Publicité
Publicité
Format du document : text/plain
Prévisualisation
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 23-11-2016
Ran by khalid (26-11-2016 11:05:12)
Running from C:\Users\khalid\Downloads\Programs
Microsoft Windows 7 Starter Service Pack 1 (X86) (2015-05-16 23:06:22)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-982090994-2485536893-1322209893-500 - Administrator - Disabled)
Guest (S-1-5-21-982090994-2485536893-1322209893-501 - Limited - Enabled)
khalid (S-1-5-21-982090994-2485536893-1322209893-1000 - Administrator - Enabled) => C:\Users\khalid
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
7-Zip 9.20 (HKLM\...\{23170F69-40C1-2701-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Flash Player 21 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 21.0.0.213 - Adobe Systems Incorporated)
All2Chat 5.4.4 (HKLM\...\All2Chat 5.4.4) (Version: - )
Archiveur WinRAR (HKLM\...\WinRAR archiver) (Version: - )
Broadcom 802.11 Wireless Driver (HKLM\...\{8991E763-21F5-4DEA-A938-5D9D77DCB488}) (Version: 1.0.0.0 - )
Broadcom 802.11 Wireless LAN Adapter (HKLM\...\Broadcom 802.11 Wireless LAN Adapter) (Version: 5.100.82.140 - Broadcom Corporation)
DriverPack Notifier (HKLM\...\DriverPack Notifier) (Version: 2.0 - DriverPack Solution)
DriverPack Solution Updater (HKU\S-1-5-21-982090994-2485536893-1322209893-1000\...\DRPSu Updater) (Version: 0.0.25 - DriverPack Solution)
DvDrum 2 (HKLM\...\"DvDrum 2_is1) (Version: Beta 5 - Daniele Franceschini)
FormatFactory 3.6.0.0 (HKLM\...\FormatFactory) (Version: 3.6.0.0 - Format Factory)
Foxit Reader (HKLM\...\{BDDF6AEE-7AD7-4CDA-B57F-5BDF9417AD4F}) (Version: 5.1.3.1201 - Foxit Corporation)
GOM Player (HKLM\...\GOM Player) (Version: 2.2.69.5227 - Gretech Corporation)
Google Chrome (HKLM\...\{D0759C6C-1F01-345D-8F59-E3B43977D754}) (Version: 54.0.2840.99 - Google, Inc.)
Google Update Helper (Version: 1.3.31.5 - Google Inc.) Hidden
HP Support Solutions Framework (HKLM\...\{FC3C2B77-6800-48C6-A15D-9D1031130C16}) (Version: 11.51.0049 - Hewlett-Packard Company)
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.14.10.2230 - Intel Corporation)
Internet Download Manager (HKLM\...\Internet Download Manager) (Version: - Tonec Inc.)
Internet Mobile (HKLM\...\Internet Mobile) (Version: 11.302.09.01.162 - Huawei Technologies Co.,Ltd)
Java 8 Update 91 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218091F0}) (Version: 8.0.910.15 - Oracle Corporation)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft LifeCam (HKLM\...\{BD71B413-9FEE-49BB-A6D1-2C0BFB99BDFE}) (Version: 3.60.253.0 - Microsoft Corporation)
Mozilla Firefox 48.0.2 (x86 en-US) (HKLM\...\Mozilla Firefox 48.0.2 (x86 en-US)) (Version: 48.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 48.0.2.6079 - Mozilla)
My WIFI Router (HKLM\...\My WIFI Router) (Version: 3.0.064-1201-001 - TxNetwork, Inc.)
Notepad++ (HKLM\...\Notepad++) (Version: 6.7.8 - Notepad++ Team)
Personalization Panel (HKLM\...\Personalization Panel) (Version: 1.2.0.1 - hxxp://winreview.ru/)
Personalization Panel DWM Controller (HKLM\...\{77D3B2EB-8A7E-4E5C-9BC7-6BC2CD6B6B37}) (Version: 1.0.0 - Winreview.ru)
UsbFix (HKLM\...\Usbfix) (Version: 7.940 - El Desaparecido - www.usbfix.net - www.sosvirus.net)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
WinDjView 1.0.3 (HKLM\...\WinDjView) (Version: 1.0.3 - Andrew Zhezherun)
Windows Driver Package - Broadcom (BCM43XX) Net (10/07/2015 7.12.39.28) (HKLM\...\DB75035319E1A716C71CD886890A1089C5F81900) (Version: 10/07/2015 7.12.39.28 - Broadcom)
WinPcap 4.1.3 (HKLM\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {00E28F7E-D152-4820-AF79-298F4DE394D5} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-04-15] (Adobe Systems Incorporated)
Task: {10534717-AD35-4231-822D-9DE28720117A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {6230020F-7775-4904-90E9-9F51FF14B171} - System32\Tasks\Games\UpdateCheck_S-1-5-21-982090994-2485536893-1322209893-1000
Task: {75A22946-5E23-4582-B3C7-F8A15833A43C} - System32\Tasks\GoogleUpdateTaskMachineUA1d0c3bcc9b86dcd => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {889841EB-D03B-43A3-812F-D8119D2BB690} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {8A7885EE-F2ED-4179-B4A6-5E9CB1DE4FC6} - System32\Tasks\{02850BE1-01F0-479C-8913-B675D1055041} => pcalua.exe -a "C:\Program Files\Internet Mobile\uninst.exe"
Task: {B757BEC3-BC92-44A9-90F2-AA4E768D8B5B} - System32\Tasks\DriverPack Notifier => C:\Program Files\DriverPack Notifier\DriverPackNotifier.exe [2015-12-18] ()
Task: {CCCAF995-B44A-48D8-B5F2-0A6041BC56DC} - System32\Tasks\SmartDefrag_AutoAnalyze => C:\Program Files\IObit\Smart Defrag\AutoDefrag.exe
Task: {CCE79027-C91E-46C4-96BD-E8922772DE78} - System32\Tasks\Driver Booster SkipUAC (khalid) => C:\Program Files\IObit\Driver Booster\DriverBooster.exe
