Publicité
Publicité
Format du document : text/plain
Prévisualisation
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-02-2017
Ran by HU Dylan (21-02-2017 22:20:58)
Running from C:\Users\HU Dylan\Downloads
Windows 10 Home Version 1607 (X64) (2017-01-22 14:34:38)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-2191782336-4012611912-442011344-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2191782336-4012611912-442011344-503 - Limited - Disabled)
Guest (S-1-5-21-2191782336-4012611912-442011344-501 - Limited - Disabled)
HU Dylan (S-1-5-21-2191782336-4012611912-442011344-1001 - Administrator - Enabled) => C:\Users\HU Dylan
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Dolby Audio X2 Windows API SDK (HKLM\...\{AA950AA4-CD9B-4D81-B6C0-BFABB7A24261}) (Version: 0.7.5.65 - Dolby Laboratories, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 56.0.2924.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Photosmart 5510d series Basic Device Software (HKLM\...\{8800943A-4158-4B5B-8E6B-A0AC63E10A91}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Photosmart 5510d series Help (HKLM-x32\...\{E59ADA18-03DB-44F5-9EF5-0FA25E4D4384}) (Version: 140.0.2.2 - Hewlett Packard)
HP Support Solutions Framework (HKLM-x32\...\{B11FEAD6-F19E-473E-A8B1-AE58C058F575}) (Version: 12.5.32.203 - HP Inc.)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.2.11000.2996 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 21.20.16.4542 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1633.3 - Intel Corporation)
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{7FADF1ED-241A-4F82-B8FD-19BD0A82FFA0}) (Version: 19.11.1639.0649 - Intel Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2191782336-4012611912-442011344-1001\...\OneDriveSetup.exe) (Version: 17.3.6743.1212 - Microsoft Corporation)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8004 - Realtek Semiconductor Corp.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.1.2.8 - Synaptics Incorporated)
Windows Driver Package - Intel (MEIx64) System (03/28/2016 11.0.5.1189) (HKLM\...\63CEF5543DBF9887E6220C5C2F7F85C2D4C726D5) (Version: 03/28/2016 11.0.5.1189 - Intel)
Windows Driver Package - Intel Corporation (iaStorA) HDC (09/13/2016 15.2.0.1020) (HKLM\...\37DAE2121471F8E5438282C3DA7A2E3C3B948832) (Version: 09/13/2016 15.2.0.1020 - Intel Corporation)
Windows Driver Package - Intel Corporation (iaStorA) SCSIAdapter (09/13/2016 15.2.0.1020) (HKLM\...\40F864F1F5637B62660CE55FE64AD98236609881) (Version: 09/13/2016 15.2.0.1020 - Intel Corporation)
Windows Driver Package - INTEL SDHost (10/03/2016 10.1.1.38) (HKLM\...\3940B61A6946281A57FD433C0DA034A5B9986B23) (Version: 10/03/2016 10.1.1.38 - INTEL)
Windows Driver Package - INTEL System (01/01/1970 10.1.1.38) (HKLM\...\457E1577222DC00F386FD7B52F2554E23F4AE877) (Version: 01/01/1970 10.1.1.38 - INTEL)
Windows Driver Package - INTEL System (01/01/1970 10.1.1.38) (HKLM\...\E9FA72E34585F7E8AEC9E8A5480A61B4F2BB8945) (Version: 01/01/1970 10.1.1.38 - INTEL)
Windows Driver Package - INTEL System (10/03/2016 10.1.1.38) (HKLM\...\27DDDB7F7A91AE0A5EE7D90CA1748575594B05E4) (Version: 10/03/2016 10.1.1.38 - INTEL)
Windows Driver Package - INTEL System (10/03/2016 10.1.1.38) (HKLM\...\35EF7ABD50A806F31310140CF0C15CDD6DE29096) (Version: 10/03/2016 10.1.1.38 - INTEL)
Windows Driver Package - INTEL System (10/03/2016 10.1.1.38) (HKLM\...\81CCB74AA48AE01DE6D9D32E5143728EF02343C9) (Version: 10/03/2016 10.1.1.38 - INTEL)
Windows Driver Package - INTEL System (10/03/2016 10.1.1.38) (HKLM\...\969BBDEE649A8C2165127FA233219F8B904B5E47) (Version: 10/03/2016 10.1.1.38 - INTEL)
Windows Driver Package - INTEL System (10/03/2016 10.1.1.38) (HKLM\...\A7E82A563DF588F2FF3B854EBE9D974BC08399E9) (Version: 10/03/2016 10.1.1.38 - INTEL)
Windows Driver Package - INTEL System (10/03/2016 10.1.1.38) (HKLM\...\B479A01CC8B01B43B0BCDA818CE6C2898819EDCA) (Version: 10/03/2016 10.1.1.38 - INTEL)
Windows Driver Package - INTEL System (10/03/2016 10.1.1.38) (HKLM\...\E8DE9F718759FD4FD8D474C7E67A03904419F6E2) (Version: 10/03/2016 10.1.1.38 - INTEL)
Windows Driver Package - INTEL System (10/03/2016 10.1.1.38) (HKLM\...\F2D2DC629939FBB1317CA3491FD0EFAD05C3F443) (Version: 10/03/2016 10.1.1.38 - INTEL)
