This topic is locked
scan results from FRST
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-11-2017
Ran by artim (11-11-2017 20:21:39)
Running from C:\Users\artim\Downloads
Windows 10 Home Version 1703 15063.674 (X64) (2017-09-04 21:01:18)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-385131773-806036791-354636761-500 - Administrator - Disabled)
artim (S-1-5-21-385131773-806036791-354636761-1001 - Administrator - Enabled) => C:\Users\artim
DefaultAccount (S-1-5-21-385131773-806036791-354636761-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-385131773-806036791-354636761-1000 - Limited - Disabled) => C:\Users\defaultuser0
Guest (S-1-5-21-385131773-806036791-354636761-501 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Norton Security Suite (Enabled - Up to date) {30744133-1E94-7B35-F4A3-82A5AEF1CBAA}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton Security Suite (Enabled - Up to date) {8B15A0D7-38AE-74BB-CE13-B9D7D5768117}
FW: Norton Security Suite (Enabled) {084FC016-54FB-7A6D-DFFC-2B9050228CD1}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Flash Player 27 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 27.0.0.183 - Adobe Systems Incorporated)
Aimersoft Helper Compact 2.5.2 (HKLM-x32\...\{405147F7-FCC5-499B-A27E-EA6BD4A80435}_is1) (Version: 2.5.2 - Aimersoft)
ASUS HiPost (HKLM-x32\...\{04768366-F421-4BA5-8423-B84F644B5249}) (Version: 1.0.6 - ASUS)
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.4.3 - ASUS)
ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 4.0.9 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 3.14.0006 - ASUS)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 4.1.6 - ASUS)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0040 - ASUS)
AudioWizard (HKLM-x32\...\{57E770A2-2BAF-4CAA-BAA3-BD896E2254D3}) (Version: 1.0.0.103 - ICEpower a/s)
Batch Folder Creator 2.0 (HKLM-x32\...\Batch Folder Creator 2.0_is1) (Version: - NuwaSoft, Inc.)
cbColors Folder Icons Full (HKLM-x32\...\cbColors Folder Icons Full_is1) (Version: 1.0 - ArcticLine Software)
Device Setup (HKLM-x32\...\{8D6B05E0-F457-408C-9D13-549334D8FAE1}) (Version: 2.0.2 - ASUSTek Computer Inc.)
DriveImage XML (Private Edition) (HKLM-x32\...\{F7E1CA14-B39D-452A-960B-39423DDDD933}) (Version: 2.60.000 - Runtime Software)
Dropbox 25 GB (HKLM-x32\...\{0867A88D-764F-366E-9E21-130DA8B472C3}) (Version: 3.1.18.0 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.59.1 - Dropbox, Inc.) Hidden
Epic Privacy Browser (HKU\S-1-5-21-385131773-806036791-354636761-1001\...\Epic) (Version: 60.0.3112.113 - Epic)
Fast VD 3.0.0.11 (HKLM-x32\...\9ED08AFF-E977-47db-8923-2499D74C97C5_Fast VD_is1) (Version: 3.0.0.11 - FastPcTools)
FocusOn Image Viewer (HKLM-x32\...\Pintosoft FocusOn Image Viewer) (Version: 1.7 - Pintosoft)
Folder Marker Free (HKLM\...\Folder Marker Free_is1) (Version: 4.3 - ArcticLine Software)
Free File Viewer 2014 (HKLM-x32\...\FreeFileViewer_is1) (Version: 2014.2.16.0 - Bitberry Software) <==== ATTENTION
Glary Utilities PRO 5.85 (HKLM-x32\...\Glary Utilities 5) (Version: 5.85.0.106 - Glarysoft Ltd)
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.21.123 - Google Inc.) Hidden
Gtk# for .Net 2.12.22 (HKLM-x32\...\{06AF6533-F201-47C0-8675-AAAE5CB81B41}) (Version: 2.12.22 - Xamarin, Inc.)
Icecream Slideshow Maker version 2.65 (HKLM-x32\...\{3674ADB5-6374-4EBA-BB46-7C6EFB266661}_is1) (Version: 2.65 - Icecream Apps)
Icon Shepherd (HKLM\...\Icon Shepherd_is1) (Version: 1.1.0 - WinAbility Software Corp.)
