-11]
CHR Extension: (Google Search) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-05-11]
CHR Extension: (Google Sheets) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-05-11]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-05-12]
CHR Extension: (Google Wallet) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-05-11]
CHR Extension: (Gmail) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-11]
CHR Extension: (No Name) - C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnlccmojcmeohlpggmfnbbiapkmbliob [2015-05-11]
CHR HKLM\...\Chrome\Extension: [pnlccmojcmeohlpggmfnbbiapkmbliob] - C:\Program Files\Siber Systems\AI RoboForm\Chrome\rf-chrome.crx [2014-03-15]
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22216 2015-04-30] (Microsoft Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44544 2008-12-03] (Hewlett-Packard) [File not signed]
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [284504 2015-04-30] (Microsoft Corporation)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2008-12-03] (Hewlett-Packard) [File not signed]
R2 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [272024 2007-05-14] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 2WIREPCP; C:\Windows\System32\DRIVERS\2WirePCP.sys [60768 2007-03-23] (2Wire, Inc.) [File not signed]
R3 anvsnddrv; C:\Windows\System32\drivers\anvsnddrv.sys [32896 2011-11-28] (AnvSoft Inc.) [File not signed]
R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [26984 2012-11-05] (AVG Technologies)
S3 gdrv; C:\Windows\gdrv.sys [16608 2010-02-01] (Windows ® 2000 DDK provider)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-03-17] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-03-17] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [245096 2015-03-04] (Microsoft Corporation)
R1 MpKsl1e6d1dc8; c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{FFC256BC-229D-4618-AC1E-1B795CBA1420}\MpKsl1e6d1dc8.sys [39168 2015-06-26] (Microsoft Corporation)
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [717296 2010-02-03] (Duplex Secure Ltd.)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [13464 2015-06-25] ()
S3 U2800Vid; C:\Windows\System32\DRIVERS\U2800Vid.sys [347904 2009-08-19] (Compro Technology, Inc.)
S3 cpuz134; \??\C:\Users\Owner\AppData\Local\Temp\cpuz134\cpuz134_x32.sys [X]
S3 MREMP50; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS [X]
S3 MRESP50; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-06-26 20:04 - 2015-06-26 20:05 - 00012140 _____ C:\Users\Owner\Desktop\FRST.txt
2015-06-26 20:04 - 2015-06-26 20:04 - 00000000 ____D C:\FRST
2015-06-26 20:02 - 2015-06-26 20:03 - 01636352 _____ (Farbar) C:\Users\Owner\Desktop\FRST.exe
2015-06-26 19:54 - 2015-06-26 19:57 - 00063808 _____ C:\Windows\setupact.log
2015-06-26 19:54 - 2015-06-26 19:54 - 00000000 _____ C:\Windows\setuperr.log
2015-06-26 13:09 - 2015-06-26 13:09 - 00000286 _____ C:\Users\Owner\Documents\cc_20150626_130859.reg
2015-06-26 09:24 - 2015-06-26 09:24 - 00011782 _____ C:\Users\Owner\Documents\cc_z20150626_092343.reg
2015-06-25 18:20 - 2015-06-03 03:35 - 00342728 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-06-25 18:20 - 2015-05-26 01:00 - 02384384 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-06-25 18:20 - 2015-05-23 11:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-06-25 18:20 - 2015-05-23 11:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-06-25 18:20 - 2015-05-23 11:15 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-06-25 18:20 - 2015-05-23 11:09 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-06-25 18:20 - 2015-05-23 11:08 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-06-25 18:20 - 2015-05-23 11:05 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-06-25 18:20 - 2015-05-23 11:05 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-06-25 18:20 - 2015-05-23 11:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-06-25 18:20 - 2015-05-23 11:00 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-06-25 18:20 - 2015-05-23 10:57 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-06-25 18:20 - 2015-05-23 10:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-06-25 18:20 - 2015-05-23 10:38 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-06-25 18:20 - 2015-05-23 10:38 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-06-25 18:20 - 2015-05-23 10:16 - 01309696 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-06-25 18:20 - 2015-05-23 10:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-06-25 18:20 - 2015-05-23 02:03 - 00571392 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-06-25 18:20 - 2015-05-23 02:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-06-25 18:20 - 2015-05-23 02:02 - 00621568 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-06-25 18:20 - 2015-05-23 02:02 - 00333824 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-06-25 18:20 - 2015-05-23 02:02 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-06-25 18:20 - 2015-05-23 02:02 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-06-25 18:20 - 2015-05-23 01:58 - 00901120 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-06-25 18:20 - 2015-05-21 21:20 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-06-25 18:19 - 2015-05-27 22:08 - 19607040 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-06-25 18:19 - 2015-05-23 11:28 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-06-25 18:19 - 2015-05-23 11:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-06-25 18:19 - 2015-05-23 11:14 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-06-25 18:19 - 2015-05-23 11:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-06-25 18:19 - 2015-05-23 11:10 - 02278912 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-06-25 18:19 - 2015-05-23 11:06 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-06-25 18:19 - 2015-05-23 11:05 - 00664064 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-06-25 18:19 - 2015-05-23 10:49 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-06-25 18:19 - 2015-05-23 10:48 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-06-25 18:19 - 2015-05-23 10:47 - 04305920 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-06-25 18:19 - 2015-05-23 10:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-06-25 