Publicité
Publicité
Format du document : text/plain
Prévisualisation
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 16-10-2016
Ran by YaSs (21-10-2016 20:46:25)
Running from C:\Users\YaSs\Desktop
Microsoft Windows 10 Pro Version 1607 (X86) (2016-09-30 07:10:22)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-2973495360-1647675497-93279711-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2973495360-1647675497-93279711-503 - Limited - Disabled)
Guest (S-1-5-21-2973495360-1647675497-93279711-501 - Limited - Disabled)
YaSs (S-1-5-21-2973495360-1647675497-93279711-1001 - Administrator - Enabled) => C:\Users\YaSs
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
10KHits Exchanger 0.9.8 (HKLM\...\{FA26585E-4315-4AF9-9DD1-5AC8CC9152DD}) (Version: 0.9.8 - 10KHits)
Active Directory Authentication Library pour SQL Server (x86) (Version: 13.0.1100.286 - Microsoft Corporation) Hidden
Adobe Photoshop CC 2015 (HKLM\...\{2D99B50E-431D-4AA8-85C1-172A6F8BCF01}) (Version: 16.0 - Adobe Systems Incorporated)
Application Insights Tools for Visual Studio 2015 (HKLM\...\{981F324E-98F4-4784-B76F-04E92039F3F6}) (Version: 5.2.60328.3 - Microsoft Corporation)
Applications hybrides multi-appareils en C# - Modèles - FRA (Version: 14.0.23107 - Microsoft Corporation) Hidden
Assemblys du Kit de développement logiciel (SDK) Windows Phone 8.0 pour Visual Studio 2015 - FRA (Version: 14.0.25123 - Microsoft Corporation) Hidden
Avast Antivirus Gratuit (HKLM\...\Avast) (Version: 12.3.2280 - AVAST Software)
Azure AD Authentication Connected Service (Version: 14.0.23107 - Microsoft Corporation) Hidden
AzureTools.Notifications (Version: 2.7.30611.1601 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for .NET 4.5 (Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Camtasia Studio 8 (HKLM\...\{AF33D0D2-2627-4AC8-8473-FDBB7892129C}) (Version: 8.6.0.2079 - TechSmith Corporation)
Cheat Engine 6.5.1 (HKLM\...\Cheat Engine 6.5.1_is1) (Version: - Cheat Engine)
Composants requis pour SSDT (HKLM\...\{FAFA0B40-AF76-4158-9DFA-1D2052CD0963}) (Version: 12.0.2000.8 - Microsoft Corporation)
Composants requis pour SSDT RC0 (HKLM\...\{927D0263-3C15-469C-A144-402D09450030}) (Version: 13.0.1100.286 - Microsoft Corporation)
Concepteur XAML Microsoft Visual Studio 2015 - FRA (Version: 14.0.25123 - Microsoft Corporation) Hidden
Dotfuscator and Analytics Community Edition 5.19.1 (Version: 5.19.1.3091 - PreEmptive Solutions) Hidden
Elite Proxy Switcher 1.28 (HKLM\...\Elite Proxy Switcher_is1) (Version: - hxxp://www.didsoft.com)
Entity Framework 6.1.3 Tools for Visual Studio 2015 Update 1 (HKLM\...\{2A56910C-69C8-495D-8ED8-9080F0A14E58}) (Version: 14.0.41103.0 - Microsoft Corporation)
EPSON Scan (HKLM\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
EPSON SX218 Series Printer Uninstall (HKLM\...\EPSON SX218 Series) (Version: - SEIKO EPSON Corporation)
FiddlerCoreAPI (HKU\S-1-5-21-2973495360-1647675497-93279711-1001\...\FiddlerCoreAPI) (Version: - )
Google Chrome (HKLM\...\Google Chrome) (Version: 53.0.2785.143 - Google Inc.)
Google Update Helper (Version: 1.3.31.5 - Google Inc.) Hidden
GSA SEO Indexer v2.09 (HKLM\...\GSA SEO Indexer_is1) (Version: 2.09 - GSA Software)
HitLeap Viewer 2.8 (HKLM\...\{31B12C11-AE4E-479F-8D6D-242DC265368D}) (Version: 2.8 - HitLeap Ltd.)
HitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.14.280 - SurfRight B.V.)
IIS 10.0 Express (HKLM\...\{72DE5A4E-9E1B-4E07-B42F-D68A11158C27}) (Version: 10.0.1735 - Microsoft Corporation)
IIS Express Application Compatibility Database for x86 (HKLM\...\{ad846bae-d44b-4722-abad-f7420e08bcd9}.sdb) (Version: - )
InstaTrader (HKLM\...\InstaTrader) (Version: 4.00 - MetaQuotes Software Corp.)
Java 8 Update 101 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F32180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
Kit de développement logiciel (SDK) Microsoft .NET Framework 4.6.1 (Français) (HKLM\...\{9369E1F2-44C9-4864-843E-159725E660CB}) (Version: 4.6.01055 - Microsoft Corporation)
LeapFTP 3.0 (HKLM\...\LeapFTP 3.0_is1) (Version: 3.0.1.46 - LeapWare)
LiteForex MT4 Terminal (HKLM\...\LiteForex MT4 Terminal) (Version: 4.00 - MetaQuotes Software Corp.)
