Hi,
Yesterday when I started the computer I noticed a message from the open action center in windows 7 reminding me that: "the windows firewall has been turned off and is currently being managed by the system administrator". It seems that I cannot turn it on as the button has been inactivated. When I try to turn it on from the control panel it is still not possible as all the options for turn off/on have been disabled. There is also an information bar saying: "For your security, some settings are managed by your system administrator".
I tried to look for information online but didn't have much success in resolving the issue. However, some information pointed to the fact that this could be caused by malware/viruses. It is indeed a bit suspicious that the firewall should just turn off suddenly.
I performed a scan with Microsoft security essentials and it didn't find anything. So I am posting here hoping that somebody could take a look at the FRST logs just to ensure that there isn't anything suspicious. Or maybe somebody had similar issues before.
Anyways, below you can find the FRST logs.
Thank you.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:24-02-2016
Ran by eit-dre (administrator) on HOMERLAP (26-02-2016 13:35:02)
Running from C:\Downloads\eit-dre\Downloads
Loaded Profiles: eit-dre (Available Profiles: idi & eit-dre)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Fortinet Inc.) C:\Windows\SysWOW64\FortiSSLVPNdaemon.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
() C:\ProgramData\DataCardService\HWDeviceService64.exe
(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe
() C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe
(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
(DigitalPersona, Inc.) C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DataCardService\DCSHelper.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(ArcSoft, Inc.) C:\Windows\SysWOW64\ArcVCapRender\uArcCapture.exe
(Yahoo! Inc.) C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\coreshredder.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpAgent.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe
(Portrait Displays, Inc) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\SDKCOMServer.exe
(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdiSDKHelperx64.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPConnectionManager.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
() C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
(Dominik Reichl) C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DataCardService\DCSHelper.exe
() C:\Program Files (x86)\Tele2 Mobile Partner\Tele2 Mobile Partner.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [HPPowerAssistant] => C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe [3488640 2012-03-14] (Hewlett-Packard Company)
HKLM\...\Run: [MfeEpePcMonitor] => "C:\Program Files\Hewlett-Packard\Drive Encryption\EpePcMonitor.exe"
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1664000 2013-03-18] (IDT, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2816240 2014-07-07] (Synaptics Incorporated)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1340192 2016-01-29] (Microsoft Corporation)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [284480 2012-11-26] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292088 2014-08-18] (Intel Corporation)
HKLM-x32\...\Run: [File Sanitizer] => c:\Program Files (x86)\Hewlett-Packard\File Sanitizer\CoreShredder.exe [12313720 2012-08-07] (Hewlett-Packard)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [35696 2009-02-28] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2011-10-24] (Apple Inc.)
HKLM-x32\...\Run: [QLBController] => C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [336672 2014-02-10] (Hewlett-Packard Company)
HKLM-x32\...\Run: [PDF Complete] => C:\Program Files (x86)\PDF Complete\pdfsty.exe [683656 2013-07-18] (PDF Complete Inc)
HKLM-x32\...\Run: [HPConnectionManager] => C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [185144 2014-04-09] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [KeePass 2 PreLoad] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2745544 2016-01-09] (Dominik Reichl)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596528 2015-12-22] (Oracle Corporation)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe,
Winlogon\Notify\igfxcui: igfxdev.dll [X]
Winlogon\Notify\DeviceNP-x32: DeviceNP.dll [X]
HKLM\...\Policies\Explorer: [NoWelcomeScreen] 1
HKLM\...\Policies\Explorer: [NoPublishingWizard] 1
HKLM\...\Policies\Explorer: [NoOnlinePrintsWizard] 1
HKLM\...\Policies\Explorer: [NoWebServices] 1
HKLM\...\Policies\Explorer: [NoInternetOpenWith] 1
HKU\S-1-5-21-791394405-2968878526-2284429811-265784\...\Policies\Explorer: [ForceClassicControlPanel] 1
HKU\S-1-5-21-791394405-2968878526-2284429811-265784\...\MountPoints2: H - H:\AutoRun.exe
HKU\S-1-5-21-791394405-2968878526-2284429811-265784\...\MountPoints2: {12842813-8afc-11e4-82e9-20689dae45f0} - H:\AutoRun.exe
HKU\S-1-5-21-791394405-2968878526-2284429811-265784\...\MountPoints2: {275e0f77-8678-11e3-9569-20689dae45f0} - H:\AutoRun.exe
HKU\S-1-5-21-791394405-2968878526-2284429811-265784\...\MountPoints2: {2b1e5771-cbd0-11e4-b4f6-001e101faa49} - H:\AutoRun.exe
HKU\S-1-5-21-791394405-2968878526-2284429811-265784\...\MountPoints2: {3a748ad3-8afe-11e4-a26e-806e6f6e6963} - H:\AutoRun.exe
HKU\S-1-5-21-791394405-2968878526-2284429811-265784\...\MountPoints2: {4267b0ee-b864-11e5-b0dc-001e101f4da1} - H:\AutoRun.exe
HKU\S-1-5-21-791394405-2968878526-2284429811-265784\...\MountPoints2: {5c844052-ccdc-11e4-9382-806e6f6e6963} - H:\AutoRun.exe
HKU\S-1-5-21-791394405-2968878526-2284429811-265784\...\MountPoints2: {69421246-359e-11e4-93e4-10604b4b2e09} - H:\AutoRun.exe
HKU\S-1-5-21-791394405-2968878526-2284429811-265784\...\MountPoints2: {ab1ff5e2-cd51-11e4-8a73-001e101f50a4} - H:\AutoRun.exe
HKU\S-1-5-21-791394405-2968878526-2284429811-265784\...\MountPoints2: {e4ecae3d-8afe-11e4-afbb-001e101fe70e} - H:\AutoRun.exe
Lsa: [Notification Packages] DPPassFilter scecli C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2012-10-19]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\Users\dejan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk [2012-11-06]
ShortcutTarget: MagicDisc.lnk -> C:\Program Files (x86)\MagicDisc\MagicDisc.exe (MagicISO, Inc.)
GroupPolicyScripts: Restriction <======= ATTENTION
GroupPolicyScripts\User: Restriction <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\..\Interfaces\{0092C2C8-E000-4268-87CA-07ADC1672D9B}: [NameServer] 130.244.127.161 130.244.127.169
Tcpip\..\Interfaces\{1D727E6A-7412-40E7-A7A5-018E12235450}: [DhcpNameServer] 192.168.176.1
Tcpip\..\Interfaces\{89487105-0A72-48BE-8448-0259511A0BDB}: [NameServer] 130.244.127.161 130.244.127.169
Tcpip\..\Interfaces\{E07FC160-EBB3-4614-9CBE-9CC43AB40ABD}: [NameServer] 130.244.127.161 130.244.127.169
Tcpip\..\Interfaces\{EFFCE5CD-9EFD-44CF-8057-3F895C4241F4}: [NameServer] 130.244.127.161 130.244.127.169
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-791394405-2968878526-2284429811-265784\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com?pc=CMNTDF
HKU\S-1-5-21-791394405-2968878526-2284429811-265784\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.bing.com?pc=CMNTDF
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=CMNTDF&pc=CMNTDF&src=IE-SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=CMNTDF&pc=CMNTDF&src=IE-SearchBox
SearchScopes: HKLM -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=CMNTDF
SearchScopes: HKLM -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://uk.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CMNTDF
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=CMNTDF&pc=CMNTDF&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=CMNTDF&pc=CMNTDF&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=CMNTDF
SearchScopes: HKLM-x32 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://uk.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CMNTDF
SearchScopes: HKU\S-1-5-21-791394405-2968878526-2284429811-265784 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=CMNTDF
SearchScopes: HKU\S-1-5-21-791394405-2968878526-2284429811-265784 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://uk.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CMNTDF
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll [2014-03-11] (Microsoft Corporation.)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll => No File
BHO-x32: &Yahoo! Toolbar Helper -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll [2013-08-07] (Yahoo! Inc.)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27] (Adobe Systems Incorporated)
BHO-x32: File Sanitizer for HP ProtectTools -> {3134413B-49B4-425C-98A5-893C1F195601} -> c:\Program Files (x86)\Hewlett-Packard\File Sanitizer\IEBHO.dll [2012-08-07] (Hewlett-Packard)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\ssv.dll [2016-01-26] (Oracle Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11] (Microsoft Corporation.)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\jp2ssv.dll [2016-01-26] (Oracle Corporation)
BHO-x32: TBHelper Class -> {E46A2169-E328-471A-9788-F2B52BB9C681} -> C:\Program Files (x86)\Tele2\SMS fran Datorn\miebho.dll => No File
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2015-10-19] (Hewlett-Packard Company)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll [2014-03-11] (Microsoft Corporation.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11] (Microsoft Corporation.)
Toolbar: HKLM-x32 - Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll [2013-08-07] (Yahoo! Inc.)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
FireFox:
========
FF ProfilePath: C:\Users\eit-dre\AppData\Roaming\Mozilla\Firefox\Profiles\jpkpw2i1.default
FF Homepage: www.google.se
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_20_0_0_306.dll [2016-02-10] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-10] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_306.dll [2016-02-10] ()
FF Plugin-x32: @bankid.com/BankID säkerhetsprogram,version=6.3.0.6 -> C:\Program Files (x86)\BankID\npBispBrowser.dll [No File]
FF Plugin-x32: @FortinetCacheClean -> C:\Program Files (x86)\Fortinet\SslvpnClient\npccplugin.dll [2011-10-14] (Fortinet Inc.)
FF Plugin-x32: @FortinetTunnelControl -> C:\Program Files (x86)\Fortinet\SslvpnClient\nptcplugin.dll [2011-10-14] (Fortinet Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.66 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-10-28] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-10-28] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.71.2 -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\dtplugin\npDeployJava1.dll [2016-01-26] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.71.2 -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\plugin2\npjp2.dll [2016-01-26] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-25] (Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=6.0.11.2321 -> C:\Program Files (x86)\Media Player Classic\browser\plugins\nppl3260.dll [2006-01-28] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.1483 -> C:\Program Files (x86)\Media Player Classic\browser\plugins\nprpjplug.dll [2006-01-28] (RealNetworks, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-05] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-05] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2012-10-15] (VideoLAN)
FF Plugin HKU\.DEFAULT: digitalpersona.com/ChromeDPAgent -> C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\ChromeExt\components\npChromeDPAgent.dll [2012-07-20] (Digital Persona, Inc.)