Task: {DB3B7148-48BB-48F6-9330-BC9EC80517A6} - System32\Tasks\GoogleUpdateTaskMachineUA1d1ade54ecd0bf7 => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {EF8698BE-3A1E-4BB4-A84B-93D3E4213986} - System32\Tasks\GoogleUpdateTaskMachineUA1d0e4df1279bb4 => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {F2420427-7713-41DC-B8C5-C9D8B9361B36} - System32\Tasks\GoogleUpdateTaskMachineUA1d132a4cf9a2d2e => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {F360CFE2-CB17-4029-9D99-DD4B0FACEAB2} - System32\Tasks\{6765C087-2451-4B93-83ED-C1677E133E91} => pcalua.exe -a "C:\Program Files\ESET\ESET Online Scanner\OnlineScannerUninstaller.exe"
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d0c3bcc9b86dcd.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d0e4df1279bb4.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d132a4cf9a2d2e.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d1ade54ecd0bf7.job => C:\Program Files\Google\Update\GoogleUpdate.exe
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
==================== Loaded Modules (Whitelisted) ==============
2015-05-16 23:17 - 2007-09-20 18:34 - 00129024 _____ () C:\Program Files\WinRAR\rarext.dll
2015-04-15 20:13 - 2015-04-15 20:13 - 00260608 _____ () C:\Program Files\Notepad++\NppShell_06.dll
2014-11-18 02:59 - 2014-11-18 02:59 - 00047464 _____ () C:\Program Files\Wi-Fi\WiFiGxSvc.exe
2016-09-06 22:06 - 2016-09-06 12:00 - 05197312 _____ () C:\Users\khalid\AppData\Local\Google\Chrome\User Data\SwiftShader\3.3.0.1\libglesv2.dll
2016-09-06 22:06 - 2016-09-06 12:00 - 00147456 _____ () C:\Users\khalid\AppData\Local\Google\Chrome\User Data\SwiftShader\3.3.0.1\libegl.dll
2014-12-01 08:47 - 2014-12-01 08:47 - 00044560 _____ () C:\Program Files\Wi-Fi\plugins\txn.controller_0.1.0.dll
2014-11-20 06:37 - 2014-11-20 06:37 - 00367632 _____ () C:\Program Files\Wi-Fi\CTKPluginFramework.dll
2014-11-20 06:37 - 2014-11-20 06:37 - 00144400 _____ () C:\Program Files\Wi-Fi\libqjson.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot => "AlternateShell"=""
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\S-1-5-21-982090994-2485536893-1322209893-1000\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-982090994-2485536893-1322209893-1000\...\webcompanion.com -> hxxp://webcompanion.com
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 02:04 - 2016-06-26 15:54 - 00000824 __RSH C:\Windows\system32\Drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-982090994-2485536893-1322209893-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\khalid\Desktop\New folder\Islamic-Wallpapers-for-Desktop.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
MSCONFIG\startupreg: ce4889fc8a8504ee2343406572979c1b => "C:\Users\khalid\AppData\Local\Temp\server.exe" ..
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [TCP Query User{A801D7A9-263C-4C3D-A857-E4174C44A1A4}D:\20 dh\wifi\sp57965.exe] => (Block) D:\20 dh\wifi\sp57965.exe
FirewallRules: [UDP Query User{F9E531C3-E12A-46B9-B538-B65E8185CE67}D:\20 dh\wifi\sp57965.exe] => (Block) D:\20 dh\wifi\sp57965.exe
FirewallRules: [TCP Query User{32B928E4-E2AC-4556-BB8D-CE2485F15B17}C:\windows\system32\taskhost.exe] => (Block) C:\windows\system32\taskhost.exe
FirewallRules: [UDP Query User{9DAEDA7E-8CEE-4A60-A125-66BB39D2363E}C:\windows\system32\taskhost.exe] => (Block) C:\windows\system32\taskhost.exe
FirewallRules: [TCP Query User{18AED68E-2F44-4F51-AD7A-027F73EFD3BB}C:\users\khalid\downloads\driverpack.solution.12.3\driverpacksolution.exe] => (Allow) C:\users\khalid\downloads\driverpack.solution.12.3\driverpacksolution.exe
FirewallRules: [UDP Query User{5EA74A2B-49F9-45F3-8475-0E46EB8CD4D6}C:\users\khalid\downloads\driverpack.solution.12.3\driverpacksolution.exe] => (Allow) C:\users\khalid\downloads\driverpack.solution.12.3\driverpacksolution.exe
FirewallRules: [TCP Query User{A64B5358-8FD5-42DF-B979-5EC4BB910CC9}C:\users\khalid\downloads\driverpack.solution.12.3\tools\mshta.exe] => (Block) C:\users\khalid\downloads\driverpack.solution.12.3\tools\mshta.exe
FirewallRules: [UDP Query User{37356A33-7E33-448A-B8C7-86E0A4F766FE}C:\users\khalid\downloads\driverpack.solution.12.3\tools\mshta.exe] => (Block) C:\users\khalid\downloads\driverpack.solution.12.3\tools\mshta.exe
FirewallRules: [TCP Query User{FD5D57C5-4B3D-4343-B05E-3906656D0515}C:\program files\internet download manager\idman.exe] => (Block) C:\program files\internet download manager\idman.exe
FirewallRules: [UDP Query User{FBEEF9E3-01B9-485B-B572-534821EAB188}C:\program files\internet download manager\idman.exe] => (Block) C:\program files\internet download manager\idman.exe
FirewallRules: [TCP Query User{C2CECD97-65B5-4254-AD79-4601E2A272C4}C:\program files\winrar\winrar.exe] => (Block) C:\program files\winrar\winrar.exe
FirewallRules: [UDP Query User{FC2A079A-2BD7-4EA5-9B32-72A9A056503D}C:\program files\winrar\winrar.exe] => (Block) C:\program files\winrar\winrar.exe