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (Français) (HKLM\...\{15A5D4D5-6435-322E-9435-C21252920944}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (Français) (HKLM\...\{5F951DA6-8F50-4E55-B2A3-DCE78BF3D185}) (Version: 4.5.51641 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (HKLM\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (Français) (HKLM\...\{4C742A71-01FC-391A-972B-87DAFB8C46DD}) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (HKLM\...\{19E8AE59-4D4A-3534-B567-6CC08FA4102E}) (Version: 4.5.51651 - Microsoft Corporation)
Microsoft .NET Framework 4.6 SDK (Français) (HKLM\...\{224757CE-5740-4E20-84CB-670D8D593A1C}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6 SDK (HKLM\...\{B5915D37-0637-4A26-A3AA-C5DC9F856370}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6 Targeting Pack (HKLM\...\{2CC6A4A7-AAC2-46C9-9DBB-3727B5954F65}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 SDK (HKLM\...\{2F0ECC80-B9E4-4485-8083-CD32F22ABD92}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 Targeting Pack (ENU) (HKLM\...\{8EEB28EE-5141-411C-9CF0-9952264FE4AF}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 Targeting Pack (HKLM\...\{8BC3EEC9-090F-4C53-A8DA-1BEC913040F9}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6 Targeting Pack (Français) (HKLM\...\{71A096E4-A48D-42FA-88BB-96B996580DC4}) (Version: 4.6.00127 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 Targeting Pack (Français) (HKLM\...\{AD054CB0-F527-48AD-832B-E65D46237C88}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Version Manager (x86) 1.0.0-beta5 (HKLM\...\{2a375a89-9d97-35b7-917d-92f1ea73080d}) (Version: 1.0.10609.0 - Microsoft Corporation)
Microsoft Help Viewer 2.2 (HKLM\...\Microsoft Help Viewer 2.2) (Version: 2.2.25123 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20513.0 - Microsoft Corporation)
Microsoft SQL Server 2016 Management Objects RC0 (HKLM\...\{350759AB-531E-485B-9FD9-22E9299F43C7}) (Version: 13.0.1100.286 - Microsoft Corporation)
Microsoft SQL Server 2016 T-SQL ScriptDom RC0 (HKLM\...\{0034D62D-344E-43FF-9152-ACDF70756B80}) (Version: 13.0.1100.286 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 FRA (HKLM\...\{CDB470E4-1362-458E-84A2-CFD65A7487A2}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - FRA (14.0.60311.1) (HKLM\...\{55DE1A9D-695E-4354-AB65-60094CBBE41A}) (Version: 14.0.60311.1 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client (HKLM\...\{AD295A62-5EB8-433C-9B65-B2200A9846D2}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2014 Management Objects (HKLM\...\{9CD2AD15-115E-4F44-90A8-435B9537973B}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 Transact-SQL ScriptDom (HKLM\...\{5DE4526D-31B8-4780-A417-A7A4B9342E68}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2014 (HKLM\...\{091CE6AA-2753-4F6E-AD1C-0E875744EB54}) (Version: 12.0.2402.29 - Microsoft Corporation)
Microsoft System CLR Types pour SQL Server 2016 RC0 (HKLM\...\{C7661733-43D1-4551-8DD4-09B0CB36BFA9}) (Version: 13.0.1100.286 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM\...\{18637763-c8e5-4c49-ba8a-b854367f6b55}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM\...\{2e7a9943-de7b-4030-8f40-63502f679ace}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Visual Studio Community 2015 avec Update 2 (HKLM\...\{e95b083c-ccc4-4c58-b74d-b91319f5768d}) (Version: 14.0.25123.0 - Microsoft Corporation)
Microsoft Web Deploy 3.6 (HKLM\...\{4B604E42-B6D7-4957-B5A5-CC7450D8E1EB}) (Version: 3.1238.1962 - Microsoft Corporation)
Module linguistique de Dotfuscator and Analytics Community Edition 5.19.1 fr-FR (Version: 5.19.1.3091 - PreEmptive Solutions) Hidden
Module linguistique de la visionneuse d'aide Microsoft 2.2 - FRA (Version: 2.2.25123 - Microsoft Corporation) Hidden
Module linguistique des composants partagés Microsoft Azure pour Visual Studio 2015 (FRA) - v1.7 (Version: 1.7.40113.5 - Microsoft Corporation) Hidden
Module linguistique des outils de test de Microsoft Visual Studio 2015 - FRA (Version: 14.0.23107 - Microsoft Corporation) Hidden
Module linguistique du Kit de développement logiciel (SDK) de Microsoft Visual Studio 2015 - FRA (Version: 14.0.23107 - Microsoft Corporation) Hidden
Module linguistique Microsoft Azure Mobile Services Tools pour Visual Studio - v1.4 (Version: 1.4.30611.1601 - Microsoft Corporation) Hidden
Module linguistique Microsoft Help Viewer 2.2 - FRA (HKLM\...\Module linguistique de la visionneuse d'aide Microsoft 2.2 - FRA) (Version: 2.2.25123 - Microsoft Corporation)
Mozilla Firefox 47.0.1 (x86 en-US) (HKLM\...\Mozilla Firefox 47.0.1 (x86 en-US)) (Version: 47.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 35.0.1 - Mozilla)
MSBuild/NuGet Integration 14.0 (x86) (Version: 14.0.25123 - Microsoft Corporation) Hidden
OctaFX (HKLM\...\OctaFX) (Version: 4.00 - MetaQuotes Software Corp.)
Opera Stable 40.0.2308.90 (HKLM\...\Opera 40.0.2308.90) (Version: 40.0.2308.90 - Opera Software)
OtohitsApp (HKLM\...\{9B85C70F-D649-4290-8C1D-5356A5262066}_is1) (Version: 3.0.0.0 - Otohits Network)
PreEmptive Analytics Client French Language Pack (Version: 1.2.5134.1 - PreEmptive Solutions) Hidden
PreEmptive Analytics Visual Studio Components (Version: 1.2.5134.1 - PreEmptive Solutions) Hidden
Realtek AC'97 Audio (HKLM\...\{FB08F381-6533-4108-B7DD-039E11FBC27E}) (Version: - )
Realtek Ethernet Controller Driver (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0029 - Realtek)
Ressources de Microsoft Visual Studio 2015 Shell (minimum) (Version: 14.0.23107 - Microsoft Corporation) Hidden
Ressources des affichages web du débogueur de performances de Microsoft Visual Studio 2015 Update 2 - FRA (Version: 14.0.25123 - Microsoft Corporation) Hidden
Ressources Devenv de Microsoft Visual Studio 2015 (Version: 14.0.23107 - Microsoft Corporation) Hidden
Roslyn Language Services - x86 (Version: 14.0.25123 - Microsoft Corporation) Hidden
Roslyn Language Services - x86 (Version: 14.0.25126 - Microsoft Corporation) Hidden
SafeZone Stable 1.51.2220.62 (Version: 1.51.2220.62 - Avast Software) Hidden
Service de langage T-SQL Microsoft SQL Server 2016 RC0 (HKLM\...\{91E92AF1-5E30-43A1-A082-8E4B8991539C}) (Version: 13.0.12000.52 - Microsoft Corporation)
Service de langage T-SQL Microsoft SQL Server 2014 (HKLM\...\{4152D9BF-6975-4653-B993-5CA882638A72}) (Version: 12.0.2000.8 - Microsoft Corporation)
Skype™ 7.29 (HKLM\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.29.102 - Skype Technologies S.A.)
Team Explorer for Microsoft Visual Studio 2015 Update 2 (Version: 14.95.25118 - Microsoft) Hidden
Telegram Desktop version 0.10.8 (HKU\S-1-5-21-2973495360-1647675497-93279711-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 0.10.8 - Telegram Messenger LLP)
Test Tools for Microsoft Visual Studio 2015 (Version: 14.0.23107 - Microsoft Corporation) Hidden
TypeScript Power Tool (Version: 1.8.9.0 - Microsoft Corporation) Hidden
TypeScript Tools for Microsoft Visual Studio 2015 (Version: 1.8.30.0 - Microsoft Corporation) Hidden
Unity Web Player (HKU\S-1-5-21-2973495360-1647675497-93279711-1001\...\UnityWebPlayer) (Version: 5.3.5f1 - Unity Technologies ApS)
Update for (KB2504637) (HKLM\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
Utilitaires ligne de comm. Microsoft SQL Server 2012 (HKLM\...\{4B382E22-43E3-4AED-8554-F269B60E7E0E}) (Version: 11.1.3000.0 - Microsoft Corporation)
Version préparatoire de Microsoft Visual Studio 2015 (Version: 14.0.23107 - Microsoft Corporation) Hidden
Visual Studio 2015 Update 2 (KB3022398) (HKLM\...\{78c1b501-a6eb-4f29-88c5-84189564827e}) (Version: 14.0.25123 - Microsoft Corporation)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.4 - VideoLAN)
VS Update core components (Version: 14.0.25123 - Microsoft Corporation) Hidden
WCF Data Services 5.6.4 FRA Language Pack (Version: 5.6.62175.4 - Microsoft Corporation) Hidden
WCF Data Services 5.6.4 Runtime (Version: 5.6.62175.4 - Microsoft Corporation) Hidden
WCF Data Services Tools for Microsoft Visual Studio 2015 (Version: 5.6.62175.4 - Microsoft Corporation) Hidden
WCF Data Services Tools for Microsoft Visual Studio 2015 FRA Language Pack (Version: 5.6.62175.4 - Microsoft Corporation) Hidden
Windows Driver Package - MediaTek Inc. (usbser) Ports (05/30/2011 1.1123.0) (HKLM\...\9F57DFB5B4E90E617CAF60510F56318C1F80CC8C) (Version: 05/30/2011 1.1123.0 - MediaTek Inc.)
