Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-05-2015 02 Ran by Muneeb Khan Lodhi at 2015-05-18 20:47:17 Running from C:\Users\Muneeb Khan Lodhi\Desktop\Malware Removal Geekstogo Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-2238753014-2711977962-2677134643-500 - Administrator - Disabled) fbwuser (S-1-5-21-2238753014-2711977962-2677134643-1007 - Limited - Disabled) => C:\Users\fbwuser Guest (S-1-5-21-2238753014-2711977962-2677134643-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-2238753014-2711977962-2677134643-1006 - Limited - Enabled) Muneeb Khan Lodhi (S-1-5-21-2238753014-2711977962-2677134643-1001 - Administrator - Enabled) => C:\Users\Muneeb Khan Lodhi ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: IObit Malware Fighter (Disabled - Up to date) {A751AC20-3B48-5237-898A-78C4436BB78D} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Adobe Acrobat XI Pro (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.10 - Adobe Systems) Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.6 - Adobe Systems Incorporated) Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.188 - Adobe Systems Incorporated) Adobe Reader X (10.1.13) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.13 - Adobe Systems Incorporated) Advanced SystemCare 8 (HKLM-x32\...\Advanced SystemCare 8_is1) (Version: 8.2.0 - IObit) AMD Catalyst Install Manager (HKLM\...\{ACD449FA-9DF3-779D-DA68-11D486963225}) (Version: 3.0.847.0 - Advanced Micro Devices, Inc.) AMD System Monitor (HKLM-x32\...\{6EFD0C42-4CC1-4716-A0CA-21C1A062CF34}) (Version: 1.0.9 - Advanced Micro Devices, Inc.) avast! Free Antivirus (HKLM-x32\...\avast) (Version: 9.0.2018 - Avast Software) Bejeweled 3 (x32 Version: 2.2.0.97 - WildTangent) Hidden Blackhawk Striker 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden CCleaner (HKLM\...\CCleaner) (Version: 5.05 - Piriform) Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.) Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.) Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.) CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.5.0.4528 - CyberLink Corp.) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.48.1.0347 - Disc Soft Ltd) Dora's World Adventure (x32 Version: 2.2.0.95 - WildTangent) Hidden Driver Booster 2.3 (HKLM-x32\...\Driver Booster_is1) (Version: 2.3 - IObit) ESU for Microsoft Windows 7 SP1 (HKLM-x32\...\{E96CAA2A-0244-4A2A-8403-0C3C9534778B}) (Version: 2.1.1 - Hewlett-Packard) Evernote v. 4.2.3 (HKLM-x32\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 4.2.3.22 - Evernote Corp.) Farm Frenzy (x32 Version: 2.2.0.98 - WildTangent) Hidden Farmscapes (x32 Version: 2.2.0.98 - WildTangent) Hidden FATE (x32 Version: 2.2.0.97 - WildTangent) Hidden Final Drive Fury (x32 Version: 2.2.0.95 - WildTangent) Hidden Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.152 - Google Inc.) Google Drive (HKLM-x32\...\{35574F09-89F9-4B16-B69B-64F3E25901B8}) (Version: 1.21.9226.6034 - Google, Inc.) Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google) Google Talk (remove only) (HKLM-x32\...\{226b64e8-dc75-4eea-a6c8-abcb496320f2}-Google Talk) (Version: - ) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden Grand Theft Auto Vice City (HKLM-x32\...\{4B35F00C-E63D-40DC-9839-DF15A33EAC46}) (Version: 1.00.000 - ) Hotspot Shield 3.25 (HKLM-x32\...\HotspotShield) (Version: 3.25 - AnchorFree Inc.) Hoyle Card Games (x32 Version: 2.2.0.95 - WildTangent) Hidden HP Deskjet 1050 J410 series Basic Device Software (HKLM\...\{F294770E-F869-400F-81C3-614B5F13CA54}) (Version: 28.0.1313.0 - Hewlett-Packard Co.) HP Deskjet 1050 J410 series Help (HKLM-x32\...\{5C90D8CF-F12A-41C6-9007-3B651A1F0D78}) (Version: 140.0.66.66 - Hewlett Packard) HP Deskjet 1050 J410 series Product Improvement Study (HKLM\...\{D638A23C-5C5F-4B71-A354-EC78B2BDD320}) (Version: 28.0.1313.0 - Hewlett-Packard Co.) HP Documentation (HKLM-x32\...