FirewallRules: [TCP Query User{A545FC35-EFFB-4ADA-AD99-086B511716BD}C:\program files\internet download manager\iemonitor.exe] => (Block) C:\program files\internet download manager\iemonitor.exe
FirewallRules: [UDP Query User{45A16D73-0966-4483-A0D4-57423FF1CB02}C:\program files\internet download manager\iemonitor.exe] => (Block) C:\program files\internet download manager\iemonitor.exe
FirewallRules: [TCP Query User{FBAE521F-C33C-40AA-8C70-A02DF88C1A34}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe
FirewallRules: [UDP Query User{C0EAB9F8-38D6-4EE3-8B0E-C2ECF580F189}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe
FirewallRules: [TCP Query User{E7A896BF-C196-467A-A914-00712E535AFC}C:\windows\explorer.exe] => (Block) C:\windows\explorer.exe
FirewallRules: [UDP Query User{9A289A2B-7685-4005-AC7E-AECD282BDFB7}C:\windows\explorer.exe] => (Block) C:\windows\explorer.exe
FirewallRules: [TCP Query User{461BF166-D6A8-4C78-9AC3-36CDADD5CD58}C:\windows\system32\dwm.exe] => (Block) C:\windows\system32\dwm.exe
FirewallRules: [UDP Query User{B8774BDB-8B88-4585-8E91-088A92E88BD3}C:\windows\system32\dwm.exe] => (Block) C:\windows\system32\dwm.exe
FirewallRules: [TCP Query User{CC41E702-9B16-4642-BEC7-1A3AB889F42E}C:\windows\system32\igfxtray.exe] => (Block) C:\windows\system32\igfxtray.exe
FirewallRules: [UDP Query User{C4415765-9A92-4D37-B50D-D19922F3F36E}C:\windows\system32\igfxtray.exe] => (Block) C:\windows\system32\igfxtray.exe
FirewallRules: [{51095870-1936-40C9-BC01-B0228B840DBD}] => (Allow) C:\Program Files\uTorrent\uTorrent.exe
FirewallRules: [{381C95C7-487A-42F1-827C-4C311E5F6B31}] => (Allow) C:\Program Files\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{01660789-6147-43C4-8EDF-89B0F778634C}C:\windows\system32\hkcmd.exe] => (Block) C:\windows\system32\hkcmd.exe
FirewallRules: [UDP Query User{001ADE7D-F1D4-48A7-AE95-6B0800BC58D5}C:\windows\system32\hkcmd.exe] => (Block) C:\windows\system32\hkcmd.exe
FirewallRules: [TCP Query User{AB82E443-50F4-4A5C-8B8C-AE46BC802D77}C:\usbfix\usbfix.exe] => (Block) C:\usbfix\usbfix.exe
FirewallRules: [UDP Query User{54E012F4-E0DA-4B7D-91E6-058B7C5C869A}C:\usbfix\usbfix.exe] => (Block) C:\usbfix\usbfix.exe
FirewallRules: [{C47C68A8-E7BF-4494-A1D1-2F775B28DE1C}] => (Allow) LPort=1542
FirewallRules: [{8B7825B9-9004-4A02-8658-6E1C8D6260CF}] => (Allow) LPort=1542
FirewallRules: [{9431B1EC-D6EE-4E94-A410-1D845C54E015}] => (Allow) LPort=53
FirewallRules: [{82CE645B-73B5-44C2-929C-3EC2497AE26C}] => (Allow) C:\Program Files\Microsoft LifeCam\LifeCam.exe
FirewallRules: [{83DC182C-4245-4174-9642-37308B6C9A7E}] => (Allow) C:\Program Files\Microsoft LifeCam\LifeCam.exe
FirewallRules: [{468D4E4C-EC15-452F-A91C-17EC76E1E611}] => (Allow) C:\Program Files\Microsoft LifeCam\LifeEnC2.exe
FirewallRules: [{58EC4337-6C77-4B1A-AA02-6CB07E2FC074}] => (Allow) C:\Program Files\Microsoft LifeCam\LifeEnC2.exe
FirewallRules: [{6CB2AC5A-4B96-411C-BE39-184655EBE1C7}] => (Allow) C:\Program Files\Microsoft LifeCam\LifeExp.exe
FirewallRules: [{7971B59F-D1AB-4CCD-BDD7-8C3399271AC3}] => (Allow) C:\Program Files\Microsoft LifeCam\LifeExp.exe
FirewallRules: [{5D7AE8B6-3D7B-484D-9A3B-09FE6A8292DF}] => (Allow) C:\Program Files\Microsoft LifeCam\LifeTray.exe
FirewallRules: [{F4175D08-8048-4E22-8CCF-1FE9EB578711}] => (Allow) C:\Program Files\Microsoft LifeCam\LifeTray.exe
FirewallRules: [{80EBE43C-FFC7-4B3C-AA06-108192E7B665}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{CC282688-BD63-4CC7-B43E-3124C1947EE7}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{3E86DA68-E4E4-4DFC-9A16-8D17CC783779}] => (Allow) C:\Program Files\Wi-Fi\Wi-Fi.exe
FirewallRules: [{F04CF9D3-B15E-4548-A4DE-32701FEFFA72}] => (Allow) C:\Program Files\IObit\Driver Booster\DriverBooster.exe
FirewallRules: [{C05489AC-DC15-4499-812E-753BB07FDE8C}] => (Allow) C:\Program Files\IObit\Driver Booster\DriverBooster.exe
FirewallRules: [{9C617ED5-56F3-4CCB-BE40-69F144179C8D}] => (Allow) C:\Program Files\IObit\Driver Booster\DBDownloader.exe
FirewallRules: [{3C9C52CD-9084-41B0-9137-C8F28347B1C5}] => (Allow) C:\Program Files\IObit\Driver Booster\DBDownloader.exe
FirewallRules: [{DD743458-68DE-4540-B320-43D4961ED2E6}] => (Allow) C:\Program Files\IObit\Driver Booster\AutoUpdate.exe
FirewallRules: [{1BBC5F8F-6E3C-4390-BC36-D7241EE35DAA}] => (Allow) C:\Program Files\IObit\Driver Booster\AutoUpdate.exe
FirewallRules: [{BF69D561-CA7A-4518-8777-30359C41CB26}] => (Allow) C:\Program Files\Wi-Fi\TX_Httpd.exe
FirewallRules: [TCP Query User{617D513F-E11B-4F30-BE52-B44B11F2DE21}C:\users\khalid\appdata\roaming\all2chat\all2chat.exe] => (Block) C:\users\khalid\appdata\roaming\all2chat\all2chat.exe
FirewallRules: [UDP Query User{6762B5C8-E1B1-4695-8ACF-E0FDF323800E}C:\users\khalid\appdata\roaming\all2chat\all2chat.exe] => (Block) C:\users\khalid\appdata\roaming\all2chat\all2chat.exe
FirewallRules: [TCP Query User{62E38E9B-AC42-4DCD-AD46-B2ADD79E44BD}C:\program files\paltalk messenger\paltalk.exe] => (Block) C:\program files\paltalk messenger\paltalk.exe