WinPcap 4.1.3 (HKLM\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
WinRAR 5.40 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
WYSIWYG Web Builder 11 (HKLM\...\WYSIWYG_Web_Builder_11) (Version: - )
XM MT4 (HKLM\...\XM MT4) (Version: 6.00 - MetaQuotes Software Corp.)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-2973495360-1647675497-93279711-1001_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\YaSs\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {023CC210-2896-44B3-BA9B-3AE5786543CA} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-09-06] (AVAST Software)
Task: {0B5DADDF-033C-4D14-92D0-F0EC2B0F59EA} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-01-07] (Google Inc.)
Task: {4A09B833-F632-49AF-B6BB-AB6D8CD51701} - System32\Tasks\SafeZone scheduled Autoupdate 1461093570 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-09-06] (Avast Software)
Task: {6D323861-CBA5-4112-8E93-82E63EA8ACCB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-01-07] (Google Inc.)
Task: {7127D916-E4A2-42F0-8C26-771E061AB000} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-10-12] (Microsoft Corporation)
Task: {B8D679DF-326F-4FE1-899F-699641A2B20E} - System32\Tasks\Microsoft\VisualStudio\VSIX Auto Update 14 => C:\Program Files\Microsoft Visual Studio 14.0\Common7\IDE\VSIXAutoUpdate.exe [2016-03-22] (Microsoft Corporation)
Task: {C494ABBE-5A53-4C43-95F8-9CA601603619} - System32\Tasks\Opera scheduled Autoupdate 1460640151 => C:\Program Files\Opera\launcher.exe [2016-10-17] (Opera Software)
Task: {D9660C44-65B1-42FE-9C69-9DB62FBC12CE} - System32\Tasks\InternetSD => Chrome.exe hxxp://hnwl2nmrbjfqjwe.ru/?wgosm
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\YaSs\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) ->
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) ->
ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) ->
==================== Loaded Modules (Whitelisted) ==============
2016-07-16 10:25 - 2016-07-16 10:25 - 00190976 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-09-30 21:58 - 2016-09-15 19:32 - 02048496 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-09-06 08:10 - 2016-09-06 08:10 - 00169064 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-09-06 08:10 - 2016-09-06 08:10 - 00482928 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2016-10-21 16:36 - 2016-10-21 16:36 - 03121496 _____ () C:\Program Files\AVAST Software\Avast\defs\16102100\algo.dll
2016-09-30 21:58 - 2016-09-15 19:32 - 02048496 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-09-30 09:22 - 2016-09-30 09:22 - 00679624 _____ () C:\Users\YaSs\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\ClientTelemetry.dll
2016-07-16 10:25 - 2016-07-16 10:25 - 00109056 _____ () C:\WINDOWS\SYSTEM32\CHARTV.dll
2016-07-16 10:25 - 2016-07-16 10:25 - 00108032 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-09-30 17:51 - 2016-09-30 17:51 - 00321536 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-10-12 14:13 - 2016-10-05 11:10 - 06726656 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-10-12 14:14 - 2016-10-05 11:06 - 01149440 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-09-30 17:51 - 2016-09-30 17:51 - 00526848 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-10-12 14:13 - 2016-10-05 11:05 - 01725440 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-10-12 14:14 - 2016-10-05 11:07 - 03158528 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-10-20 06:18 - 2016-10-20 06:22 - 00062464 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.197.0_x86__kzf8qxf38zg5c\SkypeHost.exe
2016-10-20 06:18 - 2016-10-20 06:22 - 00151040 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.197.0_x86__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2016-10-20 06:18 - 2016-10-20 06:22 - 27111936 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.197.0_x86__kzf8qxf38zg5c\SkyWrap.dll
2016-09-06 08:10 - 2016-09-06 08:11 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2016-10-19 07:28 - 2016-10-19 07:29 - 06517760 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11609.1001.28.0_x86__8wekyb3d8bbwe\WinStore.Entertainment.Mobile.dll
2016-08-16 05:48 - 2016-08-16 05:52 - 00017920 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.722.10060.0_x86__8wekyb3d8bbwe\Microsoft.Photos.exe
2016-08-16 05:48 - 2016-08-16 05:52 - 11393536 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.722.10060.0_x86__8wekyb3d8bbwe\Microsoft.Photos.dll
2016-06-03 17:27 - 2016-06-03 17:51 - 00541696 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.722.10060.0_x86__8wekyb3d8bbwe\Microsoft.DesignCore.dll
2016-03-04 08:05 - 2016-03-04 08:09 - 00180224 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.722.10060.0_x86__8wekyb3d8bbwe\StoreRatingPromotion.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2015-07-10 10:28 - 2016-07-13 16:01 - 00001085 ____A C:\WINDOWS\system32\Drivers\etc\hosts
0.0.0.0 69.167.144.15
0.0.0.0 69.167.144.18
0.0.0.0 65.52.240.48
0.0.0.0 157.56.8.159
0.0.0.0 camtasiatudi.techsmith.com
0.0.0.0 oscount.techsmith.com
0.0.0.0 activation.cloud.techsmith.com
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2973495360-1647675497-93279711-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img1.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{46E84A80-AEB2-4A5C-9CD6-1744826BEA73}] => (Allow) C:\Program Files\GSA SEO Indexer\SEO_Indexer.exe
FirewallRules: [{03EA9ED7-1E1A-4E6F-BB26-024D94F4386F}] => (Allow) C:\Program Files\GSA SEO Indexer\SEO_Indexer.exe
FirewallRules: [{3EA10D42-6936-4DBC-B868-33F863D37CC0}] => (Allow) C:\Program Files\GSA SEO Indexer\SEO_Indexer.exe
FirewallRules: [{31116D3F-7650-4E26-99A2-62A905629CE0}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{135A529A-45F1-4529-94CD-46660CB30E0B}] => (Block) %ProgramFiles%\TechSmith\Camtasia Studio 8\CamtasiaStudio.exe
FirewallRules: [{F2DA6428-F8CD-468A-91C1-05D32169094A}] => (Block) %ProgramFiles%\TechSmith\Camtasia Studio 8\CamRecorder.exe
FirewallRules: [{3A27C425-DFD6-4BFD-A4DC-F0EF038FAF3B}] => (Block) %ProgramFiles%\TechSmith\Camtasia Studio 8\CamRecorder.exe
FirewallRules: [{639CBC0E-3EFF-45BD-B3BF-2AEB378EC7A2}] => (Block) %ProgramFiles%\TechSmith\Camtasia Studio 8\CamtasiaStudio.exe
FirewallRules: [{DAF281D9-0B41-422A-9740-387091BC6EEE}] => (Allow) LPort=8317
FirewallRules: [{820A9C1B-EE1A-4624-92B7-DF6063BCE5FF}] => (Allow) C:\Program Files\GSA SEO Indexer\SEO_Indexer.exe
FirewallRules: [{E7920F29-5677-4AD4-96A4-557B77A2774C}] => (Allow) C:\Program Files\GSA SEO Indexer\SEO_Indexer.exe
FirewallRules: [{DDFD2E8B-8493-4595-AB09-9E220BF1C3B0}] => (Allow) C:\Program Files\Microsoft Visual Studio 14.0\Common7\IDE\devenv.exe
FirewallRules: [{09D0A526-E3C1-4943-871F-F7AFC98B056D}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{22350BAA-1562-49C5-B871-6FFB4B63E6F9}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{BA67A9B4-0610-4B97-8C87-48FF3BB1BAF5}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
StandardProfile\AuthorizedApplications: [C:\Program Files\LeapFTP 3.0\LeapFTP.exe] => Enabled:LeapFTP 3.0
==================== Restore Points =========================
07-10-2016 09:12:54 Windows Modules Installer
12-10-2016 14:44:06 Windows Update
14-10-2016 09:31:55 Installed tViewer 2.0
17-10-2016 18:41:52 ASU_MSI_TRAN
17-10-2016 19:20:07 JRT Pre-Junkware Removal
21-10-2016 16:41:42 ASU_MSI_TRAN
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (10/21/2016 08:29:26 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "C:\Program Files\Microsoft Visual Studio 14.0\Common7\IDE\Remote Debugger\x64\msvsmon.exe".