FF user.js: detected! => C:\Users\eit-dre\AppData\Roaming\Mozilla\Firefox\Profiles\jpkpw2i1.default\user.js [2014-10-19]
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2013-08-30] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2013-08-30] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2013-08-30] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2013-08-30] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2013-08-30] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll [2013-08-30] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll [2013-08-30] (Apple Inc.)
FF Extension: WOT - C:\Users\eit-dre\AppData\Roaming\Mozilla\Firefox\Profiles\jpkpw2i1.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-12-09]
FF Extension: NoScript - C:\Users\eit-dre\AppData\Roaming\Mozilla\Firefox\Profiles\jpkpw2i1.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2016-02-12]
FF Extension: Yahoo! Toolbar - C:\Users\eit-dre\AppData\Roaming\Mozilla\Firefox\Profiles\jpkpw2i1.default\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} [2016-01-26]
FF Extension: Download YouTube Videos as MP4 - C:\Users\eit-dre\AppData\Roaming\Mozilla\Firefox\Profiles\jpkpw2i1.default\Extensions\{b9bfaf1c-a63f-47cd-8b9a-29526ced9060}.xpi [2016-01-08]
FF Extension: Adblock Plus - C:\Users\eit-dre\AppData\Roaming\Mozilla\Firefox\Profiles\jpkpw2i1.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-02-24]
FF Extension: Skype - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2016-01-06]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt
FF Extension: DigitalPersona Extension - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt [2013-01-21] [not signed]
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\ddg.cfg [2009-04-21] <==== ATTENTION
Chrome:
=======
CHR Profile: C:\Users\eit-dre\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Butik) - C:\Users\eit-dre\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-02-05]
CHR Extension: (Betalning via Chrome Web Store) - C:\Users\eit-dre\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-30]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-01-08]
CHR HKLM-x32\...\Chrome\Extension: [ncffjdbbodifgldkcbhmiiljfcnbgjab] - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\ChromeExt\dpchrome.crx [2012-07-20]
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-01-08] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-01-08] (Microsoft Corporation)
R2 DpHost; C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [494456 2012-07-20] (DigitalPersona, Inc.)
S3 FLCDLOCK; c:\windows\SysWOW64\flcdlock.exe [477088 2012-09-04] (Hewlett-Packard Company)
R2 FortiSslvpnDaemon; C:\windows\SysWOW64\FortiSSLVPNdaemon.exe [830056 2011-10-14] (Fortinet Inc.)
R2 hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [683296 2014-02-10] (Hewlett-Packard Company)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [25800 2015-09-28] (Hewlett-Packard Company)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [315352 2014-11-03] (Intel Corporation)
R2 Intel® Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [732160 2012-12-10] (Intel® Corporation) [File not signed]
S3 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [803872 2012-12-10] (Intel® Corporation)
R2 Intel® ME Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe [131032 2013-10-28] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [165336 2013-10-28] (Intel Corporation)
R2 McAfee Endpoint Encryption Agent; C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe [1327104 2013-03-27] () [File not signed]
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2016-01-29] (Microsoft Corporation)
R2 Net Driver HPZ12; C:\windows\system32\HPZinw12.dll [69632 2006-11-08] (Hewlett-Packard) [File not signed]
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [374344 2016-01-29] (Microsoft Corporation)
R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1143432 2013-07-18] (PDF Complete Inc)
R2 Pml Driver HPZ12; C:\windows\system32\HPZipm12.dll [88064 2006-11-08] (Hewlett-Packard) [File not signed]
R2 RoxioBurnLauncher; C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe [536848 2012-03-21] ()
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [327680 2013-03-18] (IDT, Inc.) [File not signed]
S2 Tele2 Mobile Partner. RunOuc; C:\Program Files (x86)\Tele2 Mobile Partner\UpdateDog\ouc.exe [655712 2015-03-17] ()
R2 uArcCapture; C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe [498352 2013-01-21] (ArcSoft, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 IFXTCS; C:\Program Files (x86)\Hewlett-Packard\Embedded Security Software\ifxtcs.exe [X]
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 ARCVCAM; C:\Windows\System32\DRIVERS\ArcSoftVCapture.sys [42816 2013-01-21] (ArcSoft, Inc.)
S3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [134696 2012-02-02] (Broadcom Corporation.)
S3 BTWDPAN; C:\Windows\System32\DRIVERS\btwdpan.sys [89640 2012-02-02] (Broadcom Corporation.)
S3 DAMDrv; C:\Windows\System32\DRIVERS\DAMDrv64.sys [64832 2012-09-04] (Hewlett-Packard Company)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [218624 2015-03-17] (Huawei Technologies Co., Ltd.)
R3 johci; C:\Windows\System32\DRIVERS\johci.sys [26208 2012-11-06] (JMicron Technology Corp.)
R0 MfeEpeOpal; C:\Windows\System32\Drivers\MfeEpeOpal.sys [91432 2013-03-27] (McAfee, Inc.)
R0 MfeEpePc; C:\Windows\System32\Drivers\MfeEpePc.sys [158760 2013-03-27] (McAfee, Inc.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [289120 2015-11-13] (Microsoft Corporation)
R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133816 2015-11-13] (Microsoft Corporation)
R3 pppop; C:\Windows\System32\DRIVERS\pppop64.sys [42528 2009-07-21] (Fortinet Inc.)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1866080 2012-11-20] ()
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-02-26 13:33 - 2016-02-26 13:35 - 00000000 ____D C:\FRST
2016-02-26 10:09 - 2016-02-26 13:11 - 00001078 _____ C:\windows\system32dbgraw.bmp
2016-02-12 08:12 - 2016-02-13 09:43 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-02-10 16:55 - 2016-02-10 16:55 - 08817344 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerInstaller.exe
2016-02-10 12:18 - 2016-02-06 11:48 - 25839104 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2016-02-10 12:18 - 2016-02-06 11:32 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2016-02-10 12:18 - 2016-02-06 11:24 - 02887680 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2016-02-10 12:18 - 2016-02-06 11:11 - 00615936 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2016-02-10 12:18 - 2016-02-06 11:10 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2016-02-10 12:18 - 2016-02-06 11:01 - 20366848 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2016-02-10 12:18 - 2016-02-06 10:54 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2016-02-10 12:18 - 2016-02-06 10:43 - 02280448 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2016-02-10 12:18 - 2016-02-06 10:38 - 00476160 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2016-02-10 12:18 - 2016-02-06 10:37 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2016-02-10 12:18 - 2016-02-06 10:32 - 14458368 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2016-02-10 12:18 - 2016-02-06 10:16 - 12857856 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2016-02-10 12:18 - 2016-02-06 10:09 - 01547264 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2016-02-10 12:18 - 2016-02-06 09:54 - 01312256 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2016-02-10 12:18 - 2016-01-22 21:31 - 00387784 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2016-02-10 12:18 - 2016-01-22 21:10 - 00341200 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2016-02-10 12:18 - 2016-01-22 07:56 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2016-02-10 12:18 - 2016-01-22 07:41 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2016-02-10 12:18 - 2016-01-22 07:40 - 00571904 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2016-02-10 12:18 - 2016-01-22 07:40 - 00417792 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2016-02-10 12:18 - 2016-01-22 07:40 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2016-02-10 12:18 - 2016-01-22 07:40 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2016-02-10 12:18 - 2016-01-22 07:33 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2016-02-10 12:18 - 2016-01-22 07:32 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2016-02-10 12:18 - 2016-01-22 07:29 - 06052352 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2016-02-10 12:18 - 2016-01-22 07:27 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2016-02-10 12:18 - 2016-01-22 07:27 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2016-02-10 12:18 - 2016-01-22 07:27 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2016-02-10 12:18 - 2016-01-22 07:20 - 00968704 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2016-02-10 12:18 - 2016-01-22 07:17 - 00489984 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2016-02-10 12:18 - 2016-01-22 07:09 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2016-02-10 12:18 - 2016-01-22 07:08 - 00107520 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll
2016-02-10 12:18 - 2016-01-22 07:05 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2016-02-10 12:18 - 2016-01-22 07:04 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2016-02-10 12:18 - 2016-01-22 07:02 - 00496640 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2016-02-10 12:18 - 2016-01-22 07:02 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2016-02-10 12:18 - 2016-01-22 07:02 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2016-02-10 12:18 - 2016-01-22 07:01 - 00341504 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2016-02-10 12:18 - 2016-01-22 07:01 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2016-02-10 12:18 - 2016-01-22 07:00 - 00152064 _____ (Microsoft Corporation) C:\windows\system32\occache.dll