Windows Driver Package - INTEL USB (10/03/2016 10.1.1.38) (HKLM\...\509D0619CF37844B21C1F5712C263140F4CF9D3C) (Version: 10/03/2016 10.1.1.38 - INTEL)
Windows Driver Package - INTEL USB (10/03/2016 10.1.1.38) (HKLM\...\E65C982C8EB9CEDC1CAD3078E70D87251F59BC79) (Version: 10/03/2016 10.1.1.38 - INTEL)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0EFF09A3-28EE-41BB-BAE0-86F94798D3EF} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-01-20] (Google Inc.)
Task: {1CEA507B-C0A6-47A4-8DAD-CB39E2AE5122} - System32\Tasks\HPCeeScheduleForHU Dylan => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: {1D40FDB2-481A-4BC2-846E-F3CD84B554D6} - System32\Tasks\BikaQ_FetchAndUpgrade_CanBeDel => C:\Program Files (x86)\BikaQRssReader\BikaQ.exe
Task: {5280A5D3-749E-45D6-AE15-C5E5606E739E} - System32\Tasks\RtHDVBg_PushButton => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2016-12-02] (Realtek Semiconductor)
Task: {8BC99BC5-7D91-4845-981C-0913F63CE3C8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-12-06] (HP Inc.)
Task: {DC8E49C2-C707-493B-A14C-687ABC0C74E6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-01-20] (Google Inc.)
Task: {F3DD9A1E-C8F1-45AD-ABC0-E1876FBB9AB1} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe
Task: {FD5BB929-E749-4FB8-9F92-321BE9FA1693} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-12-21] (HP Inc.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\HPCeeScheduleForHU Dylan.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\HU Dylan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.startpageing123.com/?type=sc&ts=1487668368&z=cba1cbe5370ab10b921d607g6z7b9m2qbq2bec7m0b&from=che0812&uid=SAMSUNGXMZNTY128HDHP-00000_S2YMNY0H858817
ShortcutWithArgument: C:\Users\HU Dylan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.startpageing123.com/?type=sc&ts=1487668368&z=cba1cbe5370ab10b921d607g6z7b9m2qbq2bec7m0b&from=che0812&uid=SAMSUNGXMZNTY128HDHP-00000_S2YMNY0H858817
ShortcutWithArgument: C:\Users\HU Dylan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.startpageing123.com/?type=sc&ts=1487668368&z=cba1cbe5370ab10b921d607g6z7b9m2qbq2bec7m0b&from=che0812&uid=SAMSUNGXMZNTY128HDHP-00000_S2YMNY0H858817
ShortcutWithArgument: C:\Users\HU Dylan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\360c22b137d62ce9\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.startpageing123.com/?type=sc&ts=1487668368&z=cba1cbe5370ab10b921d607g6z7b9m2qbq2bec7m0b&from=che0812&uid=SAMSUNGXMZNTY128HDHP-00000_S2YMNY0H858817
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.startpageing123.com/?type=sc&ts=1487668368&z=cba1cbe5370ab10b921d607g6z7b9m2qbq2bec7m0b&from=che0812&uid=SAMSUNGXMZNTY128HDHP-00000_S2YMNY0H858817
ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.startpageing123.com/?type=sc&ts=1487668368&z=cba1cbe5370ab10b921d607g6z7b9m2qbq2bec7m0b&from=che0812&uid=SAMSUNGXMZNTY128HDHP-00000_S2YMNY0H858817
==================== Loaded Modules (Whitelisted) ==============
2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2017-01-23 00:22 - 2017-01-23 00:22 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2017-01-23 00:22 - 2017-01-23 00:22 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-09-19 04:02 - 2016-09-19 04:02 - 00163336 _____ () C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe
2016-11-20 19:11 - 2016-11-20 19:11 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-01-23 00:22 - 2017-01-23 00:22 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-01-23 00:22 - 2017-01-23 00:22 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-01-23 00:22 - 2017-01-23 00:22 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-01-23 00:22 - 2017-01-23 00:22 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-01-23 00:22 - 2017-01-23 00:22 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-01-23 00:22 - 2017-01-23 00:22 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-12-29 14:17 - 2016-12-29 14:18 - 00019456 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2016-12-29 14:17 - 2016-12-29 14:18 - 20433408 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2016-12-29 14:17 - 2016-12-29 14:18 - 00680448 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.DesignCore.dll
2016-12-29 14:17 - 2016-12-29 14:18 - 01046528 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.Sharing.dll
