Publicité
Publicité
Format du document : text/plain
Prévisualisation
Additional scan result of Farbar Recovery Scan Tool (x64) Version:05-03-2016 01
Ran by Natalia (2016-03-20 01:02:41)
Running from C:\Users\Natalia\Desktop
Windows 8.1 Pro (X64) (2016-03-04 20:31:10)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-2632292377-3789971018-1103051747-500 - Administrator - Disabled)
Guest (S-1-5-21-2632292377-3789971018-1103051747-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2632292377-3789971018-1103051747-1003 - Limited - Enabled)
Natalia (S-1-5-21-2632292377-3789971018-1103051747-1001 - Administrator - Enabled) => C:\Users\Natalia
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 49.0.2623.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden
Microsoft Office Professional Plus 2013 - en-us (HKLM\...\ProPlusRetail - en-us) (Version: 15.0.4805.1003 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
MixVideoPlayer (HKLM-x32\...\MixVideoPlayer) (Version: v1.0.0.25 - SoftForce LLC) <==== ATTENTION
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4805.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4805.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4805.1003 - Microsoft Corporation) Hidden
Setup (HKLM-x32\...\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC}) (Version: - ) <==== ATTENTION
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 8.0.0.9103 - Microsoft Corporation)
Skype™ 7.1 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.1.105 - Skype Technologies S.A.)
WinRAR 5.31 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {15543B43-58BC-4797-8D34-8CCD3B994423} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2016-03-18] (Microsoft Corporation)
Task: {19BFD0DB-3798-435D-9EDB-991FE5FC7B3B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2016-03-18] (Microsoft Corporation)
Task: {3E91FE2B-FDB4-4533-8738-B977CE4C32AF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-04] (Google Inc.)
Task: {3F9BD203-2BE6-4314-9D9C-7CBAA5FC53D8} - System32\Tasks\Pritc => C:\Users\Natalia\AppData\Local\Temp\is-D8B29.tmp\print.exe [2016-03-03] (VLOME) <==== ATTENTION
Task: {67B6819C-6710-4060-BFBD-FC2F6BC1005E} - System32\Tasks\Price Fountain => C:\Users\Natalia\AppData\Roaming\PRICEF~2\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {9FB37138-850F-491C-BFF6-41A83D62EDDF} - System32\Tasks\Kelpi => C:\PROGRA~1\GROOVE~1\Cejhi.bat
Task: {A6BDBADB-A58F-42ED-8155-73E520BB6FBF} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-04] (Google Inc.)
Task: {AD699861-01B6-4690-9E19-DA68597AA1E4} - System32\Tasks\MixVideoPlayer Update => C:\Program Files (x86)\MixVideoPlayer\mixUpdater.exe [2015-08-06] () <==== ATTENTION
Task: {B8237095-D397-4DFE-A187-6971EC266B85} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-03-09] (Microsoft Corporation)
Task: {C4C824A6-713C-44C2-A273-23E008E5CBE5} - System32\Tasks\ttwifi => C:\Program Files (x86)\ttwifi\tiantianwifi.exe
Task: {C7B7D8B9-3305-4B3C-844C-244B03BEFE19} - System32\Tasks\osTip => C:\ProgramData\WindowsMsg\osmsg.exe [2016-02-09] ()
Task: {CAB8F8DF-571D-42D3-B477-C7075673C6ED} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2016-02-09] (Microsoft Corporation)
Task: {D9FCA284-D1C5-40C2-99CD-AB697E5C2E02} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2016-02-09] (Microsoft Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Price Fountain.job => C:\Users\Natalia\AppData\Roaming\PRICEF~2\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.yeabests.cc/
ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.yeabests.cc/
==================== Loaded Modules (Whitelisted) ==============
2016-03-18 23:46 - 2015-10-13 04:34 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2016-03-19 22:59 - 2016-03-19 22:59 - 00279040 _____ () C:\Program Files (x86)\F5EE80BD-1458313629-8713-DAC7-8B5D69E32F03\knsq8360.tmp
2016-03-18 10:20 - 2016-03-18 10:20 - 00174440 _____ () C:\Users\Natalia\AppData\Roaming\Cuyoropo\Cuyoropo.exe
2016-03-18 10:20 - 2016-03-18 10:20 - 00670568 _____ () C:\Users\Natalia\AppData\Roaming\Cuyoropo\Iyighfohur.dll
2016-03-18 15:44 - 2016-03-18 15:44 - 08901184 _____ () C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\1033\GrooveIntlResource.dll