2016-02-10 12:18 - 2016-01-22 07:00 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2016-02-10 12:18 - 2016-01-22 06:55 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2016-02-10 12:18 - 2016-01-22 06:55 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2016-02-10 12:18 - 2016-01-22 06:51 - 00663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2016-02-10 12:18 - 2016-01-22 06:51 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2016-02-10 12:18 - 2016-01-22 06:50 - 00262144 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2016-02-10 12:18 - 2016-01-22 06:48 - 00718336 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2016-02-10 12:18 - 2016-01-22 06:47 - 00798208 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2016-02-10 12:18 - 2016-01-22 06:46 - 02123264 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2016-02-10 12:18 - 2016-01-22 06:46 - 01359360 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2016-02-10 12:18 - 2016-01-22 06:43 - 00416256 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2016-02-10 12:18 - 2016-01-22 06:39 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-02-10 12:18 - 2016-01-22 06:38 - 00091136 _____ (Microsoft Corporation) C:\windows\SysWOW64\inseng.dll
2016-02-10 12:18 - 2016-01-22 06:37 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2016-02-10 12:18 - 2016-01-22 06:35 - 04611072 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2016-02-10 12:18 - 2016-01-22 06:35 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2016-02-10 12:18 - 2016-01-22 06:34 - 00279040 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2016-02-10 12:18 - 2016-01-22 06:33 - 00130048 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll
2016-02-10 12:18 - 2016-01-22 06:31 - 02597376 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2016-02-10 12:18 - 2016-01-22 06:27 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll
2016-02-10 12:18 - 2016-01-22 06:25 - 00687104 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2016-02-10 12:18 - 2016-01-22 06:24 - 02050560 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2016-02-10 12:18 - 2016-01-22 06:24 - 01155072 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2016-02-10 12:18 - 2016-01-22 06:08 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2016-02-10 12:18 - 2016-01-22 06:07 - 02120704 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2016-02-10 12:18 - 2016-01-22 06:02 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2016-02-10 12:18 - 2016-01-16 20:06 - 00025024 _____ (Microsoft Corporation) C:\windows\system32\CompatTelRunner.exe
2016-02-10 12:18 - 2016-01-16 19:54 - 01162240 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2016-02-10 12:18 - 2016-01-11 20:05 - 03169792 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2016-02-10 12:18 - 2016-01-11 20:05 - 00192512 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2016-02-10 12:18 - 2016-01-11 20:05 - 00098816 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2016-02-10 12:18 - 2016-01-11 19:52 - 00091136 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll
2016-02-10 12:18 - 2016-01-11 19:47 - 00174080 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2016-02-10 12:18 - 2016-01-11 19:26 - 02610176 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2016-02-10 12:18 - 2016-01-11 19:24 - 00709120 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2016-02-10 12:18 - 2016-01-11 19:23 - 00140288 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2016-02-10 12:18 - 2016-01-11 19:23 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2016-02-10 12:18 - 2016-01-11 19:23 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2016-02-10 12:18 - 2016-01-11 19:23 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2016-02-10 12:18 - 2016-01-11 19:23 - 00012288 _____ (Microsoft Corporation) C:\windows\system32\wu.upgrade.ps.dll
2016-02-10 12:18 - 2016-01-11 19:14 - 00573440 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2016-02-10 12:18 - 2016-01-11 19:14 - 00093696 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2016-02-10 12:18 - 2016-01-11 19:14 - 00035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2016-02-10 12:18 - 2016-01-11 19:14 - 00030208 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll
2016-02-10 12:18 - 2016-01-11 15:08 - 01362944 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll
2016-02-10 12:18 - 2016-01-11 15:08 - 00696320 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll
2016-02-10 12:18 - 2016-01-11 15:08 - 00677376 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll
2016-02-10 12:18 - 2016-01-11 15:08 - 00499200 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll
2016-02-10 12:18 - 2016-01-11 15:08 - 00076800 _____ (Microsoft Corporation) C:\windows\system32\acmigration.dll
2016-02-10 12:18 - 2016-01-07 18:53 - 03211776 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2016-02-10 12:18 - 2016-01-07 18:42 - 00141312 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys
2016-02-10 12:18 - 2016-01-06 20:02 - 00275456 _____ (Microsoft Corporation) C:\windows\system32\InkEd.dll
2016-02-10 12:18 - 2016-01-06 20:02 - 00024576 _____ (Microsoft Corporation) C:\windows\system32\jnwmon.dll
2016-02-10 12:18 - 2016-01-06 19:41 - 00216064 _____ (Microsoft Corporation) C:\windows\SysWOW64\InkEd.dll
2016-02-10 12:18 - 2015-12-20 19:50 - 03180544 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll
2016-02-10 12:18 - 2015-12-20 19:50 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\RdpGroupPolicyExtension.dll
2016-02-10 12:18 - 2015-12-20 15:08 - 00243200 _____ (Microsoft Corporation) C:\windows\system32\rdpudd.dll
2016-02-10 12:17 - 2016-01-22 07:27 - 05573056 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2016-02-10 12:17 - 2016-01-22 07:27 - 00154560 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2016-02-10 12:17 - 2016-01-22 07:27 - 00095680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2016-02-10 12:17 - 2016-01-22 07:24 - 01733592 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2016-02-10 12:17 - 2016-01-22 07:20 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2016-02-10 12:17 - 2016-01-22 07:20 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll
2016-02-10 12:17 - 2016-01-22 07:20 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2016-02-10 12:17 - 2016-01-22 07:20 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2016-02-10 12:17 - 2016-01-22 07:20 - 00210432 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2016-02-10 12:17 - 2016-01-22 07:20 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2016-02-10 12:17 - 2016-01-22 07:20 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2016-02-10 12:17 - 2016-01-22 07:20 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2016-02-10 12:17 - 2016-01-22 07:20 - 00028672 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2016-02-10 12:17 - 2016-01-22 07:20 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2016-02-10 12:17 - 2016-01-22 07:19 - 01214464 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2016-02-10 12:17 - 2016-01-22 07:19 - 00344064 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2016-02-10 12:17 - 2016-01-22 07:19 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2016-02-10 12:17 - 2016-01-22 07:18 - 00961024 _____ (Microsoft Corporation) C:\windows\system32\CPFilters.dll
2016-02-10 12:17 - 2016-01-22 07:18 - 00723968 _____ (Microsoft Corporation) C:\windows\system32\EncDec.dll
2016-02-10 12:17 - 2016-01-22 07:18 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2016-02-10 12:17 - 2016-01-22 07:17 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2016-02-10 12:17 - 2016-01-22 07:17 - 00312320 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2016-02-10 12:17 - 2016-01-22 07:17 - 00159744 _____ (Microsoft Corporation) C:\windows\system32\mtxoci.dll
2016-02-10 12:17 - 2016-01-22 07:16 - 01461248 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2016-02-10 12:17 - 2016-01-22 07:16 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2016-02-10 12:17 - 2016-01-22 07:16 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll
2016-02-10 12:17 - 2016-01-22 07:15 - 01163264 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2016-02-10 12:17 - 2016-01-22 07:15 - 00730112 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2016-02-10 12:17 - 2016-01-22 07:15 - 00422400 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2016-02-10 12:17 - 2016-01-22 07:13 - 03993536 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2016-02-10 12:17 - 2016-01-22 07:13 - 03938752 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2016-02-10 12:17 - 2016-01-22 07:13 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2016-02-10 12:17 - 2016-01-22 07:13 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\cryptbase.dll
2016-02-10 12:17 - 2016-01-22 07:13 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2016-02-10 12:17 - 2016-01-22 07:12 - 00880128 _____ (Microsoft Corporation) C:\windows\system32\advapi32.dll
2016-02-10 12:17 - 2016-01-22 07:12 - 00686080 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2016-02-10 12:17 - 2016-01-22 07:12 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2016-02-10 12:17 - 2016-01-22 07:12 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 07:12 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 07:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 07:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 07:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 07:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 07:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 07:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 07:09 - 01314328 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2016-02-10 12:17 - 2016-01-22 07:06 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2016-02-10 12:17 - 2016-01-22 07:06 - 00665088 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2016-02-10 12:17 - 2016-01-22 07:06 - 00275456 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2016-02-10 12:17 - 2016-01-22 07:06 - 00171520 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2016-02-10 12:17 - 2016-01-22 07:06 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2016-02-10 12:17 - 2016-01-22 07:06 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2016-02-10 12:17 - 2016-01-22 07:06 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll
2016-02-10 12:17 - 2016-01-22 07:06 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2016-02-10 12:17 - 2016-01-22 07:05 - 00251392 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2016-02-10 12:17 - 2016-01-22 07:05 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2016-02-10 12:17 - 2016-01-22 07:04 - 00642048 _____ (Microsoft Corporation) C:\windows\SysWOW64\CPFilters.dll
2016-02-10 12:17 - 2016-01-22 07:04 - 00535040 _____ (Microsoft Corporation) C:\windows\SysWOW64\EncDec.dll
2016-02-10 12:17 - 2016-01-22 07:02 - 00553472 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2016-02-10 12:17 - 2016-01-22 07:02 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2016-02-10 12:17 - 2016-01-22 07:02 - 00223232 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2016-02-10 12:17 - 2016-01-22 07:02 - 00176128 _____ (Microsoft Corporation) C:\windows\SysWOW64\msorcl32.dll
2016-02-10 12:17 - 2016-01-22 07:02 - 00146432 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll
2016-02-10 12:17 - 2016-01-22 07:02 - 00114176 _____ (Microsoft Corporation) C:\windows\SysWOW64\mtxoci.dll
2016-02-10 12:17 - 2016-01-22 07:02 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\msobjs.dll
2016-02-10 12:17 - 2016-01-22 06:59 - 00686080 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll
2016-02-10 12:17 - 2016-01-22 06:59 - 00642560 _____ (Microsoft Corporation) C:\windows\SysWOW64\advapi32.dll
2016-02-10 12:17 - 2016-01-22 06:59 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2016-02-10 12:17 - 2016-01-22 06:59 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll
2016-02-10 12:17 - 2016-01-22 06:59 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 06:59 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 06:13 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe
2016-02-10 12:17 - 2016-01-22 06:07 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2016-02-10 12:17 - 2016-01-22 06:07 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\auditpol.exe
2016-02-10 12:17 - 2016-01-22 06:05 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2016-02-10 12:17 - 2016-01-22 05:59 - 00159232 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2016-02-10 12:17 - 2016-01-22 05:58 - 00290816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys
2016-02-10 12:17 - 2016-01-22 05:58 - 00129024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2016-02-10 12:17 - 2016-01-22 05:57 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2016-02-10 12:17 - 2016-01-22 05:57 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2016-02-10 12:17 - 2016-01-22 05:53 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2016-02-10 12:17 - 2016-01-22 05:53 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2016-02-10 12:17 - 2016-01-22 05:53 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2016-02-10 12:17 - 2016-01-22 05:53 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2016-02-10 12:17 - 2016-01-22 05:51 - 00036352 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptbase.dll
2016-02-10 12:17 - 2016-01-22 05:51 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 05:51 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 05:51 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-02-10 12:17 - 2016-01-22 05:51 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-02-10 12:17 - 2016-01-16 20:01 - 02085888 _____ (Microsoft Corporation) C:\windows\system32\ole32.dll
2016-02-10 12:17 - 2016-01-16 19:36 - 01413632 _____ (Microsoft Corporation) C:\windows\SysWOW64\ole32.dll
2016-02-10 12:16 - 2016-01-22 07:19 - 14179840 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2016-02-10 12:16 - 2016-01-22 07:15 - 01866752 _____ (Microsoft Corporation) C:\windows\system32\ExplorerFrame.dll
2016-02-10 12:16 - 2016-01-22 07:12 - 01940992 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
2016-02-10 12:16 - 2016-01-22 07:05 - 12877824 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2016-02-10 12:16 - 2016-01-22 07:00 - 01498624 _____ (Microsoft Corporation) C:\windows\SysWOW64\ExplorerFrame.dll
2016-02-10 12:16 - 2016-01-22 06:59 - 01805824 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll
2016-02-10 12:16 - 2016-01-22 06:19 - 03231232 _____ (Microsoft Corporation) C:\windows\explorer.exe
2016-02-10 12:16 - 2016-01-22 06:12 - 02973184 _____ (Microsoft Corporation) C:\windows\SysWOW64\explorer.exe
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-02-26 13:27 - 2009-07-14 05:45 - 00031536 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-02-26 13:27 - 2009-07-14 05:45 - 00031536 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-02-26 13:10 - 2012-11-06 15:24 - 00000546 _____ C:\windows\Tasks\MATLAB R2012b Startup Accelerator.job
2016-02-26 13:00 - 2016-01-02 15:14 - 00003198 _____ C:\windows\System32\Tasks\HPCeeScheduleForeit-dre
2016-02-26 13:00 - 2016-01-02 15:14 - 00000340 _____ C:\windows\Tasks\HPCeeScheduleForeit-dre.job
2016-02-26 12:55 - 2012-05-17 23:01 - 00000830 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2016-02-26 12:44 - 2012-11-06 12:27 - 00000994 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-02-26 12:39 - 2009-07-14 04:20 - 00000000 ____D C:\windows\tracing
2016-02-26 11:44 - 2012-11-06 12:27 - 00000990 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-02-26 11:10 - 2012-05-17 23:00 - 00000000 ____D C:\ProgramData\PDFC
2016-02-26 10:18 - 2014-08-26 13:16 - 00003910 _____ C:\windows\System32\Tasks\User_Feed_Synchronization-{17E08096-C81C-436E-BA69-5F5F34E58D43}
2016-02-26 10:09 - 2015-03-17 20:35 - 00065536 _____ C:\windows\system32\Ikeext.etl
2016-02-26 10:09 - 2009-07-14 06:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2016-02-25 18:21 - 2015-12-26 15:16 - 00000000 ____D C:\Users\eit-dre\AppData\Roaming\KeePass
2016-02-25 11:28 - 2009-07-14 04:20 - 00000000 ___HD C:\windows\system32\GroupPolicy
2016-02-25 11:22 - 2012-10-19 10:51 - 00002117 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2016-02-25 11:22 - 2012-10-19 10:51 - 00001945 _____ C:\windows\epplauncher.mif
2016-02-25 11:21 - 2012-10-19 10:51 - 00000000 ____D C:\Program Files\Microsoft Security Client
2016-02-25 11:21 - 2012-10-19 10:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2016-02-22 10:07 - 2012-05-17 22:52 - 00780924 _____ C:\windows\SysWOW64\PerfStringBackup.INI
2016-02-22 10:07 - 2009-07-14 06:13 - 00780924 _____ C:\windows\system32\PerfStringBackup.INI
2016-02-22 10:07 - 2009-07-14 04:20 - 00000000 ____D C:\windows\inf
2016-02-19 21:45 - 2012-11-06 12:28 - 00002168 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-02-19 14:33 - 2014-08-26 19:39 - 00000000 ____D C:\Users\eit-dre\AppData\Roaming\vlc
2016-02-13 09:43 - 2012-11-17 17:17 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-02-12 11:04 - 2009-07-14 04:20 - 00000000 ____D C:\windows\rescache
2016-02-12 07:33 - 2014-08-26 13:14 - 00000000 ____D C:\Users\eit-dre
2016-02-11 12:11 - 2009-07-14 05:45 - 00536056 _____ C:\windows\system32\FNTCACHE.DAT
2016-02-11 12:08 - 2014-12-11 03:26 - 00000000 ____D C:\windows\system32\appraiser
2016-02-11 12:08 - 2014-05-15 11:19 - 00000000 ___SD C:\windows\system32\CompatTel
2016-02-11 12:08 - 2012-05-17 21:33 - 00000000 ____D C:\Program Files\Windows Journal
2016-02-11 11:53 - 2013-08-14 09:22 - 00000000 ____D C:\windows\system32\MRT
2016-02-11 11:40 - 2012-11-05 16:48 - 146614896 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2016-02-11 11:36 - 2009-07-14 03:34 - 00000478 _____ C:\windows\win.ini
2016-02-10 23:42 - 2013-11-27 22:21 - 00000000 ____D C:\CBackup
2016-02-10 16:55 - 2012-05-17 23:01 - 00796864 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2016-02-10 16:55 - 2012-05-17 23:01 - 00142528 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-02-10 16:55 - 2012-05-17 23:01 - 00003768 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2016-02-05 11:39 - 2012-11-06 12:27 - 00003990 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-02-05 11:39 - 2012-11-06 12:27 - 00003738 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-02-05 05:02 - 2015-04-05 10:15 - 00000000 ___SD C:\windows\system32\GWX
2016-02-05 05:02 - 2012-11-06 10:35 - 00000000 ____D C:\Users\dejan
2016-02-05 05:02 - 2012-11-06 00:47 - 00000000 ____D C:\Users\jw
2016-02-05 05:02 - 2012-11-06 00:03 - 00000000 ____D C:\Users\idi
2016-02-05 05:02 - 2009-07-14 04:20 - 00000000 ____D C:\windows\registration
2016-01-30 11:19 - 2015-12-26 15:15 - 00001081 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeePass 2.lnk
2016-01-30 11:19 - 2015-12-26 15:15 - 00000000 ____D C:\Program Files (x86)\KeePass Password Safe 2
==================== Files in the root of some directories =======
2014-12-23 14:04 - 2014-12-23 16:01 - 0003908 _____ () C:\Users\eit-dre\AppData\Roaming\LTspiceIV.ini
2016-01-14 18:35 - 2016-01-14 18:35 - 0004302 _____ () C:\Users\eit-dre\AppData\Local\recently-used.xbel
2015-08-10 12:09 - 2015-09-28 13:17 - 0089216 _____ () C:\ProgramData\hpcsmmsilogs.log
Some files in TEMP:
====================
C:\Users\dejan\AppData\Local\Temp\APNStub.exe
C:\Users\dejan\AppData\Local\Temp\AtpTimerInfo.dll
C:\Users\dejan\AppData\Local\Temp\Extract.exe
C:\Users\dejan\AppData\Local\Temp\HPHelpUpdater.exe
C:\Users\dejan\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe
C:\Users\dejan\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\dejan\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\dejan\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\dejan\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\dejan\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\dejan\AppData\Local\Temp\Resource.exe
