Additional scan result of Farbar Recovery Scan Tool (x86) Version:09-05-2016 Ran by رياض (2016-05-13 06:46:44) Running from C:\Users\رياض\Desktop Microsoft Windows 7 Ultimate Service Pack 1 (X86) (2011-07-11 08:23:06) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-3488952640-1886036067-2608822963-500 - Administrator - Disabled) Guest (S-1-5-21-3488952640-1886036067-2608822963-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-3488952640-1886036067-2608822963-1004 - Limited - Enabled) رياض (S-1-5-21-3488952640-1886036067-2608822963-1000 - Administrator - Enabled) => C:\Users\رياض ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Kaspersky Internet Security (Disabled - Up to date) {86367591-4BE4-AE08-2FD9-7FCB8259CD98} AS: Kaspersky Internet Security (Disabled - Up to date) {3D579475-6DDE-A186-1569-44B9F9DE8725} AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Kaspersky Internet Security (Disabled) {BE0DF4B4-018B-AF50-0486-D6FE7C8A8AE3} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Adobe Flash Player 21 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 21.0.0.213 - Adobe Systems Incorporated) CCleaner (HKLM\...\CCleaner) (Version: 5.17 - Piriform) F.lux (HKU\S-1-5-21-3488952640-1886036067-2608822963-1000\...\Flux) (Version: - ) Golden Filter Premium 3.1 (HKLM\...\Golden Filter Premium) (Version: 3.1 - Gsi Technologies) Google Chrome (HKLM\...\Google Chrome) (Version: 50.0.2661.94 - Google Inc‎.‎) Google Update Helper (Version: 1.3.21.165 - Google Inc.) Hidden Google Update Helper (Version: 1.3.30.3 - Google Inc.) Hidden Internet Download Manager (HKLM\...\Internet Download Manager) (Version: - Tonec Inc.) Java 7 Update 17 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217017FF}) (Version: 7.0.170 - Oracle) Kaspersky Internet Security (HKLM\...\InstallWIX_{77E7AE5C-181C-4CAF-ADBF-946F11C1CE26}) (Version: 16.0.0.614 - Лаборатория Касперского) Kaspersky Internet Security (Version: 16.0.0.614 - Лаборатория Касперского) Hidden ManyCam 4.0.77 (HKLM\...\ManyCam) (Version: 4.0.77 - Visicom Media Inc.) Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation) Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Professional Edition 2003 (HKLM\...\{90110401-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation) MobiConnect (HKLM\...\MobiConnect) (Version: 23.009.09.02.216 - Huawei Technologies Co.,Ltd) Mozilla Firefox 6.0 (x86 ar) (HKLM\...\Mozilla Firefox 6.0 (x86 ar)) (Version: 6.0 - Mozilla) Nitro Pro 8 (HKLM\...\{C41DBC07-C9C2-4B8C-BD85-46ED6853AD6B}) (Version: 8.5.1.10 - Nitro) PL-2303 USB-to-Serial (HKLM\...\{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}) (Version: - ) Ralink RT2870 Wireless LAN Card (HKLM\...\{28DA7D8B-F9A4-4F18-8AA0-551B1E084D0D}) (Version: 1.5.11.0 - Ralink) Realtek AC'97 Audio (HKLM\...\{FB08F381-6533-4108-B7DD-039E11FBC27E}) (Version: - ) TuneUp Utilities 2014 (en-US) (Version: 14.0.1000.221 - TuneUp Software) Hidden TuneUp Utilities Language Pack (en-US) (Version: 13.0.3020.7 - TuneUp Software) Hidden WinRAR archiver (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH) Your Uninstaller! 7 (HKLM\...\YU2010_is1) (Version: 7.5.2013.2 - URSoft, Inc.) حزمة التوافق لنظام Office 2007 (HKLM\...