2016-12-29 14:17 - 2016-12-29 14:18 - 00353792 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Photos.Inking.dll
2017-02-01 13:43 - 2017-02-01 13:43 - 01097072 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.16122.10291.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.Controls.dll
2016-12-29 14:11 - 2016-12-29 14:12 - 00015360 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsPhone_10.1609.2561.0_x64__8wekyb3d8bbwe\CompanionApp.exe
2016-12-29 14:11 - 2016-12-29 14:12 - 04148736 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsPhone_10.1609.2561.0_x64__8wekyb3d8bbwe\CompanionApp.dll
2016-12-29 14:11 - 2016-12-29 14:12 - 00637440 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsPhone_10.1609.2561.0_x64__8wekyb3d8bbwe\CompanionAppDeviceManager.dll
2016-12-29 14:11 - 2016-12-29 14:12 - 00258560 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsPhone_10.1609.2561.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll
2017-02-18 16:59 - 2017-02-18 16:59 - 00073728 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.109.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-02-18 16:59 - 2017-02-18 16:59 - 00179712 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.109.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-02-18 16:59 - 2017-02-18 16:59 - 42895360 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.109.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-02-08 10:06 - 2017-02-08 10:07 - 02215424 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.109.0_x64__kzf8qxf38zg5c\roottools.dll
2017-01-22 16:17 - 2017-01-22 16:18 - 00123384 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.16122.10271.0_x64__8wekyb3d8bbwe\GNSDK_FP.DLL
2017-02-14 10:29 - 2017-02-14 18:05 - 00124928 _____ () c:\program files (x86)\bilibili\bilibili.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2015-07-10 12:04 - 2015-07-10 12:02 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2191782336-4012611912-442011344-1001\Control Panel\Desktop\\Wallpaper -> c:\users\hu dylan\appdata\local\packages\microsoft.windows.photos_8wekyb3d8bbwe\localstate\photosappbackground\{073d7438-da56-4aa2-9110-3c014b2f74d0}.jpg
DNS Servers: 192.168.1.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{B1887CE7-3F1B-487E-A17C-FD33988DE630}] => (Allow) C:\Users\HU Dylan\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{F40D7336-FD7C-4A93-951A-B93A9589BF77}] => (Allow) C:\Users\HU Dylan\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{EEA38681-83C9-482B-BCCB-6935D73235AC}] => (Allow) C:\Users\HU Dylan\Desktop\DriverGenius\xlmodule\download\minithunderplatform.exe
FirewallRules: [{51998759-2483-4660-8602-6CA52E7C87BF}] => (Allow) C:\Users\HU Dylan\Desktop\DriverGenius\xlmodule\download\minithunderplatform.exe
FirewallRules: [{7D7B0330-5FCC-4DC1-BF34-82D7E7A71968}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{439D391B-3E7C-438E-9A16-808E0CF87F2D}] => (Allow) C:\Program Files\HP\HP Photosmart 5510d series\Bin\DeviceSetup.exe
FirewallRules: [{00BB19BC-9695-4EAE-9483-E8FAB022062D}] => (Allow) C:\Program Files\HP\HP Photosmart 5510d series\Bin\HPNetworkCommunicator.exe
FirewallRules: [{008BE3D4-0AD1-4B55-97A8-B358FB444833}] => (Allow) C:\Program Files\HP\HP Photosmart 5510d series\Bin\HPNetworkCommunicatorCom.exe
==================== Restore Points =========================
ATTENTION: System Restore is disabled
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (02/19/2017 10:28:06 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-PVLPE67)
Description: Activation of app Microsoft.ZuneVideo_8wekyb3d8bbwe!Microsoft.ZuneVideo failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (02/19/2017 01:34:02 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-PVLPE67)
Description: Activation of app Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (02/19/2017 01:34:02 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-PVLPE67)
Description: Activation of app Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App failed with error: -2147024865 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (02/19/2017 01:34:02 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-PVLPE67)
