Additional scan result of Farbar Recovery Scan Tool (x64) Version:27-04-2016 Ran by Idan (2016-04-28 11:48:32) Running from C:\Users\Idan\Desktop Windows 7 Home Premium Service Pack 1 (X64) (2010-08-21 05:45:00) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-85820212-1267379632-1251349074-500 - Administrator - Disabled) Guest (S-1-5-21-85820212-1267379632-1251349074-501 - Limited - Enabled) => C:\Users\Guest HomeGroupUser$ (S-1-5-21-85820212-1267379632-1251349074-1002 - Limited - Enabled) Idan (S-1-5-21-85820212-1267379632-1251349074-1000 - Administrator - Enabled) => C:\Users\Idan ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: AVG AntiVirus Free Edition (Disabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413} AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: AVG AntiVirus Free Edition (Disabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Acrobat.com (HKLM-x32\...\{77DCDCE3-2DED-62F3-8154-05E745472D07}) (Version: 1.1.377 - Adobe Systems Incorporated) Active Protection System (HKLM-x32\...\{F493761C-E465-4B9E-9FC1-A312F161DE0A}) (Version: 1.70.09 - Lenovo) Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.010.20060 - Adobe Systems Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.6.0.19140 - Adobe Systems Incorporated) Adobe Flash Player 21 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 21.0.0.213 - Adobe Systems Incorporated) Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.213 - Adobe Systems Incorporated) Adobe Shockwave Player 11.5 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.5.9.615 - Adobe Systems, Inc.) Apple Application Support‏ (64 סיביות) (HKLM\...\{B255D495-4734-4E9B-B4F5-96702FD4A7B9}) (Version: 3.2 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{5D61F006-168C-4B8B-B7FD-F113C10AE0E4}) (Version: 8.2.1.3 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ArcSoft TotalMedia Backup (HKLM-x32\...\{3D69628B-4DE8-43C7-9A22-F90F5B870C08}) (Version: 1.5.21.7 - ArcSoft) Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.26 - Atheros Communications Inc.) AVG (HKLM\...\AvgZen) (Version: 1.51.2.3593 - AVG Technologies) AVG (Version: 16.61.7539 - AVG Technologies) Hidden AVG 2016 (Version: 16.0.4563 - AVG Technologies) Hidden AVG Protection (HKLM\...\AVG) (Version: 2016.61.7539 - AVG Technologies) AVG Zen (Version: 1.51.58 - AVG Technologies) Hidden BioExcess (HKLM-x32\...\InstallShield_{ACF31D9F-70C2-40A1-9C7A-28BA16E64B56}) (Version: 6.0.48.159 - Egis Technology Inc.) BioExcess (x32 Version: 6.0.48.159 - Egis Technology Inc.) Hidden Broadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 5.60.18.41 - Broadcom Corporation) BS.Player FREE (HKLM-x32\...\BSPlayerf) (Version: 2.61.1065 - AB Team, d.o.o.) Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.) Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.) Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.) CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.0.2603 - CyberLink Corp.) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Dropbox (HKU\S-1-5-21-85820212-1267379632-1251349074-1000\...\Dropbox) (Version: 3.18.1 - Dropbox, Inc.) E-GOV.IL Sign&Verify Software - AGForm toolbar (HKLM-x32\...\{98880889-285F-4260-989B-8B22020D756F}) (Version: 14.2.1.0 - GOV.IL) eMule (HKLM-x32\...\eMule) (Version: - ) Energy Management (HKLM-x32\...\{0CE226F3-EB27-4ECD-BBF5-F088716779FD}) (Version: 5.4.0.9 - Lenovo) ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - ) ETDWare PS/2-x64 7.0.4.15_WHQL (HKLM\...\Elantech) (Version: 7.0.4.15 - ELAN Microelectronics Corp.) Extended Asian Language font pack for Adobe Reader XI (HKLM-x32\...\{AC76BA86-7AD7-2530-0000-A00000000049}) (Version: 11.0.09 - Adobe Systems Incorporated) Fences (Version: 1.0 - Stardock Corporation) Hidden FMW 1 (Version: 1.73.2 - AVG Technologies) Hidden Google Chrome (HKU\S-1-5-21-85820212-1267379632-1251349074-1000\...\Google Chrome) (Version: 50.0.2661.87 - Google Inc.) Google Talk Plugin (HKLM-x32\...\{F9B579C2-D854-300A-BE62-A09EB9D722E4}) (Version: 5.41.3.0 - Google) Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.0.1006 - Intel Corporation) Intel(R) Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2008 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.0.1008 - Intel Corporation) iTunes (HKLM\...