Intel® Chipset Device Software (HKLM-x32\...\{60c073df-e736-4210-9c3a-5fc2b651cef3}) (Version: 10.1.1.7 - Intel® Corporation) Hidden
Intel® Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.1.10603.192 - Intel Corporation)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4300 - Intel Corporation)
Intel® Trusted Execution Engine (HKLM\...\{176E2755-0A17-42C6-88E2-192AB2131278}) (Version: 2.0.0.1067 - Intel Corporation)
Intel® Security Assist (HKLM-x32\...\{4B230374-6475-4A73-BA6E-41015E9C5013}) (Version: 1.0.0.532 - Intel Corporation)
IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 7.0.2.32 - IObit)
IrfanView 4.44 (64-bit) (HKLM\...\IrfanView64) (Version: 4.44 - Irfan Skiljan)
KB4023057 (HKLM\...\{27C6D60B-CAD4-4C70-A1F2-299C731EA8F7}) (Version: 2.0.0.0 - Microsoft Corporation)
Kryptel Standard Edition version 7.6.1 (HKLM-x32\...\Kryptel Standard Edition_is1) (Version: 7.6.1 - Inv Softworks LLC)
Logitech Options (HKLM\...\LogiOptions) (Version: - Logitech)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{4FFA2088-8317-3B14-93CD-4C699DB37843}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation)
Mozilla Firefox 57.0 (x64 en-US) (HKLM\...\Mozilla Firefox 57.0 (x64 en-US)) (Version: 57.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 58.0a1 - Mozilla)
Nightly 58.0a1 (x64 en-US) (HKLM\...\Nightly 58.0a1 (x64 en-US)) (Version: 58.0a1 - Mozilla)
Norton Security Suite (HKLM-x32\...\N360) (Version: 22.11.0.41 - Symantec Corporation)
paint.net (HKLM\...\{F10AAD91-58DF-44EC-A647-810197141667}) (Version: 4.0.19 - dotPDN LLC)
Paragon UIM (HKLM\...\{56EECD69-F428-41C4-ADF6-6CDEE14DDF3F}) (Version: 20.0.0.4 - Paragon Software) Hidden
PeaZip 6.4.1 (WIN64) (HKLM\...\{5A2BC38A-406C-4A5B-BF45-6991F9A05325}_is1) (Version: 6.4.1 - Giorgio Tani)
PeaZip Additional Formats plugin 2 (HKLM-x32\...\{2367BFCD-A95F-4F06-8876-E85B04E2860F}_is1) (Version: - Giorgio Tani)
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.2.703.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7687 - Realtek Semiconductor Corp.)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.43835 - TeamViewer)
Torch (HKU\S-1-5-21-385131773-806036791-354636761-1001\...\Torch) (Version: 57.0.0.12335 - Torch Media, Inc) <==== ATTENTION
Unknown File Handler (HKLM-x32\...\UFH_is1) (Version: 2015.12.29.0 - File.org)
Vivaldi (HKU\S-1-5-21-385131773-806036791-354636761-1001\...\Vivaldi) (Version: 1.12.955.38 - Vivaldi)
WebM Project Directshow Filters (HKU\S-1-5-21-385131773-806036791-354636761-1001\...\webmdshow) (Version: 1.0.4.1 - WebM Project)
WebStorage (HKLM-x32\...\WebStorage) (Version: 2.2.5.541 - ASUS Cloud Corporation)
Windows 10 Update and Privacy Settings (HKLM\...\{4DFCD818-036A-4229-A67D-CF17DC461D92}) (Version: 1.0.14.0 - Microsoft Corporation)
Windows Driver Package - ASUS (AsusSGDrv) Mouse (10/21/2015 8.1.0.19) (HKLM\...\E3BC758B9DD4554D7662F1578C31C2ED59C717EE) (Version: 10/21/2015 8.1.0.19 - ASUS)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 3.0.1 - ASUS)
Wise Program Uninstaller 2.1.3 (HKLM-x32\...\Wise Program Uninstaller_is1) (Version: 2.1.3 - WiseCleaner.com, Inc.)