C:\Users\dejan\AppData\Local\Temp\setup.exe
C:\Users\dejan\AppData\Local\Temp\SkypeSetup.exe
C:\Users\dejan\AppData\Local\Temp\SP56729.exe
C:\Users\dejan\AppData\Local\Temp\SP57009.exe
C:\Users\dejan\AppData\Local\Temp\SP57486.exe
C:\Users\dejan\AppData\Local\Temp\SP57489.exe
C:\Users\dejan\AppData\Local\Temp\SP57522.exe
C:\Users\dejan\AppData\Local\Temp\SP57555.exe
C:\Users\dejan\AppData\Local\Temp\SP57556.exe
C:\Users\dejan\AppData\Local\Temp\SP57558.exe
C:\Users\dejan\AppData\Local\Temp\SP57837.exe
C:\Users\dejan\AppData\Local\Temp\SP58116.exe
C:\Users\dejan\AppData\Local\Temp\SP58152.exe
C:\Users\dejan\AppData\Local\Temp\SP58266.exe
C:\Users\dejan\AppData\Local\Temp\SP58268.exe
C:\Users\dejan\AppData\Local\Temp\SP58322.exe
C:\Users\dejan\AppData\Local\Temp\SP58647.exe
C:\Users\dejan\AppData\Local\Temp\SP58778.exe
C:\Users\dejan\AppData\Local\Temp\SP58940.exe
C:\Users\dejan\AppData\Local\Temp\SP59033.exe
C:\Users\dejan\AppData\Local\Temp\SP59043.exe
C:\Users\dejan\AppData\Local\Temp\SP59068.exe
C:\Users\dejan\AppData\Local\Temp\SP59202.exe
C:\Users\dejan\AppData\Local\Temp\SP59240.exe
C:\Users\dejan\AppData\Local\Temp\SP59257.exe
C:\Users\dejan\AppData\Local\Temp\SP59282.exe
C:\Users\dejan\AppData\Local\Temp\SP59285.exe
C:\Users\dejan\AppData\Local\Temp\SP59343.exe
C:\Users\dejan\AppData\Local\Temp\SP59346.exe
C:\Users\dejan\AppData\Local\Temp\SP59406.exe
C:\Users\dejan\AppData\Local\Temp\SP59426.exe
C:\Users\dejan\AppData\Local\Temp\SP59529.exe
C:\Users\dejan\AppData\Local\Temp\SP59530.exe
C:\Users\dejan\AppData\Local\Temp\SP59545.exe
C:\Users\dejan\AppData\Local\Temp\SP59885.exe
C:\Users\dejan\AppData\Local\Temp\SP59982.exe
C:\Users\dejan\AppData\Local\Temp\SP60031.exe
C:\Users\dejan\AppData\Local\Temp\SP60095.exe
C:\Users\dejan\AppData\Local\Temp\SP60258.exe
C:\Users\dejan\AppData\Local\Temp\SP60317.exe
C:\Users\dejan\AppData\Local\Temp\SP60623.exe
C:\Users\dejan\AppData\Local\Temp\SP60686.exe
C:\Users\dejan\AppData\Local\Temp\SP60734.exe
C:\Users\dejan\AppData\Local\Temp\SP60775.exe
C:\Users\dejan\AppData\Local\Temp\SP60812.exe
C:\Users\dejan\AppData\Local\Temp\SP60832.exe
C:\Users\dejan\AppData\Local\Temp\SP60921.exe
C:\Users\dejan\AppData\Local\Temp\SP61040.exe
C:\Users\dejan\AppData\Local\Temp\SP61293.exe
C:\Users\dejan\AppData\Local\Temp\SP61294.exe
C:\Users\dejan\AppData\Local\Temp\SP61374.exe
C:\Users\dejan\AppData\Local\Temp\SP61411.exe
C:\Users\dejan\AppData\Local\Temp\SP61422.exe
C:\Users\dejan\AppData\Local\Temp\SP61441.exe
C:\Users\dejan\AppData\Local\Temp\SP61822.exe
C:\Users\dejan\AppData\Local\Temp\SP61872.exe
C:\Users\dejan\AppData\Local\Temp\SP61962.exe
C:\Users\dejan\AppData\Local\Temp\SP62171.exe
C:\Users\dejan\AppData\Local\Temp\SP62370.exe
C:\Users\dejan\AppData\Local\Temp\SP62449.exe
C:\Users\dejan\AppData\Local\Temp\SP62737.exe
C:\Users\dejan\AppData\Local\Temp\SP62783.exe
C:\Users\dejan\AppData\Local\Temp\SP62916.exe
C:\Users\dejan\AppData\Local\Temp\SP62981.exe
C:\Users\dejan\AppData\Local\Temp\SP63337.exe
C:\Users\dejan\AppData\Local\Temp\SP63565.exe
C:\Users\dejan\AppData\Local\Temp\SP63637.exe
C:\Users\dejan\AppData\Local\Temp\SP63661.exe
C:\Users\dejan\AppData\Local\Temp\SP63709.exe
C:\Users\dejan\AppData\Local\Temp\SP63779.exe
C:\Users\dejan\AppData\Local\Temp\SP63854.exe
C:\Users\dejan\AppData\Local\Temp\sp64126.exe
C:\Users\dejan\AppData\Local\Temp\SP64284.exe
C:\Users\dejan\AppData\Local\Temp\SP64316.exe
C:\Users\dejan\AppData\Local\Temp\SP64757.exe
C:\Users\dejan\AppData\Local\Temp\SP65266.exe
C:\Users\dejan\AppData\Local\Temp\SP65270.exe
C:\Users\dejan\AppData\Local\Temp\SP65563.exe
C:\Users\dejan\AppData\Local\Temp\SP65581.exe
C:\Users\dejan\AppData\Local\Temp\SP65628.exe
C:\Users\dejan\AppData\Local\Temp\SP65953.exe
C:\Users\dejan\AppData\Local\Temp\SP66111.exe
C:\Users\dejan\AppData\Local\Temp\SP66235.exe
C:\Users\dejan\AppData\Local\Temp\SP66487.exe
C:\Users\dejan\AppData\Local\Temp\UninstallHPSA.exe
C:\Users\dejan\AppData\Local\Temp\vlc-2.0.7-win32.exe
C:\Users\eit-dre\AppData\Local\Temp\APNSetup.exe
C:\Users\eit-dre\AppData\Local\Temp\AtpTimerInfo.dll
C:\Users\eit-dre\AppData\Local\Temp\Extract.exe
C:\Users\eit-dre\AppData\Local\Temp\HPSFUpdater.exe
C:\Users\eit-dre\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
C:\Users\eit-dre\AppData\Local\Temp\SkypeSetup.exe
C:\Users\eit-dre\AppData\Local\Temp\SP65593.exe
C:\Users\eit-dre\AppData\Local\Temp\SP65637.exe
C:\Users\eit-dre\AppData\Local\Temp\SP66054.exe
C:\Users\eit-dre\AppData\Local\Temp\SP66915.exe
C:\Users\eit-dre\AppData\Local\Temp\SP67464.exe
C:\Users\eit-dre\AppData\Local\Temp\SP68380.exe
C:\Users\eit-dre\AppData\Local\Temp\SP69840.exe
C:\Users\eit-dre\AppData\Local\Temp\SP70478.exe
C:\Users\eit-dre\AppData\Local\Temp\SP71172.exe
C:\Users\eit-dre\AppData\Local\Temp\UninstallHPSA.exe
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\windows\system32\winlogon.exe => File is digitally signed
C:\windows\system32\wininit.exe => File is digitally signed
C:\windows\SysWOW64\wininit.exe => File is digitally signed
C:\windows\explorer.exe => File is digitally signed
C:\windows\SysWOW64\explorer.exe => File is digitally signed
C:\windows\system32\svchost.exe => File is digitally signed
C:\windows\SysWOW64\svchost.exe => File is digitally signed
C:\windows\system32\services.exe => File is digitally signed
C:\windows\system32\User32.dll => File is digitally signed
C:\windows\SysWOW64\User32.dll => File is digitally signed
C:\windows\system32\userinit.exe => File is digitally signed
C:\windows\SysWOW64\userinit.exe => File is digitally signed
C:\windows\system32\rpcss.dll => File is digitally signed
C:\windows\system32\dnsapi.dll => File is digitally signed
C:\windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2016-02-18 18:33
==================== End of FRST.txt ============================
Additional scan result of Farbar Recovery Scan Tool (x64) Version:24-02-2016
Ran by eit-dre (2016-02-26 13:35:50)
Running from C:\Downloads\eit-dre\Downloads
Windows 7 Professional Service Pack 1 (X64) (2012-11-05 23:03:11)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-386891249-1060594161-48737798-500 - Administrator - Disabled)
ASPNET (S-1-5-21-386891249-1060594161-48737798-1003 - Limited - Enabled)
Guest (S-1-5-21-386891249-1060594161-48737798-501 - Limited - Disabled)
idi (S-1-5-21-386891249-1060594161-48737798-1001 - Administrator - Enabled) => C:\Users\idi
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Microsoft Security Essentials (Enabled - Up to date) {768124D7-F5F7-6D2F-DDC2-94DFA4017C95}
AS: Microsoft Security Essentials (Enabled - Up to date) {CDE0C533-D3CD-62A1-E772-AFADDF863628}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
64 Bit HP BiDi Channel Components Installer (Version: 1.2.0.2 - Hewlett-Packard) Hidden
7-Zip 4.42 (HKLM-x32\...\{23170F69-40C1-2701-0442-000001000000}) (Version: 4.42.00.0 - Igor Pavlov)
Adobe Flash Player 20 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 20.0.0.306 - Adobe Systems Incorporated)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.306 - Adobe Systems Incorporated)
Adobe Reader 9.1 (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-A91000000001}) (Version: 9.1.0 - Adobe Systems Incorporated)
Adobe Shockwave Player (HKLM-x32\...\{A7DB362E-16DC-4E29-8A34-E74381E00B5B}) (Version: 10.1.4.020 - Adobe Systems, Inc.)
Alcor Micro Smart Card Reader Driver (HKLM-x32\...\SZCCID) (Version: 1.7.39.0 - Alcor Micro Corp.)
Alcor Micro Smart Card Reader Driver (x32 Version: 1.7.39.0 - Alcor Micro Corp.) Hidden
AlternaTIFF (HKLM-x32\...\{B05E57BB-2E91-48E1-A3D9-263952375BFA}) (Version: 1.7.6 - DDG LTH)
Application Verifier (x64) (HKLM\...\{89026002-A893-42D9-9E20-6829B844735E}) (Version: 4.1.1078 - Microsoft Corporation)
ArcSoft Webcam Sharing Manager (HKLM-x32\...\{190A7D93-3823-439C-91B9-ADCE3EC2A6A2}) (Version: 2.0.0.39 - ArcSoft)
Audacity 2.1.1 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.1 - Audacity Team)
BankID säkerhetsprogram (HKLM-x32\...\{BF2AF534-AB4A-42CC-9292-6A7998750034}) (Version: 7.0.1.8 - Finansiell ID-Teknik BID AB)
Bing Bar (HKLM-x32\...\{3365E735-48A6-4194-9988-CE59AC5AE503}) (Version: 7.3.132.0 - Microsoft Corporation)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Broadcom Bluetooth Software (HKLM\...\{A1439D4F-FD46-47F2-A1D3-FEE097C29A09}) (Version: 6.5.1.2300 - Broadcom Corporation)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
Debugging Tools for Windows (x64) (HKLM\...\{DBFC6AAE-DCCB-4C23-B01C-3EDDDC03298B}) (Version: 6.12.2.633 - Microsoft Corporation)
Device Access Manager for HP ProtectTools (HKLM\...\{55B52830-024A-443E-AF61-61E1E71AFA1B}) (Version: 7.1.1.0 - Hewlett-Packard Company)
DirectX 9 Runtime (x32 Version: 1.00.0000 - Sonic Solutions) Hidden
Drive Encryption For HP ProtectTools (HKLM\...\{27F1E086-5691-4EB8-8BA1-5CBA87D67EB5}) (Version: 7.0.41.36204 - Hewlett-Packard Company)
EAGLE 6.5.0 (HKLM-x32\...\EAGLE 6.5.0) (Version: 6.5.0 - CadSoft Computer GmbH)
Energy Star Digital Logo (HKLM-x32\...\{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}) (Version: 1.0.1 - Hewlett-Packard)
Face Recognition for HP ProtectTools (HKLM\...\Face Recognition for HP ProtectTools) (Version: 7.2.2.4549 - Hewlett-Packard Company)
Face Recognition for HP ProtectTools (Version: 7.2.2.4549 - Hewlett-Packard Company) Hidden
FFmpeg (Windows) for Audacity version 2.2.2 (HKLM-x32\...\{9C7E31E3-017F-434C-AC40-24431A354A1E}_is1) (Version: 2.2.2 - )
FileZilla (HKLM-x32\...\{0BFD9739-3B65-4F86-B2D5-3874FD5471D6}) (Version: 2.2.29 - [email protected])
FortiClient SSLVPN v4.0.2148 (HKLM-x32\...\{A34DCE59-0004-0000-2148-3F8A9926B752}) (Version: 4.0.2148 - Fortinet Inc.)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 48.0.2564.116 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden
GPL Ghostscript (HKLM\...\GPL Ghostscript 9.06) (Version: 9.06 - Artifex Software Inc.)