2016-03-18 10:20 - 2016-03-18 10:20 - 00115560 _____ () C:\Users\Natalia\AppData\Roaming\Cuyoropo\Huokvenl.exe
2016-03-18 10:20 - 2016-03-18 10:20 - 00146280 _____ () C:\Users\Natalia\AppData\Roaming\Cuyoropo\Iyighfohur.exe
2016-03-18 23:55 - 2016-02-09 12:30 - 02036224 _____ () C:\ProgramData\WindowsMsg\osmsg.exe
2015-08-07 07:20 - 2015-08-07 07:20 - 00122536 _____ () C:\Program Files (x86)\MixVideoPlayer\BrowserWeb.exe
2015-08-07 07:18 - 2015-08-07 07:18 - 02719912 _____ () C:\Program Files (x86)\MixVideoPlayer\MixVideoPlayer.exe
2016-03-20 00:50 - 2016-03-20 00:53 - 28509232 _____ () C:\Users\Natalia\AppData\Local\Setup Wizard\ad684e67-e461-40c8-90b7-9193b4a707e5\vlc-media-player.exe
2016-03-20 00:59 - 2016-03-20 00:59 - 00689648 _____ () c:\users\natalia\appdata\local\temp\07191\setup.exe
2016-03-18 10:20 - 2016-03-18 10:20 - 00261992 _____ () C:\Users\Natalia\AppData\Roaming\Cuyoropo\Huokvenl.dll
2016-03-14 23:39 - 2016-03-07 23:48 - 01676440 _____ () C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.87\libglesv2.dll
2016-03-14 23:39 - 2016-03-07 23:48 - 00086168 _____ () C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.87\libegl.dll
2016-03-20 00:53 - 2016-03-20 00:53 - 00024576 _____ () C:\Users\Natalia\AppData\Local\Temp\nsc755C.tmp\System.dll
2016-03-20 00:53 - 2016-03-20 00:53 - 00011264 _____ () C:\Users\Natalia\AppData\Local\Temp\nsc755C.tmp\nsDialogs.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 10:25 - 2016-03-18 12:10 - 00001587 ____A C:\WINDOWS\system32\Drivers\etc\hosts
107.178.255.88 www.google-analytics.com
107.178.255.88 www.statcounter.com
107.178.255.88 statcounter.com
107.178.255.88 ssl.google-analytics.com
107.178.255.88 partner.googleadservices.com
107.178.255.88 google-analytics.com
107.178.248.130 static.doubleclick.net
107.178.247.130 connect.facebook.net
107.178.255.88 www.google-analytics.com
107.178.255.88 www.statcounter.com
107.178.255.88 statcounter.com
107.178.255.88 ssl.google-analytics.com
107.178.255.88 partner.googleadservices.com
107.178.255.88 google-analytics.com
107.178.248.130 static.doubleclick.net
107.178.247.130 connect.facebook.net127.0.0.1 down.baidu2016.com
127.0.0.1 123.sogou.com
127.0.0.1 www.czzsyzgm.com
127.0.0.1 www.czzsyzxl.com
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2632292377-3789971018-1103051747-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is disabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{73B4B53E-A22C-4B4C-8278-842CB172E794}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{1481D476-801D-49DD-932A-29907715FD87}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{83FC2FA4-7689-46D7-B786-C0054EC4FAFD}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{F0B93154-6326-4052-8B5D-BF791E73295C}] => (Allow) C:\Program Files\KMSpico\KMSELDI.exe
FirewallRules: [{E7104B61-17D5-457C-BA23-897B943EB96D}] => (Allow) C:\Program Files\KMSpico\KMSELDI.exe
FirewallRules: [{47974AC0-7E18-497E-818D-29626AF283C5}] => (Allow) C:\Program Files\KMSpico\KMSServer.exe
FirewallRules: [{6EDC117F-EDC4-4815-8030-855B4FDC35AA}] => (Allow) C:\Program Files\KMSpico\KMSServer.exe
FirewallRules: [{205CFD25-4984-423F-8E69-C1E607F8F980}] => (Allow) LPort=1688
FirewallRules: [{91D14B5B-C384-4870-B410-577202080655}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
FirewallRules: [{3B7B583A-2680-4717-8217-0A938EF51475}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
FirewallRules: [{31A1EB23-F00F-40E5-A2A8-B7D63D6878C4}] => (Allow) C:\Windows\System32\KMSServer.exe
FirewallRules: [{1E0DEA61-B930-4C5E-926A-5217E548C2B9}] => (Allow) C:\Windows\System32\KMSServer.exe
FirewallRules: [{2994FE4E-A786-4075-A911-5EA23F8F994E}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe
FirewallRules: [{BE044828-2314-4458-896C-144E0FF04D42}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe
FirewallRules: [{87B05A8B-66E9-4E1F-AF02-0F6C9A5E97EE}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
FirewallRules: [{ACDD2799-58ED-452E-B807-7486D31738EE}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
FirewallRules: [{4E9F9852-C020-44DB-8660-84727A51F884}] => (Allow) LPort=1688