FirewallRules: [UDP Query User{EDEEAB3A-0DD9-478B-B5E0-4BD515D97E36}C:\program files\paltalk messenger\paltalk.exe] => (Block) C:\program files\paltalk messenger\paltalk.exe
FirewallRules: [{29BCE436-31C9-49C5-846F-31F3F38DE57C}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{45B86256-51C9-4C1C-B597-03AF49B5607E}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
==================== Restore Points =========================
12-10-2016 18:31:32 Scheduled Checkpoint
20-10-2016 13:10:07 Scheduled Checkpoint
24-10-2016 02:36:02 Windows Update
24-10-2016 02:53:24 Installed Jumpstart Installation Program
24-10-2016 20:42:58 Removed Jumpstart Installation Program
29-10-2016 13:40:44 Installed Jumpstart Installation Program
03-11-2016 20:13:06 Removed Jumpstart Installation Program
03-11-2016 20:16:11 Supprimé Internet Haut Débit Mobile
06-11-2016 23:19:12 Installed Jumpstart Installation Program
06-11-2016 23:40:01 Removed Jumpstart Installation Program
14-11-2016 18:14:18 Scheduled Checkpoint
15-11-2016 01:22:20 Installed Jumpstart Installation Program
15-11-2016 01:45:09 Removed Jumpstart Installation Program
22-11-2016 18:06:15 Scheduled Checkpoint
==================== Faulty Device Manager Devices =============
Name: Lexmark X422
Description: Lexmark X422
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: Lexmark
Service: usbscan
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (11/26/2016 10:07:16 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (11/25/2016 11:57:44 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (11/25/2016 04:54:09 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (11/25/2016 01:26:39 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (11/25/2016 09:37:07 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (11/24/2016 11:51:08 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program All2Chat.exe version 5.4.0.3600 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: 278
Start Time: 01d246ac4d593016
Termination Time: 31
Application Path: C:\Users\khalid\AppData\Roaming\All2Chat\All2Chat.exe
Report Id:
Error: (11/24/2016 11:30:02 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (11/24/2016 06:08:29 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (11/24/2016 01:45:05 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (11/23/2016 08:46:18 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
System errors:
=============
Error: (11/26/2016 10:34:19 AM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: The DHCP allocator has disabled itself on IP address 192.168.23.1, since the IP address is outside the 192.168.173.0/255.255.255.0 scope from which addresses are being allocated to DHCP clients. To enable the DHCP allocator on this IP address, change the scope to include the IP address, or change the IP address to fall within the scope.
Error: (11/26/2016 10:05:54 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
cdrom
Error: (11/25/2016 11:56:27 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
cdrom
Error: (11/25/2016 07:51:36 PM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: The DHCP allocator has disabled itself on IP address 192.168.23.1, since the IP address is outside the 192.168.173.0/255.255.255.0 scope from which addresses are being allocated to DHCP clients. To enable the DHCP allocator on this IP address, change the scope to include the IP address, or change the IP address to fall within the scope.
Error: (11/25/2016 05:08:04 PM) (Source: ipnathlp) (EventID: 30009) (User: )
Description: The DHCP allocator encountered a network error while attempting to reply on IP address 0.0.0.0 to a request from a client. The data is the error code.
Error: (11/25/2016 05:07:58 PM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: The DHCP allocator has disabled itself on IP address 192.168.23.1, since the IP address is outside the 192.168.173.0/255.255.255.0 scope from which addresses are being allocated to DHCP clients. To enable the DHCP allocator on this IP address, change the scope to include the IP address, or change the IP address to fall within the scope.
Error: (11/25/2016 04:52:51 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
cdrom
Error: (11/25/2016 01:26:40 PM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: The DHCP allocator has disabled itself on IP address 192.168.23.1, since the IP address is outside the 192.168.173.0/255.255.255.0 scope from which addresses are being allocated to DHCP clients. To enable the DHCP allocator on this IP address, change the scope to include the IP address, or change the IP address to fall within the scope.
Error: (11/25/2016 01:25:20 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
cdrom
Error: (11/25/2016 01:25:01 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 12:01:15 PM on 11/25/2016 was unexpected.