\{3D5C7E0E-AEC0-40EB-99D3-C40469738040}) (Version: 1.1.0.0 - Hewlett-Packard) HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.2.5 - WildTangent) HP Launch Box (HKLM\...\{BF1E75D0-E7AF-4BEA-9FBC-567F0C54BDF9}) (Version: 1.0.12 - Hewlett-Packard Company) HP On Screen Display (HKLM-x32\...\{ED1BD69A-07E3-418C-91F1-D856582581BF}) (Version: 1.3.5 - Hewlett-Packard Company) HP Power Manager (HKLM-x32\...\{D8BCE5B9-67CF-4F3F-93AE-3ACC754C72EB}) (Version: 1.4.7 - Hewlett-Packard Company) HP Quick Launch (HKLM-x32\...\{53B17A98-5BF0-40BC-AAFF-850A357975AC}) (Version: 2.7.2 - Hewlett-Packard Company) HP QuickWeb (HKLM-x32\...\{BB4FC2AD-DF12-4EE1-8AA7-2C0A26B5E2FB}) (Version: 3.1.1.10197 - Hewlett-Packard Company) HP Security Assistant (HKLM\...\{562608FE-2051-4488-BF22-8CE4C03046AC}) (Version: 1.0.12 - Hewlett-Packard) HP Setup (HKLM-x32\...\{F5E7D9AF-60F6-4A30-87E3-4EA94D322CE1}) (Version: 9.0.15076.3891 - Hewlett-Packard Company) HP Setup Manager (HKLM-x32\...\{AE856388-AFAD-4753-81DF-D96B19D0A17C}) (Version: 1.2.14901.3869 - Hewlett-Packard Company) HP Software Framework (HKLM-x32\...\{962CB079-85E6-405F-8704-1C62365AE46F}) (Version: 4.5.10.1 - Hewlett-Packard Company) HP Support Solutions Framework (HKLM-x32\...\{348A1F5B-07B3-4436-9A47-FFE44EFE856E}) (Version: 11.51.0004 - Hewlett-Packard Company) HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard) IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6341.0 - IDT) IObit Malware Fighter 3 (HKLM-x32\...\IObit Malware Fighter_is1) (Version: 3.1 - IObit) IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 4.2.6.2 - IObit) IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.35 - Irfan Skiljan) Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation) Jewel Match 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden Jewel Quest Mysteries: The Seventh Gate Collector's Edition (x32 Version: 2.2.0.98 - WildTangent) Hidden John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden KMPlayer (remove only) (HKLM-x32\...\The KMPlayer) (Version: 3.9.1.135 - PandoraTV) Letters from Nowhere 2 (x32 Version: 2.2.0.97 - WildTangent) Hidden Luxor HD (x32 Version: 2.2.0.98 - WildTangent) Hidden Magic Desktop (HKLM-x32\...\EasyBits Magic Desktop) (Version: 3.0 - EasyBits Software AS) Mah Jong Medley (x32 Version: 2.2.0.95 - WildTangent) Hidden Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation) Microsoft Age of Empires II (HKLM-x32\...\Age of Empires 2.0) (Version: - ) Microsoft Age of Empires II: The Conquerors Expansion (HKLM-x32\...\Age of Empires II: The Conquerors Expansion 1.0) (Version: - ) Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office 2010 Service Pack 1 (SP1) (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{047B0968-E622-4FAA-9B4B-121FA109EDDE}) (Version: - Microsoft) Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.6029.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20513.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation) opensource (x32 Version: 1.0.14960.3876 - Your Company Name) Hidden Pandora Service (HKLM-x32\...\4F6D5E84-5826-4394-9F40-3A9A19165651_is1) (Version: - Pandora.TV) <==== ATTENTION Penguins! (x32 Version: 2.2.0.98 - WildTangent) Hidden PhotoScape (HKLM-x32\...\PhotoScape) (Version: - ) Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden PlayReady PC Runtime x86 (HKLM-x32\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation) Poker Superstars III (x32 Version: 2.2.0.95 - WildTangent) Hidden Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden Polar Golfer (x32 Version: 2.2.0.98 - WildTangent) Hidden RadioRage Internet Explorer Toolbar (HKLM-x32\...\RadioRage_4jbar Uninstall Internet Explorer) (Version: - Mindspark Interactive Network) <==== ATTENTION Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.40.126.2011 - Realtek) Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7601.83 - Realtek Semiconductor Corp.) REALTEK Wireless LAN Driver (HKLM-x32\...