GPOfix (HKLM-x32\...\{BD0ACE3B-109F-4C1F-A848-5E3F80A6117C}) (Version: 1.0.0 - [email protected])
GSview 5.0 (HKLM\...\GSview 5.0) (Version: 5.0 - Ghostgum Software Pty Ltd)
Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP 3D DriveGuard (HKLM\...\{6C8684DD-B238-4806-9E93-BDD12CD11998}) (Version: 5.1.12.1 - Hewlett-Packard Company)
HP Connection Manager (HKLM-x32\...\{C0ED9561-8312-457C-BB1B-BDC7EE034CED}) (Version: 4.7.4.1 - Hewlett-Packard Company)
HP Documentation (HKLM-x32\...\{8B2A1CFD-8F88-4081-9E18-99395CC27EE6}) (Version: 1.1.0.0 - Hewlett-Packard)
HP ESU for Microsoft Windows 7 (HKLM-x32\...\{240B2BF7-E7E6-425C-A2A4-A3149189BF7F}) (Version: 2.3.1 - Hewlett-Packard Company)
HP File Sanitizer (HKLM-x32\...\{6D6ADF03-B257-4EA5-BBC1-1D145AF8D514}) (Version: 8.1.1.1 - Hewlett-Packard Company)
HP HD Webcam Driver (HKLM-x32\...\{399C37FB-08AF-493B-BFED-20FBD85EDF7F}) (Version: 6.0.1113.1_WHQL - Sonix)
HP Hotkey Support (HKLM-x32\...\{53C48A27-4079-49EB-8E73-76BA85D2BF6F}) (Version: 5.0.24.1 - Hewlett-Packard Company)
HP Power Assistant (HKLM\...\{84642787-58C0-44AE-8B26-E2F544E380A1}) (Version: 2.5.0.16 - Hewlett-Packard Company)
HP ProtectTools Security Manager (HKLM\...\HPProtectTools) (Version: 7.0.2.1213 - Hewlett-Packard Company)
HP Setup (HKLM-x32\...\{438363A8-F486-4C37-834C-4955773CB3D3}) (Version: 9.1.15453.4066 - Hewlett-Packard Company)
HP SoftPaq Download Manager (HKLM-x32\...\{FE465061-894A-4023-8580-56FCDD4F23F9}) (Version: 3.4.4.0 - Hewlett-Packard Company)
HP Software Framework (HKLM-x32\...\{21E6AD46-62D8-45B7-ADB7-BC6A80D4B54F}) (Version: 4.6.10.1 - Hewlett-Packard Company)
HP Software Setup (HKLM-x32\...\{658A8756-7B1E-44FD-A434-D777DD906232}) (Version: 8.5.2.1 - Hewlett-Packard Company)
HP Support Assistant (HKLM-x32\...\{79C54A05-F146-4EA0-8A70-D4EFE6181E52}) (Version: 8.1.40.3 - Hewlett-Packard Company)
HP Support Solutions Framework (HKLM-x32\...\{A0E89543-3D17-4218-A28A-06D037E0BF46}) (Version: 12.0.30.219 - Hewlett-Packard Company)
HP System Default Settings (HKLM-x32\...\{3A61A282-4F08-4D43-920C-DC30ECE528E8}) (Version: 2.6.1 - Hewlett-Packard Company)
HP Wallpaper (HKLM-x32\...\{11C9A461-DD9D-4C71-85A4-6DCE7F99CC44}) (Version: 3.0.0.1 - Hewlett-Packard Company)
HP Webcam (HKLM-x32\...\{1D61E881-43CD-447B-9E6B-D2C6138B2862}) (Version: 1.0.27.17 - Roxio)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6435.0 - IDT)
Inkscape 0.48.4 (HKLM-x32\...\Inkscape) (Version: 0.48.4 - )
Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.30.1349 - Intel Corporation)
Intel® Network Connections Drivers (HKLM\...\PROSet) (Version: 19.2 - Intel)
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3621 - Intel Corporation)
Intel® Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.1.5.1001 - Intel Corporation)
Intel® SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.60174 - Intel Corporation)
Intel® USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.10.255 - Intel Corporation)
Java 8 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218071F0}) (Version: 8.0.710.15 - Oracle Corporation)
JMicron 1394 Filter Driver (HKLM-x32\...\{13C96625-28E4-4c58-ADE0-CDAFC64752EB}) (Version: 1.00.25.03 - JMicron Technology Corp.)
JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.76.1 - JMicron Technology Corp.)
KeePass Password Safe 2.31 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.31 - Dominik Reichl)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
Logon Background (HKLM-x32\...\{8A497300-B47E-45DF-8438-BEFE746EDD61}) (Version: 1.0.0 - [email protected])
LTspice IV (HKLM-x32\...\LTspice IV) (Version: - )
LU-Typsnitt (HKLM-x32\...\{BE521FF7-4303-42C0-B9F5-8CF5619005C5}) (Version: 1.0 - Default Manufacturer)
MagicDisc 2.7.106 (HKLM-x32\...\MagicDisc 2.7.106) (Version: - )
Maple 16 (HKLM\...\Maple 16) (Version: - Maplesoft)
Maple 16 (HKLM-x32\...\Maple 16) (Version: 16.0.0.0 - Maplesoft)
MathType 6 (HKLM-x32\...\DSMT6) (Version: 6.7 - Design Science, Inc.)
MATLAB R2012b (HKLM\...\Matlab R2012b) (Version: 8.0 - The MathWorks, Inc.)
Microsoft .NET Framework 1.1 (HKLM-x32\...\Microsoft .NET Framework 1.1 (1033)) (Version: - )
Microsoft .NET Framework 1.1 Hotfix (KB886903) (HKLM-x32\...\M886903) (Version: - )
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Help Viewer 1.0 (HKLM\...\Microsoft Help Viewer 1.0) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Office 2010 Primary Interop Assemblies (HKLM-x32\...\{90140000-1105-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1024 - Microsoft Corporation)
Microsoft Office Language Pack 2010 - Swedish/svenska (HKLM\...\Office14.OMUI.sv-se) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.9.218.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft Windows Performance Toolkit (HKLM\...\{E7F9E526-2324-437B-A609-E8C5309465CB}) (Version: 4.8.0 - Microsoft Corporation)
Microsoft Windows SDK for Windows 7 (7.1) (HKLM\...\SDKSetup_7.1.7600.0.30514) (Version: 7.1.7600.0.30514 - Microsoft Corporation)
Microsoft Visual C++ Compilers 2010 Standard - enu - x64 (HKLM\...\{88387B3B-B110-392F-B919-1A15B48F21D4}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ Compilers 2010 Standard - enu - x86 (HKLM-x32\...\{370187B9-6964-38D0-851F-6C4898B0C2B1}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
MiKTeX 2.9 (HKLM-x32\...\MiKTeX 2.9) (Version: 2.9 - MiKTeX.org)
Mozilla Firefox 44.0.2 (x86 sv-SE) (HKLM-x32\...\Mozilla Firefox 44.0.2 (x86 sv-SE)) (Version: 44.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 44.0.2.5884 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
opensource (x32 Version: 1.0.14960.3876 - Your Company Name) Hidden
PDF Complete Corporate Edition (HKLM-x32\...\PDF Complete) (Version: 4.1.50 - PDF Complete, Inc)
Privacy Manager for HP ProtectTools (HKLM\...\{29AB47F0-C5A3-401F-8A84-3324F2DC8E46}) (Version: 7.0.1.892 - Hewlett-Packard Company)
Programmers Notepad (HKLM-x32\...\{98CCA23B-AA06-48C6-BCD4-3B2742F4F03B}) (Version: 2.0.6.1 - [email protected])
pstoedit and importps 3.61 (HKLM\...\pstoedit and importps_is1) (Version: 3.61 - H&W Glunz)
PuTTY (HKLM-x32\...\{4C2ED1F6-0E74-4E7F-A783-C9253BD1BB3A}) (Version: 0.59 - DDG LTH)
Qualcomm Atheros Driver Installation Program (HKLM-x32\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 10.0 - Qualcomm Atheros)
QuickTime (HKLM-x32\...\{7BE15435-2D3E-4B58-867F-9C75BED0208C}) (Version: 7.71.80.42 - Apple Inc.)