18:19 - 2015-05-23 10:37 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-06-25 18:19 - 2015-05-23 10:37 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-06-25 18:19 - 2015-05-23 10:28 - 12829696 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-06-25 18:19 - 2015-05-23 10:20 - 01950720 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-06-25 18:17 - 2015-05-26 02:07 - 03989440 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-06-25 18:17 - 2015-05-26 02:07 - 03934144 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-06-25 18:17 - 2015-05-26 02:07 - 00137664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-06-25 18:17 - 2015-05-26 02:07 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-06-25 18:17 - 2015-05-26 02:04 - 01307648 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00853504 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00635392 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00551424 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-06-25 18:17 - 2015-05-26 02:01 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-06-25 18:17 - 2015-05-26 02:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-06-25 18:17 - 2015-05-26 02:00 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-06-25 18:17 - 2015-05-26 02:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-06-25 18:17 - 2015-05-26 02:00 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-06-25 18:17 - 2015-05-26 02:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-06-25 18:17 - 2015-05-26 02:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-06-25 18:17 - 2015-05-26 02:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-06-25 18:17 - 2015-05-26 02:00 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-06-25 18:17 - 2015-05-26 02:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-06-25 18:17 - 2015-05-26 01:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-06-25 18:17 - 2015-05-26 01:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-06-25 18:17 - 2015-05-26 01:55 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-06-25 18:17 - 2015-05-26 01:55 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-06-25 18:17 - 2015-05-26 00:53 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-06-25 18:12 - 2015-05-09 11:14 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-06-25 18:12 - 2015-05-09 11:13 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-06-25 18:12 - 2015-05-09 11:13 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-06-25 18:12 - 2015-05-09 11:12 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-06-25 18:12 - 2015-05-09 11:08 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-06-25 18:12 - 2015-05-09 11:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-06-25 18:12 - 2015-04-30 02:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-06-25 18:12 - 2015-04-30 02:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-06-25 18:12 - 2015-04-30 02:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-06-25 18:12 - 2015-04-30 02:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-06-25 18:12 - 2015-04-30 02:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-06-25 18:11 - 2015-05-09 11:08 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-06-25 18:11 - 2015-05-09 11:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-06-25 18:11 - 2015-05-09 11:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-06-25 18:11 - 2015-05-09 11:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-25 18:11 - 2015-05-09 11:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-06-25 18:11 - 2015-05-09 11:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-06-25 18:11 - 2015-05-09 11:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-06-25 18:11 - 2015-05-09 09:59 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-06-25 18:11 - 2015-05-09 09:59 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-25 18:11 - 2015-05-09 09:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-06-25 18:11 - 2015-05-09 09:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-06-25 18:11 - 2015-04-25 01:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-06-20 05:53 - 2015-06-20 05:53 - 00002732 _____ C:\Users\Owner\Documents\collabro.txt
2015-06-19 17:33 - 2015-06-19 17:34 - 168848003 _____ C:\Users\Owner\Documents\~yt2.tmp
2015-06-19 16:57 - 2015-06-19 16:57 - 00002878 _____ C:\Users\Owner\Documents\lite & easy order.txt
2015-06-19 14:39 - 2015-06-19 14:39 - 00000000 ____D C:\eb3fe3f8d4cd1ec3b5e698b3
2015-06-17 07:02 - 2015-06-17 07:02 - 00000468 _____ C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Google.website
2015-06-15 22:48 - 2015-06-15 22:48 - 00000029 _____ C:\Users\Owner\Documents\Incredimail licence.txt
2015-06-14 06:45 - 2015-06-14 06:45 - 36382247 _____ C:\Users\Owner\Documents\One direction - No control (Music video).mp4
2015-06-13 20:51 - 2015-06-13 20:51 - 00004032 _____ C:\Users\Owner\Documents\stere kicks.txt
2015-06-13 03:24 - 2015-06-19 14:01 - 00000000 ____D C:\Windows\MATS
2015-06-13 03:24 - 2015-06-19 14:01 - 00000000 ____D C:\Program Files\Microsoft Fix it Center
2015-06-12 13:23 - 2015-06-12 13:23 - 00000017 _____ C:\Users\Owner\AppData\Local\resmon.resmoncfg
2015-06-07 17:26 - 2015-06-07 17:26 - 00000145 _____ C:\Users\Owner\Documents\Isaac.txt
2015-06-06 08:52 - 2015-06-06 08:52 - 00000300 _____ C:\Users\Owner\Documents\cc_20150606_085234.reg
2015-06-05 15:50 - 2015-06-05 15:50 - 00001957 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IncrediMail.lnk
2015-06-05 15:50 - 2015-06-05 15:50 - 00001945 _____ C:\Users\Public\Desktop\IncrediMail.lnk
2015-06-04 04:04 - 2015-06-04 04:04 - 00006628 _____ C:\Users\Owner\Documents\cc_20150604_040408.reg
2015-06-01 20:29 - 2015-06-01 20:29 - 00000000 ____D C:\Users\Owner\AppData\Local\GWX
2015-06-01 20:16 - 2015-06-01 20:16 - 79717126 _____ C:\Users\Owner\Documents\Britain's Got Talent 2015 S09E18 Finals Isaac Waddington Performs A Billy Joel Favorite.mp4
2015-05-31 13:38 - 2015-05-31 14:04 - 00000348 _____ C:\Users\Owner\Documents\Geeks.txt
2015-05-31 13:19 - 2015-05-31 13:20 - 00005876 _____ C:\Users\Owner\Documents\cc_20150531_131943.reg
2015-05-31 05:51 - 2015-06-26 09:21 - 00000925 _____ C:\Users\Public\Desktop\CCleaner.lnk
