Additional scan result of Farbar Recovery Scan Tool (x64) Version:27-02-2016 Ran by Anton- (2016-02-29 18:25:33) Running from C:\Users\Anton-\Desktop Windows 8.1 Single Language (X64) (2015-04-08 09:37:37) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-1423415661-3739189933-1647042869-500 - Administrator - Disabled) Anton- (S-1-5-21-1423415661-3739189933-1647042869-1001 - Administrator - Enabled) => C:\Users\Anton- Guest (S-1-5-21-1423415661-3739189933-1647042869-501 - Limited - Disabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: 电脑管家系统防护 (Disabled - Up to date) {6F9C3F92-B625-0E47-F0B1-447602EC65F5} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: 电脑管家系统防护 (Disabled - Up to date) {D4FDDE76-901F-01C9-CA01-7F04796B2F48} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) > Chrome Search (HKLM-x32\...\{2AEF02C3-5159-4C81-A688-8D954F0DEE56}_NewSearch) (Version: - ) 7-Zip 15.05 beta x64 (HKLM\...\7-Zip) (Version: - ) Acoustica Basic Edition 6.0 (HKLM-x32\...\{947C5345-DAF2-4516-97E1-5BC72F1FE3B6}_is1) (Version: 6.0.19 - Acon AS) Anno 2205 (HKLM-x32\...\Anno 2205_is1) (Version: - NaughtyBoy, Inc.) Anno 2205 EaSyCrAcK (HKLM-x32\...\Anno 2205) (Version: EaSyCrAcK - NaughtyBoy, Inc.) AnySend (HKLM-x32\...\ASPackage) (Version: - CMI Limited) <==== ATTENTION Apple Application Support (32-bit) (HKLM-x32\...\{7FA9ECCF-A2DE-4DA1-BFF3-81260DBDA68F}) (Version: 4.1.2 - Apple Inc.) Apple Application Support (64-bit) (HKLM\...\{691F30EB-9009-475A-B8A9-E1BF39598FD5}) (Version: 4.1.2 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{3540181E-340A-4E7A-B409-31663472B2F7}) (Version: 9.1.0.6 - Apple Inc.) Apple Software Update (HKLM-x32\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.) Assassin's Creed - Syndicate (HKLM-x32\...\Assassin's Creed - Syndicate_is1) (Version: - NaughtyBoy, Inc.) Assassin's Creed - Syndicate EaSyCrAcK (HKLM-x32\...\Assassin's Creed - Syndicate) (Version: EaSyCrAcK - NaughtyBoy, Inc.) Audacity 2.1.0 (HKLM-x32\...\Audacity_is1) (Version: 2.1.0 - Audacity Team) Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 11.1.2253 - AVAST Software) Batman - Arkham Knight EaSyCrAcK (HKLM-x32\...\Batman - Arkham Knight) (Version: EaSyCrAcK - NaughtyBoy, Inc.) Batman Arkham Knight (HKLM-x32\...\Batman Arkham Knight_is1) (Version: - NaughtyBoy, Inc.) Battlefield™ Hardline (HKLM-x32\...\{CB4AC3DA-8CC1-4516-86DA-4078B57DB229}) (Version: 1.0.0.1 - Electronic Arts) Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.6.2 - EA Digital Illusions CE AB) BlazeDVD 7.0.2.0 (HKLM-x32\...\BlazeDVD 7.0.2.0_is1) (Version: - ) Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.) Bound By Flame EaSyCrAcK (HKLM-x32\...\Bound By Flame) (Version: EaSyCrAcK - NaghtyBoy, Inc.) Brave New World (HKLM-x32\...\Brave New World_is1) (Version: - ScRuU, Inc.) Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: - Canon Inc.) Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: 4.1.0 - Canon Inc.) Canon MG5500 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5500_series) (Version: - Canon Inc.) Canon MG5500 series On-screen Manual (HKLM-x32\...\Canon MG5500 series On-screen Manual) (Version: 7.6.1 - Canon Inc.) Canon MG5500 series User Registration (HKLM-x32\...\Canon MG5500 series User Registration) (Version: - ‭Canon Inc.) Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 2.0.1 - Canon Inc.) Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 2.0.0 - Canon Inc.) Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.1.0 - Canon Inc.) Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.2.1 - Canon Inc.) Cities Skylines EaSyCrAcK (HKLM-x32\...\Cities Skylines) (Version: EaSyCrAcK - NaughtyBoy, Inc.) Cities Skylines version NaughtyBoy (HKLM-x32\...\Cities Skylines_is1) (Version: NaughtyBoy - GameHunt) Craft The World v1.1.002b version Craft The World v1.1.002b (HKLM-x32\...\{A858E08B-1EA0-483C-A44E-8FB0876EC120}_is1) (Version: Craft The World v1.1.002b - ) CyberLink PowerDirector 13 (HKLM-x32\...\{BA385AFC-00B1-417C-8C20-74B996EF3AF0}) (Version: 13.0.2104.0 - CyberLink Corp.) CyberLink PowerDirector 13 Content Pack Essential (HKLM-x32\...\InstallShield_{749B310F-A489-439D-9AEF-1332222F2E04}) (Version: 13 Essential - CyberLink Corp.) CyberLink PowerDirector 13 Content Pack Premium (HKLM-x32\...\InstallShield_{9B866025-5082-4B88-8A62-F6FBBFCBBBA1}) (Version: 13 Premium - CyberLink Corp.) CyberLink WaveEditor 2 (HKLM-x32\...\{324F76CC-D8DD-4D87-B77D-D4AF5E1AA7B3}) (Version: 2.0 - CyberLink Corp.) Dragon Age - Inquisition EaSyCrAcK (HKLM-x32\...\Dragon Age - Inquisition) (Version: EaSyCrAcK - GameHunt, Inc.) Dragon Age - Inquisition version NaughtyBoy (HKLM-x32\...\Dragon Age - Inquisition_is1) (Version: NaughtyBoy - GameHunt) Dragons Dogma - Dark Arisen (HKLM-x32\...\Dragons Dogma - Dark Arisen_is1) (Version: - NaughtyBoy, Inc.) Dragons Dogma - Dark Arisen EaSyCrAcK (HKLM-x32\...\Dragons Dogma - Dark Arisen) (Version: EaSyCrAcK - NaughtyBoy, Inc.) Dying Light EaSyCrAcK (HKLM-x32\...\Dying Light) (Version: EaSyCrAcK - NaughtyBoy, Inc.) Dying Light version NaughtyBoy (HKLM-x32\...\Dying Light_is1) (Version: NaughtyBoy - GameHunt) Dynasty Warriors 8 (HKLM-x32\...\Dynasty Warriors 8_is1) (Version: - NaughtyBoy, Inc.) Dynasty Warriors 8 EaSyCrAcK (HKLM-x32\...\Dynasty Warriors 8) (Version: EaSyCrAcK - NaughtyBoy, Inc.) Fallout 4 (HKLM-x32\...\Fallout 4_is1) (Version: - NaughtyBoy, Inc.) Fallout 4 EaSyCrAcK (HKLM-x32\...\Fallout 4) (Version: EaSyCrAcK - NaughtyBoy, Inc.) FarCry 4 (HKLM-x32\...\Uplay Install 420) (Version: - Ubisoft) Final Fantasy XIII-2 EaSyCrAcK (HKLM-x32\...\Final Fantasy XIII-2) (Version: EaSyCrAcK - NaughtyBoy, Inc.) Final Fantasy XIII-2 version NaughtyBoy (HKLM-x32\...