\{9D3D8C60-A55F-4123-B2B9-173F09590E16}) (Version: 1.00.11.0706 - REALTEK Semiconductor Corp.) RollerCoaster Tycoon 3: Platinum (x32 Version: 2.2.0.98 - WildTangent) Hidden Skype™ 7.2 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.2.103 - Skype Technologies S.A.) Smart Defrag 4 (HKLM-x32\...\Smart Defrag 4_is1) (Version: 4.0 - IObit) Spotflux (HKLM-x32\...\Spotflux) (Version: 2.9.20 - Spotflux) SteadyVideoIE (HKLM-x32\...\{40A03BEA-447B-4B3B-8AA0-6C4160C4D4DC}) (Version: 1.0.0 - AMD) Surfing Protection (HKLM-x32\...\IObit Surfing Protection_is1) (Version: 1.2 - IObit) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.11.0 - Synaptics Incorporated) The Treasures of Mystery Island: The Ghost Ship (x32 Version: 2.2.0.98 - WildTangent) Hidden Tixati (HKLM-x32\...\tixati) (Version: - ) Torchlight (x32 Version: 2.2.0.98 - WildTangent) Hidden U3Launcher (HKLM-x32\...\{D8E363A7-88B7-446D-B2C0-E26CE4DC8E54}) (Version: 1.0.0 - U3) Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.98 - WildTangent) Hidden WildTangent Games App (HP Games) (x32 Version: 4.0.5.32 - WildTangent) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation) Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation) WinRAR 5.00 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH) WordWeb (HKLM-x32\...\WordWeb) (Version: 7 - WordWeb Software) Yahoo! Messenger (HKLM-x32\...\Yahoo! Messenger) (Version: - Yahoo! Inc.) Yahoo! Software Update (HKLM-x32\...\Yahoo! Software Update) (Version: - ) Yahoo! Toolbar (HKLM-x32\...\Yahoo! Companion) (Version: - ) YouTube Free Downloader (HKLM-x32\...\YouTube Free Downloader) (Version: 4.3.1 - YouTubeFreeDownloader) Zuma's Revenge (x32 Version: 2.2.0.98 - WildTangent) Hidden ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) ==================== Restore Points ========================= 25-04-2015 05:16:24 Windows Update 02-05-2015 05:25:43 Windows Update 03-05-2015 19:26:02 Driver Booster : AMD High Definition Audio Device 15-05-2015 23:15:56 Software Removal Tool ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 12:34 - 2009-06-11 07:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {0091F4CA-034E-4604-B5FF-80AAC9320782} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2013-10-15] (Hewlett-Packard) Task: {21E3E29C-E512-4C98-A90B-811678578D2E} - System32\Tasks\{15E9BB29-D3C9-4E7F-A4E6-E79B754ED583} => pcalua.exe -a "C:\D drive data\Games\AOE Conquerors\age2upa.exe" -d "C:\D drive data\Games\AOE Conquerors" Task: {499370D1-4FCE-4D5F-9485-145F95A88F3D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated) Task: {4C6D3412-8AC7-4C38-8E31-7842B3E44FB2} - System32\Tasks\HPCustParticipation HP Deskjet 1050 J410 series => C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HPCustPartic.exe [2012-10-02] (Hewlett-Packard Co.) Task: {4F19AD43-CBBA-4B1B-A89C-56D470B82439} - System32\Tasks\ASC8_SkipUac_Muneeb Khan Lodhi => C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASC.exe [2015-04-09] (IObit) Task: {51807BB2-7FBD-4A3C-9BDC-E99DC2718F7E} - System32\Tasks\launchspotflux => C:\Program Files (x86)\Spotflux\spotflux.exe [2014-01-21] () Task: {5E11588C-ADCC-41A9-96A6-03FE0C49F520} - System32\Tasks\{C25B728D-27ED-4FCE-BC81-F5652A1821E8} => pcalua.exe -a "C:\D drive data\Games\Age Of Empires 2 & The Conquerors Expansion - Full Game\SETUPREG.EXE" -d "C:\D drive data\Games\Age Of Empires 2 & The Conquerors Expansion - Full Game" Task: {75203684-393F-4305-8E3A-777E5E849EFB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-06] (Google Inc.) Task: {8029C3F6-06F8-4FAB-A18E-CBFC5FBFFD66} - System32\Tasks\{8F7139A5-3408-45BC-A64E-672623AEA322} => pcalua.exe -a G:\aocsetup.exe -d G:\ -c /autorun Task: {842C8930-F477-417A-AD8D-678092DCDB9D} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2011-09-29] (CyberLink) Task: {8C4417BD-F630-499D-BF04-ACAEBACCED52} - System32\Tasks\Driver Booster Scan => C:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe [2015-04-07] (IObit) Task: {A0C6FA4E-CC45-418D-91BF-EB0E5102715B} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-04-24] (Piriform Ltd) Task: {A890C0CF-D5AE-4980-BCA2-2BB39748616B} - System32\Tasks\SmartDefrag4_Update => C:\Program Files (x86)\IObit\Smart Defrag 4\AutoUpdate.exe [2015-03-03] (IObit) Task: {AD89180E-985B-417B-A035-6070B79BA138} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-06] (Google Inc.) Task: {B4626FA9-8A95-4462-83B0-A95ADF723175} - System32\Tasks\Driver Booster Update => C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe [2015-03-30] (IObit) Task: {B96F40CB-06C1-40C9-94D4-CE4926857532} - System32\Tasks\BackgroundContainer Startup Task => Rundll32.exe "C:\Users\Muneeb Khan Lodhi\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun <==== ATTENTION Task: {C00F1C2D-89BF-4AEA-9F08-F1B86CAD0C96} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-05-17] (Adobe Systems Incorporated) Task: {C8C901D8-D4E6-4AA8-9FFC-13B4E6175968} - System32\Tasks\Uninstaller_SkipUac_Muneeb_Khan_Lodhi => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2015-01-20] (IObit) Task: {D96F5CD0-8EBE-47CA-8505-C9C6EF5F643F} - System32\Tasks\Driver Booster SkipUAC (Muneeb Khan Lodhi) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe [2015-04-07] (IObit) Task: {F6C06142-D2CD-4360-804C-00A92293AB52} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-05-20] (AVAST Software) Task: {F7412D54-49AC-4273-92E0-CF202B2BE78B} - System32\Tasks\{42074EA0-2F27-44EB-BAA2-CE6DE674B649} => pcalua.exe -a "C:\D drive data\Games\Age Of Empires 2 & The Conquerors Expansion - Full Game\uninstall.exe" -d "C:\D drive data\Games\Age Of Empires 2 & The Conquerors Expansion - Full Game" Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (Whitelisted) ============== 2011-09-28 23:19 - 2011-09-28 23:19 - 00073728 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll 2014-03-15 10:35 - 2014-03-15 10:35 - 00555304 _____ () C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe 2011-03-17 10:07 - 2011-03-17 10:07 - 04297568 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF 2010-10-21 01:23 - 2010-10-21 01:23 - 08801632 _____ () C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll 2015-05-03 19:22 - 2013-10-25 12:08 - 00517408 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 8\sqlite3.dll 2015-05-18 03:33 - 2015-05-18 03:33 - 02929664 _____ () C:\Program Files\AVAST Software\Avast\defs\15051701\algo.dll 2015-05-18 19:52 - 2015-05-18 19:52 - 02929664 _____ () C:\Program Files\AVAST Software\Avast\defs\15051800\algo.dll 2015-05-03 18:19 - 2015-01-09 18:46 - 00517408 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\sqlite3.dll 2014-03-20 04:38 - 2014-03-20 04:38 - 00908584 _____ () C:\Program Files (x86)\Hotspot Shield\bin\af_proxy.dll 2014-03-20 07:46 - 2014-03-20 07:46 - 00381224 _____ () C:\Program Files (x86)\Hotspot Shield\bin\cmwarchplugin.dll 2014-03-20 03:48 - 2014-03-20 03:48 - 00506664 _____ () C:\Program Files (x86)\Hotspot Shield\bin\HssRep.dll 2014-03-21 01:04 - 2014-01-04 00:45 - 02927360 ____N () C:\Windows\wweb32.dll 2014-03-21 01:04 - 2013-05-21 02:32 - 00581480 ____N () C:\Program Files (x86)\WordWeb\wwextdb.dll 2011-03-17 10:11 - 2011-03-17 10:11 - 04297568 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2010-10-21 01:45 - 2010-10-21 01:45 - 08801120 _____ () C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll 2013-01-26 11:29 - 2012-10-22 21:21 - 01277952 _____ () C:\Program Files (x86)\PANDORA.TV\PanService\avformat-53.dll 2013-01-26 11:29 - 2012-07-10 03:57 - 02090496 _____ () C:\Program Files (x86)\PANDORA.TV\PanService\avcodec-53.dll 2013-01-26 11:29 - 2011-12-07 02:19 - 00133632 _____ () C:\Program Files (x86)\PANDORA.TV\PanService\avutil-51.dll 2013-01-26 11:29 - 2012-03-23 20:07 - 00224768 _____ () C:\Program Files (x86)\PANDORA.TV\PanService\libupnp.dll 2014-05-20 15:01 - 2014-05-20 15:01 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2015-05-03 19:23 - 2013-01-15 18:48 - 00348992 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madExcept_.bpl 