2015-05-31 05:51 - 2015-06-26 09:21 - 00000000 ____D C:\Program Files\CCleaner
2015-05-31 05:51 - 2015-05-31 05:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-05-31 04:25 - 2015-05-31 04:25 - 00000000 ____D C:\Program Files\GUM18CD.tmp
2015-05-31 04:19 - 2015-06-25 23:37 - 00002091 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-05-31 04:19 - 2015-06-25 17:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-05-31 04:18 - 2015-05-31 21:42 - 00000886 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-31 04:18 - 2015-05-31 21:42 - 00000882 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-31 04:18 - 2015-05-31 05:08 - 00000000 ____D C:\ProgramData\Google
2015-05-31 04:17 - 2015-05-31 21:42 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-31 04:17 - 2015-05-31 04:17 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-05-31 04:17 - 2015-05-31 04:17 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-05-30 19:24 - 2015-05-30 19:25 - 00347816 _____ (Microsoft Corporation) C:\Users\Owner\Desktop\MicrosoftFixit.Performance.Run.exe
2015-05-30 18:29 - 2015-04-11 11:07 - 00054656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2015-05-30 16:28 - 2015-05-31 19:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-05-30 16:27 - 2015-05-30 16:29 - 06962912 _____ (Microsoft Corporation) C:\Users\Owner\Desktop\Silverlight.exe
2015-05-30 12:53 - 2015-05-01 21:16 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-30 11:59 - 2015-04-20 10:56 - 01250816 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-05-30 11:59 - 2015-04-20 10:56 - 00909312 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-05-30 11:58 - 2015-04-18 10:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-05-30 11:58 - 2015-04-13 11:19 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2015-05-30 11:55 - 2015-04-08 11:14 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-05-30 11:55 - 2015-04-08 11:14 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2015-05-30 03:17 - 2015-05-30 03:17 - 50198842 _____ C:\Users\Owner\Documents\Isaac Waddington _ Britain's Got Talent 2015.mp4
2015-05-29 05:31 - 2015-05-30 11:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Driver Updater
2015-05-29 05:31 - 2015-05-30 10:44 - 00000000 ____D C:\Users\Owner\AppData\Local\AVG Netherlands BV
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-06-26 20:00 - 2014-07-16 07:39 - 01618219 _____ C:\Windows\WindowsUpdate.log
2015-06-26 19:57 - 2009-07-14 12:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-26 17:56 - 2011-07-16 00:44 - 00018864 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-26 17:56 - 2011-07-16 00:44 - 00018864 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-26 13:20 - 2015-01-22 19:36 - 00000000 ____D C:\Users\Owner\Desktop\Receipts
2015-06-26 12:54 - 2009-07-14 10:37 - 00000000 ____D C:\Windows\system32\NDF
2015-06-26 12:53 - 2012-11-29 03:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RoboForm
2015-06-26 09:34 - 2015-01-29 05:27 - 00000000 ____D C:\Users\Owner\Desktop\Autoruns
2015-06-26 09:23 - 2015-01-19 04:44 - 00000000 ____D C:\Users\Owner\AppData\Local\CrashDumps
2015-06-26 02:00 - 2009-07-14 10:37 - 00000000 ____D C:\Windows\rescache
2015-06-26 00:22 - 2014-11-13 03:30 - 00000000 __SHD C:\Users\Owner\AppData\Local\EmieBrowserModeList
2015-06-26 00:22 - 2014-05-07 07:50 - 00000000 __SHD C:\Users\Owner\AppData\Local\EmieUserList
2015-06-26 00:22 - 2014-05-07 07:50 - 00000000 __SHD C:\Users\Owner\AppData\Local\EmieSiteList
2015-06-26 00:20 - 2011-07-16 01:37 - 00781346 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-26 00:14 - 2009-07-14 12:33 - 00269880 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-26 00:11 - 2014-05-07 03:20 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-06-26 00:10 - 2014-12-11 03:18 - 00000000 ____D C:\Windows\system32\appraiser
2015-06-25 23:56 - 2013-08-16 03:10 - 00000000 ____D C:\Windows\system32\MRT
2015-06-25 23:50 - 2011-08-12 14:59 - 136900096 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-06-25 17:48 - 2010-02-01 12:09 - 00000000 ____D C:\Program Files\Realtek
2015-06-25 17:48 - 2010-02-01 12:09 - 00000000 ____D C:\Program Files\InstallShield Installation Information
2015-06-25 17:46 - 2010-02-02 13:20 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-06-25 17:42 - 2011-11-11 16:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
2015-06-25 17:38 - 2010-02-01 13:27 - 00000000 ____D C:\Program Files\DIFX
2015-06-25 17:34 - 2014-05-01 09:45 - 00013464 _____ C:\Windows\system32\Drivers\SWDUMon.sys
2015-06-25 17:24 - 2011-07-16 00:48 - 00000000 ____D C:\Users\Owner
2015-06-25 17:14 - 2009-07-14 10:37 - 00000000 ____D C:\Windows\system32\wfp
2015-06-25 17:11 - 2015-04-06 23:47 - 00000000 ___SD C:\Windows\system32\GWX
2015-06-25 17:11 - 2010-11-29 10:45 - 00000000 ____D C:\Users\Owner\AppData\Roaming\vlc
2015-06-25 17:11 - 2010-02-01 19:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IncrediMail
2015-06-25 17:11 - 2010-02-01 13:26 - 00000000 ____D C:\Windows\system32\Macromed
2015-06-25 17:11 - 2009-07-14 12:52 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-06-25 17:10 - 2010-02-01 19:31 - 00000000 ____D C:\Users\Owner\AppData\Local\IM
2015-06-25 17:10 - 2009-07-14 10:37 - 00000000 ____D C:\Windows\registration
2015-06-25 17:10 - 2009-07-14 10:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-06-25 10:52 - 2015-02-08 08:41 - 00013824 ___SH C:\Users\Owner\AppData\Thumbs.db
2015-06-24 07:19 - 2015-01-21 02:02 - 00000000 ____D C:\ProgramData\boost_interprocess
2015-06-23 20:15 - 2009-07-14 10:37 - 00000000 ____D C:\Windows\system32\LogFiles
2015-06-22 02:52 - 2011-07-30 19:29 - 00000000 ____D C:\Windows\Minidump
2015-06-19 17:33 - 2015-02-17 09:21 - 00000000 ____D C:\ProgramData\YTD Video Downloader
2015-06-12 14:39 - 2015-04-15 13:28 - 00338620 _____ C:\Users\Owner\AppData\Local\census.cache
2015-06-12 14:39 - 2015-04-15 13:28 - 00146372 _____ C:\Users\Owner\AppData\Local\ars.cache
2015-06-07 20:02 - 2015-04-09 08:21 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-06-07 16:41 - 2015-01-16 16:04 - 00000281 _____ C:\DelFix.txt
2015-06-07 03:51 - 2009-07-14 12:53 - 00032626 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-05-31 19:14 - 2015-05-02 18:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YTD Video Downloader
