Hi! Good day!,
I'm having a problem with my laptop when in used in restarts automatically and it pop into this message. Kindly see the attached file error that pop up every after it restarts. When I use the normal mode in windows. Now I tried using the safe mode so far I can use it without restarting it self.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 10.02.2018 02
Ran by Jerome (administrator) on ALEAH-PC (13-02-2018 00:07:26)
Running from C:\Users\Jerome\Downloads
Loaded Profiles: Jerome (Available Profiles: Jerome)
Platform: Windows 7 Ultimate (X64) Language: English (United States)
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Safe Mode (with Networking)
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Apoint] => C:\Program Files\Apoint\Apoint.exe [242552 2013-09-26] (Alps Electric Co., Ltd.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2778864 2014-01-31] (Synaptics Incorporated)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [246120 2018-01-01] (AVAST Software)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1160408 2017-03-29] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [USB Security] => C:\Program Files (x86)\USB Disk Security\USBGuard.exe [2347008 2011-11-10] (AbeGunnerZ Lab)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1141224537-1566625622-1964642510-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27832264 2017-10-06] (Skype Technologies S.A.)
HKU\S-1-5-21-1141224537-1566625622-1964642510-1000\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\system32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-1141224537-1566625622-1964642510-1000\...\MountPoints2: {eb59c5d0-ab00-11e7-bf81-3c77e6d88d6c} - F:\USBNB.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: 0.0.0.1 mssplus.mcafee.com
Tcpip\Parameters: [DhcpNameServer] 192.168.22.1
Tcpip\..\Interfaces\{2DCE6236-84C4-4BF9-BE5C-3542EFF0DB10}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{3463424D-9329-4D2B-BF92-7D2A7834773B}: [DhcpNameServer] 192.168.22.1
Tcpip\..\Interfaces\{C1EAB9E2-5F32-4361-B97A-E85AAEE37779}: [DhcpNameServer] 192.168.22.1
Internet Explorer:
==================
HKU\S-1-5-21-1141224537-1566625622-1964642510-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
HKU\S-1-5-21-1141224537-1566625622-1964642510-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/en-ph/?ocid=iehp
SearchScopes: HKU\S-1-5-21-1141224537-1566625622-1964642510-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2017-12-06] (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-12-06] (AVAST Software)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2012-10-01] (Microsoft Corporation)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-14] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-14] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-14] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-14] (Microsoft Corporation)
FireFox:
========
FF DefaultProfile: oi0my0ey.default
FF ProfilePath: C:\Users\Jerome\AppData\Roaming\Mozilla\Firefox\Profiles\oi0my0ey.default [2018-02-13]
FF Extension: (Avast SafePrice) - C:\Users\Jerome\AppData\Roaming\Mozilla\Firefox\Profiles\oi0my0ey.default\Extensions\[email protected] [2017-12-07]
FF Extension: (Avast Online Security) - C:\Users\Jerome\AppData\Roaming\Mozilla\Firefox\Profiles\oi0my0ey.default\Extensions\[email protected] [2017-12-06]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_144.dll [No File]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-11-30] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-11-30] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-11-30] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_144.dll [2017-04-01] ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-02-13] (Google, Inc.)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-12-06] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-12-06] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2017-03-29] (Adobe Systems Inc.)
Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com
CHR Profile: C:\Users\Jerome\AppData\Local\Google\Chrome\User Data\Default [2018-02-11]
CHR Extension: (Slides) - C:\Users\Jerome\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-12-06]
CHR Extension: (Docs) - C:\Users\Jerome\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-12-06]
CHR Extension: (Google Drive) - C:\Users\Jerome\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-12-06]
CHR Extension: (YouTube) - C:\Users\Jerome\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-12-06]
CHR Extension: (Google Docs Offline) - C:\Users\Jerome\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-12-06]
CHR Extension: (Avast Online Security) - C:\Users\Jerome\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-12-12]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Jerome\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-12-06]
CHR Extension: (Gmail) - C:\Users\Jerome\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-12-06]
CHR Extension: (Chrome Media Router) - C:\Users\Jerome\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-12-16]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7538536 2018-01-01] (AVAST Software)
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [301168 2018-01-01] (AVAST Software)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [185096 2018-01-01] (AVAST Software)
S1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdrivera.sys [321512 2018-01-01] (AVAST Software)
S0 aswbidsh; C:\Windows\System32\drivers\aswbidsha.sys [199448 2018-01-01] (AVAST Software)
S0 aswblog; C:\Windows\System32\drivers\aswbloga.sys [343768 2018-01-01] (AVAST Software)
S0 aswbuniv; C:\Windows\System32\drivers\aswbuniva.sys [57696 2018-01-01] (AVAST Software)
S1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [149344 2018-01-22] (AVAST Software)
S3 aswHwid; C:\Windows\System32\drivers\aswHwid.sys [46976 2018-01-01] (AVAST Software)
S2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [146648 2018-01-11] (AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [110336 2018-01-01] (AVAST Software)
S0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [84384 2018-01-01] (AVAST Software)
S1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1025176 2018-01-01] (AVAST Software)
S1 aswSP; C:\Windows\System32\drivers\aswSP.sys [457896 2018-01-11] (AVAST Software)
S2 aswStm; C:\Windows\System32\drivers\aswStm.sys [204456 2018-01-01] (AVAST Software)
S0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [358672 2018-01-01] (AVAST Software)
S3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [172760 2015-04-09] (Broadcom Corporation.)
S3 CnxtHdmiAudService; C:\Windows\System32\drivers\CHDMI64.sys [722488 2010-04-29] (Conexant Systems Inc.)
S3 RTSPER; C:\Windows\System32\DRIVERS\RtsPer.sys [827096 2015-02-06] (Realsil Semiconductor Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-02-12 23:56 - 2018-02-12 23:56 - 000000000 ____D C:\Users\Jerome\AppData\Local\ElevatedDiagnostics
2018-02-12 23:49 - 2018-02-12 23:49 - 000096942 _____ C:\Windows\ntbtlog.txt
2018-02-12 23:44 - 2018-02-12 23:44 - 000274976 _____ C:\Windows\Minidump\021218-15990-01.dmp
2018-02-12 18:06 - 2018-02-12 18:06 - 000000226 _____ C:\Users\Jerome\Documents\Running Out of Time A Minecraft Song Parody of Say Something - YouTube.URL
2018-02-12 07:16 - 2018-02-12 07:16 - 000000000 ____D C:\ProgramData\SWCUTemp
2018-02-01 19:28 - 2018-02-01 19:29 - 000656748 _____ C:\Users\Jerome\Downloads\TAC_DDAR_April 16, 2013.xlsx
2018-01-31 18:32 - 2018-01-31 18:37 - 000000000 ____D C:\Users\Jerome\Downloads\bear
2018-01-30 20:21 - 2018-01-30 20:21 - 001069201 _____ C:\Users\Jerome\Downloads\memories 10.htm
2018-01-30 20:21 - 2018-01-30 20:21 - 000000000 ____D C:\Users\Jerome\Downloads\memories 10_files
2018-01-30 20:19 - 2018-01-30 20:19 - 001090324 _____ C:\Users\Jerome\Downloads\memories 9.htm
2018-01-30 20:19 - 2018-01-30 20:19 - 000000000 ____D C:\Users\Jerome\Downloads\memories 9_files
2018-01-30 20:18 - 2018-01-30 21:37 - 000000000 ____D C:\Users\Jerome\Downloads\heartbroken poems - Google Search_files
2018-01-30 20:18 - 2018-01-30 20:18 - 001112321 _____ C:\Users\Jerome\Downloads\heartbroken poems - Google Search.htm
2018-01-30 20:18 - 2018-01-30 20:18 - 001090260 _____ C:\Users\Jerome\Downloads\memories 8.htm
2018-01-30 20:18 - 2018-01-30 20:18 - 000000000 ____D C:\Users\Jerome\Downloads\memories 8_files
2018-01-28 16:39 - 2018-01-28 16:41 - 000000000 ____D C:\Users\Jerome\Downloads\New folder
2018-01-22 06:30 - 2018-01-22 06:30 - 000001922 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2018-01-22 06:30 - 2018-01-22 06:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2018-01-22 06:28 - 2018-01-22 06:27 - 000149344 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHdsKe.sys