Description: Activation of app Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (02/19/2017 01:34:02 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-PVLPE67)
Description: Activation of app Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App failed with error: -2147024865 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (02/19/2017 01:34:02 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-PVLPE67)
Description: Activation of app Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (02/19/2017 01:34:01 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-PVLPE67)
Description: Activation of app Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (02/19/2017 01:34:01 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-PVLPE67)
Description: Activation of app Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!App failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (02/14/2017 04:35:03 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: chrome.exe, version: 56.0.2924.87, time stamp: 0x58916e12
Faulting module name: chrome_child.dll, version: 56.0.2924.87, time stamp: 0x5891ac46
Exception code: 0xc00000fd
Fault offset: 0x00000000000ef144
Faulting process id: 0x11d4
Faulting application start time: 0x01d286d54999232a
Faulting application path: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Faulting module path: C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\chrome_child.dll
Report Id: c5c9fc08-cd61-4529-9b64-ee6ffb0400b8
Faulting package full name:
Faulting package-relative application ID:
Error: (02/14/2017 04:16:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: chrome.exe, version: 56.0.2924.87, time stamp: 0x58916e12
Faulting module name: chrome_child.dll, version: 56.0.2924.87, time stamp: 0x5891ac46
Exception code: 0xc00000fd
Fault offset: 0x000000000020fd3a
Faulting process id: 0x1950
Faulting application start time: 0x01d286d4d9ce97bd
Faulting application path: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Faulting module path: C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\chrome_child.dll
Report Id: c4c6c20a-609b-4219-9ddd-22e20e761ef4
Faulting package full name:
Faulting package-relative application ID:
System errors:
=============
Error: (02/21/2017 08:41:56 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 4003) (User: NT AUTHORITY)
Description: WLAN AutoConfig detected limit connectivity, performing Reset/Recover.adapter.
Code: 8 0x0 0x0
Error: (02/21/2017 08:41:51 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 4003) (User: NT AUTHORITY)
Description: WLAN AutoConfig detected limit connectivity, performing Reset/Recover.adapter.
Code: 2 0xdeaddeed 0xeeec
Error: (02/21/2017 08:41:51 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 4003) (User: NT AUTHORITY)
Description: WLAN AutoConfig detected limit connectivity, performing Reset/Recover.adapter.
Code: 1 0xc 0x4
Error: (02/21/2017 05:16:24 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (02/21/2017 02:09:34 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80246013: Definition Update for Windows Defender - KB2267602 (Definition 1.235.3290.0).
Error: (02/21/2017 12:31:32 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (02/21/2017 10:43:57 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
and APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (02/21/2017 10:43:24 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (02/21/2017 10:43:20 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The HP Support Solutions Framework Service service terminated unexpectedly. It has done this 1 time(s).
Error: (02/21/2017 10:43:20 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Dolby DAX2 API Service service terminated unexpectedly. It has done this 1 time(s).
==================== Memory info ===========================
Processor: Intel(R) Core(TM) m3-6Y30 CPU @ 0.90GHz
Percentage of memory in use: 37%
Total physical RAM: 4008.91 MB
Available physical RAM: 2491.15 MB
Total Virtual: 4712.91 MB
Available Virtual: 2835.96 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:91.8 GB) (Free:61.86 GB) NTFS
Drive d: (Windows) (Fixed) (Total:26.11 GB) (Free:0.95 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 119.2 GB) (Disk ID: E4D05488)
Partition: GPT.