Dependent Assembly Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.
Error: (10/21/2016 04:42:01 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.
System Error:
Access is denied.
.
Error: (10/21/2016 11:39:52 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-NQ98D5R)
Description: Activation of app Microsoft.XboxIdentityProvider_8wekyb3d8bbwe!Microsoft.XboxIdentityProvider failed with error: -2144927142 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (10/21/2016 11:39:52 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-NQ98D5R)
Description: Activation of app Microsoft.XboxIdentityProvider_8wekyb3d8bbwe!Microsoft.XboxIdentityProvider failed with error: -2144927142 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (10/20/2016 08:05:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: dwm.exe, version: 10.0.14393.0, time stamp: 0x57899025
Faulting module name: dwmcore.dll, version: 10.0.14393.187, time stamp: 0x57cf98c6
Exception code: 0xc0000005
Fault offset: 0x00054061
Faulting process id: 0xf5c
Faulting application start time: 0x01d22afc3d99248f
Faulting application path: C:\WINDOWS\system32\dwm.exe
Faulting module path: C:\WINDOWS\system32\dwmcore.dll
Report Id: 2e5826f4-063c-445c-90ea-9570bc5925e5
Faulting package full name:
Faulting package-relative application ID:
Error: (10/20/2016 08:03:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: dwm.exe, version: 10.0.14393.0, time stamp: 0x57899025
Faulting module name: dwmcore.dll, version: 10.0.14393.187, time stamp: 0x57cf98c6
Exception code: 0xc0000005
Fault offset: 0x00054061
Faulting process id: 0x1e50
Faulting application start time: 0x01d22afc33b230d9
Faulting application path: C:\WINDOWS\system32\dwm.exe
Faulting module path: C:\WINDOWS\system32\dwmcore.dll
Report Id: 6e069ca0-82e7-4dcd-87be-ac92debfc082
Faulting package full name:
Faulting package-relative application ID:
Error: (10/20/2016 08:03:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: dwm.exe, version: 10.0.14393.0, time stamp: 0x57899025
Faulting module name: dwmcore.dll, version: 10.0.14393.187, time stamp: 0x57cf98c6
Exception code: 0xc0000005
Fault offset: 0x00054061
Faulting process id: 0x7e8
Faulting application start time: 0x01d22afc2f505b5f
Faulting application path: C:\WINDOWS\system32\dwm.exe
Faulting module path: C:\WINDOWS\system32\dwmcore.dll
Report Id: 7038e179-53f0-4148-8dc2-cfaf212bbbc5
Faulting package full name:
Faulting package-relative application ID:
Error: (10/20/2016 08:02:55 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: dwm.exe, version: 10.0.14393.0, time stamp: 0x57899025
Faulting module name: dwmcore.dll, version: 10.0.14393.187, time stamp: 0x57cf98c6
Exception code: 0xc0000005
Fault offset: 0x00054061
Faulting process id: 0x818
Faulting application start time: 0x01d22afb97a47ad1
Faulting application path: C:\WINDOWS\system32\dwm.exe
Faulting module path: C:\WINDOWS\system32\dwmcore.dll
Report Id: 661fd6eb-a502-45d4-a285-04fd46233f97
Faulting package full name:
Faulting package-relative application ID:
Error: (10/20/2016 07:58:40 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: dwm.exe, version: 10.0.14393.0, time stamp: 0x57899025
Faulting module name: dwmcore.dll, version: 10.0.14393.187, time stamp: 0x57cf98c6
Exception code: 0xc0000005
Fault offset: 0x00054061
Faulting process id: 0x640
Faulting application start time: 0x01d22afb94d8f5d6
Faulting application path: C:\WINDOWS\system32\dwm.exe
Faulting module path: C:\WINDOWS\system32\dwmcore.dll
Report Id: 3c140d2c-9ecf-46db-8725-69486edf7737
Faulting package full name:
Faulting package-relative application ID:
Error: (10/20/2016 07:58:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: dwm.exe, version: 10.0.14393.0, time stamp: 0x57899025
Faulting module name: dwmcore.dll, version: 10.0.14393.187, time stamp: 0x57cf98c6
Exception code: 0xc0000005
Fault offset: 0x00054061
Faulting process id: 0x1ec8
Faulting application start time: 0x01d22afb9150be3c
Faulting application path: C:\WINDOWS\system32\dwm.exe
Faulting module path: C:\WINDOWS\system32\dwmcore.dll
Report Id: 98a766f3-4911-4445-b7c6-c23812d78b29
Faulting package full name:
Faulting package-relative application ID:
System errors:
=============
Error: (10/21/2016 02:34:06 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
and APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (10/21/2016 07:16:31 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
and APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (10/20/2016 06:52:11 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
and APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (10/20/2016 06:34:14 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
and APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (10/20/2016 06:33:38 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 5:56:27 PM on 10/20/2016 was unexpected.
Error: (10/20/2016 03:16:52 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
and APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (10/20/2016 02:46:11 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
and APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (10/20/2016 02:45:47 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 11:39:01 AM on 10/20/2016 was unexpected.
Error: (10/20/2016 06:12:29 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
and APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (10/19/2016 10:38:07 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-NQ98D5R)
Description: The server App.AppXwdz8g2fxr36xz0tdtagygnvemf85s7gg.mca did not register with DCOM within the required timeout.