2018-01-22 06:28 - 2018-01-01 19:51 - 000365680 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2018-01-21 14:08 - 2018-01-28 19:43 - 000000000 ____D C:\Users\Jerome\AppData\LocalLow\uTorrent
2018-01-16 19:54 - 2018-01-16 19:54 - 000002464 _____ C:\Users\Jerome\Documents\keisha's wallpapers.lnk
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-02-13 00:07 - 2017-12-05 00:19 - 000000000 ____D C:\Users\Jerome\Downloads\FRST-OlderVersion
2018-02-13 00:07 - 2017-11-21 09:07 - 000012001 _____ C:\Users\Jerome\Downloads\FRST.txt
2018-02-13 00:07 - 2017-11-21 09:07 - 000000000 ____D C:\FRST
2018-02-13 00:07 - 2017-11-21 09:04 - 002404864 _____ (Farbar) C:\Users\Jerome\Downloads\FRST64.exe
2018-02-12 23:49 - 2017-04-11 09:43 - 000000000 ____D C:\Users\Jerome\AppData\LocalLow\Mozilla
2018-02-12 23:46 - 2017-11-21 08:31 - 000004962 _____ C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for ALEAH-PC-Jerome Aleah-PC
2018-02-12 23:44 - 2017-05-09 13:51 - 000000000 ____D C:\Windows\Minidump
2018-02-12 23:44 - 2009-07-14 13:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-02-12 23:32 - 2017-06-20 08:41 - 000000000 ____D C:\Users\Jerome\AppData\Roaming\Skype
2018-02-12 22:49 - 2009-07-14 12:45 - 000009584 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-02-12 22:49 - 2009-07-14 12:45 - 000009584 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-02-12 21:45 - 2017-04-01 15:34 - 000000000 ____D C:\Users\Jerome\AppData\Roaming\vlc
2018-02-12 18:06 - 2017-10-07 14:19 - 000000000 ____D C:\Users\Jerome\Documents\Zac world
2018-02-11 23:19 - 2017-04-01 12:20 - 000065536 _____ C:\Windows\system32\spu_storage.bin
2018-02-10 08:20 - 2017-08-17 19:54 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2018-02-10 08:20 - 2017-04-01 12:47 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-02-09 06:18 - 2009-07-14 13:08 - 000032588 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2018-02-07 18:22 - 2017-05-28 02:14 - 000000000 ____D C:\Users\Jerome\Documents\Chad
2018-02-07 18:14 - 2009-07-14 13:13 - 000781298 _____ C:\Windows\system32\PerfStringBackup.INI
2018-02-07 18:14 - 2009-07-14 11:20 - 000000000 ____D C:\Windows\inf
2018-02-02 07:49 - 2017-04-24 17:05 - 000000000 ___SD C:\Users\Jerome\AppData\LocalLow\Temp
2018-01-28 20:16 - 2017-04-24 16:58 - 000000000 ____D C:\Users\Jerome\AppData\Roaming\uTorrent
2018-01-28 14:56 - 2017-10-21 13:24 - 000000086 ____H C:\Users\Jerome\Downloads\.picasa.ini
2018-01-24 16:24 - 2017-07-26 06:22 - 000000089 _____ C:\Users\Jerome\Documents\pldt.txt
2018-01-22 06:28 - 2017-12-06 11:05 - 000003914 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2018-01-16 19:49 - 2017-10-21 13:22 - 000000000 ____D C:\Users\Jerome\Documents\keisha's wallpapers
2018-01-16 19:48 - 2017-12-03 12:30 - 000000000 ____D C:\Users\Jerome\Documents\keisha's poem
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2018-01-18 18:09
==================== End of FRST.txt ============================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10.02.2018 02
Ran by Jerome (13-02-2018 00:08:21)
Running from C:\Users\Jerome\Downloads
Windows 7 Ultimate (X64) (2017-04-01 03:30:49)
Boot Mode: Safe Mode (with Networking)
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-1141224537-1566625622-1964642510-500 - Administrator - Disabled)
Guest (S-1-5-21-1141224537-1566625622-1964642510-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1141224537-1566625622-1964642510-1002 - Limited - Enabled)
Jerome (S-1-5-21-1141224537-1566625622-1964642510-1000 - Administrator - Enabled) => C:\Users\Jerome
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKU\S-1-5-21-1141224537-1566625622-1964642510-1000\...\uTorrent) (Version: 3.5.1.44332 - BitTorrent Inc.)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.144 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.20) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.20 - Adobe Systems Incorporated)
Alps Pointing-device for VAIO (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: - ALPS ELECTRIC CO., LTD.)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 17.9.2322 - AVAST Software)
Conexant Audio Driver For AMD HDMI/DP Codec (HKLM\...\CNXT_AUDIO_HDA_HDMI) (Version: 4.98.32.50 - Conexant)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 63.0.3239.132 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.21.123 - Google Inc.) Hidden
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.599.11 - McAfee, Inc.)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Mozilla Firefox 58.0.2 (x64 en-US) (HKLM\...\Mozilla Firefox 58.0.2 (x64 en-US)) (Version: 58.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 58.0.2.6611 - Mozilla)
Outils de vérification linguistique 2013 de Microsoft Office - Français (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Program4Pc PC Image Editor (HKLM-x32\...\{29A01513-64A8-4543-AF3C-C2E4CD7FFE1A}_is1) (Version: 5.9.0.0 - Program4Pc Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7496 - Realtek Semiconductor Corp.)
Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.151 - Skype Technologies S.A.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.9.10 - Synaptics Incorporated)
USB Disk Security (HKLM-x32\...\USB Disk Security_is1) (Version: - Zbshareware Lab)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.8 - VideoLAN)
WinRAR 5.40 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-01-01] (AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-01-01] (AVAST Software)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-01-01] (AVAST Software)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-01-01] (AVAST Software)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-15] (Alexander Roshal)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {10377F89-F8D0-479D-958A-B4F9CA857F00} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-12-06] (Google Inc.)
Task: {141DD205-C192-426B-9947-A32FC27B3FD6} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {1512A98F-446E-4F60-BE9E-CFB6A3E8F436} - System32\Tasks\Games\UpdateCheck_S-1-5-21-1141224537-1566625622-1964642510-1000
Task: {42800758-69E8-4B91-A050-3AB27785F514} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2018-01-01] (AVAST Software)
Task: {64FDB0B8-AB17-4282-8395-6B6CD1DE4D95} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-12-06] (Google Inc.)
Task: {968A22A1-0275-4695-B2D4-042FD7ED05B8} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation)
Task: {E1CA80DF-F64A-4399-BE94-44D43ADBDB3A} - \Adasdsadas3id -> No File <==== ATTENTION
Task: {E9C41C62-CCBF-4768-A386-F9F022DE1F22} - System32\Tasks\Microsoft Office 15 Sync Maintenance for ALEAH-PC-Jerome Aleah-PC => C:\Program Files\Microsoft Office\Office15\MsoSync.exe [2012-10-01] (Microsoft Corporation)
Task: {EAE5977A-9435-42D9-9298-0433ACDC0DA9} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {F7C39634-F5DB-4FDF-902A-4488F32A291C} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2018-01-06] (AVAST Software)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
==================== Loaded Modules (Whitelisted) ==============
2012-10-01 20:36 - 2012-10-01 20:36 - 006522480 _____ () C:\Program Files\Microsoft Office\Office15\1033\GrooveIntlResource.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2"
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 10:34 - 2017-09-30 08:00 - 000000865 _____ C:\Windows\system32\Drivers\etc\hosts
0.0.0.1 mssplus.mcafee.com
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-1141224537-1566625622-1964642510-1000\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 192.168.22.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{F6ADCFF5-F884-44F8-A4EF-0F5CF759F8E3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{5A1FCF24-4A30-491B-8E0E-C700C2684268}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{CFE2533A-1A8E-4694-ACB1-4968CC0CB40F}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{121A1CC9-D3EE-4109-B01B-DE56BF7B480A}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{DC237C0E-5807-4373-A20F-ECCFD872276A}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{2E15237F-3E9F-43AA-A6C4-C5104ED25683}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{E7951274-B8D0-4EBC-92D6-2ECAA1CED349}] => (Allow) C:\Users\Jerome\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{A9065BA6-0B98-4C01-949D-C7053958A067}] => (Allow) C:\Users\Jerome\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{065FA1A5-5BBC-4D77-A166-64DC3D6A7FF7}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{4751BB15-B1F8-47C3-98D5-81D7274EE0DC}C:\program files\videolan\vlc\vlc.exe] => (Block) C:\program files\videolan\vlc\vlc.exe
FirewallRules: [UDP Query User{DCC8924E-C16F-47AE-9FEA-23301FE857AE}C:\program files\videolan\vlc\vlc.exe] => (Block) C:\program files\videolan\vlc\vlc.exe
FirewallRules: [{1BF694D7-2CA4-487C-800E-41369E4DE302}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Restore Points =========================
==================== Faulty Device Manager Devices =============
Name: Security Processor Loader Driver
Description: Security Processor Loader Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: spldr
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: aswRvrt
Description: aswRvrt
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: aswRvrt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: aswVmm
Description: aswVmm
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: aswVmm
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Event log errors: =========================
Application errors:
==================
Error: (02/12/2018 11:45:50 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "C:\Program Files (x86)\USB Disk Security\MFC80U.DLL".