RBVirtualFolder64Inst (Version: 1.00.0000 - Roxio, Inc.) Hidden
Real Alternative (HKLM-x32\...\{64B762C5-7AFC-4E73-B7D2-2267561A16E3}) (Version: 1.49 - [email protected])
Riffstation Trial version 1.531 (HKLM-x32\...\{C3BDCDF6-ED06-426D-B46B-59427DF2A03D}_is1) (Version: 1.531 - Sonic Ladder Ltd)
Roxio MyDVD Business 2010 (HKLM-x32\...\{9CB4FBA9-45C0-41AA-97CC-283B42E1A21E}) (Version: 12.1.79.10 - Roxio)
Roxio Secure Burn (HKLM-x32\...\{B2E47DE7-800B-40BB-BD1F-9F221C3AEE87}) (Version: 2.0.31.24 - Roxio)
SDK (x32 Version: 2.30.042 - Portrait Displays, Inc.) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 Language Pack (KB2687449) 64-Bit Edition (HKLM\...\{90140000-0100-041D-1000-0000000FF1CE}_Office14.OMUI.sv-se_{71A99ACA-59B5-4AE4-A9E9-4D8D261F238C}) (Version: - Microsoft)
Service Pack 2 for Microsoft Office 2010 Language Pack (KB2687449) 64-Bit Edition (Version: - Microsoft) Hidden
Shadow Copy Client (HKLM-x32\...\{23E5032B-56CA-4C19-A72E-B50161DB82CA}) (Version: 5.2.01 - Microsoft)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 8.0.0.9103 - Microsoft Corporation)
Skype™ 7.12 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.12.101 - Skype Technologies S.A.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.18.23 - Synaptics Incorporated)
Tele2 Mobile Partner (HKLM-x32\...\Tele2 Mobile Partner) (Version: 21.005.20.05.56 - Huawei Technologies Co.,Ltd)
Texmaker (HKLM-x32\...\Texmaker) (Version: - )
TeXnicCenter Version 2.0 Beta 1 (HKLM\...\TeXnicCenter_is1) (Version: 2.0 Beta 1 - The TeXnicCenter Team)
Theft Recovery for HP ProtectTools (HKLM-x32\...\InstallShield_{10F5A72A-1E07-4FAE-A7E7-14B10CC66B17}) (Version: 7.0.1.02 - Hewlett-Packard Company)
Theft Recovery for HP ProtectTools (x32 Version: 7.0.1.02 - Hewlett-Packard Company) Hidden
Validity Fingerprint Sensor Driver (HKLM\...\{ADAA7361-54B8-4FC8-804E-94EC6C11ED68}) (Version: 4.5.133.0 - Validity Sensors, Inc.)
WinSCP (HKLM-x32\...\{EE5FA930-953A-4986-82B7-3ED322986DA8}) (Version: 3.8.2.330 - [email protected])
WinZip 15.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240CF}) (Version: 15.0.10039 - WinZip Computing, S.L. )
WizTree v1.07 (HKLM-x32\...\WizTree_is1) (Version: - Antibody Software)
VLC media player 2.0.4 (HKLM-x32\...\VLC media player) (Version: 2.0.4 - VideoLAN)
XnView (HKLM-x32\...\{F3357D4E-402F-4D03-915B-53DF0B43D10A}) (Version: 1.82.4 - [email protected])
Yahoo! Software Update (HKLM-x32\...\Yahoo! Software Update) (Version: - )
Yahoo! Toolbar (HKLM-x32\...\Yahoo! Companion) (Version: - Yahoo! Inc.)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-791394405-2968878526-2284429811-265784_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\windows\system32\igfxEM.exe (Intel Corporation)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {231DD8F6-6579-406C-A7DA-D5D31F6767DB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {57E1AD9A-E931-426B-B7DF-FC94EEEA4982} - System32\Tasks\{5D9539F3-0DF8-473F-BF37-2736B704EEC1} => pcalua.exe -a "C:\Program Files (x86)\MikTeX\miktex/bin/internal\copystart.exe" -c "C:\Program Files (x86)\MikTeX\miktex/bin/internal\uninstall.exe"
Task: {6DB2FBE5-5EF4-4297-B363-EB45D3CBD213} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Active Health Launcher => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-01-20] (Hewlett-Packard)
Task: {6FEFBB40-35F6-4B6B-A75B-739EA09F3F9D} - System32\Tasks\HPCeeScheduleForeit-dre => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2015-06-16] (Hewlett-Packard)
Task: {7B3E85EA-892C-42F4-81D4-D002AAB4BC7E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2015-09-28] (Hewlett-Packard Company)
Task: {8F8859AC-7B7F-447F-BE9B-7F7B17F960A9} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-01-06] (Hewlett-Packard)
Task: {B0BB2F55-8C16-4E13-B09F-21B112918D3B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-02-10] (Adobe Systems Incorporated)
Task: {BD75289D-FE41-4917-B920-64EBF334AC78} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-01-12] (Hewlett-Packard Company)
Task: {C87F5D74-4BBD-4131-8061-0891D0C052D9} - System32\Tasks\Registration => C:\Program Files (x86)\Hewlett-Packard\HP Setup\Dependencies\RemEngine.exe [2012-03-21] ()
Task: {D625F5BE-4593-485E-8E52-5777A2F8E43A} - System32\Tasks\MATLAB R2012b Startup Accelerator => C:\Program Files\MATLAB\R2012b\bin\win64\MATLABStartupAccelerator.exe [2012-07-20] ()
Task: {D6E831DB-5C61-452D-BA72-2C3380316235} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {DC657B2E-AFFF-4669-923B-ED3CB25D53E9} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2015-09-28] (Hewlett-Packard Company)
Task: {F058CAD2-F58B-48AF-AF3B-3D52AA923BEA} - System32\Tasks\{7673A3C6-BE68-459F-B72C-9081A9CBD7C8} => pcalua.exe -a C:\Users\dejan\Downloads\winsdk_web.exe -d C:\Users\dejan\Downloads
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\HPCeeScheduleForeit-dre.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\windows\Tasks\MATLAB R2012b Startup Accelerator.job => C:\Program Files\MATLAB\R2012b\bin\win64\MATLABStartupAccelerator.exe
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
==================== Loaded Modules (Whitelisted) ==============
2012-01-17 16:57 - 2012-01-17 16:57 - 00298368 _____ () C:\Program Files\Hewlett-Packard\Pre-Boot Security for HP ProtectTools\BIOSDomainPlugin.dll
2013-03-27 11:11 - 2013-03-27 11:11 - 03346432 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EpeHpFve64.dll
2011-10-12 10:03 - 2011-10-12 10:03 - 00213328 _____ () C:\windows\system32\PassThroughOTP.dll
2010-09-06 12:18 - 2010-09-06 12:18 - 01412608 _____ () C:\windows\system32\LIBEAY32.dll
2013-03-27 10:26 - 2013-03-27 10:26 - 00141824 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHostInterface64.dll
2011-03-14 16:27 - 2011-03-14 16:27 - 00346976 _____ () C:\ProgramData\DatacardService\HWDeviceService64.exe
2013-03-27 10:28 - 2013-03-27 10:28 - 01327104 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe
2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2010-10-21 00:23 - 2010-10-21 00:23 - 08801632 _____ () C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll
2012-02-10 22:26 - 2012-02-10 22:26 - 01083392 _____ () C:\Program Files\Hewlett-Packard\HP Power Assistant\System.Data.SQLite.dll
2012-03-21 02:55 - 2012-03-21 02:55 - 00536848 _____ () C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe
2015-03-17 20:30 - 2015-03-17 20:30 - 00514048 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\Tele2 Mobile Partner.exe
2013-03-27 10:54 - 2013-03-27 10:54 - 02854912 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EpePcEncryptionProviderPlugin.dll
2013-03-27 10:26 - 2013-03-27 10:26 - 00126976 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHostInterface.dll
2013-03-27 10:52 - 2013-03-27 10:52 - 03035136 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EpeOpalEncryptionProviderPlugin.dll
2013-03-27 10:57 - 2013-03-27 10:57 - 02867200 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EpeHpDpHostPlugin.dll
2013-03-27 10:55 - 2013-03-27 10:55 - 00053248 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EpeOpalATASec4SATA.dll
2013-03-27 10:30 - 2013-03-27 10:30 - 02043904 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeCoreEncryptionPlugin.dll
2013-03-27 10:31 - 2013-03-27 10:31 - 01949696 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeProductDetectionPlugin.dll
2014-03-19 07:00 - 2014-03-19 07:00 - 00514570 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\sqlite3.dll
2016-02-11 12:50 - 2016-02-11 12:50 - 00172544 _____ () C:\windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\2d6bed23982a7146e5151d1d8737115b\IsdiInterop.ni.dll
2012-05-17 22:54 - 2012-11-26 12:57 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IsdiInterop.dll
2012-10-19 10:11 - 2013-10-28 13:24 - 01200088 _____ () C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\ACE.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00394752 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\core.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00264192 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\sdk.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00011362 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\mingwm10.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00043008 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\libgcc_s_dw2-1.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 02415104 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\QtCore4.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 09515520 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\QtGui4.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00382464 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\Proxy.DLL
2015-03-17 20:30 - 2015-03-17 20:30 - 00218112 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\Common.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00135168 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\Trace.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00545280 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\PluginContainer.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00238080 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\AtCodec.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00304128 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\DeviceSrvPlugin.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00238080 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\NetSrvPlugin.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00133120 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\OSDialup.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00160256 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\XCodec.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00157184 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\DataServicePlugin.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00176128 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\CallSrvPlugin.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00264704 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\AddrBookSrvPlugin.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00217600 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\SmsSrvPlugin.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00142336 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\USSDSrvPlugin.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00156672 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\STKSrvPlugin.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00154624 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\GpsSrvPlugin.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00339968 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\DeviceAppPlugin.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00065536 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\OSPowerMgr.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00114688 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\Win7Support.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 01078272 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\AddrBookPlugin.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00670720 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\SmsAppPlugin.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00182272 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\CallAppPlugin.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00547840 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\CallLogSrvPlugin.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00158720 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\NetConnectSrvPlugin.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00211968 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\DialUpPlugin.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00101888 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\OSAdapt.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00180736 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\NDISPlugin.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00131072 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\OSNDIS.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 01101824 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\NDISAPI.