==================== Memory info ===========================
Processor: Intel(R) Atom(TM) CPU N455 @ 1.66GHz
Percentage of memory in use: 77%
Total physical RAM: 1011.87 MB
Available physical RAM: 224.18 MB
Total Virtual: 2035.87 MB
Available Virtual: 921.37 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:215.02 GB) (Free:96.82 GB) NTFS
Drive d: (RECOVERY) (Fixed) (Total:17.57 GB) (Free:2.77 GB) NTFS
Drive e: (HP_TOOLS) (Fixed) (Total:0.1 GB) (Free:0.09 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 5FD4570F)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=215 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=17.6 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=103 MB) - (Type=0C)
==================== End of Addition.txt ============================
Ran by khalid (26-11-2016 11:05:12)
Running from C:\Users\khalid\Downloads\Programs
Microsoft Windows 7 Starter Service Pack 1 (X86) (2015-05-16 23:06:22)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-982090994-2485536893-1322209893-500 - Administrator - Disabled)
Guest (S-1-5-21-982090994-2485536893-1322209893-501 - Limited - Enabled)
khalid (S-1-5-21-982090994-2485536893-1322209893-1000 - Administrator - Enabled) => C:\Users\khalid
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
7-Zip 9.20 (HKLM\...\{23170F69-40C1-2701-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Flash Player 21 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 21.0.0.213 - Adobe Systems Incorporated)
All2Chat 5.4.4 (HKLM\...\All2Chat 5.4.4) (Version: - )
Archiveur WinRAR (HKLM\...\WinRAR archiver) (Version: - )
Broadcom 802.11 Wireless Driver (HKLM\...\{8991E763-21F5-4DEA-A938-5D9D77DCB488}) (Version: 1.0.0.0 - )
Broadcom 802.11 Wireless LAN Adapter (HKLM\...\Broadcom 802.11 Wireless LAN Adapter) (Version: 5.100.82.140 - Broadcom Corporation)
DriverPack Notifier (HKLM\...\DriverPack Notifier) (Version: 2.0 - DriverPack Solution)
DriverPack Solution Updater (HKU\S-1-5-21-982090994-2485536893-1322209893-1000\...\DRPSu Updater) (Version: 0.0.25 - DriverPack Solution)
DvDrum 2 (HKLM\...\"DvDrum 2_is1) (Version: Beta 5 - Daniele Franceschini)
FormatFactory 3.6.0.0 (HKLM\...\FormatFactory) (Version: 3.6.0.0 - Format Factory)
Foxit Reader (HKLM\...\{BDDF6AEE-7AD7-4CDA-B57F-5BDF9417AD4F}) (Version: 5.1.3.1201 - Foxit Corporation)
GOM Player (HKLM\...\GOM Player) (Version: 2.2.69.5227 - Gretech Corporation)
Google Chrome (HKLM\...\{D0759C6C-1F01-345D-8F59-E3B43977D754}) (Version: 54.0.2840.99 - Google, Inc.)
Google Update Helper (Version: 1.3.31.5 - Google Inc.) Hidden
HP Support Solutions Framework (HKLM\...\{FC3C2B77-6800-48C6-A15D-9D1031130C16}) (Version: 11.51.0049 - Hewlett-Packard Company)
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.14.10.2230 - Intel Corporation)
Internet Download Manager (HKLM\...\Internet Download Manager) (Version: - Tonec Inc.)
Internet Mobile (HKLM\...\Internet Mobile) (Version: 11.302.09.01.162 - Huawei Technologies Co.,Ltd)
Java 8 Update 91 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218091F0}) (Version: 8.0.910.15 - Oracle Corporation)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft LifeCam (HKLM\...\{BD71B413-9FEE-49BB-A6D1-2C0BFB99BDFE}) (Version: 3.60.253.0 - Microsoft Corporation)
Mozilla Firefox 48.0.2 (x86 en-US) (HKLM\...\Mozilla Firefox 48.0.2 (x86 en-US)) (Version: 48.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 48.0.2.6079 - Mozilla)
My WIFI Router (HKLM\...\My WIFI Router) (Version: 3.0.064-1201-001 - TxNetwork, Inc.)
Notepad++ (HKLM\...\Notepad++) (Version: 6.7.8 - Notepad++ Team)
Personalization Panel (HKLM\...\Personalization Panel) (Version: 1.2.0.1 - hxxp://winreview.ru/)
Personalization Panel DWM Controller (HKLM\...\{77D3B2EB-8A7E-4E5C-9BC7-6BC2CD6B6B37}) (Version: 1.0.0 - Winreview.ru)
UsbFix (HKLM\...\Usbfix) (Version: 7.940 - El Desaparecido - www.usbfix.net - www.sosvirus.net)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
WinDjView 1.0.3 (HKLM\...\WinDjView) (Version: 1.0.3 - Andrew Zhezherun)
Windows Driver Package - Broadcom (BCM43XX) Net (10/07/2015 7.12.39.28) (HKLM\...\DB75035319E1A716C71CD886890A1089C5F81900) (Version: 10/07/2015 7.12.39.28 - Broadcom)
WinPcap 4.1.3 (HKLM\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {00E28F7E-D152-4820-AF79-298F4DE394D5} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-04-15] (Adobe Systems Incorporated)
Task: {10534717-AD35-4231-822D-9DE28720117A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {6230020F-7775-4904-90E9-9F51FF14B171} - System32\Tasks\Games\UpdateCheck_S-1-5-21-982090994-2485536893-1322209893-1000
Task: {75A22946-5E23-4582-B3C7-F8A15833A43C} - System32\Tasks\GoogleUpdateTaskMachineUA1d0c3bcc9b86dcd => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {889841EB-D03B-43A3-812F-D8119D2BB690} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {8A7885EE-F2ED-4179-B4A6-5E9CB1DE4FC6} - System32\Tasks\{02850BE1-01F0-479C-8913-B675D1055041} => pcalua.exe -a "C:\Program Files\Internet Mobile\uninst.exe"
Task: {B757BEC3-BC92-44A9-90F2-AA4E768D8B5B} - System32\Tasks\DriverPack Notifier => C:\Program Files\DriverPack Notifier\DriverPackNotifier.exe [2015-12-18] ()
Task: {CCCAF995-B44A-48D8-B5F2-0A6041BC56DC} - System32\Tasks\SmartDefrag_AutoAnalyze => C:\Program Files\IObit\Smart Defrag\AutoDefrag.exe