2015-05-31 19:14 - 2015-04-15 21:28 - 00000000 ____D C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Security Scan
2015-05-31 19:14 - 2014-10-26 10:49 - 00000000 ____D C:\Program Files\Microsoft Security Client
2015-05-31 19:14 - 2014-02-13 10:55 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-05-31 19:14 - 2013-10-09 15:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2015-05-31 19:14 - 2009-07-14 15:49 - 00000000 ____D C:\Program Files\Windows Journal
2015-05-31 19:14 - 2009-07-14 15:48 - 00000000 ____D C:\Windows\ShellNew
2015-05-31 19:14 - 2009-07-14 10:37 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
2015-05-31 19:14 - 2009-07-14 10:37 - 00000000 ____D C:\Windows\Microsoft.NET
2015-05-31 19:13 - 2009-07-14 10:37 - 00000000 ____D C:\Windows\AppCompat
2015-05-31 18:58 - 2009-07-14 10:37 - 00000000 ___RD C:\Users\Public
2015-05-31 13:51 - 2015-01-17 04:19 - 00000897 _____ C:\Users\Public\Desktop\Speccy.lnk
2015-05-31 13:51 - 2015-01-17 04:19 - 00000000 ____D C:\Program Files\Speccy
2015-05-31 05:16 - 2011-11-17 02:19 - 00000000 ____D C:\Program Files\Google
2015-05-31 05:08 - 2010-02-03 01:04 - 00000000 ____D C:\Users\Owner\AppData\Local\Google
2015-05-31 04:16 - 2010-02-02 11:42 - 00000000 ____D C:\Users\Owner\AppData\Local\Adobe
2015-05-30 12:55 - 2014-10-26 10:49 - 00002093 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2015-05-30 12:55 - 2011-03-15 09:45 - 00001945 _____ C:\Windows\epplauncher.mif
2015-05-30 10:05 - 2011-07-16 16:39 - 00000000 ____D C:\Windows\Panther
2015-05-30 02:56 - 2012-04-25 06:08 - 00000000 ____D C:\Users\Owner\Downloads\You-Tube
2015-05-28 07:32 - 2011-06-10 06:54 - 00000180 _____ C:\Users\Owner\Documents\Important stuff!.txt
==================== Files in the root of some directories =======
2015-04-07 22:44 - 2015-04-07 23:06 - 0000115 _____ () C:\Users\Owner\AppData\Roaming\LogFile.txt
2013-04-01 19:07 - 2013-04-01 19:07 - 0026108 _____ () C:\Users\Owner\AppData\Roaming\UserTile.png
2015-04-07 21:45 - 2015-05-07 03:27 - 0000436 _____ () C:\Users\Owner\AppData\Roaming\Weather Meter_Settings.ini
2015-04-15 13:28 - 2015-06-12 14:39 - 0146372 _____ () C:\Users\Owner\AppData\Local\ars.cache
2015-04-15 13:28 - 2015-06-12 14:39 - 0338620 _____ () C:\Users\Owner\AppData\Local\census.cache
2014-09-11 19:44 - 2014-09-11 19:44 - 0003584 _____ () C:\Users\Owner\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-04-15 08:28 - 2015-04-15 08:28 - 0000036 _____ () C:\Users\Owner\AppData\Local\housecall.guid.cache
2015-06-12 13:23 - 2015-06-12 13:23 - 0000017 _____ () C:\Users\Owner\AppData\Local\resmon.resmoncfg
2014-02-11 09:56 - 2015-01-22 05:42 - 0010278 _____ () C:\ProgramData\hpzinstall.log
Some files in TEMP:
====================
C:\Users\Owner\AppData\Local\Temp\RoboForm-Setup.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-06-23 11:39
==================== End of log ============================
****
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 24-06-2015
Ran by Owner at 2015-06-26 20:05:24
Running from C:\Users\Owner\Desktop
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-754179056-1382982999-2036298953-500 - Administrator - Disabled)
Guest (S-1-5-21-754179056-1382982999-2036298953-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-754179056-1382982999-2036298953-1002 - Limited - Enabled)
Owner (S-1-5-21-754179056-1382982999-2036298953-1000 - Administrator - Enabled) => C:\Users\Owner
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
32 Bit HP CIO Components Installer (Version: 6.1.1 - Hewlett-Packard) Hidden
Adobe Acrobat 4.0 (HKLM\...\Adobe Acrobat 4.0) (Version: 4.0 - Adobe Systems, Inc.)
Any Video Converter 5.7.3 (HKLM\...\Any Video Converter_is1) (Version: - Any-Video-Converter.com)
Any Video Converter Ultimate 4.6.0 (HKLM\...\Any Video Converter Ultimate_is1) (Version: - Any-Video-Converter.com)
Ashampoo Burning Studio 14 (HKLM\...\{91B33C97-7BCF-CDFE-4321-58EBF3E8641C}_is1) (Version: 14.0.9 - Ashampoo GmbH & Co. KG)
Ashampoo Burning Studio 8.09 (HKLM\...\Ashampoo Burning Studio 8_is1) (Version: 8.0.9 - ashampoo GmbH & Co. KG)
BufferChm (Version: 130.0.331.000 - Hewlett-Packard) Hidden
Canon Easy-WebPrint EX (HKLM\...\Easy-WebPrint EX) (Version: 1.4.0.0 - Canon Inc.)
Canon IJ Scan Utility (HKLM\...\Canon_IJ_Scan_Utility) (Version: - Canon Inc.)
Canon MG2500 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG2500_series) (Version: 1.00 - Canon Inc.)
Canon MG2500 series On-screen Manual (HKLM\...\Canon MG2500 series On-screen Manual) (Version: 7.6.1 - Canon Inc.)
Canon My Image Garden (HKLM\...\Canon My Image Garden) (Version: 2.0.1 - Canon Inc.)
Canon My Image Garden Design Files (HKLM\...\Canon My Image Garden Design Files) (Version: 2.0.0 - Canon Inc.)
Canon My Printer (HKLM\...\CanonMyPrinter) (Version: 3.1.0 - Canon Inc.)
Canon Quick Menu (HKLM\...\CanonQuickMenu) (Version: 2.2.1 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.07 - Piriform)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Data Lifeguard Diagnostic for Windows (HKLM\...\{75B61CF0-B8A8-46E2-8709-C4A79898AC1D}) (Version: 1.17 - Western Digital Corporation)
Defraggler (HKLM\...\Defraggler) (Version: 2.19 - Piriform)
Easy Thumbnails (Remove only) (HKLM\...\Easy Thumbnails_is1) (Version: 3.0 - Fookes Software)
Go PDF Reader (HKLM\...\GoPDFReader) (Version: - )
Google Chrome (HKLM\...\Google Chrome) (Version: 43.0.2357.130 - Google Inc.)
Google Update Helper (Version: 1.3.24.7 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.27.5 - Google Inc.) Hidden
IncrediMail (Version: 6.6.0.5288 - IncrediMail) Hidden
IncrediMail 2.5 (HKLM\...\IncrediMail) (Version: 6.6.0.5288 - IncrediMail Ltd.)
Junk Mail filter update (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Calculator Plus (HKLM\...\{83073C45-3003-4671-9A86-243AAADD915A}) (Version: 1.0.0 - Microsoft)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Movie Maker (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
PhotoMail Maker (Version: 6.0.0.1007 - IncrediMail) Hidden
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: - )
Revo Uninstaller Pro 3.1.2 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.2 - VS Revo Group, Ltd.)