FirewallRules: [{C2F023AE-CEBA-48A8-BA85-6E1D10EFF097}] => (Allow) C:\Windows\System32\KMSServer.exe
FirewallRules: [{631151DA-D72F-4A2C-825A-2C4B0E9550C0}] => (Allow) C:\Windows\System32\KMSServer.exe
FirewallRules: [{49322EBF-5DF1-4459-BF7B-EB9254A6ED51}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{CD4E3846-5975-447E-86DC-00220F3836DB}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{688ED943-5877-4038-B6AC-729A63B2A109}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
==================== Restore Points =========================
18-03-2016 23:57:27 Chrome Cleanup Tool
18-03-2016 23:57:48 Uniblue DriverScanner installation
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (03/20/2016 12:41:56 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: Activation context generation failed for "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"1".Error in manifest or policy file "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"2" on line UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"3.
Component identity found in manifest does not match the identity of the component requested.
Reference is UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0".
Definition is UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0".
Please use sxstrace.exe for detailed diagnosis.
Error: (03/20/2016 12:41:56 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: Activation context generation failed for "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"1".Error in manifest or policy file "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"2" on line UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"3.
Component identity found in manifest does not match the identity of the component requested.
Reference is UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0".
Definition is UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0".
Please use sxstrace.exe for detailed diagnosis.
Error: (03/20/2016 12:37:17 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Explorer.Exe, version: 6.3.9600.17667, time stamp: 0x54c6f7c2
Faulting module name: combase.dll, version: 6.3.9600.18202, time stamp: 0x569e6ee3
Exception code: 0xc0000005
Fault offset: 0x0000000000062a9f
Faulting process id: 0x1544
Faulting application start time: 0xExplorer.Exe0
Faulting application path: Explorer.Exe1
Faulting module path: Explorer.Exe2
Report Id: Explorer.Exe3
Faulting package full name: Explorer.Exe4
Faulting package-relative application ID: Explorer.Exe5
Error: (03/20/2016 12:32:53 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: chrome.exe, version: 49.0.2623.87, time stamp: 0x56de2043
Faulting module name: ntdll.dll, version: 6.3.9600.18202, time stamp: 0x569e72c5
Exception code: 0xc0000142
Fault offset: 0x0009d3c2
Faulting process id: 0x103c
Faulting application start time: 0xchrome.exe0
Faulting application path: chrome.exe1
Faulting module path: chrome.exe2
Report Id: chrome.exe3
Faulting package full name: chrome.exe4
Faulting package-relative application ID: chrome.exe5
Error: (03/20/2016 12:32:22 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: spbia.exe, version: 1.0.0.4, time stamp: 0x56e53623
Faulting module name: spbia.exe, version: 1.0.0.4, time stamp: 0x56e53623
Exception code: 0xc0000005
Fault offset: 0x0000000000003f81
Faulting process id: 0xf1c
Faulting application start time: 0xspbia.exe0
Faulting application path: spbia.exe1
Faulting module path: spbia.exe2
Report Id: spbia.exe3
Faulting package full name: spbia.exe4
Faulting package-relative application ID: spbia.exe5
Error: (03/20/2016 12:30:39 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Explorer.Exe, version: 6.3.9600.17667, time stamp: 0x54c6f7c2
Faulting module name: combase.dll, version: 6.3.9600.18202, time stamp: 0x569e6ee3
Exception code: 0xc0000005
Fault offset: 0x0000000000062a9f
Faulting process id: 0x1b34
Faulting application start time: 0xExplorer.Exe0
Faulting application path: Explorer.Exe1
Faulting module path: Explorer.Exe2
Report Id: Explorer.Exe3
Faulting package full name: Explorer.Exe4
Faulting package-relative application ID: Explorer.Exe5