Task: {CCE79027-C91E-46C4-96BD-E8922772DE78} - System32\Tasks\Driver Booster SkipUAC (khalid) => C:\Program Files\IObit\Driver Booster\DriverBooster.exe
Task: {DB3B7148-48BB-48F6-9330-BC9EC80517A6} - System32\Tasks\GoogleUpdateTaskMachineUA1d1ade54ecd0bf7 => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {EF8698BE-3A1E-4BB4-A84B-93D3E4213986} - System32\Tasks\GoogleUpdateTaskMachineUA1d0e4df1279bb4 => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {F2420427-7713-41DC-B8C5-C9D8B9361B36} - System32\Tasks\GoogleUpdateTaskMachineUA1d132a4cf9a2d2e => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {F360CFE2-CB17-4029-9D99-DD4B0FACEAB2} - System32\Tasks\{6765C087-2451-4B93-83ED-C1677E133E91} => pcalua.exe -a "C:\Program Files\ESET\ESET Online Scanner\OnlineScannerUninstaller.exe"
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d0c3bcc9b86dcd.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d0e4df1279bb4.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d132a4cf9a2d2e.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d1ade54ecd0bf7.job => C:\Program Files\Google\Update\GoogleUpdate.exe
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
==================== Loaded Modules (Whitelisted) ==============
2015-05-16 23:17 - 2007-09-20 18:34 - 00129024 _____ () C:\Program Files\WinRAR\rarext.dll
2015-04-15 20:13 - 2015-04-15 20:13 - 00260608 _____ () C:\Program Files\Notepad++\NppShell_06.dll
2014-11-18 02:59 - 2014-11-18 02:59 - 00047464 _____ () C:\Program Files\Wi-Fi\WiFiGxSvc.exe
2016-09-06 22:06 - 2016-09-06 12:00 - 05197312 _____ () C:\Users\khalid\AppData\Local\Google\Chrome\User Data\SwiftShader\3.3.0.1\libglesv2.dll
2016-09-06 22:06 - 2016-09-06 12:00 - 00147456 _____ () C:\Users\khalid\AppData\Local\Google\Chrome\User Data\SwiftShader\3.3.0.1\libegl.dll
2014-12-01 08:47 - 2014-12-01 08:47 - 00044560 _____ () C:\Program Files\Wi-Fi\plugins\txn.controller_0.1.0.dll
2014-11-20 06:37 - 2014-11-20 06:37 - 00367632 _____ () C:\Program Files\Wi-Fi\CTKPluginFramework.dll
2014-11-20 06:37 - 2014-11-20 06:37 - 00144400 _____ () C:\Program Files\Wi-Fi\libqjson.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot => "AlternateShell"=""
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\S-1-5-21-982090994-2485536893-1322209893-1000\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-982090994-2485536893-1322209893-1000\...\webcompanion.com -> hxxp://webcompanion.com
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 02:04 - 2016-06-26 15:54 - 00000824 __RSH C:\Windows\system32\Drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-982090994-2485536893-1322209893-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\khalid\Desktop\New folder\Islamic-Wallpapers-for-Desktop.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
MSCONFIG\startupreg: ce4889fc8a8504ee2343406572979c1b => "C:\Users\khalid\AppData\Local\Temp\server.exe" ..
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [TCP Query User{A801D7A9-263C-4C3D-A857-E4174C44A1A4}D:\20 dh\wifi\sp57965.exe] => (Block) D:\20 dh\wifi\sp57965.exe
FirewallRules: [UDP Query User{F9E531C3-E12A-46B9-B538-B65E8185CE67}D:\20 dh\wifi\sp57965.exe] => (Block) D:\20 dh\wifi\sp57965.exe
FirewallRules: [TCP Query User{32B928E4-E2AC-4556-BB8D-CE2485F15B17}C:\windows\system32\taskhost.exe] => (Block) C:\windows\system32\taskhost.exe
FirewallRules: [UDP Query User{9DAEDA7E-8CEE-4A60-A125-66BB39D2363E}C:\windows\system32\taskhost.exe] => (Block) C:\windows\system32\taskhost.exe
FirewallRules: [TCP Query User{18AED68E-2F44-4F51-AD7A-027F73EFD3BB}C:\users\khalid\downloads\driverpack.solution.12.3\driverpacksolution.exe] => (Allow) C:\users\khalid\downloads\driverpack.solution.12.3\driverpacksolution.exe
FirewallRules: [UDP Query User{5EA74A2B-49F9-45F3-8475-0E46EB8CD4D6}C:\users\khalid\downloads\driverpack.solution.12.3\driverpacksolution.exe] => (Allow) C:\users\khalid\downloads\driverpack.solution.12.3\driverpacksolution.exe
FirewallRules: [TCP Query User{A64B5358-8FD5-42DF-B979-5EC4BB910CC9}C:\users\khalid\downloads\driverpack.solution.12.3\tools\mshta.exe] => (Block) C:\users\khalid\downloads\driverpack.solution.12.3\tools\mshta.exe
FirewallRules: [UDP Query User{37356A33-7E33-448A-B8C7-86E0A4F766FE}C:\users\khalid\downloads\driverpack.solution.12.3\tools\mshta.exe] => (Block) C:\users\khalid\downloads\driverpack.solution.12.3\tools\mshta.exe
FirewallRules: [TCP Query User{FD5D57C5-4B3D-4343-B05E-3906656D0515}C:\program files\internet download manager\idman.exe] => (Block) C:\program files\internet download manager\idman.exe
FirewallRules: [UDP Query User{FBEEF9E3-01B9-485B-B572-534821EAB188}C:\program files\internet download manager\idman.exe] => (Block) C:\program files\internet download manager\idman.exe
FirewallRules: [TCP Query User{C2CECD97-65B5-4254-AD79-4601E2A272C4}C:\program files\winrar\winrar.exe] => (Block) C:\program files\winrar\winrar.exe
FirewallRules: [UDP Query User{FC2A079A-2BD7-4EA5-9B32-72A9A056503D}C:\program files\winrar\winrar.exe] => (Block) C:\program files\winrar\winrar.exe
FirewallRules: [TCP Query User{A545FC35-EFFB-4ADA-AD99-086B511716BD}C:\program files\internet download manager\iemonitor.exe] => (Block) C:\program files\internet download manager\iemonitor.exe