2015-05-03 19:23 - 2013-01-15 18:48 - 00183616 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madBasic_.bpl 2015-05-03 19:23 - 2013-01-15 18:48 - 00051008 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madDisAsm_.bpl 2015-05-16 10:52 - 2015-05-05 14:06 - 14982472 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.152\PepperFlash\pepflashplayer.dll 2014-10-28 07:58 - 2014-02-10 11:44 - 04592128 _____ () C:\Users\Muneeb Khan Lodhi\AppData\Local\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libglesv2.dll 2014-10-28 07:58 - 2014-02-10 11:44 - 00112128 _____ () C:\Users\Muneeb Khan Lodhi\AppData\Local\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libegl.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\ProgramData\Temp:373E1720 AlternateDataStreams: C:\ProgramData\Temp:56E2E879 ==================== Safe Mode (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice => ""="Service" ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, the associated entry will be removed from the registry.) IE restricted site: HKU\S-1-5-21-2238753014-2711977962-2677134643-1001\...\008i.com -> 008i.com IE restricted site: HKU\S-1-5-21-2238753014-2711977962-2677134643-1001\...\008k.com -> 008k.com IE restricted site: HKU\S-1-5-21-2238753014-2711977962-2677134643-1001\...\00hq.com -> 00hq.com IE restricted site: HKU\S-1-5-21-2238753014-2711977962-2677134643-1001\...\0190-dialers.com -> 0190-dialers.com IE restricted site: HKU\S-1-5-21-2238753014-2711977962-2677134643-1001\...\01i.info -> 01i.info IE restricted site: HKU\S-1-5-21-2238753014-2711977962-2677134643-1001\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com IE restricted site: HKU\S-1-5-21-2238753014-2711977962-2677134643-1001\...\05p.com -> 05p.com IE restricted site: HKU\S-1-5-21-2238753014-2711977962-2677134643-1001\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com IE restricted site: HKU\S-1-5-21-2238753014-2711977962-2677134643-1001\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com IE restricted site: HKU\S-1-5-21-2238753014-2711977962-2677134643-1001\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com IE restricted site: HKU\S-1-5-21-2238753014-2711977962-2677134643-1001\...\0calories.net -> 0calories.net IE restricted site: HKU\S-1-5-21-2238753014-2711977962-2677134643-1001\...\0cj.net -> 0cj.net IE restricted site: HKU\S-1-5-21-2238753014-2711977962-2677134643-1001\...\0scan.com -> 0scan.com IE restricted site: HKU\S-1-5-21-2238753014-2711977962-2677134643-1001\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com IE restricted site: HKU\S-1-5-21-2238753014-2711977962-2677134643-1001\...\1-domains-registrations.com -> 1-domains-registrations.com IE restricted site: HKU\S-1-5-21-2238753014-2711977962-2677134643-1001\...\1-se.com -> 1-se.com IE restricted site: HKU\S-1-5-21-2238753014-2711977962-2677134643-1001\...\1001movie.com -> 1001movie.com IE restricted site: HKU\S-1-5-21-2238753014-2711977962-2677134643-1001\...\1001night.biz -> 1001night.biz IE restricted site: HKU\S-1-5-21-2238753014-2711977962-2677134643-1001\...\100gal.net -> 100gal.net IE restricted site: HKU\S-1-5-21-2238753014-2711977962-2677134643-1001\...\100sexlinks.com -> 100sexlinks.com There are 4788 more restricted sites. ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-2238753014-2711977962-2677134643-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Muneeb Khan Lodhi\AppData\Roaming\IrfanView\IrfanView_Wallpaper.bmp DNS Servers: 4.2.2.1 - 4.2.2.2 ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) MSCONFIG\startupfolder: C:^Users^Muneeb Khan Lodhi^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^LaunchU3.exe.lnk => C:\Windows\pss\LaunchU3.exe.lnk.Startup MSCONFIG\startupreg: Ad Arrest => C:\Program Files (x86)\Ad Arrest IE Popup Killer\adarrest.exe MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: Advanced SystemCare 6 => "C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe" /AutoStart