Xiph.Org Open Codecs 0.85.17777 (HKLM-x32\...\Open Codecs) (Version: 0.85.17777 - Xiph.Org)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ShellIconOverlayIdentifiers: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton Security Suite\Engine\22.11.0.41\buShell.dll [2017-10-03] (Symantec Corporation)
ShellIconOverlayIdentifiers: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton Security Suite\Engine\22.11.0.41\buShell.dll [2017-10-03] (Symantec Corporation)
ShellIconOverlayIdentifiers: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton Security Suite\Engine\22.11.0.41\buShell.dll [2017-10-03] (Symantec Corporation)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.2.5.541\ASUSWSShellExt64.dll [2015-04-22] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.2.5.541\ASUSWSShellExt64.dll [2015-04-22] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.2.5.541\ASUSWSShellExt64.dll [2015-04-22] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers-x32: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton Security Suite\Engine\22.11.0.41\buShell.dll [2017-10-03] (Symantec Corporation)
ShellIconOverlayIdentifiers-x32: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton Security Suite\Engine\22.11.0.41\buShell.dll [2017-10-03] (Symantec Corporation)
ShellIconOverlayIdentifiers-x32: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton Security Suite\Engine\22.11.0.41\buShell.dll [2017-10-03] (Symantec Corporation)
ContextMenuHandlers1: [BUContextMenu] -> {F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB} => C:\Program Files (x86)\Norton Security Suite\Engine\22.11.0.41\buShell.dll [2017-10-03] (Symantec Corporation)
ContextMenuHandlers1: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll [2016-06-22] (Glarysoft Ltd)
ContextMenuHandlers1: [IObitUnstaler] -> {B19ED566-D419-470b-B111-3C89040BC027} => -> No File
ContextMenuHandlers1: [Kryptel Menu] -> {11056249-C369-49CA-B0E8-326B5C32AD3C} => C:\Program Files (x86)\Kryptel\Shx64.dll [2017-09-25] (Inv Softworks LLC)
ContextMenuHandlers1: [Symantec.Norton.Antivirus.IEContextMenu] -> {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} => C:\Program Files (x86)\Norton Security Suite\Engine\22.11.0.41\NavShExt.dll [2017-10-03] (Symantec Corporation)
ContextMenuHandlers1: [UnLockerMenu] -> {410BF280-86EF-4E0F-8279-EC5848546AD3} => -> No File
ContextMenuHandlers2: [Symantec.Norton.Antivirus.IEContextMenu] -> {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} => C:\Program Files (x86)\Norton Security Suite\Engine\22.11.0.41\NavShExt.dll [2017-10-03] (Symantec Corporation)
ContextMenuHandlers3: [BackupContextMenuExtension] -> {b1b96b20-da1d-4a3c-92c1-7229b32f2326} => C:\WINDOWS\system32\mscoree.dll [2017-03-18] (Microsoft Corporation)
ContextMenuHandlers6: [BUContextMenu] -> {F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB} => C:\Program Files (x86)\Norton Security Suite\Engine\22.11.0.41\buShell.dll [2017-10-03] (Symantec Corporation)
ContextMenuHandlers6: [FMMenuExt] -> {47C91696-894C-46A1-B196-2C7CA1952F45} => C:\Program Files (x86)\Folder Marker\ShellExt64.dll [2017-04-26] (ArcticLine Software)
ContextMenuHandlers6: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll [2016-06-22] (Glarysoft Ltd)
ContextMenuHandlers6: [IObitUnstaler] -> {B19ED566-D419-470b-B111-3C89040BC027} => -> No File
ContextMenuHandlers6: [Symantec.Norton.Antivirus.IEContextMenu] -> {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} => C:\Program Files (x86)\Norton Security Suite\Engine\22.11.0.41\NavShExt.dll [2017-10-03] (Symantec Corporation)
ContextMenuHandlers6: [UnLockerMenu] -> {410BF280-86EF-4E0F-8279-EC5848546AD3} => -> No File
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {09373D09-6134-4F81-A439-395543F69154} - System32\Tasks\S-1-5-21-385131773-806036791-354636761-1001\DataSenseLiveTileTask => C:\WINDOWS\System32\DataUsageLiveTileTask.exe [2017-03-18] (Microsoft Corporation)
Task: {12878414-A615-4DFB-BF09-86CDFCDE4E1C} - System32\Tasks\GlaryInitialize 5 => C:\Program Files (x86)\Glary Utilities 5\Initialize.exe [2017-09-27] (Glarysoft Ltd)
Task: {15CB9785-405D-4658-A10B-68777C828264} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-08-01] ()
Task: {1D787AE6-24C5-46B6-A530-AFF63155C96B} - System32\Tasks\Norton 360\Norton Security Suite Error Analyzer => C:\Program Files (x86)\Norton Security Suite\Engine\22.11.0.41\SymErr.exe [2017-10-03] (Symantec Corporation)
Task: {2B797AE6-1D46-4FEF-BAC1-C8491DD21E8C} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-07-31] (Dropbox, Inc.)