\Final Fantasy XIII-2_is1) (Version: NaughtyBoy - GameHunt) Free YouTube Downloader 4.1.465 (HKLM-x32\...\{A7E19604-93AF-4611-8C9F-CE509C2B286F}_is1) (Version: - HOW Inc.) Freemake Video Converter version 4.1.9 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.9 - Ellora Assets Corporation) Freemake Video Downloader (HKLM-x32\...\Freemake Video Downloader_is1) (Version: 3.8.0 - Ellora Assets Corporation) GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version: - GOG.com) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 48.0.2564.116 - Google Inc.) Google Drive (HKLM-x32\...\{EF61675D-9BBC-4EC7-B906-F13BE8D3BD20}) (Version: 1.27.1227.2094 - Google, Inc.) Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.7210.1528 - Google Inc.) Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games) HandBrake 0.10.3 (HKLM-x32\...\HandBrake) (Version: 0.10.3 - ) Hard West (HKLM-x32\...\Hard West_is1) (Version: - NaughtyBoy, Inc.) Hard West EaSyCrAcK (HKLM-x32\...\Hard West) (Version: EaSyCrAcK - NaughtyBoy, Inc.) Intel(R) Chipset Device Software (x32 Version: 10.0.20 - Intel(R) Corporation) Hidden Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.1.1000 - Intel Corporation) iReal Blu-ray Media Player (HKLM-x32\...\iReal Blu-ray Media Player) (Version: 3.1.9.1523 - iReal Software Inc.) iTunes (HKLM\...\{FBEB98F8-64E4-4FA3-A15E-4A9F42FF962E}) (Version: 12.3.2.35 - Apple Inc.) Java 8 Update 60 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418060F0}) (Version: 8.0.600.27 - Oracle Corporation) King of Dragon Pass (HKLM-x32\...\1207659096_is1) (Version: 2.1.0.13 - GOG.com) Life Is Strange (HKLM-x32\...\Life Is Strange_is1) (Version: - NaughtyBoy, Inc.) Life Is Strange EaSyCrAcK (HKLM-x32\...\Life Is Strange) (Version: EaSyCrAcK - NaughtyBoy, Inc.) Lords of the Fallen (HKLM-x32\...\Lords of the Fallen_is1) (Version: - NaughtyBoy, Inc.) Lords of the Fallen EaSyCrAcK (HKLM-x32\...\Lords of the Fallen) (Version: EaSyCrAcK - NaughtyBoy, Inc.) Mad Max EaSyCrAcK (HKLM-x32\...\Mad Max) (Version: EaSyCrAcK - NaughtyBoy, Inc.) Metal Gear Solid - Ground Zeroes EaSyCrAcK (HKLM-x32\...\Metal Gear Solid - Ground Zeroes) (Version: EaSyCrAcK - NaughtyBoy, Inc.) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{2DFD8316-9EF1-3210-908C-4CB61961C1AC}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{527BBE2F-1FED-3D8B-91CB-4DB0F838E69E}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang) NARUTO SHIPPUDEN (HKLM-x32\...\NARUTO SHIPPUDEN_is1) (Version: - ScRuU, Inc.) NARUTO SHIPPUDEN EaSyCrAcK (HKLM-x32\...\NARUTO SHIPPUDEN) (Version: EaSyCrAcK - ScRuU, Inc.) NETGEAR WNA3100M N300 Wireless USB Adapter (HKLM-x32\...\{D3580358-0F78-402A-BE53-2E9D06383E04}) (Version: 1.2.0.4 - NETGEAR) NETGEAR WNDA3100v3 (x32 Version: 1.0.0.10 - NETGEAR) Hidden NETGEAR WNDA3100v3 Genie (HKLM-x32\...\InstallShield_{60C50FCC-545B-4D5D-B0D1-4A773143BCE7}) (Version: 1.0.0.10 - NETGEAR) NewBlue Titler Pro for Windows (HKLM-x32\...\NewBlue Titler Pro for Windows) (Version: 1.0 - NewBlue) NewBlue Video Essentials for Windows (HKLM-x32\...\NewBlue Video Essentials for Windows) (Version: 3.0 - NewBlue) NewBlue Video Essentials V for Windows (HKLM-x32\...\NewBlue Video Essentials V for Windows) (Version: 3.0 - NewBlue) NVIDIA 3D Vision Controller Driver 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation) NVIDIA 3D Vision Driver 361.43 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 361.43 - NVIDIA Corporation) NVIDIA GeForce Experience 2.9.1.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.9.1.22 - NVIDIA Corporation) NVIDIA Graphics Driver 361.43 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 361.43 - NVIDIA Corporation) NVIDIA HD Audio Driver 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation) NVIDIA Miracast Virtual Audio 361.43 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio) (Version: 361.43 - NVIDIA Corporation) NVIDIA PhysX System Software 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation) OpenAL (HKLM-x32\...\OpenAL) (Version: - ) OpenOffice 4.1.1 (HKLM-x32\...\{86F2B095-3998-41D5-833D-1C5075300950}) (Version: 4.11.9775 - Apache Software Foundation) Origin (HKLM-x32\...\Origin) (Version: 9.9.1.62656 - Electronic Arts, Inc.) Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9.141.259 - Google, Inc.) Pillars of Eternity (HKLM-x32\...\Pillars of Eternity_is1) (Version: - NaughtyBoy, Inc.) Pillars of Eternity EaSyCrAcK (HKLM-x32\...\Pillars of Eternity) (Version: EaSyCrAcK - NaughtyBoy, Inc.) Plague Inc: Evolved (HKLM-x32\...\Steam App 246620) (Version: - Ndemic Creations) PriceSparrow (HKLM-x32\...\{2A965DDC-C64C-4562-862B-5EE487A7DEFC}) (Version: 1.4.42 - Adspired GmbH) <==== ATTENTION proDAD Adorage 3.0 (64bit) (HKLM\...\proDAD-Adorage-3.0) (Version: 3.0.108.1 - proDAD GmbH) PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.994 - Even Balance, Inc.) QuickTime (HKLM-x32\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.) RegClean Pro (HKLM-x32\...\RegClean Pro_is1) (Version: 6.21 - systweak.com) <==== ATTENTION Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.7.2 - Rockstar Games) Samurai Warriors 4 II EaSyCrAcK (HKLM-x32\...\Samurai Warriors 4 II) (Version: EaSyCrAcK - NaughtyBoy, Inc.) Samurai Warriors 4-II (HKLM-x32\...\Samurai Warriors 4-II_is1) (Version: - NaughtyBoy, Inc.) Satellite Comma (HKLM-x32\...\SoftwareUpdater) (Version: 1.0.0.0 - Satellite Comma) <==== ATTENTION Shadow Of Mordor (HKLM-x32\...\Shadow Of Mordor_is1) (Version: - NaughtyBoy, Inc.) Shadow Of Mordor EaSyCrAcK (HKLM-x32\...\Shadow Of Mordor) (Version: EaSyCrAcK - NaughtyBoy, Inc.) SHIELD Streaming (Version: 4.1.0260 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 2.9.1.22 - NVIDIA Corporation) Hidden Sid Meier's Civilization V EaSyCrAcK (HKLM-x32\...