CodeIntegrity:
===================================
Date: 2016-10-08 16:20:16.012
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-10-08 16:20:12.548
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-10-08 16:20:12.256
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-10-08 16:20:10.203
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-10-08 16:20:01.930
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-10-08 16:20:01.360
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-10-08 16:20:00.524
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-10-08 16:20:00.313
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-10-08 16:20:00.189
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-10-08 16:20:00.103
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Memory info ===========================
Processor: Intel(R) Pentium(R) 4 CPU 3.06GHz
Percentage of memory in use: 60%
Total physical RAM: 3062.43 MB
Available physical RAM: 1199.55 MB
Total Virtual: 5494.43 MB
Available Virtual: 3334.86 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:297.55 GB) (Free:241.47 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: 8CE7EAF3)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=297.6 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)
==================== End of Addition.txt ============================
Ran by YaSs (21-10-2016 20:46:25)
Running from C:\Users\YaSs\Desktop
Microsoft Windows 10 Pro Version 1607 (X86) (2016-09-30 07:10:22)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-2973495360-1647675497-93279711-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2973495360-1647675497-93279711-503 - Limited - Disabled)
Guest (S-1-5-21-2973495360-1647675497-93279711-501 - Limited - Disabled)
YaSs (S-1-5-21-2973495360-1647675497-93279711-1001 - Administrator - Enabled) => C:\Users\YaSs
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
10KHits Exchanger 0.9.8 (HKLM\...\{FA26585E-4315-4AF9-9DD1-5AC8CC9152DD}) (Version: 0.9.8 - 10KHits)
Active Directory Authentication Library pour SQL Server (x86) (Version: 13.0.1100.286 - Microsoft Corporation) Hidden
Adobe Photoshop CC 2015 (HKLM\...\{2D99B50E-431D-4AA8-85C1-172A6F8BCF01}) (Version: 16.0 - Adobe Systems Incorporated)
Application Insights Tools for Visual Studio 2015 (HKLM\...\{981F324E-98F4-4784-B76F-04E92039F3F6}) (Version: 5.2.60328.3 - Microsoft Corporation)
Applications hybrides multi-appareils en C# - Modèles - FRA (Version: 14.0.23107 - Microsoft Corporation) Hidden
Assemblys du Kit de développement logiciel (SDK) Windows Phone 8.0 pour Visual Studio 2015 - FRA (Version: 14.0.25123 - Microsoft Corporation) Hidden
Avast Antivirus Gratuit (HKLM\...\Avast) (Version: 12.3.2280 - AVAST Software)
Azure AD Authentication Connected Service (Version: 14.0.23107 - Microsoft Corporation) Hidden
AzureTools.Notifications (Version: 2.7.30611.1601 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for .NET 4.5 (Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Camtasia Studio 8 (HKLM\...\{AF33D0D2-2627-4AC8-8473-FDBB7892129C}) (Version: 8.6.0.2079 - TechSmith Corporation)
Cheat Engine 6.5.1 (HKLM\...\Cheat Engine 6.5.1_is1) (Version: - Cheat Engine)
Composants requis pour SSDT (HKLM\...\{FAFA0B40-AF76-4158-9DFA-1D2052CD0963}) (Version: 12.0.2000.8 - Microsoft Corporation)
Composants requis pour SSDT RC0 (HKLM\...\{927D0263-3C15-469C-A144-402D09450030}) (Version: 13.0.1100.286 - Microsoft Corporation)
Concepteur XAML Microsoft Visual Studio 2015 - FRA (Version: 14.0.25123 - Microsoft Corporation) Hidden
Dotfuscator and Analytics Community Edition 5.19.1 (Version: 5.19.1.3091 - PreEmptive Solutions) Hidden
Elite Proxy Switcher 1.28 (HKLM\...\Elite Proxy Switcher_is1) (Version: - hxxp://www.didsoft.com)
Entity Framework 6.1.3 Tools for Visual Studio 2015 Update 1 (HKLM\...\{2A56910C-69C8-495D-8ED8-9080F0A14E58}) (Version: 14.0.41103.0 - Microsoft Corporation)
EPSON Scan (HKLM\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
EPSON SX218 Series Printer Uninstall (HKLM\...\EPSON SX218 Series) (Version: - SEIKO EPSON Corporation)
FiddlerCoreAPI (HKU\S-1-5-21-2973495360-1647675497-93279711-1001\...\FiddlerCoreAPI) (Version: - )
Google Chrome (HKLM\...\Google Chrome) (Version: 53.0.2785.143 - Google Inc.)
Google Update Helper (Version: 1.3.31.5 - Google Inc.) Hidden
GSA SEO Indexer v2.09 (HKLM\...\GSA SEO Indexer_is1) (Version: 2.09 - GSA Software)
HitLeap Viewer 2.8 (HKLM\...\{31B12C11-AE4E-479F-8D6D-242DC265368D}) (Version: 2.8 - HitLeap Ltd.)
HitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.14.280 - SurfRight B.V.)
IIS 10.0 Express (HKLM\...\{72DE5A4E-9E1B-4E07-B42F-D68A11158C27}) (Version: 10.0.1735 - Microsoft Corporation)
IIS Express Application Compatibility Database for x86 (HKLM\...\{ad846bae-d44b-4722-abad-f7420e08bcd9}.sdb) (Version: - )
InstaTrader (HKLM\...\InstaTrader) (Version: 4.00 - MetaQuotes Software Corp.)
Java 8 Update 101 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F32180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
Kit de développement logiciel (SDK) Microsoft .NET Framework 4.6.1 (Français) (HKLM\...\{9369E1F2-44C9-4864-843E-159725E660CB}) (Version: 4.6.01055 - Microsoft Corporation)
LeapFTP 3.0 (HKLM\...\LeapFTP 3.0_is1) (Version: 3.0.1.46 - LeapWare)
LiteForex MT4 Terminal (HKLM\...\LiteForex MT4 Terminal) (Version: 4.00 - MetaQuotes Software Corp.)