FirewallRules: [UDP Query User{45A16D73-0966-4483-A0D4-57423FF1CB02}C:\program files\internet download manager\iemonitor.exe] => (Block) C:\program files\internet download manager\iemonitor.exe
FirewallRules: [TCP Query User{FBAE521F-C33C-40AA-8C70-A02DF88C1A34}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe
FirewallRules: [UDP Query User{C0EAB9F8-38D6-4EE3-8B0E-C2ECF580F189}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe
FirewallRules: [TCP Query User{E7A896BF-C196-467A-A914-00712E535AFC}C:\windows\explorer.exe] => (Block) C:\windows\explorer.exe
FirewallRules: [UDP Query User{9A289A2B-7685-4005-AC7E-AECD282BDFB7}C:\windows\explorer.exe] => (Block) C:\windows\explorer.exe
FirewallRules: [TCP Query User{461BF166-D6A8-4C78-9AC3-36CDADD5CD58}C:\windows\system32\dwm.exe] => (Block) C:\windows\system32\dwm.exe
FirewallRules: [UDP Query User{B8774BDB-8B88-4585-8E91-088A92E88BD3}C:\windows\system32\dwm.exe] => (Block) C:\windows\system32\dwm.exe
FirewallRules: [TCP Query User{CC41E702-9B16-4642-BEC7-1A3AB889F42E}C:\windows\system32\igfxtray.exe] => (Block) C:\windows\system32\igfxtray.exe
FirewallRules: [UDP Query User{C4415765-9A92-4D37-B50D-D19922F3F36E}C:\windows\system32\igfxtray.exe] => (Block) C:\windows\system32\igfxtray.exe
FirewallRules: [{51095870-1936-40C9-BC01-B0228B840DBD}] => (Allow) C:\Program Files\uTorrent\uTorrent.exe
FirewallRules: [{381C95C7-487A-42F1-827C-4C311E5F6B31}] => (Allow) C:\Program Files\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{01660789-6147-43C4-8EDF-89B0F778634C}C:\windows\system32\hkcmd.exe] => (Block) C:\windows\system32\hkcmd.exe
FirewallRules: [UDP Query User{001ADE7D-F1D4-48A7-AE95-6B0800BC58D5}C:\windows\system32\hkcmd.exe] => (Block) C:\windows\system32\hkcmd.exe
FirewallRules: [TCP Query User{AB82E443-50F4-4A5C-8B8C-AE46BC802D77}C:\usbfix\usbfix.exe] => (Block) C:\usbfix\usbfix.exe
FirewallRules: [UDP Query User{54E012F4-E0DA-4B7D-91E6-058B7C5C869A}C:\usbfix\usbfix.exe] => (Block) C:\usbfix\usbfix.exe
FirewallRules: [{C47C68A8-E7BF-4494-A1D1-2F775B28DE1C}] => (Allow) LPort=1542
FirewallRules: [{8B7825B9-9004-4A02-8658-6E1C8D6260CF}] => (Allow) LPort=1542
FirewallRules: [{9431B1EC-D6EE-4E94-A410-1D845C54E015}] => (Allow) LPort=53
FirewallRules: [{82CE645B-73B5-44C2-929C-3EC2497AE26C}] => (Allow) C:\Program Files\Microsoft LifeCam\LifeCam.exe
FirewallRules: [{83DC182C-4245-4174-9642-37308B6C9A7E}] => (Allow) C:\Program Files\Microsoft LifeCam\LifeCam.exe
FirewallRules: [{468D4E4C-EC15-452F-A91C-17EC76E1E611}] => (Allow) C:\Program Files\Microsoft LifeCam\LifeEnC2.exe
FirewallRules: [{58EC4337-6C77-4B1A-AA02-6CB07E2FC074}] => (Allow) C:\Program Files\Microsoft LifeCam\LifeEnC2.exe
FirewallRules: [{6CB2AC5A-4B96-411C-BE39-184655EBE1C7}] => (Allow) C:\Program Files\Microsoft LifeCam\LifeExp.exe
FirewallRules: [{7971B59F-D1AB-4CCD-BDD7-8C3399271AC3}] => (Allow) C:\Program Files\Microsoft LifeCam\LifeExp.exe
FirewallRules: [{5D7AE8B6-3D7B-484D-9A3B-09FE6A8292DF}] => (Allow) C:\Program Files\Microsoft LifeCam\LifeTray.exe
FirewallRules: [{F4175D08-8048-4E22-8CCF-1FE9EB578711}] => (Allow) C:\Program Files\Microsoft LifeCam\LifeTray.exe
FirewallRules: [{80EBE43C-FFC7-4B3C-AA06-108192E7B665}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{CC282688-BD63-4CC7-B43E-3124C1947EE7}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{3E86DA68-E4E4-4DFC-9A16-8D17CC783779}] => (Allow) C:\Program Files\Wi-Fi\Wi-Fi.exe
FirewallRules: [{F04CF9D3-B15E-4548-A4DE-32701FEFFA72}] => (Allow) C:\Program Files\IObit\Driver Booster\DriverBooster.exe
FirewallRules: [{C05489AC-DC15-4499-812E-753BB07FDE8C}] => (Allow) C:\Program Files\IObit\Driver Booster\DriverBooster.exe
FirewallRules: [{9C617ED5-56F3-4CCB-BE40-69F144179C8D}] => (Allow) C:\Program Files\IObit\Driver Booster\DBDownloader.exe
FirewallRules: [{3C9C52CD-9084-41B0-9137-C8F28347B1C5}] => (Allow) C:\Program Files\IObit\Driver Booster\DBDownloader.exe
FirewallRules: [{DD743458-68DE-4540-B320-43D4961ED2E6}] => (Allow) C:\Program Files\IObit\Driver Booster\AutoUpdate.exe
FirewallRules: [{1BBC5F8F-6E3C-4390-BC36-D7241EE35DAA}] => (Allow) C:\Program Files\IObit\Driver Booster\AutoUpdate.exe
FirewallRules: [{BF69D561-CA7A-4518-8777-30359C41CB26}] => (Allow) C:\Program Files\Wi-Fi\TX_Httpd.exe
FirewallRules: [TCP Query User{617D513F-E11B-4F30-BE52-B44B11F2DE21}C:\users\khalid\appdata\roaming\all2chat\all2chat.exe] => (Block) C:\users\khalid\appdata\roaming\all2chat\all2chat.exe
FirewallRules: [UDP Query User{6762B5C8-E1B1-4695-8ACF-E0FDF323800E}C:\users\khalid\appdata\roaming\all2chat\all2chat.exe] => (Block) C:\users\khalid\appdata\roaming\all2chat\all2chat.exe
FirewallRules: [TCP Query User{62E38E9B-AC42-4DCD-AD46-B2ADD79E44BD}C:\program files\paltalk messenger\paltalk.exe] => (Block) C:\program files\paltalk messenger\paltalk.exe
FirewallRules: [UDP Query User{EDEEAB3A-0DD9-478B-B5E0-4BD515D97E36}C:\program files\paltalk messenger\paltalk.exe] => (Block) C:\program files\paltalk messenger\paltalk.exe
FirewallRules: [{29BCE436-31C9-49C5-846F-31F3F38DE57C}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{45B86256-51C9-4C1C-B597-03AF49B5607E}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