Task: {32A6FC84-D362-43EE-8E04-5B9070C316BF} - System32\Tasks\GU5SkipUAC => C:\Program Files (x86)\Glary Utilities 5\Integrator.exe [2017-09-27] (Glarysoft Ltd)
Task: {47EA9017-BC6F-4C4B-A25C-704FCA9E34BA} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-385131773-806036791-354636761-1003 => C:\Users\artim\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
Task: {4BB182A0-27AC-4D2E-A81B-DF6237FB26D9} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2015-05-25] (ASUSTek Computer Inc.)
Task: {5537A3C0-A088-4B17-8A07-12BF90A44542} - System32\Tasks\RtHDVBg_ListenToDevice => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-12-11] (Realtek Semiconductor)
Task: {56E4621D-2B6C-4295-A561-E1CA6D026664} - System32\Tasks\Norton 360\Norton Security Suite Error Processor => C:\Program Files (x86)\Norton Security Suite\Engine\22.11.0.41\SymErr.exe [2017-10-03] (Symantec Corporation)
Task: {669CDFBD-72E2-4EE0-8317-F81616ABABB4} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-11-11] (Adobe Systems Incorporated)
Task: {7714E598-13D9-4229-ACFA-BD0A86228BE7} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_27_0_0_183_pepper.exe [2017-11-11] (Adobe Systems Incorporated)
Task: {7D19C6D6-DC70-4D89-B002-EEDC7EA19C35} - System32\Tasks\FreeFileViewerUpdateChecker => C:\Program Files (x86)\FreeFileViewer\FFVCheckForUpdates.exe [2015-12-30] (Bitberry Software) <==== ATTENTION
Task: {834B2090-2BCF-43E9-8F6A-349E549CA517} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2015-12-18] (AsusTek)
Task: {91A4B71A-2D1C-4E7B-B010-046000BE77F2} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Security Suite\Upgrade.exe [2017-10-03] (Symantec Corporation)
Task: {93F3BBA0-F0B8-469B-A606-D8FE1AA82B9E} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2015-12-11] (Realtek Semiconductor)
Task: {975E6773-B510-4CDE-9E56-321FE4EA4636} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2015-12-02] (ASUS)
Task: {A9BDA224-BB87-4001-B2F7-69E7E1AAFB9D} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Security Suite\Engine\22.11.0.41\WSCStub.exe [2017-10-03] (Symantec Corporation)
Task: {C4FE36F0-5424-432D-BFF9-3D166F276576} - System32\Tasks\{3B30CD4F-7BA9-434B-BD7E-121346DCFDB4} => C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\Uninstall.exe" -c /app FreeYTVDownloader
Task: {C66C18C4-0790-48DE-A7B3-40459B346FC3} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2015-03-10] (ASUSTek Computer Inc.)
Task: {CD7F7555-BBA4-458F-B5D3-CF6CD3DD3FEF} - System32\Tasks\ATK Package A22126881260 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2015-03-10] (ASUSTek Computer Inc.)
Task: {DA387BF9-7F67-4227-B184-E0AB25CFEC56} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2015-05-14] (ASUSTek Computer Inc.)
Task: {DE1C2C95-0F00-4C40-A68E-41A57537FA7D} - System32\Tasks\DropboxOEM => C:\Program Files (x86)\Dropbox\DropboxOEM\DropboxOEM.exe [2016-09-21] ()
Task: {F126F0F5-4AD7-4989-BD40-2503D002AC3A} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-07-31] (Dropbox, Inc.)