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (Français) (HKLM\...\{15A5D4D5-6435-322E-9435-C21252920944}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (Français) (HKLM\...\{5F951DA6-8F50-4E55-B2A3-DCE78BF3D185}) (Version: 4.5.51641 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (HKLM\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (Français) (HKLM\...\{4C742A71-01FC-391A-972B-87DAFB8C46DD}) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (HKLM\...\{19E8AE59-4D4A-3534-B567-6CC08FA4102E}) (Version: 4.5.51651 - Microsoft Corporation)
Microsoft .NET Framework 4.6 SDK (Français) (HKLM\...\{224757CE-5740-4E20-84CB-670D8D593A1C}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6 SDK (HKLM\...\{B5915D37-0637-4A26-A3AA-C5DC9F856370}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6 Targeting Pack (HKLM\...\{2CC6A4A7-AAC2-46C9-9DBB-3727B5954F65}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 SDK (HKLM\...\{2F0ECC80-B9E4-4485-8083-CD32F22ABD92}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 Targeting Pack (ENU) (HKLM\...\{8EEB28EE-5141-411C-9CF0-9952264FE4AF}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 Targeting Pack (HKLM\...\{8BC3EEC9-090F-4C53-A8DA-1BEC913040F9}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6 Targeting Pack (Français) (HKLM\...\{71A096E4-A48D-42FA-88BB-96B996580DC4}) (Version: 4.6.00127 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 Targeting Pack (Français) (HKLM\...\{AD054CB0-F527-48AD-832B-E65D46237C88}) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Version Manager (x86) 1.0.0-beta5 (HKLM\...\{2a375a89-9d97-35b7-917d-92f1ea73080d}) (Version: 1.0.10609.0 - Microsoft Corporation)
Microsoft Help Viewer 2.2 (HKLM\...\Microsoft Help Viewer 2.2) (Version: 2.2.25123 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20513.0 - Microsoft Corporation)
Microsoft SQL Server 2016 Management Objects RC0 (HKLM\...\{350759AB-531E-485B-9FD9-22E9299F43C7}) (Version: 13.0.1100.286 - Microsoft Corporation)
Microsoft SQL Server 2016 T-SQL ScriptDom RC0 (HKLM\...\{0034D62D-344E-43FF-9152-ACDF70756B80}) (Version: 13.0.1100.286 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 FRA (HKLM\...\{CDB470E4-1362-458E-84A2-CFD65A7487A2}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - FRA (14.0.60311.1) (HKLM\...\{55DE1A9D-695E-4354-AB65-60094CBBE41A}) (Version: 14.0.60311.1 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client (HKLM\...\{AD295A62-5EB8-433C-9B65-B2200A9846D2}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2014 Management Objects (HKLM\...\{9CD2AD15-115E-4F44-90A8-435B9537973B}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 Transact-SQL ScriptDom (HKLM\...\{5DE4526D-31B8-4780-A417-A7A4B9342E68}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2014 (HKLM\...\{091CE6AA-2753-4F6E-AD1C-0E875744EB54}) (Version: 12.0.2402.29 - Microsoft Corporation)
Microsoft System CLR Types pour SQL Server 2016 RC0 (HKLM\...\{C7661733-43D1-4551-8DD4-09B0CB36BFA9}) (Version: 13.0.1100.286 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM\...\{18637763-c8e5-4c49-ba8a-b854367f6b55}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM\...\{2e7a9943-de7b-4030-8f40-63502f679ace}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Visual Studio Community 2015 avec Update 2 (HKLM\...\{e95b083c-ccc4-4c58-b74d-b91319f5768d}) (Version: 14.0.25123.0 - Microsoft Corporation)
Microsoft Web Deploy 3.6 (HKLM\...\{4B604E42-B6D7-4957-B5A5-CC7450D8E1EB}) (Version: 3.1238.1962 - Microsoft Corporation)
Module linguistique de Dotfuscator and Analytics Community Edition 5.19.1 fr-FR (Version: 5.19.1.3091 - PreEmptive Solutions) Hidden
Module linguistique de la visionneuse d'aide Microsoft 2.2 - FRA (Version: 2.2.25123 - Microsoft Corporation) Hidden
Module linguistique des composants partagés Microsoft Azure pour Visual Studio 2015 (FRA) - v1.7 (Version: 1.7.40113.5 - Microsoft Corporation) Hidden
Module linguistique des outils de test de Microsoft Visual Studio 2015 - FRA (Version: 14.0.23107 - Microsoft Corporation) Hidden
Module linguistique du Kit de développement logiciel (SDK) de Microsoft Visual Studio 2015 - FRA (Version: 14.0.23107 - Microsoft Corporation) Hidden
Module linguistique Microsoft Azure Mobile Services Tools pour Visual Studio - v1.4 (Version: 1.4.30611.1601 - Microsoft Corporation) Hidden
Module linguistique Microsoft Help Viewer 2.2 - FRA (HKLM\...\Module linguistique de la visionneuse d'aide Microsoft 2.2 - FRA) (Version: 2.2.25123 - Microsoft Corporation)
Mozilla Firefox 47.0.1 (x86 en-US) (HKLM\...\Mozilla Firefox 47.0.1 (x86 en-US)) (Version: 47.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 35.0.1 - Mozilla)
MSBuild/NuGet Integration 14.0 (x86) (Version: 14.0.25123 - Microsoft Corporation) Hidden
OctaFX (HKLM\...\OctaFX) (Version: 4.00 - MetaQuotes Software Corp.)
Opera Stable 40.0.2308.90 (HKLM\...\Opera 40.0.2308.90) (Version: 40.0.2308.90 - Opera Software)
OtohitsApp (HKLM\...\{9B85C70F-D649-4290-8C1D-5356A5262066}_is1) (Version: 3.0.0.0 - Otohits Network)
PreEmptive Analytics Client French Language Pack (Version: 1.2.5134.1 - PreEmptive Solutions) Hidden
PreEmptive Analytics Visual Studio Components (Version: 1.2.5134.1 - PreEmptive Solutions) Hidden
Realtek AC'97 Audio (HKLM\...\{FB08F381-6533-4108-B7DD-039E11FBC27E}) (Version: - )
Realtek Ethernet Controller Driver (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0029 - Realtek)
Ressources de Microsoft Visual Studio 2015 Shell (minimum) (Version: 14.0.23107 - Microsoft Corporation) Hidden
Ressources des affichages web du débogueur de performances de Microsoft Visual Studio 2015 Update 2 - FRA (Version: 14.0.25123 - Microsoft Corporation) Hidden
Ressources Devenv de Microsoft Visual Studio 2015 (Version: 14.0.23107 - Microsoft Corporation) Hidden
Roslyn Language Services - x86 (Version: 14.0.25123 - Microsoft Corporation) Hidden
Roslyn Language Services - x86 (Version: 14.0.25126 - Microsoft Corporation) Hidden
SafeZone Stable 1.51.2220.62 (Version: 1.51.2220.62 - Avast Software) Hidden
Service de langage T-SQL Microsoft SQL Server 2016 RC0 (HKLM\...\{91E92AF1-5E30-43A1-A082-8E4B8991539C}) (Version: 13.0.12000.52 - Microsoft Corporation)
Service de langage T-SQL Microsoft SQL Server 2014 (HKLM\...\{4152D9BF-6975-4653-B993-5CA882638A72}) (Version: 12.0.2000.8 - Microsoft Corporation)
Skype™ 7.29 (HKLM\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.29.102 - Skype Technologies S.A.)
Team Explorer for Microsoft Visual Studio 2015 Update 2 (Version: 14.95.25118 - Microsoft) Hidden
Telegram Desktop version 0.10.8 (HKU\S-1-5-21-2973495360-1647675497-93279711-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 0.10.8 - Telegram Messenger LLP)
Test Tools for Microsoft Visual Studio 2015 (Version: 14.0.23107 - Microsoft Corporation) Hidden
TypeScript Power Tool (Version: 1.8.9.0 - Microsoft Corporation) Hidden
TypeScript Tools for Microsoft Visual Studio 2015 (Version: 1.8.30.0 - Microsoft Corporation) Hidden
Unity Web Player (HKU\S-1-5-21-2973495360-1647675497-93279711-1001\...\UnityWebPlayer) (Version: 5.3.5f1 - Unity Technologies ApS)
Update for (KB2504637) (HKLM\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
Utilitaires ligne de comm. Microsoft SQL Server 2012 (HKLM\...\{4B382E22-43E3-4AED-8554-F269B60E7E0E}) (Version: 11.1.3000.0 - Microsoft Corporation)
Version préparatoire de Microsoft Visual Studio 2015 (Version: 14.0.23107 - Microsoft Corporation) Hidden
Visual Studio 2015 Update 2 (KB3022398) (HKLM\...\{78c1b501-a6eb-4f29-88c5-84189564827e}) (Version: 14.0.25123 - Microsoft Corporation)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.4 - VideoLAN)
VS Update core components (Version: 14.0.25123 - Microsoft Corporation) Hidden
WCF Data Services 5.6.4 FRA Language Pack (Version: 5.6.62175.4 - Microsoft Corporation) Hidden
WCF Data Services 5.6.4 Runtime (Version: 5.6.62175.4 - Microsoft Corporation) Hidden
WCF Data Services Tools for Microsoft Visual Studio 2015 (Version: 5.6.62175.4 - Microsoft Corporation) Hidden
WCF Data Services Tools for Microsoft Visual Studio 2015 FRA Language Pack (Version: 5.6.62175.4 - Microsoft Corporation) Hidden
Windows Driver Package - MediaTek Inc. (usbser) Ports (05/30/2011 1.1123.0) (HKLM\...\9F57DFB5B4E90E617CAF60510F56318C1F80CC8C) (Version: 05/30/2011 1.1123.0 - MediaTek Inc.)