\{6CF1A7E2-8001-4870-9F18-3C6CDD6FE9E3}) (Version: 12.2.1.16 - Apple Inc.) Juniper Citrix Services Client (HKU\S-1-5-21-85820212-1267379632-1251349074-1000\...\Juniper_Citrix_Services) (Version: 8.0.8.33771 - Juniper Networks) Juniper Networks, Inc. Setup Client 64-bit Activex Control (HKLM\...\Juniper_Setup_Client Activex Control) (Version: 2.1.1.1 - Juniper Networks, Inc.) Juniper Networks, Inc. Setup Client Activex Control (HKLM-x32\...\Juniper_Setup_Client Activex Control) (Version: 2.1.1.1 - Juniper Networks, Inc.) Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Lenovo Bluetooth with Enhanced Data Rate Software (HKLM\...\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.1.1400 - Broadcom Corporation) Lenovo EasyCamera (HKLM-x32\...\{ADE16A9D-FBDC-4ecc-B6BD-9C31E51D0332}) (Version: 1.10.01.29.1 - Vimicro) Lenovo OneKey Recovery (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 7.0.1230 - CyberLink Corp.) Lenovo OneKey Recovery (Version: 7.0.1230 - CyberLink Corp.) Hidden Lenovo ReadyComm 5 (HKLM-x32\...\{17542DBF-E17C-4562-BC4D-FA3EF3076C45}) (Version: 5.1.1.20 - Lenovo) Lenovo ReadyComm 5.0 Service (HKLM-x32\...\{76C66170-C538-4E77-B54D-48E136B5B533}) (Version: 5.0.0.1 - Lenovo Group Limited) Lenovo Security Suite (HKLM-x32\...\InstallShield_{8B404231-6BB1-44F6-8488-6A7C307B576F}) (Version: 1.0.4.6 - Lenovo) Lenovo Security Suite (x32 Version: 1.0.4.6 - Lenovo) Hidden Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes) Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation) Microsoft Access database engine 2010 (English) (HKLM-x32\...\{90140000-00D1-0409-0000-0000000FF1CE}) (Version: 14.0.6029.1000 - Microsoft Corporation) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISER) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation) Mozilla Firefox 40.0.3 (x86 he) (HKLM-x32\...\Mozilla Firefox 40.0.3 (x86 he)) (Version: 40.0.3 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 40.0.3.5716 - Mozilla) Port Locker (HKLM-x32\...\InstallShield_{A6FEE06D-C7E1-48CB-A9DF-1E317CF83CA4}) (Version: 1.0.5.15 - Egis Technology Inc.) Port Locker (Version: 1.0.5.15 - Egis Technology Inc.) Hidden Port Locker (x32 Version: 1.0.5.15 - Egis Technology Inc.) Hidden Power2Go (HKLM-x32\...\{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 5.6.0.4809d4 - CyberLink Corp.) QuickTime 7 (HKLM-x32\...\{627FFC10-CE0A-497F-BA2B-208CAC638010}) (Version: 7.77.80.95 - Apple Inc.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6051 - Realtek Semiconductor Corp.) Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30109 - Realtek Semiconductor Corp.) RtLED (HKLM\...\{5ACF5427-B4E4-4F85-A512-151E0BECF7E3}) (Version: 1.0.2 - Realtek Semiconductor Corp.) Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.) SmartShare (HKLM-x32\...\{BAB337AE-DD9E-45C3-BED6-0EE4732AEC60}) (Version: 2.1.1309.1101 - LG Electronics Inc.) SPSS Statistics 17.0 (HKLM-x32\...\{46B65150-F8AA-42F2-94FB-2729A8AE5F7E}) (Version: 17.0.0 - SPSS Inc.) System Requirements Lab for Intel (HKLM-x32\...\{C7CA731B-BF9A-46D9-92CF-8A8737AE9240}) (Version: 4.5.13.0 - Husdawg, LLC) Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Visual Studio 2008 x64 Redistributables (HKLM-x32\...\{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}) (Version: 10.0.0.2 - AVG Technologies) Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies) Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN) Windows Driver Package - Broadcom (BTHUSB) Bluetooth (02/25/2010 6.2.0.9419) (HKLM\...\85CE3A3657FAE5FD305B143E90E6FC89BA53001C) (Version: 02/25/2010 6.2.0.9419 - Broadcom) Windows Driver Package - Broadcom Bluetooth (01/19/2010 6.2.0.1417) (HKLM\...\7341A1B43E7FE58942EB1E820A17C18305DFBCE6) (Version: 01/19/2010 6.2.0.1417 - Broadcom) Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800) (HKLM\...\3BA80AB4C7E9F8497C115C844953A3D4BEB84D21) (Version: 07/28/2009 6.2.0.9800 - Broadcom) Windows Driver Package - Lenovo (ACPIVPC) System (10/19/2009 5.4.0.1) (HKLM\...\0A4175B489A1B4A6E07E11B063A6263480C51D71) (Version: 10/19/2009 5.4.0.1 - Lenovo) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation) Windows Live Sync (HKLM-x32\...