Error: (03/20/2016 12:12:52 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: spbia.exe, version: 1.0.0.4, time stamp: 0x56e53623
Faulting module name: spbia.exe, version: 1.0.0.4, time stamp: 0x56e53623
Exception code: 0xc0000005
Fault offset: 0x0000000000003f81
Faulting process id: 0x52b4
Faulting application start time: 0xspbia.exe0
Faulting application path: spbia.exe1
Faulting module path: spbia.exe2
Report Id: spbia.exe3
Faulting package full name: spbia.exe4
Faulting package-relative application ID: spbia.exe5
Error: (03/19/2016 08:31:45 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (03/19/2016 12:38:05 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: BrowserHelper.exe, version: 1.8.1.0, time stamp: 0x5628b2eb
Faulting module name: BrowserHelper.exe, version: 1.8.1.0, time stamp: 0x5628b2eb
Exception code: 0xc0000005
Fault offset: 0x00027ca5
Faulting process id: 0x4f8
Faulting application start time: 0xBrowserHelper.exe0
Faulting application path: BrowserHelper.exe1
Faulting module path: BrowserHelper.exe2
Report Id: BrowserHelper.exe3
Faulting package full name: BrowserHelper.exe4
Faulting package-relative application ID: BrowserHelper.exe5
Error: (03/19/2016 12:31:32 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: BrowserHelper.exe, version: 1.8.1.0, time stamp: 0x5628b2eb
Faulting module name: BrowserHelper.exe, version: 1.8.1.0, time stamp: 0x5628b2eb
Exception code: 0xc0000005
Fault offset: 0x00027ca5
Faulting process id: 0x9c8
Faulting application start time: 0xBrowserHelper.exe0
Faulting application path: BrowserHelper.exe1
Faulting module path: BrowserHelper.exe2
Report Id: BrowserHelper.exe3
Faulting package full name: BrowserHelper.exe4
Faulting package-relative application ID: BrowserHelper.exe5
System errors:
=============
Error: (03/20/2016 12:37:37 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Umoaojee service failed to start due to the following error:
%%2
Error: (03/20/2016 12:31:01 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Umoaojee service failed to start due to the following error:
%%2
Error: (03/19/2016 09:06:21 PM) (Source: DCOM) (EventID: 10016) (User: NATALIA)
Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NataliaNataliaS-1-5-21-2632292377-3789971018-1103051747-1001LocalHost (Using LRPC)31306eastbk.210356917D3A9_1.1.0.1_x86__fw8awsgb4vj4yS-1-15-2-838682324-3999722550-839513333-537431459-1019941234-2820957840-2052403685
Error: (03/19/2016 04:12:09 PM) (Source: BTHUSB) (EventID: 17) (User: )
Description: The local Bluetooth adapter has failed in an undetermined manner and will not be used. The driver has been unloaded.
Error: (03/19/2016 01:38:10 PM) (Source: BTHUSB) (EventID: 17) (User: )
Description: The local Bluetooth adapter has failed in an undetermined manner and will not be used. The driver has been unloaded.
Error: (03/19/2016 10:16:28 AM) (Source: BTHUSB) (EventID: 17) (User: )
Description: The local Bluetooth adapter has failed in an undetermined manner and will not be used. The driver has been unloaded.
Error: (03/19/2016 06:48:24 AM) (Source: BTHUSB) (EventID: 17) (User: )
Description: The local Bluetooth adapter has failed in an undetermined manner and will not be used. The driver has been unloaded.
Error: (03/19/2016 12:29:26 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: The Interactive Services Detection service terminated with the following error:
%%1
Error: (03/18/2016 11:58:10 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: The MPC Core Protect Service service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
Error: (03/18/2016 11:24:15 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Umoaojee service failed to start due to the following error:
%%2
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i5-4300U CPU @ 1.90GHz
Percentage of memory in use: 55%
Total physical RAM: 4016.04 MB
Available physical RAM: 1776.05 MB
Total Virtual: 8112.04 MB
Available Virtual: 5375.85 MB
==================== Drives ================================
Drive c: (Windows) (Fixed) (Total:53.31 GB) (Free:21.7 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 59.6 GB) (Disk ID: 49B2E299)
Partition: GPT.