WinPcap 4.1.3 (HKLM\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
WinRAR 5.40 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
WYSIWYG Web Builder 11 (HKLM\...\WYSIWYG_Web_Builder_11) (Version: - )
XM MT4 (HKLM\...\XM MT4) (Version: 6.00 - MetaQuotes Software Corp.)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-2973495360-1647675497-93279711-1001_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\YaSs\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {023CC210-2896-44B3-BA9B-3AE5786543CA} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-09-06] (AVAST Software)
Task: {0B5DADDF-033C-4D14-92D0-F0EC2B0F59EA} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-01-07] (Google Inc.)
Task: {4A09B833-F632-49AF-B6BB-AB6D8CD51701} - System32\Tasks\SafeZone scheduled Autoupdate 1461093570 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-09-06] (Avast Software)
Task: {6D323861-CBA5-4112-8E93-82E63EA8ACCB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-01-07] (Google Inc.)
Task: {7127D916-E4A2-42F0-8C26-771E061AB000} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-10-12] (Microsoft Corporation)
Task: {B8D679DF-326F-4FE1-899F-699641A2B20E} - System32\Tasks\Microsoft\VisualStudio\VSIX Auto Update 14 => C:\Program Files\Microsoft Visual Studio 14.0\Common7\IDE\VSIXAutoUpdate.exe [2016-03-22] (Microsoft Corporation)
Task: {C494ABBE-5A53-4C43-95F8-9CA601603619} - System32\Tasks\Opera scheduled Autoupdate 1460640151 => C:\Program Files\Opera\launcher.exe [2016-10-17] (Opera Software)
Task: {D9660C44-65B1-42FE-9C69-9DB62FBC12CE} - System32\Tasks\InternetSD => Chrome.exe hxxp://hnwl2nmrbjfqjwe.ru/?wgosm
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\YaSs\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) ->
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) ->
ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) ->
==================== Loaded Modules (Whitelisted) ==============
2016-07-16 10:25 - 2016-07-16 10:25 - 00190976 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-09-30 21:58 - 2016-09-15 19:32 - 02048496 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-09-06 08:10 - 2016-09-06 08:10 - 00169064 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-09-06 08:10 - 2016-09-06 08:10 - 00482928 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2016-10-21 16:36 - 2016-10-21 16:36 - 03121496 _____ () C:\Program Files\AVAST Software\Avast\defs\16102100\algo.dll
2016-09-30 21:58 - 2016-09-15 19:32 - 02048496 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-09-30 09:22 - 2016-09-30 09:22 - 00679624 _____ () C:\Users\YaSs\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\ClientTelemetry.dll
2016-07-16 10:25 - 2016-07-16 10:25 - 00109056 _____ () C:\WINDOWS\SYSTEM32\CHARTV.dll
2016-07-16 10:25 - 2016-07-16 10:25 - 00108032 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-09-30 17:51 - 2016-09-30 17:51 - 00321536 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-10-12 14:13 - 2016-10-05 11:10 - 06726656 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-10-12 14:14 - 2016-10-05 11:06 - 01149440 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-09-30 17:51 - 2016-09-30 17:51 - 00526848 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-10-12 14:13 - 2016-10-05 11:05 - 01725440 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-10-12 14:14 - 2016-10-05 11:07 - 03158528 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-10-20 06:18 - 2016-10-20 06:22 - 00062464 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.197.0_x86__kzf8qxf38zg5c\SkypeHost.exe
2016-10-20 06:18 - 2016-10-20 06:22 - 00151040 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.197.0_x86__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2016-10-20 06:18 - 2016-10-20 06:22 - 27111936 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.8.197.0_x86__kzf8qxf38zg5c\SkyWrap.dll
2016-09-06 08:10 - 2016-09-06 08:11 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2016-10-19 07:28 - 2016-10-19 07:29 - 06517760 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11609.1001.28.0_x86__8wekyb3d8bbwe\WinStore.Entertainment.Mobile.dll
2016-08-16 05:48 - 2016-08-16 05:52 - 00017920 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.722.10060.0_x86__8wekyb3d8bbwe\Microsoft.Photos.exe
2016-08-16 05:48 - 2016-08-16 05:52 - 11393536 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.722.10060.0_x86__8wekyb3d8bbwe\Microsoft.Photos.dll
2016-06-03 17:27 - 2016-06-03 17:51 - 00541696 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.722.10060.0_x86__8wekyb3d8bbwe\Microsoft.DesignCore.dll
2016-03-04 08:05 - 2016-03-04 08:09 - 00180224 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.722.10060.0_x86__8wekyb3d8bbwe\StoreRatingPromotion.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2015-07-10 10:28 - 2016-07-13 16:01 - 00001085 ____A C:\WINDOWS\system32\Drivers\etc\hosts
0.0.0.0 69.167.144.15
0.0.0.0 69.167.144.18
0.0.0.0 65.52.240.48
0.0.0.0 157.56.8.159
0.0.0.0 camtasiatudi.techsmith.com
0.0.0.0 oscount.techsmith.com
0.0.0.0 activation.cloud.techsmith.com
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2973495360-1647675497-93279711-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img1.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{46E84A80-AEB2-4A5C-9CD6-1744826BEA73}] => (Allow) C:\Program Files\GSA SEO Indexer\SEO_Indexer.exe
FirewallRules: [{03EA9ED7-1E1A-4E6F-BB26-024D94F4386F}] => (Allow) C:\Program Files\GSA SEO Indexer\SEO_Indexer.exe
FirewallRules: [{3EA10D42-6936-4DBC-B868-33F863D37CC0}] => (Allow) C:\Program Files\GSA SEO Indexer\SEO_Indexer.exe
FirewallRules: [{31116D3F-7650-4E26-99A2-62A905629CE0}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{135A529A-45F1-4529-94CD-46660CB30E0B}] => (Block) %ProgramFiles%\TechSmith\Camtasia Studio 8\CamtasiaStudio.exe
FirewallRules: [{F2DA6428-F8CD-468A-91C1-05D32169094A}] => (Block) %ProgramFiles%\TechSmith\Camtasia Studio 8\CamRecorder.exe
FirewallRules: [{3A27C425-DFD6-4BFD-A4DC-F0EF038FAF3B}] => (Block) %ProgramFiles%\TechSmith\Camtasia Studio 8\CamRecorder.exe
FirewallRules: [{639CBC0E-3EFF-45BD-B3BF-2AEB378EC7A2}] => (Block) %ProgramFiles%\TechSmith\Camtasia Studio 8\CamtasiaStudio.exe
FirewallRules: [{DAF281D9-0B41-422A-9740-387091BC6EEE}] => (Allow) LPort=8317
FirewallRules: [{820A9C1B-EE1A-4624-92B7-DF6063BCE5FF}] => (Allow) C:\Program Files\GSA SEO Indexer\SEO_Indexer.exe
FirewallRules: [{E7920F29-5677-4AD4-96A4-557B77A2774C}] => (Allow) C:\Program Files\GSA SEO Indexer\SEO_Indexer.exe
FirewallRules: [{DDFD2E8B-8493-4595-AB09-9E220BF1C3B0}] => (Allow) C:\Program Files\Microsoft Visual Studio 14.0\Common7\IDE\devenv.exe
FirewallRules: [{09D0A526-E3C1-4943-871F-F7AFC98B056D}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{22350BAA-1562-49C5-B871-6FFB4B63E6F9}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{BA67A9B4-0610-4B97-8C87-48FF3BB1BAF5}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
StandardProfile\AuthorizedApplications: [C:\Program Files\LeapFTP 3.0\LeapFTP.exe] => Enabled:LeapFTP 3.0
==================== Restore Points =========================
07-10-2016 09:12:54 Windows Modules Installer
12-10-2016 14:44:06 Windows Update
14-10-2016 09:31:55 Installed tViewer 2.0
17-10-2016 18:41:52 ASU_MSI_TRAN
17-10-2016 19:20:07 JRT Pre-Junkware Removal
21-10-2016 16:41:42 ASU_MSI_TRAN
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (10/21/2016 08:29:26 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "C:\Program Files\Microsoft Visual Studio 14.0\Common7\IDE\Remote Debugger\x64\msvsmon.exe".
