Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

RegSvr32 alert won't piss off :(

Started by JaayJams , Mar 09 2017 03:59 AM

RegSvr32 the module

Please log in to reply

#1
JaayJams

Posted 09 March 2017 - 03:59 AM

New Member

Member
5 posts

I had a viruis. removed it with Mal and then this shows up every start up..

The module

Local\YkhvPack\xtsrivjr.dll failed to load

how can i remove this alert :L

Attached Thumbnails

#2
RKinner

Posted 09 March 2017 - 07:02 AM

Malware Expert

Expert
24,624 posts

Download : ADWCleaner to your desktop. Make sure you get the correct Download button. Sometimes the ads on BleepingComputer will mimic the real Download button which should say: Download Now @BleepingComputer

NOTE: If using Internet Explorer and you get an alert that stops the program downloading, click on the warning and allow the download to complete.

Close all programs, pause your anti-virus and run AdwCleaner (Vista or Win 7 => right click and Run As Administrator).

Click on Scan and follow the prompts. Let it run unhindered. When done, click on the Clean button, and follow the prompts. Allow the system to reboot. You will then be presented with the report. Copy & Paste this report on your next reply.

The report will be saved in the C:\AdwCleaner folder.

Junkware-Removal-Tool

Please download Junkware Removal Tool to your desktop. Make sure you get the correct Download button. Sometimes the ads on BleepingComputer will mimic the real Download button which should say: Download Now @Author's site

Pause your anti-virus. Close all browsers.

Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".

The tool will open and start scanning your system.

Please be patient as this can take a while to complete depending on your system's specifications.

On completion, a log (JRT.txt) is saved to your desktop and will automatically open.

Post the contents of JRT.txt into your next message.

Get FRST from http://www.bleepingc...very-scan-tool/You need to download the appropriate tool for your PC. If you don't know if you have a 32 or 64 bit system get them both. Only one will work and that's the right one.

Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.

Check the Addition.txt box

Press Scan button.

It will produce a log called FRST.txt in the same directory the tool is run from.

Please copy and paste log back here.

It will generate another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.

#3
JaayJams

Posted 09 March 2017 - 05:42 PM

New Member

Topic Starter
Member
5 posts

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-03-2017

Ran by Jamie (10-03-2017 12:40:42)

Running from C:\Users\Jamie\Downloads\Programs

Windows 8.1 Pro (Update) (X64) (2017-03-08 01:07:00)

Boot Mode: Normal

==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-586894515-286337750-1407449125-500 - Administrator - Disabled)

Guest (S-1-5-21-586894515-286337750-1407449125-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-586894515-286337750-1407449125-1003 - Limited - Enabled)

Jamie (S-1-5-21-586894515-286337750-1407449125-1001 - Administrator - Enabled) => C:\Users\Jamie

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}

AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-586894515-286337750-1407449125-1001\...\uTorrent) (Version: 3.4.9.43388 - BitTorrent Inc.)

Ansel (Version: 378.66 - NVIDIA Corporation) Hidden

Apple Application Support (32-bit) (HKLM-x32\...\{9BA1A894-B42F-4805-BC8C-349C905A3930}) (Version: 5.3.1 - Apple Inc.)

Apple Application Support (64-bit) (HKLM\...\{7EAC8A42-9FAC-4F6B-AABF-C08C9F2E0F13}) (Version: 5.3.1 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{55BB2110-FB43-49B3-93F4-945A0CFB0A6C}) (Version: 10.0.1.3 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)

ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 3.0.10 - ASUS)

ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 4.0.2 - ASUS)

ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0050 - ASUS)

Audacity 2.1.2 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.2 - Audacity Team)

Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)

Classic Shell (HKLM\...\{383BB30A-B4A7-4666-9A83-22CFA8640097}) (Version: 4.3.0 - IvoSoft)

Counter-Strike: Global Offensive (HKLM\...\Steam App 730) (Version: - Valve)

Discord (HKU\S-1-5-21-586894515-286337750-1407449125-1001\...\Discord) (Version: 0.0.297 - Hammer & Chisel, Inc.)

Google Chrome (HKU\S-1-5-21-586894515-286337750-1407449125-1001\...\Google Chrome) (Version: 56.0.2924.87 - Google Inc.)

iFunbox (v4.0.4027.1352) (HKLM-x32\...\iFunbox_is1) (Version: v4.0.4027.1352 - iFunbox DevTeam)

Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.14.4264 - Intel Corporation)

Internet Download Manager (HKLM-x32\...\Internet Download Manager) (Version: - Tonec Inc.)

iTunes (HKLM\...\{9D0D2A8B-7E7B-4D88-8D50-24286ED6A5EB}) (Version: 12.5.5.5 - Apple Inc.)

LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )

Lightshot-5.4.0.1 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.4.0.1 - Skillbrains)

Malwarebytes version 3.0.6.1469 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.6.1469 - Malwarebytes)

MediaHuman YouTube to MP3 Converter version 3.9.8.10 (HKLM-x32\...\MediaHuman YouTube to MP3 Converter_is1) (Version: 3.9.8.10 - )

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)

MPC-HC 1.7.11 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.11 - MPC-HC Team)

NVIDIA GeForce Experience 3.4.0.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.4.0.70 - NVIDIA Corporation)

NVIDIA Graphics Driver 378.66 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 378.66 - NVIDIA Corporation)

NVIDIA PhysX System Software 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)

NvNodejs (Version: 3.4.0.70 - NVIDIA Corporation) Hidden

NvTelemetry (Version: 2.3.16.0 - NVIDIA Corporation) Hidden

NvvHci (Version: 2.02.0.5 - NVIDIA Corporation) Hidden

Path of Exile (HKLM\...\Steam App 238960) (Version: - Grinding Gear Games)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8051 - Realtek Semiconductor Corp.)

SHIELD Streaming (Version: 7.1.0351 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 3.4.0.70 - NVIDIA Corporation) Hidden

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

Vulkan Run Time Libraries 1.0.39.1 (HKLM\...\VulkanRT1.0.39.1) (Version: 1.0.39.1 - LunarG, Inc.)

Windows Driver Package - ASUS (ATP) Mouse (10/30/2014 1.0.0.230) (HKLM\...\52EDDD14D2DC9D32A2EA2720C02CBB9E354F8DE2) (Version: 10/30/2014 1.0.0.230 - ASUS)

WinRAR 5.40 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-586894515-286337750-1407449125-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)

CustomCLSID: HKU\S-1-5-21-586894515-286337750-1407449125-1001_Classes\CLSID\{CB492AF1-2CEF-4E58-BE47-471C77D0C8BA}\InprocServer32 -> C:\Users\Jamie\AppData\Local\Google\Update\1.3.32.7\psuser_64.dll (Google Inc.)

CustomCLSID: HKU\S-1-5-21-586894515-286337750-1407449125-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Jamie\AppData\Local\Google\Update\1.3.32.7\psuser_64.dll (Google Inc.)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {00C9B016-1827-40D4-802E-516027721927} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-02-24] (NVIDIA Corporation)

Task: {1640D740-521C-446B-BF8F-6EAE1658420C} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-02-24] (NVIDIA Corporation)

Task: {254B78CC-B357-4746-A9A2-D7D274F74F1A} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-02-24] (NVIDIA Corporation)

Task: {340A33FF-3811-414A-9090-A186F4D10411} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2015-09-22] (ASUSTek Computer Inc.)

Task: {48A8D4C5-7F79-4A53-89CC-ECE6B8EFC177} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-586894515-286337750-1407449125-1001UA => C:\Users\Jamie\AppData\Local\Google\Update\GoogleUpdate.exe [2017-03-08] (Google Inc.)

Task: {51C4FDF3-AB93-4835-A9EC-D76CFE53287B} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-586894515-286337750-1407449125-1001Core => C:\Users\Jamie\AppData\Local\Google\Update\GoogleUpdate.exe [2017-03-08] (Google Inc.)

Task: {836432D6-42C7-4478-8743-F5F0E098FEB0} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-02-24] (NVIDIA Corporation)

Task: {84F24DD7-D745-480F-B9FB-824F815789E8} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-02-24] (NVIDIA Corporation)

Task: {981CDE2C-CF2F-4DA2-AC6D-4F98F7D010DD} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2014-09-11] (ASUSTek Computer Inc.)

Task: {BDA705CF-21F6-4D80-9EA3-4D592DA9FD2C} - System32\Tasks\ATK Package A22126881260 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2015-09-22] (ASUSTek Computer Inc.)