MSCONFIG\startupreg: Advanced SystemCare 8 => "C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe" /Auto MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR MSCONFIG\startupreg: ConduitFloatingPlugin_giolhomkcooifelkdfpejhidfidaahlc => "C:\Windows\SysWOW64\Rundll32.exe" "C:\Program Files (x86)\Conduit\CT3282698\plugins\TBVerifier.dll",RunConduitFloatingPlugin giolhomkcooifelkdfpejhidfidaahlc MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun MSCONFIG\startupreg: HP Quick Launch => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe MSCONFIG\startupreg: HPOSD => C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe MSCONFIG\startupreg: HPQuickWebProxy => "C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe" MSCONFIG\startupreg: Messenger (Yahoo!) => "C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe" -quiet MSCONFIG\startupreg: RadioRage Search Scope Monitor => "C:\PROGRA~2\RADIOR~1\bar\1.bin\4jsrchmn.exe" /m=2 /w /h MSCONFIG\startupreg: SetDefault => C:\Program Files\Hewlett-Packard\HP LaunchBox\SetDefault.exe MSCONFIG\startupreg: VideoDownloadToolbar => "C:\Users\Muneeb Khan Lodhi\AppData\Roaming\VideoDownloadToolbar\VideoDownloadToolbar.exe" cmd=vdt_autorun ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) FirewallRules: [{CD8B3301-C5E8-4319-8E9F-C73CCF354698}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{AE0995DA-699D-4BE0-A7A0-E82020B5A25F}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{CB7CD860-C4B1-4657-8280-9CA7C4A3B131}] => (Allow) LPort=2869 FirewallRules: [{B94A7292-BCF5-4935-A648-AD9D6A09A6F5}] => (Allow) LPort=1900 FirewallRules: [{72EA8F5E-A93A-4465-878A-AC364C1794E0}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe FirewallRules: [{0E65082C-A64C-4B66-9257-689BF538B64A}] => (Allow) C:\Windows\system32\ezSharedSvcHost.exe FirewallRules: [{EFF791D3-8243-4912-8DD5-E4620AC6D597}] => (Allow) C:\Program Files (x86)\EasyBits For Kids\ezDesktop.exe FirewallRules: [{E873CC54-F838-412E-A22F-55ED14C1C615}] => (Allow) C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe FirewallRules: [{BEE06A59-437D-457C-AAAC-D4FF07193C92}] => (Allow) C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe FirewallRules: [{BC4AA6AD-B763-4292-A151-D2C9D192DB9D}] => (Allow) C:\Program Files (x86)\Google\Google Talk\googletalk.exe FirewallRules: [{27327A2C-4A64-4216-9E8F-6133CBAF3B37}] => (Allow) C:\Program Files (x86)\Google\Google Talk\googletalk.exe FirewallRules: [TCP Query User{49C882B5-5B6B-43F1-BFDE-C3C8CDA9B663}C:\d drive data\games\age of empires 2 & the conquerors expansion - full game\age2_x1.exe] => (Allow) C:\d drive data\games\age of empires 2 & the conquerors expansion - full game\age2_x1.exe FirewallRules: [UDP Query User{625F29DD-EED7-4B97-8474-A012CCC86564}C:\d drive data\games\age of empires 2 & the conquerors expansion - full game\age2_x1.exe] => (Allow) C:\d drive data\games\age of empires 2 & the conquerors expansion - full game\age2_x1.exe FirewallRules: [TCP Query User{39EAE9C0-6D4E-40F6-8BBA-654395712159}C:\d drive data\games\age of empires 2 & the conquerors expansion - full game\age2_x1\age2_x1.exe] => (Allow) C:\d drive data\games\age of empires 2 & the conquerors expansion - full game\age2_x1\age2_x1.exe FirewallRules: [UDP Query User{79898DF5-9520-4371-B552-BA3DACD7D267}C:\d drive data\games\age of empires 2 & the conquerors expansion - full game\age2_x1\age2_x1.exe] => (Allow) C:\d drive data\games\age of empires 2 & the conquerors expansion - full game\age2_x1\age2_x1.exe FirewallRules: [{A577B8D2-256E-4A19-8D36-6CD2C4D8A155}] => (Allow) C:\Users\Muneeb Khan Lodhi\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{E3EDE0C3-CC0A-4CAC-AC61-FD662C1683FB}] => (Allow) C:\Users\Muneeb Khan Lodhi\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{103D5D20-4163-49A2-833D-2BD55EF321A1}] => (Allow) C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\USBSetup.exe FirewallRules: [TCP Query