==================== End of Addition.txt ============================
Ran by Natalia (2016-03-20 01:02:41)
Running from C:\Users\Natalia\Desktop
Windows 8.1 Pro (X64) (2016-03-04 20:31:10)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-2632292377-3789971018-1103051747-500 - Administrator - Disabled)
Guest (S-1-5-21-2632292377-3789971018-1103051747-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2632292377-3789971018-1103051747-1003 - Limited - Enabled)
Natalia (S-1-5-21-2632292377-3789971018-1103051747-1001 - Administrator - Enabled) => C:\Users\Natalia
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 49.0.2623.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden
Microsoft Office Professional Plus 2013 - en-us (HKLM\...\ProPlusRetail - en-us) (Version: 15.0.4805.1003 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
MixVideoPlayer (HKLM-x32\...\MixVideoPlayer) (Version: v1.0.0.25 - SoftForce LLC) <==== ATTENTION
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4805.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4805.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4805.1003 - Microsoft Corporation) Hidden
Setup (HKLM-x32\...\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC}) (Version: - ) <==== ATTENTION
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 8.0.0.9103 - Microsoft Corporation)
Skype™ 7.1 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.1.105 - Skype Technologies S.A.)
WinRAR 5.31 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {15543B43-58BC-4797-8D34-8CCD3B994423} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2016-03-18] (Microsoft Corporation)
Task: {19BFD0DB-3798-435D-9EDB-991FE5FC7B3B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2016-03-18] (Microsoft Corporation)
Task: {3E91FE2B-FDB4-4533-8738-B977CE4C32AF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-04] (Google Inc.)
Task: {3F9BD203-2BE6-4314-9D9C-7CBAA5FC53D8} - System32\Tasks\Pritc => C:\Users\Natalia\AppData\Local\Temp\is-D8B29.tmp\print.exe [2016-03-03] (VLOME) <==== ATTENTION
Task: {67B6819C-6710-4060-BFBD-FC2F6BC1005E} - System32\Tasks\Price Fountain => C:\Users\Natalia\AppData\Roaming\PRICEF~2\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {9FB37138-850F-491C-BFF6-41A83D62EDDF} - System32\Tasks\Kelpi => C:\PROGRA~1\GROOVE~1\Cejhi.bat
Task: {A6BDBADB-A58F-42ED-8155-73E520BB6FBF} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-04] (Google Inc.)
Task: {AD699861-01B6-4690-9E19-DA68597AA1E4} - System32\Tasks\MixVideoPlayer Update => C:\Program Files (x86)\MixVideoPlayer\mixUpdater.exe [2015-08-06] () <==== ATTENTION
Task: {B8237095-D397-4DFE-A187-6971EC266B85} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-03-09] (Microsoft Corporation)
Task: {C4C824A6-713C-44C2-A273-23E008E5CBE5} - System32\Tasks\ttwifi => C:\Program Files (x86)\ttwifi\tiantianwifi.exe
Task: {C7B7D8B9-3305-4B3C-844C-244B03BEFE19} - System32\Tasks\osTip => C:\ProgramData\WindowsMsg\osmsg.exe [2016-02-09] ()
Task: {CAB8F8DF-571D-42D3-B477-C7075673C6ED} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2016-02-09] (Microsoft Corporation)
Task: {D9FCA284-D1C5-40C2-99CD-AB697E5C2E02} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2016-02-09] (Microsoft Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Price Fountain.job => C:\Users\Natalia\AppData\Roaming\PRICEF~2\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.yeabests.cc/
ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.yeabests.cc/
==================== Loaded Modules (Whitelisted) ==============
2016-03-18 23:46 - 2015-10-13 04:34 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2016-03-19 22:59 - 2016-03-19 22:59 - 00279040 _____ () C:\Program Files (x86)\F5EE80BD-1458313629-8713-DAC7-8B5D69E32F03\knsq8360.tmp
2016-03-18 10:20 - 2016-03-18 10:20 - 00174440 _____ () C:\Users\Natalia\AppData\Roaming\Cuyoropo\Cuyoropo.exe
2016-03-18 10:20 - 2016-03-18 10:20 - 00670568 _____ () C:\Users\Natalia\AppData\Roaming\Cuyoropo\Iyighfohur.dll
2016-03-18 15:44 - 2016-03-18 15:44 - 08901184 _____ () C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\1033\GrooveIntlResource.dll