Task: {F25CA45E-1FF1-4675-A152-1A8EFD2B13F2} - System32\Tasks\Norton 360\Norton Security Suite Autofix => C:\Program Files (x86)\Norton Security Suite\Engine\22.11.0.41\SymErr.exe [2017-10-03] (Symantec Corporation)
Task: {F47A2296-8C8F-418B-A970-D4AECB00B9B0} - System32\Tasks\Wise Memory Optimizer Task.job => C:\Program Files (x86)\Wise\Wise Memory Optimizer\WiseMemoryOptimzer.exe
Task: {F62E5EA8-3325-49EE-9D13-CB6FECEA6B7E} - System32\Tasks\GlaryUpdate 5 => C:\Program Files (x86)\Glary Utilities 5\CheckUpdate.exe [2017-09-27] (Glarysoft Ltd)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\FreeFileViewerUpdateChecker.job => C:\Program Files (x86)\FreeFileViewer\FFVCheckForUpdates.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\SaferUpdateTaskMachineCore.job => C:\Program Files (x86)\Safer Technologies\Update\SaferUpdate.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\SaferUpdateTaskMachineUA.job => C:\Program Files (x86)\Safer Technologies\Update\SaferUpdate.exe <==== ATTENTION
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\artim\Desktop\Free Music.lnk -> C:\Users\artim\AppData\Local\Torch\Application\torch.exe (Torch Media Inc.) -> --run-by-tm hxxp://music.torchbrowser.com
==================== Loaded Modules (Whitelisted) ==============
2017-04-25 13:22 - 2017-04-25 13:22 - 002250896 _____ () C:\Windows\System32\vimsdk.dll
2017-04-25 13:22 - 2017-04-25 13:22 - 000143504 _____ () C:\Windows\System32\vimbase.dll
2017-03-18 12:58 - 2017-03-18 12:58 - 000138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2015-10-23 13:35 - 2015-10-23 13:35 - 000404904 _____ () C:\WINDOWS\system32\igfxTray.exe
2017-03-18 12:59 - 2017-03-18 18:31 - 001731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-12-02 17:01 - 2015-12-02 17:01 - 000027648 _____ () C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll
2015-12-02 17:01 - 2015-12-02 17:01 - 000124928 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll
2015-12-02 17:01 - 2015-12-02 17:01 - 000029184 _____ () C:\Program Files (x86)\ASUS\Splendid\VideoEnhance.dll
2017-09-27 19:31 - 2017-09-27 19:31 - 000087024 _____ () C:\Program Files (x86)\Glary Utilities 5\zlib1.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
HKLM\...\.bat: FreeFileViewer.BAT => "C:\Program Files (x86)\FreeFileViewer\FREEFILEVIEWER.exe" "%1" <==== ATTENTION
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2015-10-29 23:24 - 2015-10-29 23:21 - 000000824 ____N C:\WINDOWS\system32\Drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-385131773-806036791-354636761-1001\Control Panel\Desktop\\Wallpaper -> I:\DEVIANT ART STUFF\nismo_370z_by_active_design.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
MSCONFIG\Services: bthserv => 2
HKLM\...\StartupApproved\Run: => "LogiOptions"
HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"
HKLM\...\StartupApproved\Run32: => "MalTray"
HKU\S-1-5-21-385131773-806036791-354636761-1001\...\StartupApproved\Run: => "Epic Privacy Browser Installer"
HKU\S-1-5-21-385131773-806036791-354636761-1001\...\StartupApproved\Run: => "GUDelayStartup"
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{FEE45EDF-411A-4379-AC0A-2768C1ADCE03}] => (Allow) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.EXE
FirewallRules: [{EC7399FA-4288-4C6B-AEEB-06C2BD8423F2}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{7402862F-943A-40F2-889B-6B5E5C4A1D4F}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{94D9E82D-7821-4A8E-9D58-0DCE0A7B24D7}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{E1E80B8A-98BC-4ACC-8760-B167364770D7}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{EE328E52-C77C-40CB-843A-F79128B67A7C}] => (Allow) C:\Program Files (x86)\FreeFileViewer\FFVCheckForUpdates.exe
FirewallRules: [{660DB150-9460-4A72-B792-DFACC3A6FEF7}] => (Allow) C:\Program Files (x86)\FreeFileViewer\FFVCheckForUpdates.exe