==================== Restore Points =========================
12-10-2016 18:31:32 Scheduled Checkpoint
20-10-2016 13:10:07 Scheduled Checkpoint
24-10-2016 02:36:02 Windows Update
24-10-2016 02:53:24 Installed Jumpstart Installation Program
24-10-2016 20:42:58 Removed Jumpstart Installation Program
29-10-2016 13:40:44 Installed Jumpstart Installation Program
03-11-2016 20:13:06 Removed Jumpstart Installation Program
03-11-2016 20:16:11 Supprimé Internet Haut Débit Mobile
06-11-2016 23:19:12 Installed Jumpstart Installation Program
06-11-2016 23:40:01 Removed Jumpstart Installation Program
14-11-2016 18:14:18 Scheduled Checkpoint
15-11-2016 01:22:20 Installed Jumpstart Installation Program
15-11-2016 01:45:09 Removed Jumpstart Installation Program
22-11-2016 18:06:15 Scheduled Checkpoint
==================== Faulty Device Manager Devices =============
Name: Lexmark X422
Description: Lexmark X422
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: Lexmark
Service: usbscan
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (11/26/2016 10:07:16 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (11/25/2016 11:57:44 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (11/25/2016 04:54:09 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (11/25/2016 01:26:39 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (11/25/2016 09:37:07 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (11/24/2016 11:51:08 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program All2Chat.exe version 5.4.0.3600 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: 278
Start Time: 01d246ac4d593016
Termination Time: 31
Application Path: C:\Users\khalid\AppData\Roaming\All2Chat\All2Chat.exe
Report Id:
Error: (11/24/2016 11:30:02 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (11/24/2016 06:08:29 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (11/24/2016 01:45:05 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (11/23/2016 08:46:18 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
System errors:
=============
Error: (11/26/2016 10:34:19 AM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: The DHCP allocator has disabled itself on IP address 192.168.23.1, since the IP address is outside the 192.168.173.0/255.255.255.0 scope from which addresses are being allocated to DHCP clients. To enable the DHCP allocator on this IP address, change the scope to include the IP address, or change the IP address to fall within the scope.
Error: (11/26/2016 10:05:54 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
cdrom
Error: (11/25/2016 11:56:27 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
cdrom
Error: (11/25/2016 07:51:36 PM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: The DHCP allocator has disabled itself on IP address 192.168.23.1, since the IP address is outside the 192.168.173.0/255.255.255.0 scope from which addresses are being allocated to DHCP clients. To enable the DHCP allocator on this IP address, change the scope to include the IP address, or change the IP address to fall within the scope.
Error: (11/25/2016 05:08:04 PM) (Source: ipnathlp) (EventID: 30009) (User: )
Description: The DHCP allocator encountered a network error while attempting to reply on IP address 0.0.0.0 to a request from a client. The data is the error code.
Error: (11/25/2016 05:07:58 PM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: The DHCP allocator has disabled itself on IP address 192.168.23.1, since the IP address is outside the 192.168.173.0/255.255.255.0 scope from which addresses are being allocated to DHCP clients. To enable the DHCP allocator on this IP address, change the scope to include the IP address, or change the IP address to fall within the scope.
Error: (11/25/2016 04:52:51 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
cdrom
Error: (11/25/2016 01:26:40 PM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: The DHCP allocator has disabled itself on IP address 192.168.23.1, since the IP address is outside the 192.168.173.0/255.255.255.0 scope from which addresses are being allocated to DHCP clients. To enable the DHCP allocator on this IP address, change the scope to include the IP address, or change the IP address to fall within the scope.
Error: (11/25/2016 01:25:20 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
cdrom
Error: (11/25/2016 01:25:01 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 12:01:15 PM on 11/25/2016 was unexpected.
==================== Memory info ===========================
Processor: Intel(R) Atom(TM) CPU N455 @ 1.66GHz
Percentage of memory in use: 77%
Total physical RAM: 1011.87 MB
Available physical RAM: 224.18 MB
Total Virtual: 2035.87 MB
Available Virtual: 921.37 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:215.02 GB) (Free:96.82 GB) NTFS
Drive d: (RECOVERY) (Fixed) (Total:17.57 GB) (Free:2.77 GB) NTFS
Drive e: (HP_TOOLS) (Fixed) (Total:0.1 GB) (Free:0.09 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 5FD4570F)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=215 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=17.6 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=103 MB) - (Type=0C)
==================== End of Addition.txt ============================