\{90120000-0020-0401-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {0163AEAE-7C31-472F-BCDF-3F29AEC39A0D} - System32\Tasks\{AF16D54E-4F96-4C7F-BA20-6BFE7AFD3FB0} => C:\Users\رياض\Desktop\Wonders\Wonders.exe Task: {033B8299-7942-4201-892C-A2353BB1EBAD} - System32\Tasks\{9A0F40E0-12B6-472C-A1B0-D6014F1DE58E} => pcalua.exe -a "C:\Users\رياض\Desktop\Advanced RAR Password Recovery 1.53\ara.exe" -d "C:\Users\رياض\Desktop\Advanced RAR Password Recovery 1.53" Task: {0F6C9246-A962-4902-9905-72902CADD37E} - System32\Tasks\{5A31C8BC-9B44-4E3D-AE18-E620C4C7206D} => C:\Program Files\CyberGhost 5\CyberGhost.exe Task: {18263BC2-698D-4259-892C-E1F52B10A775} - System32\Tasks\{03473F93-B3D8-41DB-807C-961C16A96BF9} => C:\Users\رياض\Desktop\URescue_v1.3.0.71.exe Task: {1C0FBFE1-483A-40F8-8E27-D86F23398601} - System32\Tasks\Games\UpdateCheck_S-1-5-21-3488952640-1886036067-2608822963-1000 Task: {2C3FAF1F-3CC8-44D0-BFDC-B8A80FC5E1B7} - System32\Tasks\{941D2BF0-F5F5-4B7F-B318-8CD8E53796F5} => C:\Users\رياض\Downloads\FeedingFrenzySetup-en_achrafddine.exe Task: {3A058113-34AA-4CE6-8E9E-2B513C44DC51} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-04-15] (Piriform Ltd) Task: {3C2C3CE2-EBF2-4CAF-9FA7-FD098F95CB4A} - System32\Tasks\{322CDE2D-2D0F-4690-88EC-7E8229618D7F} => C:\Program Files\Adobe\Acrobat 4.0 ME\Reader\AcroRd32.exe Task: {53947287-F61E-439B-ABC8-BD9182A0641E} - System32\Tasks\{4F9BB62C-7C66-4FCB-96BB-F6805B21C68A} => G:\PL2303\vista\PL-2303 Vista Driver Installer.exe Task: {53CEF070-C81E-4700-92AD-819AA4BAFC3D} - System32\Tasks\{ED5BADB1-F00F-4EA3-B6F1-9B386C3291E4} => C:\Program Files\ManyCam\ManyCam.exe [2014-03-26] (Visicom Media Inc.) Task: {54425755-34B7-4954-A563-A22D6FFB06AE} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-04-30] (Adobe Systems Incorporated) Task: {593B0447-33BB-47BB-8127-005BA0F850D7} - System32\Tasks\{CC96062A-BA16-46B6-9444-CC764E8AEC3E} => pcalua.exe -a C:\Users\رياض\Downloads\Programs\CGWebInstall.exe -d C:\Users\رياض\AppData\Roaming\IDM Task: {5BD47457-DFF6-413B-88FD-AD390095B8F2} - System32\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901} => C:\Program Files\Common Files\AV\Kaspersky Lab\upgrade_launcher.exe [2016-04-29] (AO Kaspersky Lab) Task: {5C11522D-1C9C-4D0E-9B7A-5BA72D35130E} - System32\Tasks\{032BC8D1-E903-442C-AD3D-663C978C3C89} => C:\Windows\IsUninst.exe [1998-10-29] (InstallShield Software Corporation) Task: {5CA971C2-901F-4579-A42B-BD179731A700} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-04-29] (Google Inc.) Task: {61976A89-9FD1-4956-93B7-BC295A6CD108} - System32\Tasks\{70A75179-EB46-4F0D-819C-1C5675BA0FCE} => G:\PL2303\vista\PL-2303 Vista Driver Installer.exe Task: {691B6565-A31E-49C3-BFAC-E709BB6233EF} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-07-03] (Sun Microsystems, Inc.) Task: {6EDCEEB2-661F-4ABE-A892-7F16031A40EF} - System32\Tasks\{78A82B56-A6F7-43AF-95BD-0A3A5936D939} => pcalua.exe -a C:\Users\رياض\Downloads\Programs\NetFx20SP2_x86.exe -d C:\Users\رياض\Downloads\Programs Task: {727E3B41-3F56-42A8-BDE3-ED665791842C} - System32\Tasks\{2B935064-2C4B-4E94-80BF-6CF1A8A59467} => C:\Program Files\ITE\IT1167B\DtMPTool_V1.67B.11.0\DtMPTool.exe Task: {7D030B84-8CEB-4B17-A342-DF37325CE0EF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-04-29] (Google Inc.) Task: {7D149F7C-3187-4F41-9863-CC2E40E4B11C} - System32\Tasks\{D113C49F-8720-4AA8-92B2-01EB670E53D3} => C:\Program Files\Malwarebytes Anti-Malware\mbam.exe Task: {7E70318B-72DA-4E63-B71C-6971C11134CF} - System32\Tasks\Google Updater and Installer => C:\Users\رياض\AppData\Local\Google\Update\GoogleUpdate.exe Task: {8F2181C5-0845-4C9C-957C-D925EE7D96B9} - System32\Tasks\{56F02A15-328D-4EFF-BD66-44E861C19F7E} => C:\Program Files\Your Uninstaller 2010\urmain.exe Task: {91316D64-78EC-4B95-8394-0607A0E7DA11} - System32\Tasks\{3F83C32F-1F4D-4235-978A-3DF6E5AE9118} => C:\Program Files\ManyCam\ManyCam.exe [2014-03-26] (Visicom Media Inc.) Task: {950E37CD-E8A8-45D6-8FB8-267286DB2B10} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3488952640-1886036067-2608822963-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe Task: {BCB8E5C0-9F28-40DB-B737-F9BFED18D568} - System32\Tasks\{7DE0E98D-6DCC-43CD-A5E7-30B48962E5CD} => C:\DriveKey\HPUSBFW.EXE Task: {BFDF6117-D59F-4CA8-B7F3-9946316A8641} - System32\Tasks\{EB525EF4-EB7F-4AE1-80B1-17D7A17F20E1} => C:\Users\رياض\Desktop\Translator4.2.exe Task: {C19B2E10-84D2-4C34-85A7-313571EBCEE0} - System32\Tasks\{87896E32-7C92-4925-8FF9-08B7CAA383E6} => G:\PL2303\winxp\PL-2303 Driver Installer.exe Task: {C6888691-8AB5-480E-92A3-F2686FB51415} - System32\Tasks\{A4A2A960-6BA9-4C49-A9F7-3C6BD32C586B} => C:\Users\رياض\Downloads\Programs\Windows_Fix_It.exe Task: {CB8987FA-6DAA-4FBF-B810-AF5971D6327B} - System32\Tasks\{5E5884D6-511D-476D-8FEE-4679E36B0AC4} => C:\Program Files\GameTop.com\Police Supercars Racing\PSR.exe Task: {CBC43EF5-11FA-48A5-9ED3-E50055688824} - System32\Tasks\Real Player online update program => C:\Program Files\Common Files\Real\Update_OB\realsched.exe Task: {D29BABA6-BB1C-467A-A19D-D031155C7902} - System32\Tasks\{12EBF2BF-6DCF-470D-99E5-D35ABA35B42F} => Firefox.exe Task: {DA85C48F-6551-4776-A3A3-F7043908F799} - System32\Tasks\{00F73461-0287-403E-9622-4686C1943159} => C:\Program Files\ManyCam\ManyCam.exe [2014-03-26] (Visicom Media Inc.) Task: {DF1D2133-485C-4353-9219-1C9D87F841B9} - System32\Tasks\{D5DBDEB0-62D0-4F6A-9F7C-3D322CBA4D41} => G:\PL2303\winxp\PL-2303 Driver Installer.exe Task: {E1424965-1DCD-4E92-BBE3-A9C09C1CD331} - System32\Tasks\{4899A4A0-C77E-4243-9A11-7827047D88B0} => C:\Program Files\ManyCam\ManyCam.exe [2014-03-26] (Visicom Media Inc.) Task: {E2FC7307-2C97-4A9D-A2BA-22C2486D6D66} - System32\Tasks\{932CA38C-4745-468D-8D9A-798CAAA92E7B} => C:\Users\رياض\Desktop\Translator4.2.exe Task: {EC244750-1DF3-4BC2-AA1D-BB6207D92644} - System32\Tasks\{AD2250DA-7DD2-407F-A264-4D21856C57BA} => C:\DriveKey\HPUSBFW.EXE Task: {EE11092A-EEAF-4C5F-BF87-69986E492855} - System32\Tasks\{CF5B3E65-61BE-4798-9B18-DD90DA1970EB} => G:\PL2303\vista\PL-2303 Vista Driver Installer.exe Task: {F961B6A0-7727-4A60-B24C-DB7D088E8629} - System32\Tasks\{FCA782C9-EFC9-49C3-832C-5E30CC6D57CB} => pcalua.exe -a "C:\Program Files\VS Revo Group\Revo Uninstaller\Revouninstaller.exe" -d "C:\Program Files\VS Revo Group\Revo Uninstaller" Task: {FF3E7136-D107-4E93-AC4A-93789813C025} - System32\Tasks\{366537CB-DA3C-4D77-BD12-848353C22F91} => C:\Program Files\Realtek\RTL8187 Wireless LAN Utility\ReStart.exe (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe ==================== Shortcuts ============================= (The entries could be listed to be restored or removed.) ==================== Loaded Modules (Whitelisted) ============== 2012-09-20 15:09 - 2010-03-15 10:28 - 00141824 _____ () C:\Program Files\WinRAR\rarext.dll 2011-03-14 16:27 - 2011-03-14 16:27 - 00271712 _____ () C:\ProgramData\DatacardService\HWDeviceService.exe 2014-02-06 11:36 - 2013-05-21 10:58 - 00656976 _____ () C:\ProgramData\MobiConnect\OnlineUpdate\ouc.exe 2014-02-06 11:36 - 2009-01-10 11:32 - 00011362 _____ () C:\ProgramData\MobiConnect\OnlineUpdate\mingwm10.dll 2014-02-06 11:36 - 2009-06-22 19:42 - 00043008 _____ () C:\ProgramData\MobiConnect\OnlineUpdate\libgcc_s_dw2-1.dll 2014-02-06 11:36 - 2012-10-31 10:11 - 02417152 _____ () C:\ProgramData\MobiConnect\OnlineUpdate\QtCore4.dll 2014-02-06 11:36 - 2012-10-31 10:14 - 01148416 _____ () C:\ProgramData\MobiConnect\OnlineUpdate\QtNetwork4.dll 2014-02-06 11:36 - 2013-05-21 10:50 - 00839680 _____ () C:\ProgramData\MobiConnect\OnlineUpdate\QueryStrategy.dll 2014-02-06 11:36 - 2012-10-31 10:11 - 00398336 _____ () C:\ProgramData\MobiConnect\OnlineUpdate\QtXml4.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\ProgramData\TEMP:1CE11B51 [228] ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver" ==================== Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com There are 7690 more sites. ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2014-04-05 19:15 - 2014-04-05 19:15 - 00517864 ____N C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost 0.0.0.0 m.fr.a2dfp.net 0.0.0.0 mfr.a2dfp.net 0.0.0.0 ad.a8.net 0.0.0.0 asy.a8ww.net 0.0.0.0 static.a-ads.com 0.0.0.0 abcstats.com 0.0.0.0 ad4.abradio.cz 0.0.0.0 a.abv.bg 0.0.0.0 adserver.abv.bg 0.0.0.0 adv.abv.bg 0.0.0.0 bimg.abv.bg 0.0.0.0 ca.abv.bg 0.0.0.0 www2.a-counter.kiev.ua 0.0.0.0 track.acclaimnetwork.com 0.0.0.0 accuserveadsystem.com 0.0.0.0 www.accuserveadsystem.com 0.0.0.0 achmedia.com 0.0.0.0 csh.actiondesk.com 0.0.0.0 ads.activepower.net 0.0.0.0 app.activetrail.com 0.0.0.0 stat.active24stats.nl #[Tracking.Cookie] 0.0.0.0 traffic.acwebconnecting.com 0.0.0.0 office.ad1.ru 0.0.0.0 cms.ad2click.nl 0.0.0.0 ad2games.com 0.0.0.0 ads.ad2games.com 0.0.0.0 content.ad20.net 0.0.0.0 core.ad20.net 0.0.0.0 banner.ad.nu There are 12407 more lines. ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-3488952640-1886036067-2608822963-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\رياض\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 8.8.8.8 - 8.8.4.4 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{4DA49A12-F589-40D5-A5A4-DF738A320F87}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe DomainProfile\AuthorizedApplications: [C:\Program Files\Ace Translator\AceTrans.exe] => Enabled:Ace Translator StandardProfile\AuthorizedApplications: [C:\Program Files\Ace Translator\AceTrans.exe] => Enabled:Ace Translator ==================== Restore Points ========================= ==================== Faulty Device Manager Devices ============= Name: Realtek RTL8139/810x Family Fast Ethernet NIC Description: Realtek RTL8139/810x Family Fast Ethernet NIC Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Realtek Semiconductor Corp. Service: RTL8023xp Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: محول المنفذ المصغر لـ Wifi الظاهري الخاص بـ Microsoft Description: محول المنفذ المصغر لـ Wifi الظاهري الخاص بـ Microsoft Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: vwifimp Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (05/09/2016 11:09:45 AM) (Source: VSS) (EventID: 8194) (User: ) Description: Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005, ‏‏تم رفض الوصول. . This is often caused by incorrect security settings in either the writer or requestor process. العملية: تجميع بيانات الكاتب السياق: معرف فئة الكاتب: {e8132975-6f93-4464-a53e-1050253ae220} اسم الكاتب: System Writer معرف مثيل الكاتب: {72edbebc-ca92-4f52-83cc-d5a715a36a54} Error: (05/09/2016 