FirewallRules: [{AD94F7B5-5B3E-4412-9932-20A444AE6E67}] => (Allow) C:\Program Files (x86)\Kryptel\Backup Uploaders\Dropbox.exe
FirewallRules: [{93B376F1-FF14-4DF1-B067-3218EA6218E7}] => (Allow) C:\Program Files (x86)\Kryptel\Backup Uploaders\Google Drive.exe
FirewallRules: [{BECFB858-AD15-4E72-B053-6695B3936385}] => (Allow) C:\Program Files (x86)\Kryptel\Backup Uploaders\OneDrive.exe
FirewallRules: [{0466E036-D8CE-45D6-B7AE-AB1D977E2F56}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{3F11A49B-8336-4397-8FF6-A838B4683E21}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{A2F3EA4A-F73C-4888-B6C2-88C8ED1BDE94}] => (Allow) C:\Program Files\Nightly\firefox.exe
FirewallRules: [{3C946740-D013-42C8-B688-A9CC45EF01B2}] => (Allow) C:\Program Files\Nightly\firefox.exe
FirewallRules: [{519422E4-8B61-4D87-9E34-E2B2F0B56C11}] => (Allow) C:\Users\artim\AppData\Local\Torch\Application\torch.exe
FirewallRules: [{F411E403-E8E4-4C23-8719-3CB015C51208}] => (Allow) C:\Users\artim\AppData\Local\Torch\Plugins\Hola\hola_plugin.exe
FirewallRules: [{AD2C19C0-7606-4D84-A1C7-72137C8F801D}] => (Allow) C:\Users\artim\AppData\Local\Torch\Plugins\Hola\hola_plugin_x64.exe
==================== Restore Points =========================
ATTENTION: System Restore is disabled
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (11/11/2017 08:10:20 PM) (Source: Application Error) (EventID: 1005) (User: )
Description: Windows cannot access the file for one of the following reasons:
there is a problem with the network connection, the disk that the file is stored on, or the storage
drivers installed on this computer; or the disk is missing.
Windows closed the program Scripted Diagnostics Native Host because of this error.
Program: Scripted Diagnostics Native Host
File:
The error value is listed in the Additional Data section.
User Action
1. Open the file again.
This situation might be a temporary problem that corrects itself when the program runs again.
2.
If the file still cannot be accessed and
- It is on the network,
your network administrator should verify that there is not a problem with the network and that the server can be contacted.
- It is on a removable disk, for example, a floppy disk or CD-ROM, verify that the disk is fully inserted into the computer.
3. Check and repair the file system by running CHKDSK. To run CHKDSK, click Start, click Run, type CMD, and then click OK. At the command prompt, type CHKDSK /F, and then press ENTER.
4. If the problem persists, restore the file from a backup copy.
5. Determine whether other files on the same disk can be opened. If not, the disk might be damaged. If it is a hard disk, contact your administrator or computer hardware vendor for
further assistance.
Additional Data
Error value: 00000000
Disk type: 0
Error: (11/11/2017 08:10:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: sdiagnhost.exe, version: 10.0.15063.0, time stamp: 0x59d25a06
Faulting module name: System.Data.ni.dll, version: 4.7.2102.0, time stamp: 0x59371adb
Exception code: 0xc000001d
Fault offset: 0x00000000004c5472
Faulting process id: 0x126c
Faulting application start time: 0x01d35b675c91b9eb
Faulting application path: C:\WINDOWS\System32\sdiagnhost.exe
Faulting module path: C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\System.Data\92205d67b1dcc71e3446aa285912d57e\System.Data.ni.dll
Report Id: 625d9a2c-68c6-4cdb-b2d4-a235005fd9e3
Faulting package full name:
Faulting package-relative application ID:
Error: (11/11/2017 08:10:20 PM) (Source: Application Error) (EventID: 1005) (User: )
Description: Windows cannot access the file for one of the following reasons:
there is a problem with the network connection, the disk that the file is stored on, or the storage
drivers installed on this computer; or the disk is missing.