RoboForm 7-9-14-4 (All Users) (HKLM\...\AI RoboForm) (Version: 7-9-14-4 - Siber Systems)
Speccy (HKLM\...\Speccy) (Version: 1.28 - Piriform)
SumatraPDF (HKLM\...\SumatraPDF) (Version: 2.4 - Krzysztof Kowalczyk)
UnloadSupport (Version: 11.0.0 - Hewlett-Packard) Hidden
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Windows 7 Upgrade Advisor (HKLM\...\{AB05F2C8-F608-403b-95E1-FD8ADFACD31E}) (Version: 2.0.5000.0 - Microsoft Corporation)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
YTD Video Downloader 4.9 (HKLM\...\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version: 4.9 - GreenTree Applications SRL) <==== ATTENTION
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-754179056-1382982999-2036298953-1000_Classes\CLSID\{00B7E0AB-817A-44AD-A04B-D1148D524136}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-754179056-1382982999-2036298953-1000_Classes\CLSID\{3A999A50-AB25-4A20-90A9-08F71FCE320F}\InprocServer32 -> C:\Windows\system32\spool\DRIVERS\W32X86\3\hpcdmc32.dll (HP)
CustomCLSID: HKU\S-1-5-21-754179056-1382982999-2036298953-1000_Classes\CLSID\{7C6E29BC-8B8B-4C3D-859E-AF6CD158BE0F}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-754179056-1382982999-2036298953-1000_Classes\CLSID\{88D969C0-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-754179056-1382982999-2036298953-1000_Classes\CLSID\{88D969C1-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-754179056-1382982999-2036298953-1000_Classes\CLSID\{88D969C2-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-754179056-1382982999-2036298953-1000_Classes\CLSID\{88D969C3-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-754179056-1382982999-2036298953-1000_Classes\CLSID\{88D969C4-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-754179056-1382982999-2036298953-1000_Classes\CLSID\{88D969C5-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-754179056-1382982999-2036298953-1000_Classes\CLSID\{88D969C6-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-754179056-1382982999-2036298953-1000_Classes\CLSID\{88D969C8-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-754179056-1382982999-2036298953-1000_Classes\CLSID\{88D969C9-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-754179056-1382982999-2036298953-1000_Classes\CLSID\{88D969CA-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-754179056-1382982999-2036298953-1000_Classes\CLSID\{88D969D6-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-754179056-1382982999-2036298953-1000_Classes\CLSID\{98087D89-B93F-4BCF-A998-AE4D9F607C14}\InprocServer32 -> C:\Windows\system32\spool\DRIVERS\W32X86\3\hpcdmc32.dll (HP)
CustomCLSID: HKU\S-1-5-21-754179056-1382982999-2036298953-1000_Classes\CLSID\{B286F068-5B17-4AE8-989B-8F9A199C47BA}\InprocServer32 -> C:\Windows\system32\spool\DRIVERS\W32X86\3\hpcdmc32.dll (HP)
==================== Restore Points =========================
10-06-2015 10:48:28 Windows Update
10-06-2015 23:42:30 Windows Update
14-06-2015 06:50:48 Windows Update
17-06-2015 12:35:14 Windows Update
19-06-2015 03:20:39 Revo Uninstaller Pro's restore point - Auslogics BoostSpeed 8
19-06-2015 03:25:38 Revo Uninstaller Pro's restore point - Auslogics Anti-Malware
19-06-2015 13:49:04 Restore Operation
19-06-2015 14:28:39 Windows Update
19-06-2015 15:19:02 Windows Update
21-06-2015 14:31:04 Revo Uninstaller Pro's restore point - Auslogics BoostSpeed 7
21-06-2015 14:37:29 Revo Uninstaller Pro's restore point - Auslogics DiskDefrag
23-06-2015 09:51:10 Windows Update
25-06-2015 07:00:20 Revo Uninstaller Pro's restore point - Auslogics Anti-Malware
25-06-2015 07:04:38 Revo Uninstaller Pro's restore point - Auslogics BoostSpeed 7
25-06-2015 07:08:54 Revo Uninstaller Pro's restore point - BitComet 1.38
25-06-2015 07:11:05 Revo Uninstaller Pro's restore point - Malwarebytes Anti-Malware version 2.1.4.1018
25-06-2015 10:47:14 Revo Uninstaller Pro's restore point - Auslogics BoostSpeed 7
25-06-2015 10:49:51 Revo Uninstaller Pro's restore point - Auslogics DiskDefrag
25-06-2015 15:12:51 Restore Operation
25-06-2015 17:27:17 Revo Uninstaller Pro's restore point - My Online Toolkit
25-06-2015 17:30:08 Revo Uninstaller Pro's restore point - MpcStar 5.3
25-06-2015 17:34:03 Installed DriverUpdate
25-06-2015 17:36:44 Revo Uninstaller Pro's restore point - Windows Driver Package - 2Wire (2WIREPCP) Net (03/22/2007 2.0)
25-06-2015 17:38:48 Revo Uninstaller Pro's restore point - Auslogics BoostSpeed 7
25-06-2015 17:41:09 Revo Uninstaller Pro's restore point - Auslogics DiskDefrag
25-06-2015 17:42:37 Revo Uninstaller Pro's restore point - DriverUpdate
25-06-2015 17:42:59 Removed DriverUpdate
25-06-2015 17:44:59 Revo Uninstaller Pro's restore point - Malwarebytes Anti-Malware version 2.1.4.1018
25-06-2015 17:46:26 Revo Uninstaller Pro's restore point - Realtek 8169, 8168, 8101E and 8102E Ethernet Network Card Driver for Windows Vista
25-06-2015 17:57:25 Windows Update
25-06-2015 23:49:08 Windows Update
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2006-11-02 18:23 - 2006-09-19 05:41 - 00000761 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
::1 localhost
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0DC0B543-5117-4B29-8FDD-6B8D699FB33B} - System32\Tasks\{FB687851-6320-4D70-A607-9ED3EA25F95F} => C:\Program Files\IncrediMail\Bin\IncMail.exe [2015-06-05] (IncrediMail, Ltd.)
Task: {1260FC21-28CB-409A-AFE8-4A8B73884E21} - System32\Tasks\Open URL by RoboForm => Rundll32.exe url.dll,FileProtocolHandler "http://www.roboform....IGJKJMIBNKJHIKJ"
Task: {14FF1700-BA4C-4FC0-A89D-96D97D103D00} - System32\Tasks\Go to RoboForm Install page => Rundll32.exe url.dll,FileProtocolHandler "http://www.roboform....NNICMJNDJCMKJBJ"
Task: {1946ADEB-A7AD-4E17-9A7F-E9280DA1CC6A} - System32\Tasks\{54FFE30A-7439-482D-8E6F-497ABD851E8D} => C:\Program Files\Microsoft Silverlight\5.1.40416.0\Silverlight.Configuration.exe [2015-04-15] (Microsoft Corporation)
Task: {19C01C1D-48C6-46DB-9111-9A2A9D2ACBED} - System32\Tasks\Auslogics\BoostSpeed\Start BoostSpeed оn Owner logon => C:\Program Files\Auslogics\BoostSpeed\BoostSpeed.exe
Task: {1C4A8493-30A2-47E5-9BE8-C1D793217A0D} - System32\Tasks\{C7C592A1-4609-49D9-8CAB-B26A0395DBCE} => C:\Program Files\IncrediMail\Bin\IncMail.exe [2015-06-05] (IncrediMail, Ltd.)
Task: {21E9703A-B00E-4010-811A-36A6A6E08D9B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-05-31] (Google Inc.)
Task: {27039341-AF5E-4AA3-8019-9D360F4811AF} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-06-02] (Piriform Ltd)
Task: {3043F7F1-BD5D-4537-9DAD-CDDE8B72A895} - System32\Tasks\{DED62F59-5C9E-4A85-8440-E42E28096822} => C:\Users\Owner\Downloads\OneDriveSetup.exe
Task: {39073115-B88D-4DDC-A55B-B46BA9A50B7A} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => schtasks
Task: {45B44DE6-0F07-4F6E-9B58-1770136EC6A9} - System32\Tasks\IHUninstallTrackingTASK => CMD
Task: {4B39CC67-88E0-42F3-9EEB-BE01803A9BA9} - System32\Tasks\{F4C92BD5-C5A1-4437-AAC2-A55EBA33700D} => C:\Program Files\BitComet\BitComet.exe
Task: {561375CB-FF5A-417B-B297-BA73DE149581} - System32\Tasks\Microsoft\Windows\Wired\GatherWiredInfo => C:\Windows\system32\gatherWiredInfo.vbs
Task: {56D3ABCE-0501-46AD-8FFF-C6F0785C6142} - System32\Tasks\{04EB4926-E829-487F-A4A3-F39F51CB7E1E} => C:\Program Files\IncrediMail\Bin\IncMail.exe [2015-06-05] (IncrediMail, Ltd.)