User{776DFA62-4F5E-41C6-A184-E0B95A9818CE}C:\program files\tixati\tixati.exe] => (Allow) C:\program files\tixati\tixati.exe FirewallRules: [UDP Query User{4D81310F-BFB8-483F-84EB-5030233D04C9}C:\program files\tixati\tixati.exe] => (Allow) C:\program files\tixati\tixati.exe FirewallRules: [{CF5DF66D-65EB-4B53-812D-4E7C4BD08C15}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe FirewallRules: [{9F98BDFB-F683-42DD-A90D-99BC0C538838}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe FirewallRules: [{29707835-1367-4AF4-8CFB-85258DDB2EE4}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe FirewallRules: [{463D4FE8-2265-447E-9273-C5F8B5791CED}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe FirewallRules: [{E7BC5588-BDA4-46D6-9CA6-D88F818A5C06}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPDeviceDetection3.exe FirewallRules: [TCP Query User{4253A92D-E492-4880-92CF-F7B3E522802F}C:\d drive data\games\aoe conquerors\age2_x1.exe] => (Allow) C:\d drive data\games\aoe conquerors\age2_x1.exe FirewallRules: [UDP Query User{DD1635AB-5534-4285-86A8-CA3DD4557EDD}C:\d drive data\games\aoe conquerors\age2_x1.exe] => (Allow) C:\d drive data\games\aoe conquerors\age2_x1.exe FirewallRules: [{967567C5-AE00-4CCD-9796-F17A05709AC9}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{811A13AF-BB51-446E-B5CC-B0C8EC620D3C}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe FirewallRules: [{3B70B559-ABB7-45C8-9779-BC41419E5EB1}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe FirewallRules: [{A6C021BB-7E13-4A41-B935-72D3C2F99373}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe FirewallRules: [{7C44C4C5-8BBD-454F-B2E3-49EF95F95E7B}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (05/18/2015 08:26:28 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: Explorer.EXE, version: 6.1.7601.17567, time stamp: 0x4d672ee4 Faulting module name: bcryptprimitives.dll, version: 6.1.7601.17514, time stamp: 0x4ce7c4f0 Exception code: 0xc0000005 Fault offset: 0x0000000000007a94 Faulting process id: 0xd70 Faulting application start time: 0xExplorer.EXE0 Faulting application path: Explorer.EXE1 Faulting module path: Explorer.EXE2 Report Id: Explorer.EXE3 Error: (05/18/2015 07:50:51 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/18/2015 07:47:47 AM) (Source: AdvancedSystemCareService8) (EventID: 0) (User: ) Description: The handle is invalid Error: (05/18/2015 07:47:42 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: PanProcess.exe, version: 1.0.1.2, time stamp: 0x506004cc Faulting module name: PanStreamer.dll, version: 2.0.6.37, time stamp: 0x509b1d60 Exception code: 0xc0000005 Fault offset: 0x0001dc74 Faulting process id: 0x1220 Faulting application start time: 0xPanProcess.exe0 Faulting application path: PanProcess.exe1 Faulting module path: PanProcess.exe2 Report Id: PanProcess.exe3 Error: (05/15/2015 11:47:51 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/15/2015 11:43:29 PM) (Source: Windows Search Service) (EventID: 3100) (User: ) Description: Unable to initialize the filter host process. Terminating. Details: This operation returned because the timeout period expired. (HRESULT : 0x800705b4) (0x800705b4) Error: (05/15/2015 11:35:07 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/15/2015 11:25:11 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/15/2015 11:22:41 PM) (Source: AdvancedSystemCareService8) (EventID: 0) (User: ) Description: The handle is invalid Error: (05/15/2015 10:52:11 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 System errors: ============= Error: (05/18/2015 07:49:34 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT AUTHORITY) Description: WLAN Extensibility Module has failed to start. Module Path: C:\Windows\system32\Rtlihvs.dll Error Code: 126 Error: (05/15/2015 11:46:27 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT AUTHORITY) Description: WLAN Extensibility Module has failed to start. Module Path: C:\Windows\system32\Rtlihvs.dll