Windows closed the program Scripted Diagnostics Native Host because of this error.
Program: Scripted Diagnostics Native Host
File:
The error value is listed in the Additional Data section.
User Action
1. Open the file again.
This situation might be a temporary problem that corrects itself when the program runs again.
2.
If the file still cannot be accessed and
- It is on the network,
your network administrator should verify that there is not a problem with the network and that the server can be contacted.
- It is on a removable disk, for example, a floppy disk or CD-ROM, verify that the disk is fully inserted into the computer.
3. Check and repair the file system by running CHKDSK. To run CHKDSK, click Start, click Run, type CMD, and then click OK. At the command prompt, type CHKDSK /F, and then press ENTER.
4. If the problem persists, restore the file from a backup copy.
5. Determine whether other files on the same disk can be opened. If not, the disk might be damaged. If it is a hard disk, contact your administrator or computer hardware vendor for
further assistance.
Additional Data
Error value: 00000000
Disk type: 0
Error: (11/11/2017 08:10:20 PM) (Source: Application Error) (EventID: 1005) (User: )
Description: Windows cannot access the file for one of the following reasons:
there is a problem with the network connection, the disk that the file is stored on, or the storage
drivers installed on this computer; or the disk is missing.
Windows closed the program Scripted Diagnostics Native Host because of this error.
Program: Scripted Diagnostics Native Host
File:
The error value is listed in the Additional Data section.
User Action
1. Open the file again.
This situation might be a temporary problem that corrects itself when the program runs again.
2.
If the file still cannot be accessed and
- It is on the network,
your network administrator should verify that there is not a problem with the network and that the server can be contacted.
- It is on a removable disk, for example, a floppy disk or CD-ROM, verify that the disk is fully inserted into the computer.
3. Check and repair the file system by running CHKDSK. To run CHKDSK, click Start, click Run, type CMD, and then click OK. At the command prompt, type CHKDSK /F, and then press ENTER.
4. If the problem persists, restore the file from a backup copy.
5. Determine whether other files on the same disk can be opened. If not, the disk might be damaged. If it is a hard disk, contact your administrator or computer hardware vendor for
further assistance.
Additional Data
Error value: 00000000
Disk type: 0
Error: (11/11/2017 08:10:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: sdiagnhost.exe, version: 10.0.15063.0, time stamp: 0x59d25a06
Faulting module name: System.Data.ni.dll, version: 4.7.2102.0, time stamp: 0x59371adb
Exception code: 0xc000001d
Fault offset: 0x00000000004c5472
Faulting process id: 0xf64
Faulting application start time: 0x01d35b6721b71c24
Faulting application path: C:\WINDOWS\System32\sdiagnhost.exe
Faulting module path: C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\System.Data\92205d67b1dcc71e3446aa285912d57e\System.Data.ni.dll
Report Id: 22e551d1-89fa-4f63-a8d4-f37de48ee641
Faulting package full name:
Faulting package-relative application ID:
Error: (11/11/2017 08:10:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: sdiagnhost.exe, version: 10.0.15063.0, time stamp: 0x59d25a06
Faulting module name: System.Data.ni.dll, version: 4.7.2102.0, time stamp: 0x59371adb
Exception code: 0xc000001d
Fault offset: 0x00000000004c5472
Faulting process id: 0x7c0
Faulting application start time: 0x01d35b6751a38b5a
Faulting application path: C:\WINDOWS\System32\sdiagnhost.exe
Faulting module path: C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\System.Data\92205d67b1dcc71e3446aa285912d57e\System.Data.ni.dll
Report Id: 02c45f37-2d0a-43a2-b53b-255ac6b942e2
Faulting package full name:
Faulting package-relative application ID:
Error: (11/11/2017 07:26:29 PM) (Source: Software Protection Platform Service) (EventID: 1014) (User: )
Description: Acquisition of End User License failed. hr=0x8004FC12
Sku Id=0567073a-7d74-403b-b2d5-6b35da372d8d
Error: (11/11/2017 07:26:29 PM) (Source: Software Protection Platform Service) (EventID: 8200) (User: )
Description: License acquisition failure details.