Task: {662D36BA-5126-470B-93F1-C778D97D1541} - System32\Tasks\{5D97E633-0979-482E-A862-CD2D354C08F3} => C:\Program Files\PeerBlock\peerblock.exe
Task: {6F10174E-7813-4D82-8392-41E4C0F07EC9} - System32\Tasks\{8B5D59BA-6195-43B8-84B0-76396BA7F967} => pcalua.exe -a C:\Users\Owner\Downloads\Applications-programs\wlsetup-web.exe -d C:\Users\Owner\Downloads\Applications-programs
Task: {71337097-9F94-454C-94E3-6FD30106B933} - \PC TuneUp Maestro Startup No Task File <==== ATTENTION
Task: {76121EEE-434C-42DF-AC87-7EB6999EFA2E} - System32\Tasks\Google Update => C:\Users\Owner\AppData\Local\Google\Update\GoogleUpdate.exe
Task: {7F86EC89-2379-40C3-BF09-88524471D169} - System32\Tasks\{6ABA9986-39C4-4B3E-93C5-974D78626616} => C:\Program Files\PeerBlock\peerblock.exe
Task: {82A24E69-122A-4F51-B583-A348C7372769} - System32\Tasks\{2962B57C-4766-426A-8887-D12E28116F4B} => C:\Program Files\IncrediMail\Bin\IncMail.exe [2015-06-05] (IncrediMail, Ltd.)
Task: {8988B3B0-EF01-4FC2-8D61-C20A0C40EE29} - System32\Tasks\{EF80D55A-55E2-4909-AFCB-8CC9B9AC6FF5} => pcalua.exe -a D:\AutoRunPro.exe -d D:\
Task: {92672263-E352-43F9-94CC-2FB6436D6351} - System32\Tasks\{D5C773BB-EDAA-434D-84F5-BAFDD84D48C6} => C:\Program Files\IncrediMail\Bin\IncMail.exe [2015-06-05] (IncrediMail, Ltd.)
Task: {A2A18C4E-47D9-43CF-A655-070DCED2F16C} - System32\Tasks\{BA1F71DD-E433-457D-808E-DEE68AA0A978} => C:\Program Files\PeerBlock\peerblock.exe
Task: {ABA65842-BE6F-4CFB-8112-13781F34B3D5} - System32\Tasks\{0368CC1F-3E0C-49C3-9E79-F6923D8A3D4E} => C:\Program Files\IncrediMail\Bin\IncMail.exe [2015-06-05] (IncrediMail, Ltd.)
Task: {B3C0CC0A-A52B-43D4-83F9-319AB1AB2F13} - System32\Tasks\{13E4E255-40ED-4E85-A5BB-3CF5AAB139D0} => C:\Program Files\Skype\\Phone\Skype.exe
Task: {B6893B4B-20AA-4829-A509-7ADC1620747B} - System32\Tasks\RunAsStdUser Task for VeohWebPlayer => C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
Task: {B923A9D4-92E8-4C37-8BF2-87B375365D60} - System32\Tasks\Auslogics\BoostSpeed\Scan and Repair => Rundll32.exe TaskSchedulerHelper.dll,RunTask "BoostSpeed.exe" "-UseTray -Schedule"
Task: {BB4D7F4C-5DF5-4F47-BD33-CF71A35D2D87} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-05-31] (Google Inc.)
Task: {BBBAC0F0-1E55-4F45-953E-ADC4A1C6253F} - System32\Tasks\Run RoboForm TaskBar Icon => C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2015-06-26] (Siber Systems)
Task: {BF95D427-4AA6-4CD3-AFE4-20795D2A668A} - System32\Tasks\{91B9C5A7-30E2-4EF3-A54B-EE275C8D90F3} => C:\Program Files\BitComet\BitComet.exe
Task: {DDB87CEA-DAEF-4B84-9B1F-52D4370730F4} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-05-31] (Adobe Systems Incorporated)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs
Task: {E6934196-7C8F-4304-BD9A-B013A451D3CB} - System32\Tasks\{BEEFDE71-9ADA-4208-AFA6-8591F44844C2} => pcalua.exe -a C:\Users\Owner\Downloads\pctum_setup_dmp_.exe -d C:\Users\Owner\Downloads
Task: {F141A988-0079-4D2B-A455-03886C5FBED7} - System32\Tasks\{A5FB1139-C3BA-43CB-B27B-EF5EF604DBFA} => C:\Program Files\PeerBlock\peerblock.exe
Task: {F4711B03-C555-43F9-8896-D90E8FD6D1D3} - System32\Tasks\{ADFFAF74-7253-4F28-A492-3BD29A94D612} => C:\Program Files\IncrediMail\Bin\IncMail.exe [2015-06-05] (IncrediMail, Ltd.)