\Sid Meier's Civilization V) (Version: EaSyCrAcK - ScRuU, Inc.) Sid Meier's Starships (HKLM-x32\...\Sid Meier's Starships_is1) (Version: - ) SimCity (HKLM-x32\...\SimCity_is1) (Version: - NaughtyBoy, Inc.) SimCity EaSyCrAcK (HKLM-x32\...\SimCity) (Version: EaSyCrAcK - NaughtyBoy, Inc.) Skype™ 7.18 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.18.111 - Skype Technologies S.A.) SmartSound Quicktracks 5 (HKLM-x32\...\InstallShield_{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}) (Version: 5.1.8 - SmartSound Software Inc.) SmartSound Quicktracks 5 (x32 Version: 5.1.8 - SmartSound Software Inc.) Hidden Spec Ops: The Line (HKLM-x32\...\Steam App 50300) (Version: - Yager) STAR WARS™ Battlefront™ (HKLM-x32\...\{E402D891-4E45-4ce9-B41F-DD35864EF170}) (Version: 1.0.4.52841 - Electronic Arts) StarCraft II (HKLM-x32\...\StarCraft II_is1) (Version: - NaughtyBoy, Inc.) StarCraft II EaSyCrAcK (HKLM-x32\...\StarCraft II) (Version: EaSyCrAcK - NaughtyBoy, Inc.) StarDrive 2 (HKLM-x32\...\StarDrive 2_is1) (Version: - ) Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: - ) The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.0.6.0 - GOG.com) Total War - Attila EaSyCrAcK (HKLM-x32\...\Total War - Attila) (Version: EaSyCrAcK - NaughtyBoy, Inc.) Tradewinds Odyssey 1.00 (HKLM-x32\...\Tradewinds Odyssey 1.00) (Version: - ) Uplay (HKLM-x32\...\Uplay) (Version: 4.8 - Ubisoft) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN) Vodafone Wi-Fi Installer (HKLM-x32\...\{046DE6F8-7B41-465A-B127-848D88AB1AB8}) (Version: 1.0.0.38942 - Vodafone) Way of the Samurai 4 (HKLM-x32\...\Way of the Samurai 4_is1) (Version: - NaughtyBoy, Inc.) Way of the Samurai 4 EaSyCrAcK (HKLM-x32\...\Way of the Samurai 4) (Version: EaSyCrAcK - NaughtyBoy, Inc.) WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies) Wondershare Filmora(Build 6.7.0) (HKLM-x32\...\Wondershare Filmora_is1) (Version: - Wondershare Software) XCom2 (HKLM-x32\...\XCom2_is1) (Version: - NaughtyBoy, Inc.) XCom2 EaSyCrAcK (HKLM-x32\...\XCom2) (Version: EaSyCrAcK - NaughtyBoy, Inc.) yoursearching (HKLM-x32\...\yoursearching) (Version: 1.0.0.60 - ) YTD Video Downloader 4.9.2 (HKLM-x32\...\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version: 4.9.2 - GreenTree Applications SRL) <==== ATTENTION 电脑管家11.3 (HKLM-x32\...\QQPCMgr) (Version: 11.3.17201.218 - 腾讯科技(深圳)有限公司) <==== ATTENTION ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {052059F0-8862-4653-9DCC-7424A503630E} - System32\Tasks\RegClean Pro => C:\Program Files (x86)\RCP\RegCleanPro.exe [2015-11-20] () <==== ATTENTION Task: {159B0A75-B82E-49DE-B8AF-40B999D42768} - System32\Tasks\pricesparrowSWU => C:\Windows\system32\cscript.exe [2014-11-21] (Microsoft Corporation) Task: {531E54B5-8EDF-4802-B8E0-C17CD69628B9} - System32\Tasks\RegClean Pro_DEFAULT => C:\Program Files (x86)\RCP\RegCleanPro.exe [2015-11-20] () <==== ATTENTION Task: {57D9D219-E296-43A3-A170-EBD0A772BC1F} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-02-26] (AVAST Software) Task: {8205925A-6283-46BE-974B-B6BB2588E7E8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-09] (Google Inc.) Task: {8C698B05-F856-47F0-9AFD-945E0AD8861E} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-02-17] (AVAST Software) Task: {9EFB1258-72F8-470D-826D-59BE1A5B965F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-09] (Google Inc.) Task: {F1AB2777-38CF-4CBB-A347-5B91DC30DF0E} - System32\Tasks\RegClean Pro_UPDATES => C:\Program Files (x86)\RCP\RegCleanPro.exe [2015-11-20] () <==== ATTENTION (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\RegClean Pro_DEFAULT.job => C:\Program Files (x86)\RCP\RegCleanPro.exe <==== ATTENTION Task: C:\Windows\Tasks\RegClean Pro_UPDATES.job => C:\Program Files (x86)\RCP\RegCleanPro.exe <==== ATTENTION ==================== Shortcuts ============================= (The entries could be listed to be restored or removed.) ShortcutWithArgument: C:\Users\Anton-\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.yoursearching.com/?type=sc&ts=1456643347&z=3f4afe09cb4a63620d1db0eg1zcw6qdqcz0c6cdzem&from=itr&uid=wdcxwd10ezex-08m2na0_wd-wmc3f0j2tf292tf29 ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.yoursearching.com/?type=sc&ts=1456643347&z=3f4afe09cb4a63620d1db0eg1zcw6qdqcz0c6cdzem&from=itr&uid=wdcxwd10ezex-08m2na0_wd-wmc3f0j2tf292tf29 ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.yoursearching.com/?type=sc&ts=1456643347&z=3f4afe09cb4a63620d1db0eg1zcw6qdqcz0c6cdzem&from=itr&uid=wdcxwd10ezex-08m2na0_wd-wmc3f0j2tf292tf29 ShortcutWithArgument: C:\Users\Public\Desktop\NARUTO SHIPPUDEN Ultimate Ninja - EaSyCrAcK.lnk -> C:\Program Files (x86)\GameHunt\NARUTO SHIPPUDEN Ultimate Ninja STORM 3 Full Burst\NS3FB_launcher.exe () -> hxxp://www.yoursearching.com/?type=sc&ts=1456643347&z=3f4afe09cb4a63620d1db0eg1zcw6qdqcz0c6cdzem&from=itr&uid=wdcxwd10ezex-08m2na0_wd-wmc3f0j2tf292tf29 ==================== Loaded Modules (Whitelisted) ============== 2015-12-12 16:39 - 2015-12-16 16:53 - 00126072 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2015-12-17 18:38 - 2015-12-17 18:38 - 00085800 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2015-12-17 18:38 - 2015-12-17 18:38 - 01328912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2015-04-21 21:17 - 2013-05-14 11:50 - 00140936 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE 2016-01-15 20:17 - 2016-01-12 06:43 - 00291264 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll 2015-04-10 17:40 - 2015-04-10 17:40 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2016-01-23 17:22 - 2014-08-18 17:50 - 00316120 _____ () C:\Program Files (x86)\NETGEAR\WNA3100M\WifiSvc.exe 2015-04-08 13:33 - 2016-01-12 06:43 - 