Task: {DA7723CC-C847-4654-ABC5-E33FA8EB843C} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-02-24] (NVIDIA Corporation)

Task: {E5B122FD-2CBB-4906-9287-7F9A0AF54344} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2014-11-21] (AsusTek)

Task: {EBBF8373-1C3C-474E-B5EF-F0CF7E9803A2} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-02-24] (NVIDIA Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2017-01-13 13:56 - 2017-01-13 13:56 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2017-01-13 13:56 - 2017-01-13 13:56 - 01353528 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2017-03-09 22:07 - 2017-02-24 06:23 - 02264352 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll

2017-03-09 22:07 - 2017-02-24 06:23 - 02264528 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll

2017-03-08 14:45 - 2017-02-24 07:32 - 04489152 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\Poco.dll

2017-03-08 14:45 - 2017-02-24 07:32 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll

2017-03-08 14:18 - 2017-02-01 22:47 - 02459992 _____ () C:\Users\Jamie\AppData\Local\Google\Chrome\Application\56.0.2924.87\libglesv2.dll

2017-03-08 14:18 - 2017-02-01 22:47 - 00099672 _____ () C:\Users\Jamie\AppData\Local\Google\Chrome\Application\56.0.2924.87\libegl.dll

2015-08-10 01:52 - 2015-08-10 01:52 - 17973744 _____ () C:\Windows\SYSTEM32\igd11dxva64.dll

2017-03-08 14:45 - 2017-02-24 07:32 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll

2017-03-08 14:45 - 2017-02-24 07:32 - 03774400 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\Poco.dll

2017-03-08 14:45 - 2017-02-24 07:32 - 00900032 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-23 02:25 - 2017-03-09 21:30 - 00000899 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-586894515-286337750-1407449125-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Jamie\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper

DNS Servers: 192.168.1.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

HKU\S-1-5-21-586894515-286337750-1407449125-1001\...\StartupApproved\Run: => "YkhvPack"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139

FirewallRules: [{795802E0-4A48-4D1B-8380-CEE0CDD4544D}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{70034AE4-AF2F-4D8B-9DDC-19B525679999}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{F91CDD8C-0801-4582-95BD-23405BB9D51B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe

FirewallRules: [{D5CF15BC-C0DD-4924-B1D1-638B11293559}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe

FirewallRules: [{0E1E1CA0-4D7B-4636-A49C-C02CA6AAD8B3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe

FirewallRules: [{3468EC14-0B0C-47B3-B81C-7B3793A47AEE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe

FirewallRules: [{367F479D-C08A-47EC-9672-BEAD8565CD03}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

FirewallRules: [{F81FC6F1-BE4B-4C18-85CA-CB99F5EA1E31}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{A6A9C35C-DC5A-423B-BAF8-AE7AFE61AA95}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{A7987031-D4A0-44B4-A51F-BBC132B71F69}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{8F1EC61D-E567-4D07-A660-8A08A9C7F8DC}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{E9C92ECF-67BC-4D2B-AF8A-655B7743010C}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{3D1DF02C-AEB6-4488-8EBE-90B85BFFDD15}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{CA23AA92-1D3F-418F-BD5F-855B2BFA4557}] => (Allow) C:\Program Files\iTunes\iTunes.exe

FirewallRules: [{B16D7987-63A7-4019-A17C-71C085DCE1C0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe

FirewallRules: [{E10452CC-55BB-469E-92CE-B8060E7E05E1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe

FirewallRules: [{0DC3AEC6-3916-4DC1-88BB-04A15E32C1E1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe

FirewallRules: [{E153852A-F4A6-48DC-9216-D629B7DA3DB7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe

FirewallRules: [{9602AFBA-7A33-4641-8AE6-08A4D0F28E56}] => (Allow) C:\Users\Jamie\AppData\Roaming\uTorrent\uTorrent.exe

FirewallRules: [{AA14E873-5312-4866-88AA-90CC20F322FF}] => (Allow) C:\Users\Jamie\AppData\Roaming\uTorrent\uTorrent.exe

FirewallRules: [{32EA61F2-7C97-4821-9FD2-17DD66F00A39}] => (Allow) C:\Users\Jamie\AppData\Roaming\uTorrent\uTorrent.exe

FirewallRules: [{1F2757BC-8B11-4060-9D5D-A9B33BC0B69A}] => (Allow) C:\Users\Jamie\AppData\Roaming\uTorrent\uTorrent.exe

FirewallRules: [{2CB7CC8C-0471-4FD2-83DB-D242C9C4A375}] => (Allow) C:\Users\Jamie\AppData\Roaming\uTorrent\uTorrent.exe

FirewallRules: [{72AF31FB-0E11-43FB-822F-759DCF151AFA}] => (Allow) C:\Users\Jamie\AppData\Roaming\uTorrent\uTorrent.exe

==================== Restore Points =========================

08-03-2017 14:20:34 Installed Classic Shell

10-03-2017 11:52:02 JRT Pre-Junkware Removal

10-03-2017 12:34:12 JRT Pre-Junkware Removal

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:

==================