Dependent Assembly Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.
Error: (02/12/2018 11:45:50 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "C:\Program Files (x86)\USB Disk Security\MFC80U.DLL".
Dependent Assembly Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.
Error: (02/12/2018 11:29:04 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "C:\Program Files (x86)\USB Disk Security\MFC80U.DLL".
Dependent Assembly Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.
Error: (02/12/2018 11:29:04 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "C:\Program Files (x86)\USB Disk Security\MFC80U.DLL".
Dependent Assembly Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.
Error: (02/12/2018 09:49:53 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "C:\Program Files (x86)\USB Disk Security\MFC80U.DLL".
Dependent Assembly Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.
Error: (02/12/2018 09:49:53 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "C:\Program Files (x86)\USB Disk Security\MFC80U.DLL".
Dependent Assembly Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.
Error: (02/12/2018 07:26:46 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0
Error: (02/12/2018 07:17:29 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "C:\Program Files (x86)\USB Disk Security\MFC80U.DLL".
Dependent Assembly Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.
Error: (02/12/2018 07:17:29 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "C:\Program Files (x86)\USB Disk Security\MFC80U.DLL".
Dependent Assembly Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.
Error: (02/11/2018 09:57:08 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0
System errors:
=============
Error: (02/12/2018 11:49:34 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server:
{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
Error: (02/12/2018 11:49:34 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server:
{9E175B6D-F52A-11D8-B9A5-505054503030}
Error: (02/12/2018 11:49:31 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT AUTHORITY)
Description: WLAN Extensibility Module has failed to start.
Module Path: C:\Windows\System32\bcmihvsrv64.dll
Error Code: 21
Error: (02/12/2018 11:49:31 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}
Error: (02/12/2018 11:49:23 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server:
{DD522ACC-F821-461A-A407-50B198B896DC}
Error: (02/12/2018 11:49:15 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
aswArPot
aswbidsdriver
aswbidsh
aswblog
aswbuniv
aswHdsKe
aswRvrt
aswSnx
aswSP
aswVmm
discache
spldr
Wanarpv6
Error: (02/12/2018 11:49:09 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 11:47:36 PM on 2/12/2018 was unexpected.
Error: (02/12/2018 11:44:47 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: The computer has rebooted from a bugcheck. The bugcheck was: 0x0000001e (0xffffffffc000001d, 0xfffff80002e90d74, 0x0000000000000002, 0xfffff80002e19000). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 021218-15990-01.
Error: (02/12/2018 11:44:43 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 11:34:44 PM on 2/12/2018 was unexpected.
Error: (02/12/2018 11:27:51 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 11:26:35 PM on 2/12/2018 was unexpected.
==================== Memory info ===========================
Processor: AMD A8-5545M APU with Radeon™ HD Graphics
Percentage of memory in use: 28%
Total physical RAM: 5321.89 MB
Available physical RAM: 3786.9 MB
Total Virtual: 10641.93 MB
Available Virtual: 9208.66 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:104.39 GB) (Free:12.62 GB) NTFS
Drive d: () (Fixed) (Total:361.27 GB) (Free:298.27 GB) NTFS
\\?\Volume{1d8f6740-1708-11e7-9eda-806e6f6e6963}\ (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 6CE6BB76)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=104.4 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=361.3 GB) - (Type=07 NTFS)
==================== End of Addition.txt ============================
Attached Thumbnails
Edited by lhey, 12 February 2018 - 10:20 AM.
Sign In
Create Account