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00278528 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\NetInfoSrvPlugin.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00062976 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\OSCall.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00539648 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\DeviceMgrUIPlugin.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00398336 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\QtXml4.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00123392 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\ATR2SMgr.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00184832 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\XFramePlugin.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00309760 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\StatusBarMgrPlugin.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00117760 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\LayoutPlugin.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00447488 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\DialupUIPlugin.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00093184 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\NotifyServicePlugin.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00335360 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\NetConnectPlugin.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00295424 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\MenuMgrPlugin.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00485888 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\NetInfoUIExPlugin.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00823808 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\SMSUIPlugin.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00209408 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\ToolBarMgrPlugin.dll
2015-03-17 20:30 - 2015-03-17 20:30 - 00693760 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\LiveUpdateInterface.DLL
2015-03-17 20:30 - 2015-03-17 20:30 - 01148416 _____ () C:\Program Files (x86)\Tele2 Mobile Partner\QtNetwork4.dll
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2010-10-21 00:45 - 2010-10-21 00:45 - 08801120 _____ () C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll
2016-02-19 21:45 - 2016-02-18 05:14 - 01630360 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.116\libglesv2.dll
2016-02-19 21:45 - 2016-02-18 05:14 - 00085656 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.116\libegl.dll
2016-02-19 21:45 - 2016-02-18 05:15 - 16808600 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.116\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-791394405-2968878526-2284429811-265784\Control Panel\Desktop\\Wallpaper -> C:\Users\eit-dre\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 130.244.127.161 - 130.244.127.169
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{CBBBBB3B-E15E-49C2-AF61-0FAAB77D4F97}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{E94544EC-2EB0-494A-8C05-CC1A7943A66A}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{A9BCCC03-827D-4B56-8594-96CE59212220}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{84C7AFB2-4C67-43F3-8534-F9CE7DD1C928}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [TCP Query User{2C76A49E-995B-4943-90BB-706C1B83962A}C:\program files\maple 16\jre\bin\maple.exe] => (Allow) C:\program files\maple 16\jre\bin\maple.exe
FirewallRules: [UDP Query User{6DC1F531-889E-4F06-A389-CCCC3CCD889E}C:\program files\maple 16\jre\bin\maple.exe] => (Allow) C:\program files\maple 16\jre\bin\maple.exe
FirewallRules: [TCP Query User{488931F4-1FE3-4B8A-9D2E-5B7AD44E751F}C:\program files\maple 16\jre\bin\maple.exe] => (Allow) C:\program files\maple 16\jre\bin\maple.exe
FirewallRules: [UDP Query User{F2F96CF3-4CC1-4604-8635-C28337366D95}C:\program files\maple 16\jre\bin\maple.exe] => (Allow) C:\program files\maple 16\jre\bin\maple.exe
FirewallRules: [{8E9F33A7-BE0B-4501-89DE-D48E90BFA0F4}] => (Allow) \\osiris\users\dejan\Desktop\VNC-Viewer-5.0.3-Windows-64bit.exe
FirewallRules: [{A582E470-1DB9-4E9E-A6DD-0BD3CFF24C03}] => (Allow) \\osiris\users\dejan\Desktop\VNC-Viewer-5.0.3-Windows-64bit.exe
FirewallRules: [{5428E500-65E4-41C5-9EAC-47E525D547AC}] => (Allow) C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
FirewallRules: [{78455908-FFA3-4102-9895-4E741BAC390E}] => (Allow) C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
FirewallRules: [{60AA9614-6965-44AE-89D9-C145CA0EBC7A}] => (Allow) C:\Program Files (x86)\VideoLAN\VLC\vlc.exe
FirewallRules: [{331B546A-9181-47BF-B694-4CBD94437264}] => (Allow) C:\Program Files (x86)\VideoLAN\VLC\vlc.exe
FirewallRules: [{D55D263E-588B-4573-ADAE-EF57E1C02A76}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{21BFE908-6FCF-4EF2-A4BF-EEA5E7A46FD1}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{3EDD0B79-A2ED-443A-8769-F32558C3C862}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{2721E704-8C82-4DC7-A29A-1CB1D5FD6D1E}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{66D7E771-3880-47EF-BB7E-F93D3D136322}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{5DC1E8A9-8965-496B-8DA3-5FDB807434EE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{5B01E53C-3F2E-4383-BF0A-3EC18480B0F9}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{AC784733-7CB5-42DE-AF55-1435326B9736}C:\program files (x86)\armory\armoryqt.exe] => (Allow) C:\program files (x86)\armory\armoryqt.exe
FirewallRules: [UDP Query User{4435274D-23B3-4518-9E13-4E011B408C1E}C:\program files (x86)\armory\armoryqt.exe] => (Allow) C:\program files (x86)\armory\armoryqt.exe
FirewallRules: [{B74A75B2-84A4-4D87-9496-158FE77BEE37}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Restore Points =========================
15-02-2016 07:55:52 Windows Backup
15-02-2016 21:27:03 Windows Update
20-02-2016 09:51:58 Windows Update
22-02-2016 10:02:12 Windows Update
22-02-2016 10:08:26 Windows Backup
23-02-2016 09:40:30 Windows Update
25-02-2016 11:20:17 Windows Update
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (02/26/2016 10:10:30 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/25/2016 12:03:39 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/25/2016 11:14:22 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/24/2016 11:08:00 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/23/2016 09:36:52 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/22/2016 08:34:20 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/22/2016 10:15:11 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (02/22/2016 10:07:36 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: HPSF.exe, version: 8.1.40.3, time stamp: 0x5608c28a
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x000007fe8f51016d
Faulting process id: 0x1a70
Faulting application start time: 0xHPSF.exe0
Faulting application path: HPSF.exe1
Faulting module path: HPSF.exe2
Report Id: HPSF.exe3
Error: (02/22/2016 10:07:33 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: HPSF.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.NullReferenceException
Stack:
at System.Windows.Markup.WpfXamlLoader.Load(System.Xaml.XamlReader, System.Xaml.IXamlObjectWriterFactory, Boolean, System.Object, System.Xaml.XamlObjectWriterSettings, System.Uri)
at System.Windows.Markup.WpfXamlLoader.LoadBaml(System.Xaml.XamlReader, Boolean, System.Object, System.Xaml.Permissions.XamlAccessLevel, System.Uri)
at System.Windows.Markup.XamlReader.LoadBaml(System.IO.Stream, System.Windows.Markup.ParserContext, System.Object, Boolean)
at System.Windows.Application.LoadComponent(System.Object, System.Uri)
at HP.SupportAssistant.HPSA_UI.App.Main()
Error: (02/22/2016 09:58:23 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (02/26/2016 10:12:47 AM) (Source: TermService) (EventID: 1067) (User: )
Description: The terminal server cannot register 'TERMSRV' Service Principal Name to be used for server authentication. The following error occured: The specified domain either does not exist or could not be contacted.
.
Error: (02/26/2016 10:10:02 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Tele2 Mobile Partner. OUC service failed to start due to the following error:
%%1053
Error: (02/26/2016 10:10:02 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Tele2 Mobile Partner. OUC service to connect.
Error: (02/26/2016 10:09:36 AM) (Source: Microsoft-Windows-GroupPolicy) (EventID: 1129) (User: UW)
Description: The processing of Group Policy failed because of lack of network connectivity to a domain controller. This may be a transient condition. A success message would be generated once the machine gets connected to the domain controller and Group Policy has succesfully processed. If you do not see a success message for several hours, then contact your administrator.
Error: (02/26/2016 10:09:29 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Trusted Platform Core Service service failed to start due to the following error:
%%2
Error: (02/26/2016 10:09:26 AM) (Source: Microsoft-Windows-GroupPolicy) (EventID: 1129) (User: NT AUTHORITY)
Description: The processing of Group Policy failed because of lack of network connectivity to a domain controller. This may be a transient condition. A success message would be generated once the machine gets connected to the domain controller and Group Policy has succesfully processed. If you do not see a success message for several hours, then contact your administrator.
Error: (02/26/2016 10:09:24 AM) (Source: NETLOGON) (EventID: 5719) (User: )
Description: This computer was not able to set up a secure session with a domain
controller in domain EIT due to the following:
%%1311
This may lead to authentication problems. Make sure that this
computer is connected to the network. If the problem persists,
please contact your domain administrator.
ADDITIONAL INFO
If this computer is a domain controller for the specified domain, it
sets up the secure session to the primary domain controller emulator in the specified
domain. Otherwise, this computer sets up the secure session to any domain controller
in the specified domain.
Error: (02/25/2016 04:04:57 PM) (Source: NETLOGON) (EventID: 5719) (User: )
Description: This computer was not able to set up a secure session with a domain
controller in domain EIT due to the following:
%%1311
This may lead to authentication problems. Make sure that this
computer is connected to the network. If the problem persists,
please contact your domain administrator.
ADDITIONAL INFO
If this computer is a domain controller for the specified domain, it
sets up the secure session to the primary domain controller emulator in the specified
domain. Otherwise, this computer sets up the secure session to any domain controller
in the specified domain.
Error: (02/25/2016 12:09:08 PM) (Source: TermService) (EventID: 1067) (User: )
Description: The terminal server cannot register 'TERMSRV' Service Principal Name to be used for server authentication. The following error occured: The specified domain either does not exist or could not be contacted.
.
Error: (02/25/2016 12:03:36 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Tele2 Mobile Partner. OUC service failed to start due to the following error:
%%1053
==================== Memory info ===========================
Processor: Intel® Core™ i5-3210M CPU @ 2.50GHz
Percentage of memory in use: 37%
Total physical RAM: 8073.51 MB
Available physical RAM: 5054.32 MB
Total Virtual: 16145.22 MB
Available Virtual: 12975.04 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:273.99 GB) (Free:148.67 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive e: (HP_TOOLS) (Fixed) (Total:1.99 GB) (Free:0 GB) FAT32
Drive g: (HP_RECOVERY) (Fixed) (Total:21.81 GB) (Free:3.38 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive h: (4G-modem) (CDROM) (Total:0.03 GB) (Free:0 GB) CDFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: EF0A06AF)
Partition 1: (Active) - (Size=300 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=274 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=21.8 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=2 GB) - (Type=0C)
==================== End of Addition.txt ============================
Sign In
Create Account