2016-03-18 10:20 - 2016-03-18 10:20 - 00115560 _____ () C:\Users\Natalia\AppData\Roaming\Cuyoropo\Huokvenl.exe
2016-03-18 10:20 - 2016-03-18 10:20 - 00146280 _____ () C:\Users\Natalia\AppData\Roaming\Cuyoropo\Iyighfohur.exe
2016-03-18 23:55 - 2016-02-09 12:30 - 02036224 _____ () C:\ProgramData\WindowsMsg\osmsg.exe
2015-08-07 07:20 - 2015-08-07 07:20 - 00122536 _____ () C:\Program Files (x86)\MixVideoPlayer\BrowserWeb.exe
2015-08-07 07:18 - 2015-08-07 07:18 - 02719912 _____ () C:\Program Files (x86)\MixVideoPlayer\MixVideoPlayer.exe
2016-03-20 00:50 - 2016-03-20 00:53 - 28509232 _____ () C:\Users\Natalia\AppData\Local\Setup Wizard\ad684e67-e461-40c8-90b7-9193b4a707e5\vlc-media-player.exe
2016-03-20 00:59 - 2016-03-20 00:59 - 00689648 _____ () c:\users\natalia\appdata\local\temp\07191\setup.exe
2016-03-18 10:20 - 2016-03-18 10:20 - 00261992 _____ () C:\Users\Natalia\AppData\Roaming\Cuyoropo\Huokvenl.dll
2016-03-14 23:39 - 2016-03-07 23:48 - 01676440 _____ () C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.87\libglesv2.dll
2016-03-14 23:39 - 2016-03-07 23:48 - 00086168 _____ () C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.87\libegl.dll
2016-03-20 00:53 - 2016-03-20 00:53 - 00024576 _____ () C:\Users\Natalia\AppData\Local\Temp\nsc755C.tmp\System.dll
2016-03-20 00:53 - 2016-03-20 00:53 - 00011264 _____ () C:\Users\Natalia\AppData\Local\Temp\nsc755C.tmp\nsDialogs.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 10:25 - 2016-03-18 12:10 - 00001587 ____A C:\WINDOWS\system32\Drivers\etc\hosts
107.178.255.88 www.google-analytics.com
107.178.255.88 www.statcounter.com
107.178.255.88 statcounter.com
107.178.255.88 ssl.google-analytics.com
107.178.255.88 partner.googleadservices.com
107.178.255.88 google-analytics.com
107.178.248.130 static.doubleclick.net
107.178.247.130 connect.facebook.net
107.178.255.88 www.google-analytics.com
107.178.255.88 www.statcounter.com
107.178.255.88 statcounter.com
107.178.255.88 ssl.google-analytics.com
107.178.255.88 partner.googleadservices.com
107.178.255.88 google-analytics.com
107.178.248.130 static.doubleclick.net
107.178.247.130 connect.facebook.net127.0.0.1 down.baidu2016.com
127.0.0.1 123.sogou.com
127.0.0.1 www.czzsyzgm.com
127.0.0.1 www.czzsyzxl.com
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2632292377-3789971018-1103051747-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is disabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{73B4B53E-A22C-4B4C-8278-842CB172E794}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{1481D476-801D-49DD-932A-29907715FD87}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{83FC2FA4-7689-46D7-B786-C0054EC4FAFD}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{F0B93154-6326-4052-8B5D-BF791E73295C}] => (Allow) C:\Program Files\KMSpico\KMSELDI.exe
FirewallRules: [{E7104B61-17D5-457C-BA23-897B943EB96D}] => (Allow) C:\Program Files\KMSpico\KMSELDI.exe
FirewallRules: [{47974AC0-7E18-497E-818D-29626AF283C5}] => (Allow) C:\Program Files\KMSpico\KMSServer.exe
FirewallRules: [{6EDC117F-EDC4-4815-8030-855B4FDC35AA}] => (Allow) C:\Program Files\KMSpico\KMSServer.exe
FirewallRules: [{205CFD25-4984-423F-8E69-C1E607F8F980}] => (Allow) LPort=1688
FirewallRules: [{91D14B5B-C384-4870-B410-577202080655}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
FirewallRules: [{3B7B583A-2680-4717-8217-0A938EF51475}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
FirewallRules: [{31A1EB23-F00F-40E5-A2A8-B7D63D6878C4}] => (Allow) C:\Windows\System32\KMSServer.exe
FirewallRules: [{1E0DEA61-B930-4C5E-926A-5217E548C2B9}] => (Allow) C:\Windows\System32\KMSServer.exe
FirewallRules: [{2994FE4E-A786-4075-A911-5EA23F8F994E}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe
FirewallRules: [{BE044828-2314-4458-896C-144E0FF04D42}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe
FirewallRules: [{87B05A8B-66E9-4E1F-AF02-0F6C9A5E97EE}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
FirewallRules: [{ACDD2799-58ED-452E-B807-7486D31738EE}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
FirewallRules: [{4E9F9852-C020-44DB-8660-84727A51F884}] => (Allow) LPort=1688
FirewallRules: [{C2F023AE-CEBA-48A8-BA85-6E1D10EFF097}] => (Allow) C:\Windows\System32\KMSServer.exe