10:17:33 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: ‏‏اسم ‏‏التطبيق الذي يحتوي على أخطاء: Dumpper.exe، الإصدار: 30.3.0.0، الطابع الزمني: 0x525931fa اسم الوحدة النمطية التي تحتوي على أخطاء: KERNELBASE.dll، الإصدار: 6.1.7601.18409، الطابع الزمني: 0x531599f6 رمز الاستثناء: 0xe0434352 إزاحة الخطأ: 0x0000812f معرّف العملية التي تحتوي على خطأ: 0xbdc وقت بدء تشغيل التطبيق الذي يحتوي على خطأ: 0xDumpper.exe0 مسار التطبيق الذي يحتوي على خطأ: Dumpper.exe1 مسار الوحدة النمطية التي تحتوي على خطأ: Dumpper.exe2 معرف التقرير: Dumpper.exe3 Error: (05/09/2016 10:17:31 AM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Application: Dumpper.exe Framework Version: v4.0.30319 Description: The process was terminated due to an unhandled exception. Exception Info: System.Net.WebException Stack: at System.Net.HttpWebRequest.GetResponse() at Dumpper.Form1.upsnew() at System.Threading.ThreadHelper.ThreadStart_Context(System.Object) at System.Threading.ExecutionContext.runTryCode(System.Object) at System.Runtime.CompilerServices.RuntimeHelpers.ExecuteCodeWithGuaranteedCleanup(TryCode, CleanupCode, System.Object) at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object) at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object) at System.Threading.ThreadHelper.ThreadStart() Error: (05/09/2016 08:59:23 AM) (Source: VSS) (EventID: 8194) (User: ) Description: Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005, ‏‏تم رفض الوصول. . This is often caused by incorrect security settings in either the writer or requestor process. العملية: تجميع بيانات الكاتب السياق: معرف فئة الكاتب: {e8132975-6f93-4464-a53e-1050253ae220} اسم الكاتب: System Writer معرف مثيل الكاتب: {aa283620-74aa-417e-96b6-79bf2a6cd49d} Error: (05/09/2016 05:35:54 AM) (Source: VSS) (EventID: 8194) (User: ) Description: Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005, ‏‏تم رفض الوصول. . This is often caused by incorrect security settings in either the writer or requestor process. العملية: تجميع بيانات الكاتب السياق: معرف فئة الكاتب: {e8132975-6f93-4464-a53e-1050253ae220} اسم الكاتب: System Writer معرف مثيل الكاتب: {ce3e2171-679b-4cd8-979e-fd476ee2c9d1} Error: (05/08/2016 01:44:33 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: ‏‏فشل إنشاء سياق التنشيط لـ "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1". تعذر العثور على التجميع Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" التابع. الرجاء استخدام sxstrace.exe للحصول على تشخيص مفصل. Error: (05/08/2016 01:44:33 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: ‏‏فشل إنشاء سياق التنشيط لـ "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1". تعذر العثور على التجميع Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" التابع. الرجاء استخدام sxstrace.exe للحصول على تشخيص مفصل. Error: (05/08/2016 01:44:26 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: ‏‏فشل إنشاء سياق التنشيط لـ "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1". تعذر العثور على التجميع Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" التابع. الرجاء استخدام sxstrace.exe للحصول على تشخيص مفصل. Error: (05/08/2016 01:44:19 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: ‏‏فشل إنشاء سياق التنشيط لـ "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1". تعذر العثور على التجميع Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" التابع. الرجاء استخدام sxstrace.exe للحصول على تشخيص مفصل. Error: (05/08/2016 01:44:16 