00715712 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\gamecaster64.dll 2015-04-08 13:33 - 2016-01-12 06:43 - 00861120 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\twitchsdk64.dll 2016-01-23 17:22 - 2014-08-18 17:49 - 08274648 _____ () C:\Program Files (x86)\NETGEAR\WNA3100M\WNA3100M.exe 2016-01-23 22:47 - 2016-02-10 18:52 - 00073216 _____ () C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe 2016-02-28 09:12 - 2016-02-28 09:12 - 00088416 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17201.218\zlib.dll 2016-02-28 09:12 - 2016-02-28 09:12 - 00108896 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17201.218\QMAntiInject.dll 2016-02-28 09:12 - 2016-02-28 09:12 - 00481632 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17201.218\sqlite.dll 2016-02-28 09:12 - 2016-02-28 09:12 - 00100704 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17201.218\tinyxml.dll 2016-02-28 09:12 - 2016-02-28 09:12 - 00039776 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17201.218\plugins\sysspeeduprtpplugin\SysSpeedupRtpPlugin.dll 2016-02-28 09:12 - 2016-02-19 18:36 - 00065008 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17201.218\plugins\qmiemalrtpplugin\qmiemalrtpplugin.dll 2016-02-28 09:12 - 2016-02-28 09:12 - 00019296 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17201.218\oDayProtect.dll 2016-02-28 09:12 - 2016-02-28 09:12 - 00121184 _____ () c:\program files (x86)\tencent\qqpcmgr\11.3.17201.218\qmrtpcontroller.dll 2016-02-26 17:28 - 2016-02-26 17:28 - 00113496 _____ () C:\Program Files\AVAST Software\Avast\log.dll 2016-02-26 17:28 - 2016-02-26 17:28 - 00133768 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll 2016-02-28 19:10 - 2016-02-28 19:10 - 02835456 _____ () C:\Program Files\AVAST Software\Avast\defs\16022801\algo.dll 2016-02-26 17:28 - 2016-02-26 17:28 - 00480760 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll 2016-02-29 18:09 - 2016-02-29 18:09 - 02835456 _____ () C:\Program Files\AVAST Software\Avast\defs\16022901\algo.dll 2016-01-23 17:22 - 2014-09-03 15:16 - 00450560 _____ () C:\Program Files (x86)\NETGEAR\WNA3100M\WifiLib.dll 2015-04-10 19:55 - 2016-01-12 06:43 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll 2016-02-29 18:07 - 2016-02-29 18:07 - 00098816 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\win32api.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 00110080 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\pywintypes27.dll 2016-02-29 18:07 - 2016-02-29 18:07 - 00364544 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\pythoncom27.dll 2016-02-29 18:07 - 2016-02-29 18:07 - 00320512 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\win32com.shell.shell.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 00776704 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\_hashlib.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 01176576 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\wx._core_.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 00806400 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\wx._gdi_.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 00816128 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\wx._windows_.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 01067008 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\wx._controls_.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 00733184 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\wx._misc_.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 00682496 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\pysqlite2._sqlite.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 00088064 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\_ctypes.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 00119808 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\win32file.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 00108544 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\win32security.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 00007168 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\hashobjs_ext.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 00017920 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\thumbnails_ext.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 00088064 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\usb_ext.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 00167936 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\win32gui.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 00018432 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\win32event.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 00046080 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\_socket.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 01208320 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\_ssl.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 00128512 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\_elementtree.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 00127488 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\pyexpat.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 00013824 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\common.time34.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 00036864 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\_psutil_windows.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 00038912 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\win32inet.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 00525240 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\windows._lib_cacheinvalidation.