\{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}) (Version: 14.0.8089.726 - Microsoft Corporation) Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp) WinRAR 4.00 (64-סיביות) (HKLM\...\WinRAR archiver) (Version: 4.00.0 - win.rar GmbH) עדכון עבור מסנן דואר הזבל של Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-040D-0000-0000000FF1CE}_ENTERPRISER_{18E2D7BF-CC18-4CE8-B875-D2934B6086E2}) (Version: - Microsoft) עדכון עבור מסנן דואר הזבל של Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-040D-0000-0000000FF1CE}_ENTERPRISER_{54B50AC9-2088-4F43-B39A-0F10F53D425E}) (Version: - Microsoft) עדכון עבור מסנן דואר הזבל של Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-040D-0000-0000000FF1CE}_ENTERPRISER_{CAB664CE-BBA4-4A81-A358-6CC6F7852FC9}) (Version: - Microsoft) תמיכה ביישומים של Apple‏ (32 סיביות) (HKLM-x32\...\{7FE25256-B7C1-480D-B736-10A67A833AEA}) (Version: 3.2 - Apple Inc.) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-85820212-1267379632-1251349074-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Idan\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-85820212-1267379632-1251349074-1000_Classes\CLSID\{793EE463-1304-471C-ADF1-68C2FFB01247}\InprocServer32 -> C:\Users\Idan\AppData\Local\Google\Update\1.3.29.5\psuser_64.dll (Google Inc.) CustomCLSID: HKU\S-1-5-21-85820212-1267379632-1251349074-1000_Classes\CLSID\{CC182BE1-84CE-4A57-B85C-FD4BBDF78CB2}\InprocServer32 -> C:\Users\Idan\AppData\Local\Google\Update\1.3.29.1\psuser_64.dll => No File CustomCLSID: HKU\S-1-5-21-85820212-1267379632-1251349074-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Idan\AppData\Local\Google\Update\1.3.29.5\psuser_64.dll (Google Inc.) CustomCLSID: HKU\S-1-5-21-85820212-1267379632-1251349074-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Idan\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-85820212-1267379632-1251349074-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Idan\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-85820212-1267379632-1251349074-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Idan\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-85820212-1267379632-1251349074-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Idan\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-85820212-1267379632-1251349074-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Idan\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-85820212-1267379632-1251349074-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Idan\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-85820212-1267379632-1251349074-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Idan\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-85820212-1267379632-1251349074-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Idan\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-85820212-1267379632-1251349074-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Idan\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-85820212-1267379632-1251349074-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Idan\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll (Dropbox, Inc.) ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {00BE17EE-DDB3-401F-AA77-5FDBB9E56000} - System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe Task: {023DDFA2-8DCC-410B-8327-93348906B7E8} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-04-15] (Adobe Systems Incorporated) Task: {1A53045A-B0DD-48BD-8784-7F7A69F533EE} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-85820212-1267379632-1251349074-1000Core => C:\Users\Idan\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-09-19] (Dropbox, Inc.) Task: {55316116-96C1-45F0-9D45-3D43C06CD8FB} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-85820212-1267379632-1251349074-1000UA => C:\Users\Idan\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-09-19] (Dropbox, Inc.) Task: {6EFFCEB5-7F0F-46D4-AE09-31E3F71C07A4} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-85820212-1267379632-1251349074-1000Core => C:\Users\Idan\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.) Task: {7BEE9764-CD9A-4E28-8DF1-1C9CBB631311} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-85820212-1267379632-1251349074-1000UA => C:\Users\Idan\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.) Task: {7E8D0C06-4DA7-4C41-BA4C-0880F0827F09} - \Google Update -> No File <==== ATTENTION Task: {9A258BFC-0B8E-47C3-9023-34D8B52578F7} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13] (Adobe Systems Incorporated) Task: {AA07E32A-A454-408A-8FBB-4C995454AF30} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {BDF29435-3C18-4A1B-A9D7-AC8C2079AA03} - System32\Tasks\Java Platform SE Auto Updater => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe Task: {C4EA53C1-8F2C-4BCC-A974-3CEE304ADAE1} - System32\Tasks\SmartShare => C:\Program Files (x86)\LG Software\LG Smart Share\SmartShareStart.exe [2013-06-27] (LG Electronics Inc.) Task: {D1550A1E-EF72-4D65-9D00-97337206A609} - System32\Tasks\{8A161A7C-5CA9-4B4A-B824-D34132D17196} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2015-03-25] (Skype Technologies S.A.) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-85820212-1267379632-1251349074-1000Core.job => C:\Users\Idan\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-85820212-1267379632-1251349074-1000UA.job => C:\Users\Idan\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-85820212-1267379632-1251349074-1000Core.job => C:\Users\Idan\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-85820212-1267379632-1251349074-1000UA.job => C:\Users\Idan\AppData\Local\Google\Update\GoogleUpdate.exe ==================== Shortcuts ============================= (The entries could be listed to be restored or removed.) ==================== Loaded Modules (Whitelisted) ============== 2010-01-25 23:50 - 2010-01-25 23:50 - 01407344 _____ () C:\Program Files (x86)\EgisTec BioExcess\x64\LIBEAY32.dll 2015-02-13 04:20 - 2015-02-13 04:20 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2015-05-15 16:26 - 2015-05-15 16:26 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2011-04-24 21:16 - 2011-03-02 12:40 - 00164864 _____ () C:\Program Files\WinRAR\rarext.dll 2016-04-16 09:32 - 2016-04-16 09:32 - 00169472 _____ () C:\windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\5eb8f854950c428c64f668e63c5a0498\IsdiInterop.ni.dll 2011-08-13 19:21 - 2010-11-05 23:50 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service" ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 05:34 - 2009-06-11 00:00 - 00000824 ____N C:\windows\system32\Drivers\etc\hosts ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-85820212-1267379632-1251349074-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Idan\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 80.179.52.100 - 80.179.55.100 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{FD9F32E6-3603-42BD-9F2D-EB6C04AA1C3E}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe FirewallRules: [{EFFD2A0D-AF92-46DC-AA69-F661C7102557}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe FirewallRules: [{003E35A8-EB19-4FA1-A2FF-A78739F53481}] => (Allow) C:\Program Files (x86)\Lenovo\ReadyComm\common\IGRS.exe FirewallRules: [{A06111B9-588A-433B-B99C-58CFA15FBCEB}] => (Allow) C:\Program Files (x86)\Lenovo\ReadyComm\common\IGRS.exe FirewallRules: [{59823DFA-0D28-4423-AEAC-703660A73FE6}] => (Allow) C:\windows\System32\IgrsSvcs.exe FirewallRules: [{DC6594D3-9323-49E8-888A-7B1018CD30EF}] => (Allow) C:\windows\System32\IgrsSvcs.exe FirewallRules: [{9405CE55-1568-4E4E-83A7-AF182890A849}] => (Allow) C:\Program Files\Lenovo\ReadyComm\Projectionist.exe FirewallRules: [{1DDA822B-F317-4AD3-9C8D-3316FD6C72F4}] => (Allow) C:\Program Files\Lenovo\ReadyComm\Projectionist.exe FirewallRules: [{1DFEEF88-EBE1-454D-9C9A-9AC2CF790E4F}] => (Allow) C:\Program Files\Lenovo\ReadyComm\AppSvc.exe FirewallRules: [{14FECE8E-E07B-4BF3-A9AF-D017FF22B85D}] => (Allow) C:\Program Files\Lenovo\ReadyComm\AppSvc.exe FirewallRules: [{7DC9D6FE-4CDA-418C-8E64-557E1AD40CBA}] => (Allow) C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe FirewallRules: [{2B24A9C4-22A2-4F8D-9809-158A47D8F9E9}] => (Allow) C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe FirewallRules: [{125D8513-F0DB-48F3-97AA-332BDD6FFB23}] => (Allow) C:\Program Files (x86)\Lenovo\ReadyComm\common\IGRS.exe FirewallRules: [{3FC0C7AB-9F2B-4246-AC6E-EE5D2183DCAA}] => (Allow) C:\Program Files (x86)\Lenovo\ReadyComm\common\IGRS.exe FirewallRules: [{683E59B1-34A3-4FD4-BCB6-40DAA5A54ED5}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{D07D713D-4EE1-4263-8DB1-0E750E087A3C}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{A13D16CF-2E38-42E7-BD88-75D2C385B98A}] => (Allow) LPort=2869 FirewallRules: [{A779E1D5-B6DD-408A-BB6C-520EAD163644}] => (Allow) LPort=1900 FirewallRules: [TCP Query User{81DFAA66-5E7A-4B59-9F28-B8F8BE1F46CF}C:\users\idan\media\emule\emule.exe] => (Allow) C:\users\idan\media\emule\emule.exe FirewallRules: [UDP Query User{10802865-98B3-487E-A68F-60CD06450EB3}C:\users\idan\media\emule\emule.exe] => (Allow) C:\users\idan\media\emule\emule.exe FirewallRules: [TCP Query User{61147E9D-1B85-4E90-85E0-502033E0FE88}C:\program files (x86)\internet explorer\iexplore.exe] => (Block) C:\program files (x86)\internet explorer\iexplore.exe FirewallRules: [UDP Query User{851507D2-8B41-4EDD-830E-56852AD74B40}C:\program files (x86)\internet explorer\iexplore.exe] => (Block) C:\program files (x86)\internet explorer\iexplore.exe FirewallRules: [{04474B11-AA48-48B4-AFDA-BFE70DBAD996}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{D7CAA48B-2EDB-4D3F-BA6B-35AE29290BA0}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{3315F1C5-EDAC-41D5-828A-231E67B165D0}] => (Allow) C:\Users\Idan\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{C8DECDDB-9C97-4924-93A2-60409C493DDC}] => (Allow) C:\Users\Idan\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{412558D5-5E73-4383-8D87-8D06AF300E08}] => (Allow) C:\Program Files (x86)\LG Software\LG Smart Share\DMS\SmartShareDMS.exe FirewallRules: [{A390CB66-C679-4C67-A7C2-7EAE47E77F16}] => (Allow) C:\Program Files (x86)\LG Software\LG Smart Share\DMS\SmartShareDMS.exe FirewallRules: [{B047C107-DBD6-4651-B6DE-1826B653CD16}] => (Allow) C:\Program Files (x86)\LG Software\LG Smart Share\DMR\SmartShareDMR.exe FirewallRules: [{5E0D4987-C8BC-410D-B5EB-669189BFD117}] => (Allow) C:\Program Files (x86)\LG Software\LG Smart Share\DMR\SmartShareDMR.exe FirewallRules: [{BAADCF14-7D72-47DA-B46C-87434A4199CA}] => (Allow) C:\Program Files\iTunes\iTunes.exe FirewallRules: [{4EC399D7-7954-4AE6-AA76-84A6C40FD50E}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe FirewallRules: [{D212B326-1752-4C57-ABCE-D22CB363445B}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe FirewallRules: [{4BA5F8C2-3DD2-4508-AB33-FB46AA94E1E0}] => (Allow) C:\Program Files (x86)\AVG\Av\avgnsa.exe FirewallRules: [{1BE5C62D-AB11-4275-B11D-EAF97CF5F3CA}] => (Allow) C:\Program Files (x86)\AVG\Av\avgnsa.exe FirewallRules: [{AF118FD8-AC6F-4670-A8AE-96BCAA7C9E25}] => (Allow) C:\Program Files (x86)\AVG\Av\avgdiagex.exe FirewallRules: [{6C573F02-7199-4B8C-ACD8-3F5BFF1003D5}] => (Allow) C:\Program Files (x86)\AVG\Av\avgdiagex.exe FirewallRules: [{3CA2923D-D9F0-49DC-8D71-18E72698404D}] => (Allow) C:\Program Files (x86)\AVG\Av\avgemca.exe FirewallRules: [{39160C29-3753-4154-BA0D-F8D620E1D110}] => (Allow) C:\Program Files (x86)\AVG\Av\avgemca.exe FirewallRules: [TCP Query User{35BA475A-CFBB-49F6-B716-086BB1F98874}C:\users\idan\appdata\local\google\chrome\application\chrome.exe] => (Block) C:\users\idan\appdata\local\google\chrome\application\chrome.exe FirewallRules: [UDP Query User{3CE01AF3-B331-4269-A9C5-32636775BF5E}C:\users\idan\appdata\local\google\chrome\application\chrome.exe] => (Block) C:\users\idan\appdata\local\google\chrome\application\chrome.exe ==================== Restore Points ========================= 16-04-2016 16:16:45 Windows Update 16-04-2016 23:03:51 Windows Update 27-04-2016 18:25:33 Scheduled Checkpoint 28-04-2016 10:04:07 Windows Update 28-04-2016 10:51:45 zoek.exe restore point 28-04-2016 11:34:32 JRT Pre-Junkware Removal ==================== Faulty Device Manager Devices ============= Name: Broadcom BCM2070 Bluetooth 2.1+EDR USB Device Description: Broadcom BCM2070 Bluetooth 2.1+EDR USB Device Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974} Manufacturer: Broadcom Service: BTHUSB Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Lexmark X422 Description: Lexmark X422 Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f} Manufacturer: Lexmark Service: usbscan Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (04/28/2016 11:28:51 AM) (Source: SideBySide) (EventID: 80) (User: ) Description: Activation context generation failed for "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1".Error in manifest or policy file "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" on line C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3. A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest. Component 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest. Error: (04/28/2016 10:52:18 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: DaS_21.exe, version: 2.1.0.4, time stamp: 0x540c90b2 Faulting module name: KERNELBASE.dll, version: 6.1.7601.23392, time stamp: 0x56eb3604 Exception code: 0xe0434352 Fault offset: 0x000000000001a06d Faulting process id: 0x83c Faulting application start time: 0xDaS_21.exe0 Faulting application path: DaS_21.exe1 Faulting module path: DaS_21.exe2 Report Id: DaS_21.exe3 Error: (04/28/2016 10:52:18 AM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Application: DaS_21.exe Framework Version: v4.0.30319 Description: The process was terminated due to an unhandled exception. Exception Info: System.ArgumentOutOfRangeException at System.Console.SetWindowSize(Int32, Int32) at DriverAndServicesOut.Program.Main(System.String[]) Error: (04/26/2016 03:53:19 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Activation context generation failed for "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1".Error in manifest or policy file "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" on line C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3. A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest. Component 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest. Error: (04/26/2016 03:53:16 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Activation context generation failed for "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1".Error in manifest or policy file "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" on line C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3. A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest. Component 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest. Error: (04/26/2016 03:53:16 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Activation context generation failed for "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1".Error in manifest or policy file "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" on line C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3. A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest. Component 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest. Error: (04/24/2016 07:00:03 PM) (Source: Windows Backup) (EventID: 4103) (User: ) Description: The backup did not complete because of an error writing to the backup location E:\. The error is: The backup location cannot be found or is not valid. Review your backup settings and check the backup location. (0x81000006). Error: (04/17/2016 07:00:17 PM) (Source: Windows Backup) (EventID: 4103) (User: ) Description: The backup did not complete because of an error writing to the backup location E:\. The error is: The backup location cannot be found or is not valid. Review your backup settings and check the backup location. (0x81000006). Error: (04/16/2016 09:13:41 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: wmpnetwk.exe, version: 12.0.7601.17514, time stamp: 0x4ce7ae7f Faulting module name: KERNELBASE.dll, version: 6.1.7601.19045, time stamp: 0x56259271 Exception code: 0x0000046b Fault offset: 0x000000000000b3dd Faulting process id: 0xe84 Faulting application start time: 0xwmpnetwk.exe0 Faulting application path: wmpnetwk.exe1 Faulting module path: wmpnetwk.exe2 Report Id: wmpnetwk.exe3 Error: (04/15/2016 04:06:19 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: The program SoftwareUpdate.exe version 2.1.3.127 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 1788 Start Time: 01d197090bbcc046 Termination Time: 0 Application Path: C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe Report Id: cb81f876-030a-11e6-af52-5cff35079a8b System errors: ============= Error: (04/28/2016 11:25:45 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The ReadyComm.DirectRouter service failed to start due to the following error: %%2 Error: (04/28/2016 11:12:40 AM) (Source: Service Control Manager) (EventID: 7030) (User: ) Description: The PEVSystemStart service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly. Error: (04/28/2016 11:12:40 AM) (Source: Service Control Manager) (EventID: 7030) (User: ) Description: The PEVSystemStart service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly. Error: (04/28/2016 11:12:39 AM) (Source: Service Control Manager) (EventID: 7030) (User: ) Description: The PEVSystemStart service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly. Error: (04/28/2016 11:12:39 AM) (Source: Service Control Manager) (EventID: 7030) (User: ) Description: The PEVSystemStart service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly. Error: (04/28/2016 11:12:38 AM) (Source: Service Control Manager) (EventID: 7030) (User: ) Description: The PEVSystemStart service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly. Error: (04/27/2016 10:08:33 PM) (Source: Service Control Manager) (EventID: 7011) (User: ) Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Wlansvc service. Error: (04/26/2016 07:38:46 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The RtLedService Installer service failed to start due to the following error: %%1053 Error: (04/26/2016 07:38:46 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: A timeout was reached (30000 milliseconds) while waiting for the RtLedService Installer service to connect. Error: (04/26/2016 07:38:15 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The ReadyComm.DirectRouter service failed to start due to the following error: %%2 CodeIntegrity: =================================== Date: 2015-12-04 10:11:34.040 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe because the set of per-page image hashes could not be found on the system. Date: 2015-12-04 10:11:33.652 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe because the set of per-page image hashes could not be found on the system. Date: 2015-12-04 10:11:33.247 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe because the set of per-page image hashes could not be found on the system. Date: 2015-11-28 11:00:46.830 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe because the set of per-page image hashes could not be found on the system. Date: 2015-11-28 11:00:46.424 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe because the set of per-page image hashes could not be found on the system. Date: 2015-11-28 11:00:45.942 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpa.exe because the set of per-page image hashes could not be found on the system. Date: 2015-11-28 11:00:45.538 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpa.exe because the set of per-page image hashes could not be found on the system. Date: 2015-10-28 18:59:12.450 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe because the set of per-page image hashes could not be found on the system. Date: 2015-10-28 18:59:12.045 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe because the set of per-page image hashes could not be found on the system. Date: 2015-10-28 18:59:11.624 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpa.exe because the set of per-page image hashes could not be found on the system. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i3 CPU M 350 @ 2.27GHz Percentage of memory in use: 27% Total physical RAM: 5876.51 MB Available physical RAM: 4256.47 MB Total Virtual: 11751.21 MB Available Virtual: 10083.26 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:254.14 GB) (Free:93.83 GB) NTFS Drive d: (LENOVO) (Fixed) (Total:29 GB) (Free:27.69 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298.1 GB) (Disk ID: 7BD19705) Partition 1: (Active) - (Size=200 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=254.1 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=29 GB) - (Type=OF Extended) Partition 4: (Not Active) - (Size=14.8 GB) - (Type=12) ==================== End of Addition.txt ============================