==================== End of Addition.txt ============================
Ran by HU Dylan (21-02-2017 22:20:58)
Running from C:\Users\HU Dylan\Downloads
Windows 10 Home Version 1607 (X64) (2017-01-22 14:34:38)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-2191782336-4012611912-442011344-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2191782336-4012611912-442011344-503 - Limited - Disabled)
Guest (S-1-5-21-2191782336-4012611912-442011344-501 - Limited - Disabled)
HU Dylan (S-1-5-21-2191782336-4012611912-442011344-1001 - Administrator - Enabled) => C:\Users\HU Dylan
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Dolby Audio X2 Windows API SDK (HKLM\...\{AA950AA4-CD9B-4D81-B6C0-BFABB7A24261}) (Version: 0.7.5.65 - Dolby Laboratories, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 56.0.2924.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Photosmart 5510d series Basic Device Software (HKLM\...\{8800943A-4158-4B5B-8E6B-A0AC63E10A91}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Photosmart 5510d series Help (HKLM-x32\...\{E59ADA18-03DB-44F5-9EF5-0FA25E4D4384}) (Version: 140.0.2.2 - Hewlett Packard)
HP Support Solutions Framework (HKLM-x32\...\{B11FEAD6-F19E-473E-A8B1-AE58C058F575}) (Version: 12.5.32.203 - HP Inc.)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.2.11000.2996 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 21.20.16.4542 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1633.3 - Intel Corporation)
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{7FADF1ED-241A-4F82-B8FD-19BD0A82FFA0}) (Version: 19.11.1639.0649 - Intel Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2191782336-4012611912-442011344-1001\...\OneDriveSetup.exe) (Version: 17.3.6743.1212 - Microsoft Corporation)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8004 - Realtek Semiconductor Corp.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.1.2.8 - Synaptics Incorporated)
Windows Driver Package - Intel (MEIx64) System (03/28/2016 11.0.5.1189) (HKLM\...\63CEF5543DBF9887E6220C5C2F7F85C2D4C726D5) (Version: 03/28/2016 11.0.5.1189 - Intel)
Windows Driver Package - Intel Corporation (iaStorA) HDC (09/13/2016 15.2.0.1020) (HKLM\...\37DAE2121471F8E5438282C3DA7A2E3C3B948832) (Version: 09/13/2016 15.2.0.1020 - Intel Corporation)
Windows Driver Package - Intel Corporation (iaStorA) SCSIAdapter (09/13/2016 15.2.0.1020) (HKLM\...\40F864F1F5637B62660CE55FE64AD98236609881) (Version: 09/13/2016 15.2.0.1020 - Intel Corporation)
Windows Driver Package - INTEL SDHost (10/03/2016 10.1.1.38) (HKLM\...\3940B61A6946281A57FD433C0DA034A5B9986B23) (Version: 10/03/2016 10.1.1.38 - INTEL)
Windows Driver Package - INTEL System (01/01/1970 10.1.1.38) (HKLM\...\457E1577222DC00F386FD7B52F2554E23F4AE877) (Version: 01/01/1970 10.1.1.38 - INTEL)
Windows Driver Package - INTEL System (01/01/1970 10.1.1.38) (HKLM\...\E9FA72E34585F7E8AEC9E8A5480A61B4F2BB8945) (Version: 01/01/1970 10.1.1.38 - INTEL)
Windows Driver Package - INTEL System (10/03/2016 10.1.1.38) (HKLM\...\27DDDB7F7A91AE0A5EE7D90CA1748575594B05E4) (Version: 10/03/2016 10.1.1.38 - INTEL)
Windows Driver Package - INTEL System (10/03/2016 10.1.1.38) (HKLM\...\35EF7ABD50A806F31310140CF0C15CDD6DE29096) (Version: 10/03/2016 10.1.1.38 - INTEL)
Windows Driver Package - INTEL System (10/03/2016 10.1.1.38) (HKLM\...\81CCB74AA48AE01DE6D9D32E5143728EF02343C9) (Version: 10/03/2016 10.1.1.38 - INTEL)
Windows Driver Package - INTEL System (10/03/2016 10.1.1.38) (HKLM\...\969BBDEE649A8C2165127FA233219F8B904B5E47) (Version: 10/03/2016 10.1.1.38 - INTEL)
Windows Driver Package - INTEL System (10/03/2016 10.1.1.38) (HKLM\...\A7E82A563DF588F2FF3B854EBE9D974BC08399E9) (Version: 10/03/2016 10.1.1.38 - INTEL)
Windows Driver Package - INTEL System (10/03/2016 10.1.1.38) (HKLM\...\B479A01CC8B01B43B0BCDA818CE6C2898819EDCA) (Version: 10/03/2016 10.1.1.38 - INTEL)
Windows Driver Package - INTEL System (10/03/2016 10.1.1.38) (HKLM\...\E8DE9F718759FD4FD8D474C7E67A03904419F6E2) (Version: 10/03/2016 10.1.1.38 - INTEL)
Windows Driver Package - INTEL System (10/03/2016 10.1.1.38) (HKLM\...\F2D2DC629939FBB1317CA3491FD0EFAD05C3F443) (Version: 10/03/2016 10.1.1.38 - INTEL)
Windows Driver Package - INTEL USB (10/03/2016 10.1.1.38) (HKLM\...\509D0619CF37844B21C1F5712C263140F4CF9D3C) (Version: 10/03/2016 10.1.1.38 - INTEL)