FirewallRules: [{631151DA-D72F-4A2C-825A-2C4B0E9550C0}] => (Allow) C:\Windows\System32\KMSServer.exe
FirewallRules: [{49322EBF-5DF1-4459-BF7B-EB9254A6ED51}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{CD4E3846-5975-447E-86DC-00220F3836DB}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{688ED943-5877-4038-B6AC-729A63B2A109}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
==================== Restore Points =========================
18-03-2016 23:57:27 Chrome Cleanup Tool
18-03-2016 23:57:48 Uniblue DriverScanner installation
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (03/20/2016 12:41:56 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: Activation context generation failed for "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"1".Error in manifest or policy file "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"2" on line UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"3.
Component identity found in manifest does not match the identity of the component requested.
Reference is UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0".
Definition is UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0".
Please use sxstrace.exe for detailed diagnosis.
Error: (03/20/2016 12:41:56 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: Activation context generation failed for "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"1".Error in manifest or policy file "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"2" on line UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"3.
Component identity found in manifest does not match the identity of the component requested.
Reference is UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0".
Definition is UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0".
Please use sxstrace.exe for detailed diagnosis.
Error: (03/20/2016 12:37:17 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Explorer.Exe, version: 6.3.9600.17667, time stamp: 0x54c6f7c2
Faulting module name: combase.dll, version: 6.3.9600.18202, time stamp: 0x569e6ee3
Exception code: 0xc0000005
Fault offset: 0x0000000000062a9f
Faulting process id: 0x1544
Faulting application start time: 0xExplorer.Exe0
Faulting application path: Explorer.Exe1
Faulting module path: Explorer.Exe2
Report Id: Explorer.Exe3
Faulting package full name: Explorer.Exe4
Faulting package-relative application ID: Explorer.Exe5
Error: (03/20/2016 12:32:53 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: chrome.exe, version: 49.0.2623.87, time stamp: 0x56de2043
Faulting module name: ntdll.dll, version: 6.3.9600.18202, time stamp: 0x569e72c5
Exception code: 0xc0000142
Fault offset: 0x0009d3c2
Faulting process id: 0x103c
Faulting application start time: 0xchrome.exe0
Faulting application path: chrome.exe1
Faulting module path: chrome.exe2
Report Id: chrome.exe3
Faulting package full name: chrome.exe4
Faulting package-relative application ID: chrome.exe5
Error: (03/20/2016 12:32:22 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: spbia.exe, version: 1.0.0.4, time stamp: 0x56e53623
Faulting module name: spbia.exe, version: 1.0.0.4, time stamp: 0x56e53623
Exception code: 0xc0000005
Fault offset: 0x0000000000003f81
Faulting process id: 0xf1c
Faulting application start time: 0xspbia.exe0
Faulting application path: spbia.exe1
Faulting module path: spbia.exe2
Report Id: spbia.exe3
Faulting package full name: spbia.exe4
Faulting package-relative application ID: spbia.exe5
Error: (03/20/2016 12:30:39 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: Explorer.Exe, version: 6.3.9600.17667, time stamp: 0x54c6f7c2
Faulting module name: combase.dll, version: 6.3.9600.18202, time stamp: 0x569e6ee3
Exception code: 0xc0000005
Fault offset: 0x0000000000062a9f
Faulting process id: 0x1b34
Faulting application start time: 0xExplorer.Exe0
Faulting application path: Explorer.Exe1
Faulting module path: Explorer.Exe2
Report Id: Explorer.Exe3
Faulting package full name: Explorer.Exe4
Faulting package-relative application ID: Explorer.Exe5
Error: (03/20/2016 12:12:52 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: spbia.exe, version: 1.0.0.4, time stamp: 0x56e53623