hr=0x8004FC12
Error: (11/11/2017 07:04:19 PM) (Source: Software Protection Platform Service) (EventID: 1014) (User: )
Description: Acquisition of End User License failed. hr=0x8004FC12
Sku Id=0567073a-7d74-403b-b2d5-6b35da372d8d
Error: (11/11/2017 07:04:19 PM) (Source: Software Protection Platform Service) (EventID: 8200) (User: )
Description: License acquisition failure details.
hr=0x8004FC12
System errors:
=============
Error: (11/11/2017 08:16:35 PM) (Source: Service Control Manager) (EventID: 7005) (User: )
Description: The LoadUserProfile call failed with the following error:
The configuration registry database is corrupt.
Error: (11/11/2017 07:36:21 PM) (Source: Service Control Manager) (EventID: 7005) (User: )
Description: The LoadUserProfile call failed with the following error:
The configuration registry database is corrupt.
Error: (11/11/2017 07:34:56 PM) (Source: Service Control Manager) (EventID: 7005) (User: )
Description: The LoadUserProfile call failed with the following error:
The configuration registry database is corrupt.
Error: (11/11/2017 07:34:38 PM) (Source: DCOM) (EventID: 10010) (User: SHITPOSTINGMALC)
Description: The server {22F5B1DF-7D7A-4D21-97F8-C21AEFBA859C} did not register with DCOM within the required timeout.
Error: (11/11/2017 07:32:38 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: The Windows License Manager Service service terminated with the following service-specific error:
General access denied error
Error: (11/11/2017 07:32:38 PM) (Source: Service Control Manager) (EventID: 7005) (User: )
Description: The LoadUserProfile call failed with the following error:
The configuration registry database is corrupt.
Error: (11/11/2017 07:32:36 PM) (Source: Service Control Manager) (EventID: 7005) (User: )
Description: The LoadUserProfile call failed with the following error:
The configuration registry database is corrupt.
Error: (11/11/2017 07:32:35 PM) (Source: DCOM) (EventID: 10010) (User: SHITPOSTINGMALC)
Description: The server {22F5B1DF-7D7A-4D21-97F8-C21AEFBA859C} did not register with DCOM within the required timeout.
Error: (11/11/2017 07:30:35 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: The Windows License Manager Service service terminated with the following service-specific error:
General access denied error
Error: (11/11/2017 07:30:35 PM) (Source: Service Control Manager) (EventID: 7005) (User: )
Description: The LoadUserProfile call failed with the following error:
The configuration registry database is corrupt.
CodeIntegrity:
===================================
Date: 2017-09-05 22:12:17.763
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\wbload.dll that did not meet the Microsoft signing level requirements.
Date: 2017-09-05 22:12:17.753
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\wbload.dll that did not meet the Microsoft signing level requirements.
Date: 2017-09-05 22:12:17.745
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\wbload.dll that did not meet the Microsoft signing level requirements.
Date: 2017-09-05 22:12:12.697
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\wbload.dll that did not meet the Microsoft signing level requirements.
Date: 2017-09-05 22:12:12.690
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\wbload.dll that did not meet the Microsoft signing level requirements.
Date: 2017-09-05 22:12:12.683
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\wbload.dll that did not meet the Microsoft signing level requirements.
Date: 2017-09-05 22:12:12.676
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\wbload.dll that did not meet the Microsoft signing level requirements.
Date: 2017-09-05 22:12:12.669
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\wbload.dll that did not meet the Microsoft signing level requirements.
Date: 2017-09-05 22:12:12.662
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\wbload.dll that did not meet the Microsoft signing level requirements.
Date: 2017-09-05 21:40:55.888
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\wbload.dll that did not meet the Store signing level requirements.
==================== Memory info ===========================
Processor: Intel® Pentium® CPU N3700 @ 1.60GHz
Percentage of memory in use: 55%
Total physical RAM: 3996.95 MB
Available physical RAM: 1772.5 MB
Total Virtual: 7996.95 MB
Available Virtual: 5338.23 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:464.66 GB) (Free:416.5 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 52A0CEF5)
Partition: GPT.
==================== End of Addition.txt ============================
Sign In
Create Account