Error Code: 126 Error: (05/15/2015 11:46:22 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: The previous system shutdown at 23:45:24 on ‎15/‎05/‎2015 was unexpected. Error: (05/15/2015 11:33:42 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT AUTHORITY) Description: WLAN Extensibility Module has failed to start. Module Path: C:\Windows\system32\Rtlihvs.dll Error Code: 126 Error: (05/15/2015 11:33:37 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: The previous system shutdown at 23:32:23 on ‎15/‎05/‎2015 was unexpected. Error: (05/15/2015 11:23:39 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT AUTHORITY) Description: WLAN Extensibility Module has failed to start. Module Path: C:\Windows\system32\Rtlihvs.dll Error Code: 126 Error: (05/15/2015 10:50:46 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT AUTHORITY) Description: WLAN Extensibility Module has failed to start. Module Path: C:\Windows\system32\Rtlihvs.dll Error Code: 126 Error: (05/14/2015 09:01:31 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT AUTHORITY) Description: WLAN Extensibility Module has failed to start. Module Path: C:\Windows\system32\Rtlihvs.dll Error Code: 126 Error: (05/13/2015 07:32:32 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT AUTHORITY) Description: WLAN Extensibility Module has failed to start. Module Path: C:\Windows\system32\Rtlihvs.dll Error Code: 126 Error: (05/12/2015 09:09:07 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY) Description: The following fatal alert was received: 40. Microsoft Office Sessions: ========================= Error: (05/18/2015 08:26:28 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Explorer.EXE6.1.7601.175674d672ee4bcryptprimitives.dll6.1.7601.175144ce7c4f0c00000050000000000007a94d7001d0914ffe21ca0eC:\Windows\Explorer.EXEC:\Windows\system32\bcryptprimitives.dll5768dd62-fd48-11e4-b93e-a0b3cc6a6f9f Error: (05/18/2015 07:50:51 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/18/2015 07:47:47 AM) (Source: AdvancedSystemCareService8) (EventID: 0) (User: ) Description: The handle is invalid Error: (05/18/2015 07:47:42 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: PanProcess.exe1.0.1.2506004ccPanStreamer.dll2.0.6.37509b1d60c00000050001dc74122001d08f15c0a07257C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exeC:\Program Files (x86)\PANDORA.TV\PanService\PanStreamer.dll5801d74a-fcde-11e4-9aa6-a0b3cc6a6f9f Error: (05/15/2015 11:47:51 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/15/2015 11:43:29 PM) (Source: Windows Search Service) (EventID: 3100) (User: ) Description: Details: This operation returned because the timeout period expired. (HRESULT : 0x800705b4) (0x800705b4) Error: (05/15/2015 11:35:07 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/15/2015 11:25:11 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/15/2015 11:22:41 PM) (Source: AdvancedSystemCareService8) (EventID: 0) (User: ) Description: The handle is invalid Error: (05/15/2015 10:52:11 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 ==================== Memory info =========================== Processor: AMD E2-3000M APU with Radeon(tm) HD Graphics Percentage of memory in use: 57% Total physical RAM: 3561.41 MB Available physical RAM: 1515.53 MB Total Pagefile: 7120.99 MB Available Pagefile: 4335.31 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:441.79 GB) (Free:173.14 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive d: (Recovery) (Fixed) (Total:19.81 GB) (Free:2.15 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive e: (HP_TOOLS) (Fixed) (Total:3.96 GB) (Free:1.08 GB) FAT32 ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: BBEEB5FC) Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=441.8 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=19.8 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=4 GB) - (Type=0C) ==================== End Of Log ============================