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: ‏‏فشل إنشاء سياق التنشيط لـ "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1". تعذر العثور على التجميع Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" التابع. الرجاء استخدام sxstrace.exe للحصول على تشخيص مفصل. System errors: ============= Error: (05/13/2016 05:52:03 AM) (Source: WMPNetworkSvc) (EventID: 14332) (User: ) Description: WMPNetworkSvc0x80070422 Error: (05/13/2016 05:51:30 AM) (Source: DCOM) (EventID: 10005) (User: ) Description: 1053gupdate/comsvc{4EB61BAC-A3B6-4760-9581-655041EF4D69} Error: (05/13/2016 05:51:30 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: ‏‏فشل بدء تشغيل الخدمة خدمة Google Update (gupdate) بسبب الخطأ التالي: %%1053 Error: (05/13/2016 05:51:30 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: ‏‏تم الوصول إلى نهاية المهلة (30000 مللي ثانية) أثناء انتظار اتصال الخدمة خدمة Google Update (gupdate). Error: (05/13/2016 05:50:26 AM) (Source: WMPNetworkSvc) (EventID: 14332) (User: ) Description: WMPNetworkSvc0x80070422 Error: (05/13/2016 05:50:12 AM) (Source: WMPNetworkSvc) (EventID: 14332) (User: ) Description: WMPNetworkSvc0x80070422 Error: (05/13/2016 05:49:15 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: ‏‏فشل بدء تشغيل الخدمة MobiConnect. OUC بسبب الخطأ التالي: %%1053 Error: (05/13/2016 05:49:15 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: ‏‏تم الوصول إلى نهاية المهلة (30000 مللي ثانية) أثناء انتظار اتصال الخدمة MobiConnect. OUC. Error: (05/12/2016 11:18:15 PM) (Source: Service Control Manager) (EventID: 7043) (User: ) Description: ‏‏لم يتم إيقاف تشغيل الخدمة Windows Update بشكل صحيح بعد تلقي عنصر تحكم لقبل إيقاف التشغيل. Error: (05/12/2016 10:17:32 PM) (Source: KLIF) (EventID: 0) (User: ) Description: Сonnection is not established CodeIntegrity: =================================== Date: 2016-05-12 21:11:03.274 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2016-05-12 21:11:03.274 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2016-05-12 21:08:14.723 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2016-05-12 21:08:14.723 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2016-05-12 21:08:01.623 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2016-05-12 21:08:01.623 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2016-05-12 21:08:00.904 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2016-05-12 21:08:00.857 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2015-01-16 06:48:05.347 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system. Date: 2015-01-16 06:48:05.332 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system. ==================== Memory info =========================== Processor: Intel(R) Pentium(R) Dual CPU E2160 @ 1.80GHz Percentage of memory in use: 96% Total physical RAM: 1014.49 MB Available physical RAM: 31.84 MB Total Virtual: 2525.49 MB Available Virtual: 849.7 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:78.13 GB) (Free:53.55 GB) NTFS ==>[drive with boot components (obtained from BCD)] Drive d: () (Fixed) (Total:78.13 GB) (Free:52.59 GB) NTFS Drive e: () (Fixed) (Total:78.13 GB) (Free:71 GB) NTFS Drive f: () (Fixed) (Total:231.37 GB) (Free:225.86 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 18931892) Partition 1: (Active) - (Size=78.1 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=387.6 GB) - (Type=OF Extended) ==================== End of Addition.txt ============================