Task: {FAE80FFA-2754-4FCF-A51D-945991F8B0F9} - System32\Tasks\{3BF27CA2-D8CC-48B6-98DC-2B89B8593AEC} => C:\Program Files\IncrediMail\Bin\IncMail.exe [2015-06-05] (IncrediMail, Ltd.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (Whitelisted) ==============
2010-02-01 12:20 - 2007-05-14 10:54 - 00272024 _____ () C:\Program Files\CyberLink\Shared Files\RichVideo.exe
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\S-1-5-21-754179056-1382982999-2036298953-1000\...\hola.org -> hxxp://hola.org
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-754179056-1382982999-2036298953-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 10.0.0.138
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
MSCONFIG\startupfolder: C:^Users^Owner^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Canon IJ Status Monitor Canon iP4500 series.lnk => C:\Windows\pss\Canon IJ Status Monitor Canon iP4500 series.lnk.Startup
MSCONFIG\startupreg: CanonMyPrinter => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
MSCONFIG\startupreg: CanonQuickMenu => C:\Program Files\Canon\Quick Menu\CNQMMAIN.EXE /logon
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
MSCONFIG\startupreg: hpqSRMon => C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
MSCONFIG\startupreg: InCD => C:\Program Files\Nero\Nero 7\InCD\InCD.exe
MSCONFIG\startupreg: LanguageShortcut => "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
MSCONFIG\startupreg: NeroFilterCheck => C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files\MpcStar\Codecs\QuickTime\QTSystem\qttask.exe" -atboottime
MSCONFIG\startupreg: RemoteControl => "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
MSCONFIG\startupreg: SecurDisc => C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [UDP Query User{0556D590-2A24-4CE5-A64E-46E99F078885}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe
FirewallRules: [TCP Query User{294FD7B7-0BF1-4804-9B8C-44AC4E0A5450}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe
FirewallRules: [{62073BA1-0C00-4122-9D03-ABF0B54D7A5F}] => (Allow) LPort=15081
FirewallRules: [{33D59C28-6226-4071-9E97-0D2633FFB3A6}] => (Allow) LPort=15081
FirewallRules: [UDP Query User{137FBEB4-7013-479D-80C2-F46CB1BA5A5F}C:\program files\internet explorer\iexplore.exe] => (Block) C:\program files\internet explorer\iexplore.exe
FirewallRules: [TCP Query User{38B99604-D6CB-4B7D-99A4-51542332812F}C:\program files\internet explorer\iexplore.exe] => (Block) C:\program files\internet explorer\iexplore.exe
FirewallRules: [{3897C1BE-1643-4A4F-ACED-B93F77ADA0E6}] => (Allow) LPort=8744
FirewallRules: [{0F356C19-83A1-419E-A9E4-0517CC6F88F5}] => (Allow) LPort=8744
FirewallRules: [{95EF5F9C-CEE0-45FB-8C75-9BFC2BD42257}] => (Allow) LPort=15081
FirewallRules: [{ABF1C57A-63CA-4E07-9C94-A5C3758A5F28}] => (Allow) LPort=15081
FirewallRules: [{EE573F82-ACA4-43DE-907E-1DC0D4C20E9A}] => (Allow) C:\Program Files\Adobe\Acrobat 4.0\Reader\AcroRd32.exe
FirewallRules: [{BFD1A195-22BF-4B0B-B661-E27FD70117B7}] => (Allow) C:\Program Files\Adobe\Acrobat 4.0\Reader\AcroRd32.exe
FirewallRules: [{422A09C5-101E-477F-953D-EC2969E60EAB}] => (Allow) C:\Program Files\Adobe\Acrobat 4.0\Reader\AcroRd32.exe
FirewallRules: [{97830606-0FC2-44B1-9115-63798ECAC3B0}] => (Allow) C:\Program Files\Adobe\Acrobat 4.0\Reader\AcroRd32.exe
FirewallRules: [{5FA6DECE-C167-4A53-A0A8-DE68725BCBB2}] => (Allow) LPort=19898
FirewallRules: [{45E1AF92-C1A2-4E34-A305-882F1518B390}] => (Allow) LPort=19898
FirewallRules: [{E66DDFA3-16FA-4A11-85E7-336AB8981FB2}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{D0C9A2A9-47DE-4315-9E80-ED178B5A720F}] => (Allow) C:\Program Files\IncrediMail\Bin\ImpCnt.exe
FirewallRules: [{0D3FC62B-FDD1-4143-851B-D0B7BEBB39D7}] => (Allow) C:\Program Files\IncrediMail\Bin\ImpCnt.exe
FirewallRules: [{26D294C1-8D89-40CB-B932-22DF0B47790C}] => (Allow) C:\Program Files\IncrediMail\Bin\ImpCnt.exe
FirewallRules: [{8E1D504B-F982-4D4B-8CD9-6C4EF271064F}] => (Allow) C:\Program Files\IncrediMail\Bin\ImpCnt.exe
FirewallRules: [{25A8EFDD-A28B-4271-9023-E9CD2BB52B70}] => (Allow) C:\Program Files\IncrediMail\Bin\ImpCnt.exe
FirewallRules: [{5DB5BD8B-9B74-403A-8D3E-A86E962B60CE}] => (Allow) C:\Program Files\IncrediMail\Bin\ImpCnt.exe
FirewallRules: [{F93C28FC-5327-45F7-A0DC-23E3C8A5F90E}] => (Allow) C:\Program Files\IncrediMail\Bin\ImApp.exe
FirewallRules: [{EDDC5C3C-DD5A-467E-BEE1-4074AB1A97F7}] => (Allow) C:\Program Files\IncrediMail\Bin\ImApp.exe
FirewallRules: [{C26B37C6-67B9-4349-8703-FBB672D5A93E}] => (Allow) C:\Program Files\IncrediMail\Bin\IncMail.exe
FirewallRules: [{1B1EF8BF-A803-4E8D-AAEA-9F36470E1611}] => (Allow) C:\Program Files\IncrediMail\Bin\IncMail.exe
FirewallRules: [TCP Query User{D25C8134-6F41-414D-8BAB-CD7497916758}C:\program files\internet explorer\iexplore.exe] => (Block) C:\program files\internet explorer\iexplore.exe
FirewallRules: [UDP Query User{8CA4C3C3-C36E-4A9A-BC14-43C54916470B}C:\program files\internet explorer\iexplore.exe] => (Block) C:\program files\internet explorer\iexplore.exe
FirewallRules: [{40F158CC-0EF8-458B-A35A-0D608D03F2D0}] => (Allow) C:\Program Files\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{63D75030-22BA-4491-99E6-9F79E065111F}] => (Allow) LPort=2869
FirewallRules: [{E3816C70-F398-48BA-815C-371898CB4C22}] => (Allow) LPort=1900
FirewallRules: [{183EF8A5-AE32-4707-8D74-78039396C39C}] => (Allow) C:\Program Files\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{82F7A5A9-DCCE-4E7E-A6D4-6D1EAEEC05DB}] => (Allow) LPort=19898
FirewallRules: [{92965DC4-73AF-4EA9-91A1-C2A10C1F104E}] => (Allow) LPort=19898
FirewallRules: [{4C892165-4A30-4873-BE3C-3540B9A1D85A}] => (Allow) LPort=22668
FirewallRules: [{42F7D32B-9FB6-41D4-8D29-191D18E2DBFD}] => (Allow) LPort=22668
FirewallRules: [{0EB4AD3D-B5AF-46C9-8C33-314664668EB2}] => (Allow) C:\Program Files\IncrediMail\Bin\ImpCnt.exe
FirewallRules: [{89DA5C7F-48FA-4206-AF0D-29D38C52A2F1}] => (Allow) C:\Program Files\IncrediMail\Bin\ImpCnt.exe
FirewallRules: [{25565F1A-3B0E-43A1-AA79-F8CB63379205}] => (Allow) C:\Program Files\IncrediMail\Bin\ImpCnt.exe
FirewallRules: [{1845CAD0-673A-445F-A8C9-FF6EF70E65CB}] => (Allow) C:\Program Files\IncrediMail\Bin\ImpCnt.exe
FirewallRules: [{10978D0F-98B9-4069-B788-2445837A4FF9}] => (Allow) C:\Program Files\IncrediMail\Bin\ImpCnt.exe
FirewallRules: [{C85EAB9F-72F2-4CE0-B4DB-D421F0561AAE}] => (Allow) C:\Program Files\IncrediMail\Bin\ImpCnt.exe
FirewallRules: [{0BA5E1B1-67DD-40DE-96F3-B09F9642C6BE}] => (Allow) C:\Program Files\IncrediMail\Bin\ImpCnt.exe
FirewallRules: [{D4EB235E-E125-4823-A979-295C26AFD865}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
FirewallRules: [{F3B7D85F-0113-402F-8F73-7D8375AFFB0E}] => (Allow) C:\Program Files\IncrediMail\Bin\IncMail.exe
FirewallRules: [{21A51679-94B0-483C-BA34-50407112E6A6}] => (Allow) C:\Program Files\IncrediMail\Bin\IncMail.exe
FirewallRules: [{6C1549F0-E832-46A1-96FD-76BD3BAE148C}] => (Allow) C:\Program Files\IncrediMail\Bin\ImApp.exe
FirewallRules: [{26CF61FE-F204-49B5-87FD-2842A1F80D66}] => (Allow) C:\Program Files\IncrediMail\Bin\ImApp.exe
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (06/26/2015 07:59:00 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/26/2015 07:57:59 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: NT AUTHORITY)
Description: Windows cannot load classes registry file.