Windows Driver Package - INTEL USB (10/03/2016 10.1.1.38) (HKLM\...\E65C982C8EB9CEDC1CAD3078E70D87251F59BC79) (Version: 10/03/2016 10.1.1.38 - INTEL)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0EFF09A3-28EE-41BB-BAE0-86F94798D3EF} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-01-20] (Google Inc.)
Task: {1CEA507B-C0A6-47A4-8DAD-CB39E2AE5122} - System32\Tasks\HPCeeScheduleForHU Dylan => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: {1D40FDB2-481A-4BC2-846E-F3CD84B554D6} - System32\Tasks\BikaQ_FetchAndUpgrade_CanBeDel => C:\Program Files (x86)\BikaQRssReader\BikaQ.exe
Task: {5280A5D3-749E-45D6-AE15-C5E5606E739E} - System32\Tasks\RtHDVBg_PushButton => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2016-12-02] (Realtek Semiconductor)
Task: {8BC99BC5-7D91-4845-981C-0913F63CE3C8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-12-06] (HP Inc.)
Task: {DC8E49C2-C707-493B-A14C-687ABC0C74E6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-01-20] (Google Inc.)
Task: {F3DD9A1E-C8F1-45AD-ABC0-E1876FBB9AB1} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe
Task: {FD5BB929-E749-4FB8-9F92-321BE9FA1693} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-12-21] (HP Inc.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\HPCeeScheduleForHU Dylan.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\HU Dylan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.startpageing123.com/?type=sc&ts=1487668368&z=cba1cbe5370ab10b921d607g6z7b9m2qbq2bec7m0b&from=che0812&uid=SAMSUNGXMZNTY128HDHP-00000_S2YMNY0H858817
ShortcutWithArgument: C:\Users\HU Dylan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.startpageing123.com/?type=sc&ts=1487668368&z=cba1cbe5370ab10b921d607g6z7b9m2qbq2bec7m0b&from=che0812&uid=SAMSUNGXMZNTY128HDHP-00000_S2YMNY0H858817
ShortcutWithArgument: C:\Users\HU Dylan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.startpageing123.com/?type=sc&ts=1487668368&z=cba1cbe5370ab10b921d607g6z7b9m2qbq2bec7m0b&from=che0812&uid=SAMSUNGXMZNTY128HDHP-00000_S2YMNY0H858817
ShortcutWithArgument: C:\Users\HU Dylan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\360c22b137d62ce9\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.startpageing123.com/?type=sc&ts=1487668368&z=cba1cbe5370ab10b921d607g6z7b9m2qbq2bec7m0b&from=che0812&uid=SAMSUNGXMZNTY128HDHP-00000_S2YMNY0H858817
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.startpageing123.com/?type=sc&ts=1487668368&z=cba1cbe5370ab10b921d607g6z7b9m2qbq2bec7m0b&from=che0812&uid=SAMSUNGXMZNTY128HDHP-00000_S2YMNY0H858817
ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.startpageing123.com/?type=sc&ts=1487668368&z=cba1cbe5370ab10b921d607g6z7b9m2qbq2bec7m0b&from=che0812&uid=SAMSUNGXMZNTY128HDHP-00000_S2YMNY0H858817
==================== Loaded Modules (Whitelisted) ==============
2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2017-01-23 00:22 - 2017-01-23 00:22 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2017-01-23 00:22 - 2017-01-23 00:22 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-09-19 04:02 - 2016-09-19 04:02 - 00163336 _____ () C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe
2016-11-20 19:11 - 2016-11-20 19:11 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-01-23 00:22 - 2017-01-23 00:22 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-01-23 00:22 - 2017-01-23 00:22 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-01-23 00:22 - 2017-01-23 00:22 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-01-23 00:22 - 2017-01-23 00:22 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-01-23 00:22 - 2017-01-23 00:22 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-01-23 00:22 - 2017-01-23 00:22 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-12-29 14:17 - 2016-12-29 14:18 - 00019456 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2016-12-29 14:17 - 2016-12-29 14:18 - 20433408 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2016-12-29 14:17 - 2016-12-29 14:18 - 00680448 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.DesignCore.dll
2016-12-29 14:17 - 2016-12-29 14:18 - 01046528 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.Sharing.dll