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 00011264 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\win32crypt.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 00077312 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\wx._html2.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 00027136 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\_multiprocessing.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 00020480 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\_yappi.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 00035840 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\win32process.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 00686080 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\unicodedata.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 00078848 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\wx._animate.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 00123392 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\wx._wizard.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 00024064 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\win32pipe.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 00010240 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\select.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 00025600 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\win32pdh.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 00017408 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\win32profile.pyd 2016-02-29 18:07 - 2016-02-29 18:07 - 00022528 _____ () C:\Users\Anton-\AppData\Local\Temp\_MEI59842\win32ts.pyd 2016-01-23 17:22 - 2014-07-22 10:18 - 00278528 _____ () C:\Program Files (x86)\NETGEAR\WNA3100M\WifiSvcLib.dll 2014-12-22 10:03 - 2014-12-22 10:03 - 00122880 _____ () C:\Program Files (x86)\NETGEAR\WNDA3100v3\Ralink.dll 2012-11-21 18:26 - 2012-11-21 18:26 - 01204224 _____ () C:\Program Files (x86)\NETGEAR\WNDA3100v3\RaWLAPI.dll 2015-12-09 21:26 - 2015-12-09 21:26 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2014-04-03 16:48 - 2014-04-03 16:48 - 01241560 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll 2015-11-11 19:33 - 2014-09-11 18:09 - 01498112 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll 2015-11-11 19:33 - 2014-05-19 17:19 - 00137728 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll 2015-05-20 18:26 - 2015-05-20 18:30 - 00566272 _____ () C:\Program Files (x86)\GalaxyClient\PocoUtil.dll 2015-05-20 18:26 - 2015-05-20 18:29 - 01202176 _____ () C:\Program Files (x86)\GalaxyClient\PocoNet.dll 2015-05-20 18:26 - 2015-05-20 18:29 - 02577408 _____ () C:\Program Files (x86)\GalaxyClient\PocoData.dll 2015-05-20 18:26 - 2015-05-20 18:29 - 00477184 _____ () C:\Program Files (x86)\GalaxyClient\PocoDataSQLite.dll 2015-05-20 18:26 - 2015-05-20 18:30 - 00515584 _____ () C:\Program Files (x86)\GalaxyClient\PocoXML.dll 2015-05-20 18:26 - 2015-05-20 18:30 - 00340480 _____ () C:\Program Files (x86)\GalaxyClient\PocoZip.dll 2015-05-20 18:26 - 2015-05-20 18:29 - 01784320 _____ () C:\Program Files (x86)\GalaxyClient\PocoFoundation.dll 2015-05-20 18:26 - 2015-05-20 18:30 - 00332288 _____ () C:\Program Files (x86)\GalaxyClient\PocoNetSSL.dll 2015-05-20 18:26 - 2015-05-20 18:29 - 00415744 _____ () C:\Program Files (x86)\GalaxyClient\PocoJSON.dll 2015-05-20 18:26 - 2015-04-09 15:52 - 41299456 _____ () C:\Program Files (x86)\GalaxyClient\libcef.dll 2015-05-20 18:26 - 2015-05-20 18:30 - 00649728 _____ () C:\Program Files (x86)\GalaxyClient\sqlite.dll 2015-05-20 18:26 - 2015-04-09 15:52 - 00139776 _____ () C:\Program Files (x86)\GalaxyClient\expat.dll 2015-05-20 18:26 - 2015-04-09 15:52 - 00412672 _____ () C:\Program Files (x86)\GalaxyClient\pcre.dll 2015-05-20 18:26 - 2015-04-09 15:52 - 00094208 _____ () C:\Program Files (x86)\GalaxyClient\zlib.dll 2015-05-20 18:26 - 2015-05-20 18:29 - 00172032 _____ () C:\Program Files (x86)\GalaxyClient\PocoCrypto.dll 2015-05-20 18:26 - 2015-04-09 15:52 - 00107520 _____ () C:\Program Files (x86)\GalaxyClient\ZLIB1.dll 2015-05-20 18:26 - 2015-04-09 15:52 - 00888832 _____ () C:\Program Files (x86)\GalaxyClient\ffmpegsumo.dll 2016-02-19 22:09 - 2016-02-18 06:14 - 01630360 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.116\libglesv2.dll 2016-02-19 22:09 - 2016-02-18 06:14 - 00085656 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.116\libegl.dll 2016-02-28 09:12 - 2016-02-28 09:12 - 00137568 _____ () C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17201.218\libexpatw.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\13950703.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\QQPCRTP => ""="service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\13950703.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\QQPCRTP => ""="service" ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2013-08-22 15:25 - 2016-02-28 09:09 - 00000967 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 down.baidu2016.com 127.0.0.1 123.sogou.com 127.0.0.1 www.czzsyzgm.com 127.0.0.1 www.czzsyzxl.com ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-1423415661-3739189933-1647042869-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Anton-\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\teddy.jpg DNS Servers: 192.168.0.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) HKLM\...\StartupApproved\Run32: => "CanonQuickMenu" HKLM\...\StartupApproved\Run32: => "VodafoneMobileWiFi" HKU\S-1-5-21-1423415661-3739189933-1647042869-1001\...