Faulting module name: spbia.exe, version: 1.0.0.4, time stamp: 0x56e53623
Exception code: 0xc0000005
Fault offset: 0x0000000000003f81
Faulting process id: 0x52b4
Faulting application start time: 0xspbia.exe0
Faulting application path: spbia.exe1
Faulting module path: spbia.exe2
Report Id: spbia.exe3
Faulting package full name: spbia.exe4
Faulting package-relative application ID: spbia.exe5
Error: (03/19/2016 08:31:45 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (03/19/2016 12:38:05 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: BrowserHelper.exe, version: 1.8.1.0, time stamp: 0x5628b2eb
Faulting module name: BrowserHelper.exe, version: 1.8.1.0, time stamp: 0x5628b2eb
Exception code: 0xc0000005
Fault offset: 0x00027ca5
Faulting process id: 0x4f8
Faulting application start time: 0xBrowserHelper.exe0
Faulting application path: BrowserHelper.exe1
Faulting module path: BrowserHelper.exe2
Report Id: BrowserHelper.exe3
Faulting package full name: BrowserHelper.exe4
Faulting package-relative application ID: BrowserHelper.exe5
Error: (03/19/2016 12:31:32 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: BrowserHelper.exe, version: 1.8.1.0, time stamp: 0x5628b2eb
Faulting module name: BrowserHelper.exe, version: 1.8.1.0, time stamp: 0x5628b2eb
Exception code: 0xc0000005
Fault offset: 0x00027ca5
Faulting process id: 0x9c8
Faulting application start time: 0xBrowserHelper.exe0
Faulting application path: BrowserHelper.exe1
Faulting module path: BrowserHelper.exe2
Report Id: BrowserHelper.exe3
Faulting package full name: BrowserHelper.exe4
Faulting package-relative application ID: BrowserHelper.exe5
System errors:
=============
Error: (03/20/2016 12:37:37 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Umoaojee service failed to start due to the following error:
%%2
Error: (03/20/2016 12:31:01 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Umoaojee service failed to start due to the following error:
%%2
Error: (03/19/2016 09:06:21 PM) (Source: DCOM) (EventID: 10016) (User: NATALIA)
Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NataliaNataliaS-1-5-21-2632292377-3789971018-1103051747-1001LocalHost (Using LRPC)31306eastbk.210356917D3A9_1.1.0.1_x86__fw8awsgb4vj4yS-1-15-2-838682324-3999722550-839513333-537431459-1019941234-2820957840-2052403685
Error: (03/19/2016 04:12:09 PM) (Source: BTHUSB) (EventID: 17) (User: )
Description: The local Bluetooth adapter has failed in an undetermined manner and will not be used. The driver has been unloaded.
Error: (03/19/2016 01:38:10 PM) (Source: BTHUSB) (EventID: 17) (User: )
Description: The local Bluetooth adapter has failed in an undetermined manner and will not be used. The driver has been unloaded.
Error: (03/19/2016 10:16:28 AM) (Source: BTHUSB) (EventID: 17) (User: )
Description: The local Bluetooth adapter has failed in an undetermined manner and will not be used. The driver has been unloaded.
Error: (03/19/2016 06:48:24 AM) (Source: BTHUSB) (EventID: 17) (User: )
Description: The local Bluetooth adapter has failed in an undetermined manner and will not be used. The driver has been unloaded.
Error: (03/19/2016 12:29:26 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: The Interactive Services Detection service terminated with the following error:
%%1
Error: (03/18/2016 11:58:10 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: The MPC Core Protect Service service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
Error: (03/18/2016 11:24:15 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Umoaojee service failed to start due to the following error:
%%2
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i5-4300U CPU @ 1.90GHz
Percentage of memory in use: 55%
Total physical RAM: 4016.04 MB
Available physical RAM: 1776.05 MB
Total Virtual: 8112.04 MB
Available Virtual: 5375.85 MB
==================== Drives ================================
Drive c: (Windows) (Fixed) (Total:53.31 GB) (Free:21.7 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 59.6 GB) (Disk ID: 49B2E299)
Partition: GPT.
==================== End of Addition.txt ============================