DETAIL - Unspecified error
Error: (06/26/2015 07:57:45 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: NT AUTHORITY)
Description: Windows cannot load classes registry file.
DETAIL - Unspecified error
Error: (06/26/2015 07:55:07 PM) (Source: ESENT) (EventID: 455) (User: )
Description: taskhost (2436) WebCacheLocal: Error -1811 occurred while opening logfile C:\Users\Owner\AppData\Local\Microsoft\Windows\WebCache\V010017A.log.
Error: (06/26/2015 07:55:05 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: NT AUTHORITY)
Description: Windows cannot load classes registry file.
DETAIL - Unspecified error
Error: (06/26/2015 07:54:57 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: NT AUTHORITY)
Description: Windows cannot load classes registry file.
DETAIL - Unspecified error
Error: (06/26/2015 05:51:51 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/26/2015 05:50:53 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: NT AUTHORITY)
Description: Windows cannot load classes registry file.
DETAIL - Unspecified error
Error: (06/26/2015 05:50:40 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: NT AUTHORITY)
Description: Windows cannot load classes registry file.
DETAIL - Unspecified error
Error: (06/26/2015 00:48:06 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (06/26/2015 07:57:59 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
sptd
Error: (06/26/2015 07:57:16 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Crash dump initialization failed!
Error: (06/26/2015 07:57:12 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Crash dump initialization failed!
Error: (06/26/2015 07:57:12 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Crash dump initialization failed!
Error: (06/26/2015 07:57:03 PM) (Source: sptd) (EventID: 4) (User: )
Description: Driver detected an internal error in its data structures for .
Error: (06/26/2015 07:57:29 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 7:55:12 PM on 6/26/2015 was unexpected.
Error: (06/26/2015 07:54:56 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
sptd
Error: (06/26/2015 07:54:15 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Crash dump initialization failed!
Error: (06/26/2015 07:54:29 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 7:52:16 PM on 6/26/2015 was unexpected.
Error: (06/26/2015 07:54:11 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Crash dump initialization failed!
Microsoft Office:
=========================
Error: (06/26/2015 07:59:00 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/26/2015 07:57:59 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: NT AUTHORITY)
Description: Unspecified error
Error: (06/26/2015 07:57:45 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: NT AUTHORITY)
Description: Unspecified error
Error: (06/26/2015 07:55:07 PM) (Source: ESENT) (EventID: 455) (User: )
Description: taskhost2436WebCacheLocal: C:\Users\Owner\AppData\Local\Microsoft\Windows\WebCache\V010017A.log-1811
Error: (06/26/2015 07:55:05 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: NT AUTHORITY)
Description: Unspecified error
Error: (06/26/2015 07:54:57 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: NT AUTHORITY)
Description: Unspecified error
Error: (06/26/2015 05:51:51 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/26/2015 05:50:53 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: NT AUTHORITY)
Description: Unspecified error
Error: (06/26/2015 05:50:40 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: NT AUTHORITY)
Description: Unspecified error
Error: (06/26/2015 00:48:06 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
CodeIntegrity Errors:
===================================
Date: 2015-06-08 01:20:59.996
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_6.0.6001.18000_none_6f8d0e60c043c672\Win32_Tpm.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-06-08 01:20:59.963
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-tpm-driver-wmi_31bf3856ad364e35_6.0.6001.18000_none_6f8d0e60c043c672\Win32_Tpm.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-06-08 01:05:54.256
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-bcrypt-dll_31bf3856ad364e35_6.0.6001.18000_none_ee8c936cef65a88f\bcrypt.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-06-08 01:05:54.226
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\x86_microsoft-windows-bcrypt-dll_31bf3856ad364e35_6.0.6001.18000_none_ee8c936cef65a88f\bcrypt.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-06-08 01:03:29.035
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\Temp\PendingDeletes\$$DeleteMe.bcrypt.dll.01c85bd5f6054314.0033 because the set of per-page image hashes could not be found on the system.
Date: 2015-06-08 01:03:28.999
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\Temp\PendingDeletes\$$DeleteMe.bcrypt.dll.01c85bd5f6054314.0033 because the set of per-page image hashes could not be found on the system.
Date: 2015-06-08 00:57:42.766
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\Backup\x86_microsoft-windows-bcrypt-dll_31bf3856ad364e35_6.0.6001.18000_none_ee8c936cef65a88f_bcrypt.dll_e2f091ac because the set of per-page image hashes could not be found on the system.
Date: 2015-06-08 00:57:42.736
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\winsxs\Backup\x86_microsoft-windows-bcrypt-dll_31bf3856ad364e35_6.0.6001.18000_none_ee8c936cef65a88f_bcrypt.dll_e2f091ac because the set of per-page image hashes could not be found on the system.
Date: 2015-06-08 00:56:55.888
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\System32\wbem\Win32_Tpm.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-06-08 00:56:55.844
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows.old\Windows\System32\wbem\Win32_Tpm.dll because the set of per-page image hashes could not be found on the system.
==================== Memory info ===========================
Processor: Intel® Core2 Duo CPU E8500 @ 3.16GHz
Percentage of memory in use: 41%
Total physical RAM: 2046.49 MB
Available physical RAM: 1200.74 MB
Total Pagefile: 4092.98 MB
Available Pagefile: 2932.17 MB
Total Virtual: 2047.88 MB
Available Virtual: 1900.84 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:931.51 GB) (Free:724.74 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 31AF88A9)
Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)
==================== End of log ============================