2016-12-29 14:17 - 2016-12-29 14:18 - 00353792 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Photos.Inking.dll
2017-02-01 13:43 - 2017-02-01 13:43 - 01097072 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.16122.10291.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.Controls.dll
2016-12-29 14:11 - 2016-12-29 14:12 - 00015360 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsPhone_10.1609.2561.0_x64__8wekyb3d8bbwe\CompanionApp.exe
2016-12-29 14:11 - 2016-12-29 14:12 - 04148736 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsPhone_10.1609.2561.0_x64__8wekyb3d8bbwe\CompanionApp.dll
2016-12-29 14:11 - 2016-12-29 14:12 - 00637440 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsPhone_10.1609.2561.0_x64__8wekyb3d8bbwe\CompanionAppDeviceManager.dll
2016-12-29 14:11 - 2016-12-29 14:12 - 00258560 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsPhone_10.1609.2561.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll
2017-02-18 16:59 - 2017-02-18 16:59 - 00073728 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.109.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-02-18 16:59 - 2017-02-18 16:59 - 00179712 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.109.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-02-18 16:59 - 2017-02-18 16:59 - 42895360 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.109.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-02-08 10:06 - 2017-02-08 10:07 - 02215424 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.109.0_x64__kzf8qxf38zg5c\roottools.dll
2017-01-22 16:17 - 2017-01-22 16:18 - 00123384 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.16122.10271.0_x64__8wekyb3d8bbwe\GNSDK_FP.DLL
2017-02-14 10:29 - 2017-02-14 18:05 - 00124928 _____ () c:\program files (x86)\bilibili\bilibili.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2015-07-10 12:04 - 2015-07-10 12:02 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2191782336-4012611912-442011344-1001\Control Panel\Desktop\\Wallpaper -> c:\users\hu dylan\appdata\local\packages\microsoft.windows.photos_8wekyb3d8bbwe\localstate\photosappbackground\{073d7438-da56-4aa2-9110-3c014b2f74d0}.jpg
DNS Servers: 192.168.1.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{B1887CE7-3F1B-487E-A17C-FD33988DE630}] => (Allow) C:\Users\HU Dylan\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{F40D7336-FD7C-4A93-951A-B93A9589BF77}] => (Allow) C:\Users\HU Dylan\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{EEA38681-83C9-482B-BCCB-6935D73235AC}] => (Allow) C:\Users\HU Dylan\Desktop\DriverGenius\xlmodule\download\minithunderplatform.exe
FirewallRules: [{51998759-2483-4660-8602-6CA52E7C87BF}] => (Allow) C:\Users\HU Dylan\Desktop\DriverGenius\xlmodule\download\minithunderplatform.exe
FirewallRules: [{7D7B0330-5FCC-4DC1-BF34-82D7E7A71968}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{439D391B-3E7C-438E-9A16-808E0CF87F2D}] => (Allow) C:\Program Files\HP\HP Photosmart 5510d series\Bin\DeviceSetup.exe
FirewallRules: [{00BB19BC-9695-4EAE-9483-E8FAB022062D}] => (Allow) C:\Program Files\HP\HP Photosmart 5510d series\Bin\HPNetworkCommunicator.exe
FirewallRules: [{008BE3D4-0AD1-4B55-97A8-B358FB444833}] => (Allow) C:\Program Files\HP\HP Photosmart 5510d series\Bin\HPNetworkCommunicatorCom.exe
==================== Restore Points =========================
ATTENTION: System Restore is disabled
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (02/19/2017 10:28:06 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-PVLPE67)
Description: Activation of app Microsoft.ZuneVideo_8wekyb3d8bbwe!Microsoft.ZuneVideo failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (02/19/2017 01:34:02 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-PVLPE67)
Description: Activation of app Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (02/19/2017 01:34:02 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-PVLPE67)
Description: Activation of app Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App failed with error: -2147024865 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (02/19/2017 01:34:02 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-PVLPE67)
Description: Activation of app Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (02/19/2017 01:34:02 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-PVLPE67)