\StartupApproved\Run: => "Steam" ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [{B1A07A36-B237-4C79-BD55-FCF724C4352F}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{96ABA7F3-5D22-414F-A539-2030BB149525}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{BC5B5FF2-AEC9-4D45-B414-965C8B10A428}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{A11DAE39-9B32-4A59-9F20-946BD8C6E2C5}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{7288BD88-4F01-4647-AF1E-24C0F59D31B4}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{F3C29011-52E9-407C-9D66-C4E88CA7224B}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{C539D63E-A70F-4986-AA39-6964B50E7321}] => (Allow) C:\Program Files (x86)\Origin Games\BFH\bfh.exe FirewallRules: [{388DDDA6-A81E-4AB8-8B0D-3679E38F3046}] => (Allow) C:\Program Files (x86)\Origin Games\BFH\bfh.exe FirewallRules: [TCP Query User{F4FFAF7E-53A2-4FC5-ABFB-BB33A974FC2F}C:\program files (x86)\gamehunt\dying light\dyinglightgame.exe] => (Block) C:\program files (x86)\gamehunt\dying light\dyinglightgame.exe FirewallRules: [UDP Query User{9DDBBE04-80C7-4FAD-86D3-8BA3F221879C}C:\program files (x86)\gamehunt\dying light\dyinglightgame.exe] => (Block) C:\program files (x86)\gamehunt\dying light\dyinglightgame.exe FirewallRules: [{599B2D05-C1ED-4017-87B7-49A67EB7EA0F}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{D999DE82-56C7-43A6-8495-2EC7BC377E37}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{F55CDEEB-8719-45F0-95BE-A98913937F28}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{A7EC6B1D-3F66-43B8-A597-C62FA86CD752}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{771E9893-9CCB-4AA9-8A79-963FD80872DD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SpecOps_TheLine\Binaries\Win32\SpecOpsTheLine.exe FirewallRules: [{4084D8DD-4CC6-43A9-B174-38904CFBF96C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SpecOps_TheLine\Binaries\Win32\SpecOpsTheLine.exe FirewallRules: [TCP Query User{ABEB9F9E-DB31-4E20-9304-51A6DFD5A746}C:\program files\rockstar games\grand theft auto v\gta5.exe] => (Allow) C:\program files\rockstar games\grand theft auto v\gta5.exe FirewallRules: [UDP Query User{B2AC2E9F-604B-45D4-ACA6-36740B0FA264}C:\program files\rockstar games\grand theft auto v\gta5.exe] => (Allow) C:\program files\rockstar games\grand theft auto v\gta5.exe FirewallRules: [{338B4ADC-CEEF-4F8D-9152-832C00CA78FD}] => (Allow) C:\Program Files (x86)\Ubisoft\FarCry 4\bin\FarCry4.exe FirewallRules: [{3E85DED4-8003-47B5-8ACC-E570ADF7FE1F}] => (Allow) C:\Program Files (x86)\Ubisoft\FarCry 4\bin\FarCry4.exe FirewallRules: [{A72206A5-0C19-4C67-8766-E217C5B68CC1}] => (Allow) C:\Program Files (x86)\Ubisoft\FarCry 4\bin\IGE_WPF64.exe FirewallRules: [{B9052195-2497-4788-9BF0-1A36FF663E01}] => (Allow) C:\Program Files (x86)\Ubisoft\FarCry 4\bin\IGE_WPF64.exe FirewallRules: [TCP Query User{6B435E0F-F4C9-4BA9-8875-B859FA065EF7}C:\program files\rockstar games\grand theft auto v\gta5.exe] => (Allow) C:\program files\rockstar games\grand theft auto v\gta5.exe FirewallRules: [UDP Query User{81ECDF2E-7F46-45EA-8D78-9EA98F04ED45}C:\program files\rockstar games\grand theft auto v\gta5.exe] => (Allow) C:\program files\rockstar games\grand theft auto v\gta5.exe FirewallRules: [TCP Query User{68DCF707-C6F1-4E4C-8711-431622CC4E3B}C:\program files (x86)\gamehunt\total war attila\attila.exe] => (Block) C:\program files (x86)\gamehunt\total war attila\attila.exe FirewallRules: [UDP Query User{DA4554B2-3FDA-4D25-B4A1-8AB4111296E6}C:\program files (x86)\gamehunt\total war attila\attila.exe] => (Block) C:\program files (x86)\gamehunt\total war attila\attila.exe FirewallRules: [{8B8249D2-490D-4B1B-9184-6C6EC478455C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PlagueInc\PlagueIncEvolved.exe FirewallRules: [{ED4BB76D-9811-49CB-9547-2D9AF7EAFC8C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PlagueInc\PlagueIncEvolved.exe FirewallRules: [{030EADAD-FC79-4D24-9726-35EB002219EF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{8B34063A-67AC-4814-A747-209A3E7235AA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{C1744F11-6199-404E-AA1A-36D252581DF3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe FirewallRules: [{FCA96CD4-2D3E-4FED-AF29-921ED727D96A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{0DB51D2E-9159-4472-948E-7EF169757624}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [TCP Query User{66F82EE8-099B-45D0-BCBA-F6011D0C37C6}C:\users\anton-\desktop\em\empyrion.galactic.survival.v2.0.2\empyrion.exe] => (Block) C:\users\anton-\desktop\em\empyrion.galactic.survival.v2.0.2\empyrion.exe FirewallRules: [UDP Query User{EDD42726-961E-4980-BD0D-054AE566E7D7}C:\users\anton-\desktop\em\empyrion.galactic.survival.v2.0.2\empyrion.exe] => (Block) C:\users\anton-\desktop\em\empyrion.galactic.survival.v2.0.2\empyrion.exe FirewallRules: [{08A8FFE1-5E7B-4B49-9FC9-C3EB2100501F}] => (Allow) C:\Program Files (x86)\GameHunt\SimCity\SimCity\SimCity.exe FirewallRules: [{5A5027FB-A617-4982-AF04-743A734A534D}] => (Allow) C:\Program Files (x86)\GameHunt\SimCity\SimCity\SimCity.exe FirewallRules: [TCP Query User{1A964F4B-4ECF-49C2-9286-B4626AA5D7FB}C:\users\anton-\desktop\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\anton-\desktop\runtime\jre-x64\1.8.0_25\bin\javaw.exe FirewallRules: [UDP Query User{FCFE53AD-E759-41E0-915B-90D638947A4E}C:\users\anton-\desktop\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\anton-\desktop\runtime\jre-x64\1.8.0_25\bin\javaw.exe FirewallRules: [{C65B59BA-ED10-4B1A-8463-3BA14034D10B}] => (Allow) C:\Program Files\CyberLink\PowerDirector13\PDR10.EXE FirewallRules: [{C89055B3-6356-4531-8659-6187FAB60DE5}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{D9B6BD18-7944-4737-A10F-7504F48B270B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{793C381A-6057-4F9E-895A-B3E181B2A338}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{2F98C400-9792-4023-8762-EDC3154BABEB}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{415B3520-1242-4053-89F3-B306ACE15A43}] => (Allow) C:\Program