Dependent Assembly Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.
Error: (10/21/2016 04:42:01 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.
System Error:
Access is denied.
.
Error: (10/21/2016 11:39:52 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-NQ98D5R)
Description: Activation of app Microsoft.XboxIdentityProvider_8wekyb3d8bbwe!Microsoft.XboxIdentityProvider failed with error: -2144927142 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (10/21/2016 11:39:52 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-NQ98D5R)
Description: Activation of app Microsoft.XboxIdentityProvider_8wekyb3d8bbwe!Microsoft.XboxIdentityProvider failed with error: -2144927142 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (10/20/2016 08:05:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: dwm.exe, version: 10.0.14393.0, time stamp: 0x57899025
Faulting module name: dwmcore.dll, version: 10.0.14393.187, time stamp: 0x57cf98c6
Exception code: 0xc0000005
Fault offset: 0x00054061
Faulting process id: 0xf5c
Faulting application start time: 0x01d22afc3d99248f
Faulting application path: C:\WINDOWS\system32\dwm.exe
Faulting module path: C:\WINDOWS\system32\dwmcore.dll
Report Id: 2e5826f4-063c-445c-90ea-9570bc5925e5
Faulting package full name:
Faulting package-relative application ID:
Error: (10/20/2016 08:03:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: dwm.exe, version: 10.0.14393.0, time stamp: 0x57899025
Faulting module name: dwmcore.dll, version: 10.0.14393.187, time stamp: 0x57cf98c6
Exception code: 0xc0000005
Fault offset: 0x00054061
Faulting process id: 0x1e50
Faulting application start time: 0x01d22afc33b230d9
Faulting application path: C:\WINDOWS\system32\dwm.exe
Faulting module path: C:\WINDOWS\system32\dwmcore.dll
Report Id: 6e069ca0-82e7-4dcd-87be-ac92debfc082
Faulting package full name:
Faulting package-relative application ID:
Error: (10/20/2016 08:03:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: dwm.exe, version: 10.0.14393.0, time stamp: 0x57899025
Faulting module name: dwmcore.dll, version: 10.0.14393.187, time stamp: 0x57cf98c6
Exception code: 0xc0000005
Fault offset: 0x00054061
Faulting process id: 0x7e8
Faulting application start time: 0x01d22afc2f505b5f
Faulting application path: C:\WINDOWS\system32\dwm.exe
Faulting module path: C:\WINDOWS\system32\dwmcore.dll
Report Id: 7038e179-53f0-4148-8dc2-cfaf212bbbc5
Faulting package full name:
Faulting package-relative application ID:
Error: (10/20/2016 08:02:55 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: dwm.exe, version: 10.0.14393.0, time stamp: 0x57899025
Faulting module name: dwmcore.dll, version: 10.0.14393.187, time stamp: 0x57cf98c6
Exception code: 0xc0000005
Fault offset: 0x00054061
Faulting process id: 0x818
Faulting application start time: 0x01d22afb97a47ad1
Faulting application path: C:\WINDOWS\system32\dwm.exe
Faulting module path: C:\WINDOWS\system32\dwmcore.dll
Report Id: 661fd6eb-a502-45d4-a285-04fd46233f97
Faulting package full name:
Faulting package-relative application ID:
Error: (10/20/2016 07:58:40 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: dwm.exe, version: 10.0.14393.0, time stamp: 0x57899025
Faulting module name: dwmcore.dll, version: 10.0.14393.187, time stamp: 0x57cf98c6
Exception code: 0xc0000005
Fault offset: 0x00054061
Faulting process id: 0x640
Faulting application start time: 0x01d22afb94d8f5d6
Faulting application path: C:\WINDOWS\system32\dwm.exe
Faulting module path: C:\WINDOWS\system32\dwmcore.dll
Report Id: 3c140d2c-9ecf-46db-8725-69486edf7737
Faulting package full name:
Faulting package-relative application ID:
Error: (10/20/2016 07:58:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: dwm.exe, version: 10.0.14393.0, time stamp: 0x57899025
Faulting module name: dwmcore.dll, version: 10.0.14393.187, time stamp: 0x57cf98c6
Exception code: 0xc0000005
Fault offset: 0x00054061
Faulting process id: 0x1ec8
Faulting application start time: 0x01d22afb9150be3c
Faulting application path: C:\WINDOWS\system32\dwm.exe
Faulting module path: C:\WINDOWS\system32\dwmcore.dll
Report Id: 98a766f3-4911-4445-b7c6-c23812d78b29
Faulting package full name:
Faulting package-relative application ID:
System errors:
=============
Error: (10/21/2016 02:34:06 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
and APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (10/21/2016 07:16:31 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
and APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (10/20/2016 06:52:11 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
and APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (10/20/2016 06:34:14 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
and APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (10/20/2016 06:33:38 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 5:56:27 PM on 10/20/2016 was unexpected.
Error: (10/20/2016 03:16:52 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
and APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (10/20/2016 02:46:11 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
and APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (10/20/2016 02:45:47 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 11:39:01 AM on 10/20/2016 was unexpected.
Error: (10/20/2016 06:12:29 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
and APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (10/19/2016 10:38:07 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-NQ98D5R)
Description: The server App.AppXwdz8g2fxr36xz0tdtagygnvemf85s7gg.mca did not register with DCOM within the required timeout.
CodeIntegrity:
===================================
Date: 2016-10-08 16:20:16.012
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-10-08 16:20:12.548
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-10-08 16:20:12.256
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-10-08 16:20:10.203
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-10-08 16:20:01.930
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-10-08 16:20:01.360
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-10-08 16:20:00.524
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-10-08 16:20:00.313
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-10-08 16:20:00.189
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-10-08 16:20:00.103
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Memory info ===========================
Processor: Intel(R) Pentium(R) 4 CPU 3.06GHz
Percentage of memory in use: 60%
Total physical RAM: 3062.43 MB
Available physical RAM: 1199.55 MB
Total Virtual: 5494.43 MB
Available Virtual: 3334.86 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:297.55 GB) (Free:241.47 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: 8CE7EAF3)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=297.6 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)
==================== End of Addition.txt ============================