Description: Activation of app Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App failed with error: -2147024865 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (02/19/2017 01:34:02 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-PVLPE67)
Description: Activation of app Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (02/19/2017 01:34:01 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-PVLPE67)
Description: Activation of app Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (02/19/2017 01:34:01 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-PVLPE67)
Description: Activation of app Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!App failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (02/14/2017 04:35:03 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: chrome.exe, version: 56.0.2924.87, time stamp: 0x58916e12
Faulting module name: chrome_child.dll, version: 56.0.2924.87, time stamp: 0x5891ac46
Exception code: 0xc00000fd
Fault offset: 0x00000000000ef144
Faulting process id: 0x11d4
Faulting application start time: 0x01d286d54999232a
Faulting application path: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Faulting module path: C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\chrome_child.dll
Report Id: c5c9fc08-cd61-4529-9b64-ee6ffb0400b8
Faulting package full name:
Faulting package-relative application ID:
Error: (02/14/2017 04:16:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: chrome.exe, version: 56.0.2924.87, time stamp: 0x58916e12
Faulting module name: chrome_child.dll, version: 56.0.2924.87, time stamp: 0x5891ac46
Exception code: 0xc00000fd
Fault offset: 0x000000000020fd3a
Faulting process id: 0x1950
Faulting application start time: 0x01d286d4d9ce97bd
Faulting application path: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Faulting module path: C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\chrome_child.dll
Report Id: c4c6c20a-609b-4219-9ddd-22e20e761ef4
Faulting package full name:
Faulting package-relative application ID:
System errors:
=============
Error: (02/21/2017 08:41:56 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 4003) (User: NT AUTHORITY)
Description: WLAN AutoConfig detected limit connectivity, performing Reset/Recover.adapter.
Code: 8 0x0 0x0
Error: (02/21/2017 08:41:51 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 4003) (User: NT AUTHORITY)
Description: WLAN AutoConfig detected limit connectivity, performing Reset/Recover.adapter.
Code: 2 0xdeaddeed 0xeeec
Error: (02/21/2017 08:41:51 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 4003) (User: NT AUTHORITY)
Description: WLAN AutoConfig detected limit connectivity, performing Reset/Recover.adapter.
Code: 1 0xc 0x4
Error: (02/21/2017 05:16:24 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (02/21/2017 02:09:34 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80246013: Definition Update for Windows Defender - KB2267602 (Definition 1.235.3290.0).
Error: (02/21/2017 12:31:32 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (02/21/2017 10:43:57 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
and APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (02/21/2017 10:43:24 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (02/21/2017 10:43:20 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The HP Support Solutions Framework Service service terminated unexpectedly. It has done this 1 time(s).
Error: (02/21/2017 10:43:20 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Dolby DAX2 API Service service terminated unexpectedly. It has done this 1 time(s).
==================== Memory info ===========================
Processor: Intel(R) Core(TM) m3-6Y30 CPU @ 0.90GHz
Percentage of memory in use: 37%
Total physical RAM: 4008.91 MB
Available physical RAM: 2491.15 MB
Total Virtual: 4712.91 MB
Available Virtual: 2835.96 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:91.8 GB) (Free:61.86 GB) NTFS
Drive d: (Windows) (Fixed) (Total:26.11 GB) (Free:0.95 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 119.2 GB) (Disk ID: E4D05488)
Partition: GPT.
==================== End of Addition.txt ============================