Files (x86)\GameHunt\StarCraft II\Versions\Base38996\SC2_x64.exe FirewallRules: [{A0BFD631-2CD2-4138-911F-5804320C3E77}] => (Allow) C:\Program Files (x86)\GameHunt\StarCraft II\Versions\Base38996\SC2_x64.exe FirewallRules: [{35AEA03C-7573-4B6E-B6B4-57D5AAC4A561}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{0A64B344-D42F-4C5E-B1F6-12745EC5DC7A}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{02452FC8-21F3-4D31-8D77-275FE022BA5D}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{88526E38-B893-4BDA-9FAA-3BBCDDCFC0D0}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{58A4ACB7-C731-4210-9174-33C5D77C777D}] => (Allow) C:\Program Files\iTunes\iTunes.exe FirewallRules: [TCP Query User{D84BC176-4DB7-4589-9A74-B4009CE9D972}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [UDP Query User{48CED90B-35D2-4527-B004-483E3DBCC260}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [{4470522A-548B-439A-BF72-A678346D98D7}] => (Block) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [{AACFCFAC-C30B-46AE-AFF2-8B6BA136849E}] => (Block) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [TCP Query User{3FF0990C-018C-4270-9472-D13D1B5D2ECA}C:\program files (x86)\gamehunt\xcom2\binaries\win64\xcom2.exe] => (Block) C:\program files (x86)\gamehunt\xcom2\binaries\win64\xcom2.exe FirewallRules: [UDP Query User{B01B257F-4C29-4006-8605-E96225EC3682}C:\program files (x86)\gamehunt\xcom2\binaries\win64\xcom2.exe] => (Block) C:\program files (x86)\gamehunt\xcom2\binaries\win64\xcom2.exe FirewallRules: [{21A709CD-0002-444F-A069-A36B0A4E1457}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{1115EF6B-2EB3-4082-ADEB-663A9B723D81}] => (Allow) C:\Program Files (x86)\Origin Games\STAR WARS Battlefront\starwarsbattlefront.exe FirewallRules: [{15555F2A-8E60-4883-86F1-C92F6FB2A9B3}] => (Allow) C:\Program Files (x86)\Origin Games\STAR WARS Battlefront\starwarsbattlefront.exe FirewallRules: [{A43E9962-9FB0-455E-A252-B80D9DFE3BDB}] => (Allow) C:\program files (x86)\common files\tencent\qqdownload\130\tencentdl.exe FirewallRules: [{CD1C3C0F-0BB0-41C1-BB19-8F48D2052CA6}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17201.218\QQPCmgrInstallGuide.exe FirewallRules: [{034E0F92-8A23-4B2B-A0B2-56D6245F8F82}] => (Allow) C:\program files (x86)\common files\tencent\qqdownload\130\bugreport_xf.exe FirewallRules: [{E5971EDC-2955-4F9E-A824-A84B591ED0A2}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17201.218\QQPCTray.exe FirewallRules: [{C538B8D0-2218-4618-8DD6-5E87F555AD6F}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17201.218\QQPCMgr.exe FirewallRules: [{96348474-561B-4766-9DCC-8C249C2AD1C9}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17201.218\QQPCRTP.exe FirewallRules: [{39965F8F-2956-4C9E-9CF1-6BCD7677D6D6}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17201.218\QMDL.exe FirewallRules: [{5A3C400F-6792-418B-B27F-676C9B3D2F13}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17201.218\bugreport.exe FirewallRules: [{6A94C0C5-078F-4100-8656-D5C7AB5ECC13}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17201.218\QQPCFileOpen.exe FirewallRules: [{551708EA-C55C-4D69-AD50-B91D0973F837}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17201.218\QQPCLeakScan.exe FirewallRules: [{F31B06CE-A7CB-461D-80DF-A3164F16985E}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17201.218\QQPConfig.exe FirewallRules: [{6B106D18-AE64-4E1A-994C-56023FD50DB4}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17201.218\QQPCSoftMgr.exe FirewallRules: [{44F946AA-4718-4AF1-B87D-FDCEBB3885AC}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17201.218\plugins\QMNetMon\QQPCNetFlow.exe FirewallRules: [{367802F6-FB7A-42F8-A610-74240F14D816}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17201.218\QQPCBTU.exe FirewallRules: [{19B8B0BD-1F8B-4507-8BAE-08DE59882797}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17201.218\QQPCClinic.exe FirewallRules: [{9944A00D-CB93-47F0-B276-EC025CCF46EA}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17201.218\QQPCLaunch.exe FirewallRules: [{BB84C434-DE18-4E21-850C-77A6AC6662FF}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17201.218\QMUpdate\QQPCMgrUpdate.exe FirewallRules: [{BD236BF0-C4FB-4C0F-97DC-DB547376377B}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17201.218\QQPCSoftGame.exe FirewallRules: [{22E49B27-DB7C-4B39-A7EC-80A924508A9D}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17201.218\QQPCSysOptimize.exe FirewallRules: [{4365549F-FC3D-43BC-9215-4138CBB11217}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17201.218\QQPCUpdateAVLib.exe FirewallRules: [{53238C84-2C3D-4D77-A1F8-362C78735D11}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17201.218\QQRepair.exe FirewallRules: [{574C42D0-AB70-41BD-83FE-9C445773CD55}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17201.218\QQPCPatch.exe FirewallRules: [{14F5BECF-207D-4AFB-A390-B92F8A9B5DA6}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17201.218\TpkUpdate.exe FirewallRules: [{A92F3EF2-56E2-40C4-8BE5-B492BFB9827A}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17201.218\QMRouterMgr.exe FirewallRules: [{8276BE9E-6973-4E9D-9AE5-582C849B0FEE}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17201.218\QMAccountProtection.exe FirewallRules: [{3CCABA04-EE7F-4E29-982D-2E2CA1426A4E}] => (Allow) C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17201.218\QMAdBlock.exe ==================== Restore Points ========================= 05-02-2016 17:09:59 Installed NETGEAR WNDA3100v3 Genie 15-02-2016 18:18:38 Scheduled Checkpoint 23-02-2016 09:26:12 Scheduled Checkpoint ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (02/28/2016 01:24:31 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ANTON) Description: Activation of application microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information. Error: (02/28/2016 01:24:31 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ANTON) Description: Activation of application microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information. Error: (02/28/2016 10:58:18 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: chrome.exe, version: 48.0.2564.116, time stamp: 0x56c52f1d Faulting module name: ntdll.dll, version: 6.3.9600.17415, time stamp: 0x54504b0d Exception code: 0xc0000018 Fault offset: 0x000a36e5 Faulting process ID: 0x1f54 Faulting application start time: 0xchrome.exe0 Faulting application path: chrome.exe1 Faulting module path: chrome.exe2 Report ID: chrome.exe3 Faulting package full name: chrome.exe4 Faulting package-relative application ID: chrome.exe5 Error: (02/28/2016 09:11:52 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Activation context generation failed for "Microsoft.VC80.ATL,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.4053"1". Dependent Assembly Microsoft.VC80.ATL,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.4053" could not be found. Please use sxstrace.exe for detailed diagnosis. Error: (02/26/2016 04:48:28 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: jucheck.exe, version: 2.8.60.27, time stamp: 0x55c117d5 Faulting module name: jucheck.exe, version: 2.8.60.27, time stamp: 0x55c117d5 Exception code: 0x40000015 Fault offset: 0x00052d24 Faulting process ID: 0xdbc Faulting application start time: 0xjucheck.exe0 Faulting application path: jucheck.exe1 Faulting module path: jucheck.exe2 Report ID: jucheck.exe3 Faulting package full name: jucheck.exe4 Faulting package-relative application ID: jucheck.exe5 Error: (02/26/2016 12:19:11 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ANTON) Description: Activation of application microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 failed with error: -2144927142 See the Microsoft-Windows-TWinUI/Operational log for additional information. Error: (02/26/2016 12:19:11 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ANTON) Description: Activation of application microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 failed with error: -2144927142 See the Microsoft-Windows-TWinUI/Operational log for additional information. Error: (02/26/2016 12:19:11 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ANTON) Description: Activation of application microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 failed with error: -2144927142 See the Microsoft-Windows-TWinUI/Operational log for additional information. Error: (02/26/2016 12:19:11 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ANTON) Description: Activation of application microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 failed with error: -2144927142 See the Microsoft-Windows-TWinUI/Operational log for additional information. Error: (02/26/2016 12:17:15 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ANTON) Description: Activation of application microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 failed with error: -2147023170 See the Microsoft-Windows-TWinUI/Operational log for additional information. System errors: ============= Error: (02/29/2016 06:06:51 PM) (Source: Service Control Manager) (EventID: 7006) (User: ) Description: The ScRegSetValueExW call failed for Start with the following error: %%5 Error: (02/29/2016 06:06:50 PM) (Source: Service Control Manager) (EventID: 7006) (User: ) Description: The ScRegSetValueExW call failed for Start with the following error: %%5 Error: (02/29/2016 06:05:20 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The Cable Tower service failed to start due to the following error: %%2 Error: (02/29/2016 05:51:11 PM) (Source: Service Control Manager) (EventID: 7006) (User: ) Description: The ScRegSetValueExW call failed for Start with the following error: %%5 Error: (02/29/2016 05:51:10 PM) (Source: Service Control Manager) (EventID: 7006) (User: ) Description: The ScRegSetValueExW call failed for Start with the following error: %%5 Error: (02/29/2016 05:46:46 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY) Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 70. The Windows SChannel error state is 105. Error: (02/29/2016 05:46:46 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY) Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 70. The Windows SChannel error state is 105. Error: (02/29/2016 05:46:30 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY) Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 70. The Windows SChannel error state is 105. Error: (02/29/2016 05:46:30 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY) Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 70. The Windows SChannel error state is 105. Error: (02/29/2016 05:45:42 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY) Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 70. The Windows SChannel error state is 105. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i7-4790 CPU @ 3.60GHz Percentage of memory in use: 29% Total physical RAM: 8143.71 MB Available physical RAM: 5715.52 MB Total Virtual: 9999.71 MB Available Virtual: 7449.85 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:931.17 GB) (Free:57.12 GB) NTFS Drive d: (XCom2) (CDROM) (Total:6.56 GB) (Free:0 GB) UDF ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: BC80CF6C) Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=931.2 GB) - (Type=07 NTFS) ==================== End of Addition.txt ============================